last executing test programs: 3.723299003s ago: executing program 3 (id=2014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003ff800000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 3.596769257s ago: executing program 3 (id=2018): setresuid(0x0, 0xee01, 0xee00) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0xfffffff6, 0x0, 0x0, 0x4}}) 3.478176691s ago: executing program 3 (id=2021): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001580)=""/4176, 0x1050}, {&(0x7f0000001480)=""/196, 0xc4}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f0000000900)=""/203, 0xcb}, {&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f00000001c0)=""/99, 0x63}], 0x8}, 0x0) 3.18462761s ago: executing program 3 (id=2024): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f657bbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f00000005c0)="a51d484e240000000000f7caaff96b2fc08bfcd111fbdf23ea32db0e8f21d5bc27bd80d85e4475117000ba4294ecbb", 0x2f}, {&(0x7f0000000440)="f2663698d8ab9661b11b5aada2ed772e2df40b277f5f4989c1c2797600ae4882d55d8b98ca7e2728fde7", 0x2a}], 0x3) 2.995668056s ago: executing program 3 (id=2026): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b000101000000090400000207010100090501"], 0x0) close(0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0) 2.337628166s ago: executing program 2 (id=2038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}}, 0x0) 2.199315021s ago: executing program 2 (id=2042): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400), 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 2.126976823s ago: executing program 1 (id=2043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000006300)={0x1, [{0x1, 0x3008, 0x3, &(0x7f0000001b80)="622f8900e12bbc770654526860ceae34762c8bed318a033aec92d065f8cec6d092bb62624681f3b1a50076788b6882785240a9dab9e195f27681c55c893905f602bd3ae32175dcac1d9ac79fa5e81381aa66f8a4a2deec130315802840e0b3ff2e642cb0eab54c3df0d0cbd438241f1b7ba3d07967bc863210aba0ad6c90d09df948b90a900941848d7e06c00ee735f31787a0ff8240fe5c7dbb50a06f93980352b28fe2a6d10b8a564f2ececb8c10b5cc95daef95ab03ff7503e554b00db9d5793c2a62863c53ef259a969ad0189143363983cb2e9bb05376bbfe078752f49b0512aca82920b2ee8d07abc74fd2d674f1f14f1eb6c7faba18c83ffbb283fa715088da54bef0c78bf90c3c6c35e2f27eafb71c48f0cb1230e61dd49affb18d92804138576120277f9174e6456a1b0240bbdc64e63445fdf59d480dc7efb884f9cdf875169b4b4cda31bc85b05b2b9ae8f69fb28a0f9624e6844c1e3f45d272b539e6483d7301b1b848cceb03513389e78e561545f1f77d05e6a246b351a6718b82a277a8eca9a34935d7807779375055354589a1b27746746ad17d417409e0f657b5ee0004b90e5a942b2a4be03372c9e815f0c26bfa7e9d950db044e14aa35f8976be55a5bfb10bfe08142a73e3c1802c5ea05b5447e5e8a20449af5625319e8bf8d04c460a9bfc933e5295ffd992c024ef0dbc46ce62f7de3e9d4b0fc32c9029677120fcee8f8e5f7ab7be320418fa57d2a67bb3bcf38137bc9f708ac57bca26c2dcc20674b16d592cc57e6f9b402c204373e305a3b65bd36edff7a97009fbaf16b12985c42392f1e615e821c6d39b638c45e02184c6ec1c44f3a237f7c8fc17809f94b6cc0e2b3ad7b47e0ef307e8e1c4d37ac8773c9d4b1831e4d218041ca3f0b85bc6e4a923065d1bd11bd41ec4cb2c7c318a819c19cafa340ab07e2e52126f28ab168f24640e32702229878a8a5c505991def1cc116f15536b2c9433a12e15c6da78b8386f6d61e2e86801651f025aef26112bf2c1b79eb580bb4380bac8e669316596cb7366a9c458978c1948262bf7528d446618b8e4dfc12898dce572b3d2b38d5159b8460c0c69d71f78f926035706ccffed059144cf68ccebda923682342db807ac191bcd5770881c08b104a98e0b5eb6c7272958334cd06336463ecdec9d04b89144637e362fca7fe5fbedfe3467f0807f3b5b30e2c76c1b3824243ee003d1e910bff959b12885297578b334c99060c8fdf4480e72b4309b8587291a1c359aeff7cd11315e9cffd458bff807d7eca0c4da476b13250b8aa0cdecbc4043187cd65ccdd650ab90354b6625f2c5fa38413b75a8b12d72b6f59b3dc471a48ecd938fa914de5a19a59eb67bc1f7445ab7d2f5be1e12b415348fda8ce8c17a02dccfb475289937152fb80c98b60052871ba8ab0a3644e3ea3962778270fe152cfb0b9b9efa44e22fbff59b62c5fb62763ead0cefefc6f750eeb37b7e026fe558fcc67e0aeb0da56f424b8d6c07f0d7dd89749ef04e1d657dae95babb94a9d4f5d415f9b35b667bed332563245b354b8a336b66af6f8200ca45f2f6100e625e1f3056800edeb613ee14cc841690f7caba94c0c56a477c99c93ced00f49c3a90f7cf04113656210d8de14f70c7a6cb9dfe22d8514bca3cf128070d08d007d5a9315cb1c457cb2d81fc47d25e3c31780121659c42c37811c9f3e287fe477ea69259b1045066b07f66ac80a9fd831e89451e5644cf2cf42d0f3eebbda2d21eb2b09f219c7b19c47c2d863008ae9e57153dac8d5d6cce3f23ce41c6ade65fab2629fd9dabcc101969b50613c1ed02dec157a60aecd8ad0d10984e5c54283c90dbc23deef6e67b5c51a8e0b9ef199a815c5f0b6a28b940c289c3262b86cb4834ed590842203f1157f7e2bd143aae02e2bfa12783187b126b3f463d16cb0249960f08ff1785c51ff67c8f6aa2656af03611ba65eb3043859f23857bbb00a7164d122bf8729c6cde8515d3095158f6b1f845c89b5586cc3960ae54595e4585b70674b83a02da6a95ae497320f287f203bd06091121dd3000b2fb104868620a8260705905f24eac01bcd2c2f1780bfd76fbb36f22ba790144aebff11adc1b2f84ad38a57ab9463c9d3e258bac3ebf1661cb26899d40e576c284d8a13810d1d69a5a98"}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x1a, 0x0}, {0x1, 0x0, 0x72f, 0x0}, {0x3, 0x0, 0x7d39447f, 0x0}, {0x3, 0x0, 0x7fffffff, 0x0}, {0x1, 0x0, 0xe, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x5, 0x0, 0xb1a, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xfffffffa, 0x0}, {0x1, 0x0, 0x400, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x4, 0x0}]}) 2.089275534s ago: executing program 2 (id=2045): r0 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) 2.008819797s ago: executing program 1 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x48046}, 0x0) 1.964685658s ago: executing program 2 (id=2048): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) read(r0, &(0x7f0000000140)=""/5, 0x81) 1.845079292s ago: executing program 1 (id=2049): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0x5002}) 1.757906384s ago: executing program 1 (id=2052): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003100), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003140)={0x2c, r1, 0x137e90a4d83670eb, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x818}, 0x0) 1.661783568s ago: executing program 1 (id=2054): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000040)) 1.540030121s ago: executing program 1 (id=2056): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xd, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0xb, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x24, 0x28, {0x28, 0x30, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.439032345s ago: executing program 0 (id=2059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.354502547s ago: executing program 0 (id=2061): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400b59540000000f9dbdf250a3f00fd", @ANYRES32=r1, @ANYBLOB="1400020000000000000000000000000000000003140006000500000001f0"], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.299254939s ago: executing program 0 (id=2063): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000300012800900010069706970000000002000028004001300050005000200000005000a0001000000080002000a01010208000a00", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 1.108634455s ago: executing program 0 (id=2065): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2210c1e, &(0x7f0000000300), 0x1, 0x506, &(0x7f0000001d00)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x246, 0x7, 0x2, 0xfffffffffffffff8, 0x1, 0xf5, 0xf6b}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 1.106105745s ago: executing program 4 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.044040417s ago: executing program 4 (id=2067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)={0xc4, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4402}, 0x0) kernel console output (not intermixed with test programs): 17EF:6049.0011: input,hidraw0: USB HID v0.00 Joystick [HID 17ef:6049] on usb-dummy_hcd.4-1/input0 [ 153.238217][ T4185] [ 153.238217][ T4185] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 153.238217][ T4185] [ 153.282629][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.329975][ T4230] usb 5-1: USB disconnect, device number 7 [ 153.400517][ T6895] set_capacity_and_notify: 3 callbacks suppressed [ 153.400533][ T6895] loop3: detected capacity change from 0 to 32768 [ 153.518762][ T6925] loop0: detected capacity change from 0 to 4096 [ 153.546073][ T6930] fido_id[6930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 153.602927][ T6925] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 153.631013][ T6925] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 153.723436][ T6895] XFS (loop3): Mounting V5 Filesystem [ 153.751794][ T6925] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 153.802561][ T6925] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 153.900912][ T6925] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 153.959090][ T6925] ntfs: volume version 3.1. [ 153.994383][ T6925] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 154.066502][ T6895] XFS (loop3): Ending clean mount [ 154.082040][ T6925] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 154.111441][ T6925] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 154.126867][ T6957] loop1: detected capacity change from 0 to 2048 [ 154.132330][ T6895] XFS (loop3): Quotacheck needed: Please wait. [ 154.137549][ T6925] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 154.151229][ T6954] loop4: detected capacity change from 0 to 4096 [ 154.178118][ T5779] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x2444 dinode [ 154.183658][ T6925] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 154.215946][ T5779] XFS (loop3): Unmount and run xfs_repair [ 154.229951][ T6957] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.281571][ T5779] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 154.289008][ T5779] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 154.301600][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.337962][ T6957] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 154.368408][ T5779] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 154.377897][ T5779] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 154.397833][ T6957] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 154.409904][ T5779] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a 4.Xh...=........ [ 154.432944][ T5779] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 154.461522][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.471886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.510772][ T5779] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 16 72 6f a4 .............ro. [ 154.519690][ T5779] 00000060: ff ff ff ff b2 47 c7 b6 00 00 00 00 00 00 00 05 .....G.......... [ 154.581240][ T5779] 00000070: 00 00 00 01 00 04 00 80 00 00 00 00 00 00 00 08 ................ [ 154.709271][ T6895] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 154.868894][ T6950] loop2: detected capacity change from 0 to 32768 [ 154.890299][ T6975] netlink: 'syz.1.1023': attribute type 3 has an invalid length. [ 154.966116][ T5640] XFS (loop3): Unmounting Filesystem [ 154.975404][ T6950] JBD2: Ignoring recovery information on journal [ 155.079370][ T6950] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 155.111579][ T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.121479][ T5166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.144841][ T6554] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.224780][ T6987] loop0: detected capacity change from 0 to 4096 [ 155.259447][ T6989] loop1: detected capacity change from 0 to 8 [ 155.298717][ T4185] ocfs2: Unmounting device (7,2) on (node local) [ 155.359022][ T6990] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.371612][ T4230] net_ratelimit: 1 callbacks suppressed [ 155.371627][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.427122][ T6987] attempt to access beyond end of device [ 155.427122][ T6987] loop0: rw=0, want=262160, limit=4096 [ 155.440178][ T6554] usb 5-1: Using ep0 maxpacket: 32 [ 155.482339][ T6987] NILFS (loop0): I/O error reading node block for GC (ino=15, vblocknr=3) [ 155.516378][ T6987] NILFS (loop0): error -5 preparing GC: cannot read source blocks [ 155.592356][ T6554] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.600515][ T6554] usb 5-1: config 0 has no interface number 0 [ 155.706880][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1033'. [ 155.753398][ T6997] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 155.831063][ T6554] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.850394][ T6554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.859460][ T7002] loop3: detected capacity change from 0 to 1024 [ 155.877439][ T6554] usb 5-1: Product: syz [ 155.894076][ T6554] usb 5-1: Manufacturer: syz [ 155.909046][ T6554] usb 5-1: SerialNumber: syz [ 155.941665][ T6554] usb 5-1: config 0 descriptor?? [ 155.982074][ T7002] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 155.995072][ T6554] smsc95xx v2.0.0 [ 156.148735][ T7014] loop0: detected capacity change from 0 to 1024 [ 156.280760][ T4640] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.307481][ T7014] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.338673][ T7014] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.366713][ T7027] loop2: detected capacity change from 0 to 512 [ 156.381105][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.496863][ T7029] exfat: Deprecated parameter 'namecase' [ 156.502779][ T7029] exfat: Deprecated parameter 'utf8' [ 156.528859][ T7029] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 156.541318][ T4640] usb 2-1: Using ep0 maxpacket: 16 [ 156.630839][ T6554] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 156.668783][ T4640] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 156.690384][ T6554] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.713905][ T4640] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 156.736010][ T7033] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 156.767807][ T4640] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.780922][ T6554] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 156.785083][ T4640] usb 2-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 156.815189][ T4640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.837059][ T6554] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 156.875290][ T4640] usb 2-1: config 0 descriptor?? [ 156.891186][ T6554] usb 5-1: USB disconnect, device number 8 [ 157.144819][ T7031] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1046 (7031) [ 157.229984][ T7031] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 157.248182][ T7031] BTRFS info (device loop0): using free space tree [ 157.260624][ T7031] BTRFS info (device loop0): has skinny extents [ 157.311428][ T4267] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.384386][ T4640] wacom 0003:056A:00D5.0012: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 157.417236][ T7052] ntfs: volume version 3.1. [ 157.422380][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.438449][ T4640] wacom 0003:056A:00D5.0012: hidraw0: USB HID v0.02 Joystick [HID 056a:00d5] on usb-dummy_hcd.1-1/input0 [ 157.473236][ T7048] ntfs: volume version 3.1. [ 157.534972][ T4640] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D5.0012/input/input14 [ 157.590803][ T4267] usb 3-1: Using ep0 maxpacket: 8 [ 157.616289][ T7031] BTRFS info (device loop0): enabling ssd optimizations [ 157.716628][ T4640] usb 2-1: USB disconnect, device number 7 [ 157.731765][ T4267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.739171][ T4267] usb 3-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 157.781684][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.841035][ T4267] usb 3-1: config 0 descriptor?? [ 158.032320][ T7078] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 158.059320][ T7075] fido_id[7075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 158.089488][ T7078] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 158.342101][ T4267] wacom 0003:056A:00BC.0013: unknown main item tag 0x2 [ 158.349176][ T7080] [U]  [ 158.388928][ T4267] wacom 0003:056A:00BC.0013: unknown main item tag 0x3 [ 158.418011][ T7083] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 158.428419][ T4267] wacom 0003:056A:00BC.0013: unknown main item tag 0x1 [ 158.437361][ T7083] REISERFS (device loop1): using ordered data mode [ 158.444251][ T4267] wacom 0003:056A:00BC.0013: unknown main item tag 0x2 [ 158.451490][ T7083] reiserfs: using flush barriers [ 158.457308][ T4267] wacom 0003:056A:00BC.0013: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 158.470281][ T4639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.491812][ T4267] wacom 0003:056A:00BC.0013: hidraw0: USB HID vff.fd Device [HID 056a:00bc] on usb-dummy_hcd.2-1/input0 [ 158.512674][ T4267] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00BC.0013/input/input17 [ 158.519168][ T7083] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.548154][ T7091] set_capacity_and_notify: 6 callbacks suppressed [ 158.548170][ T7091] loop4: detected capacity change from 0 to 256 [ 158.615810][ T4267] usb 3-1: USB disconnect, device number 6 [ 158.713215][ T7083] REISERFS (device loop1): checking transaction log (loop1) [ 158.750812][ T7083] REISERFS (device loop1): Using r5 hash to sort names [ 158.774464][ T7083] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 158.810776][ T7083] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 158.832834][ T7096] fido_id[7096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 158.942803][ T7087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.951268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.962419][ T7083] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 158.987433][ T7083] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.016735][ T7083] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 159.358724][ T7114] loop3: detected capacity change from 0 to 2048 [ 159.370553][ T7119] loop4: detected capacity change from 0 to 256 [ 159.425824][ T7119] exfat: Deprecated parameter 'utf8' [ 159.448319][ T7119] exfat: Deprecated parameter 'utf8' [ 159.491398][ T7119] exfat: Deprecated parameter 'namecase' [ 159.497111][ T7119] exfat: Deprecated parameter 'namecase' [ 159.503125][ T7087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.521057][ T7114] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 159.575111][ T7119] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 159.635170][ T7124] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.647901][ T4652] udevd[4652]: incorrect nilfs2 checksum on /dev/loop3 [ 159.675895][ T7126] loop1: detected capacity change from 0 to 16 [ 159.722883][ T7128] loop2: detected capacity change from 0 to 512 [ 159.809184][ T7128] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.1080: invalid block [ 159.850022][ T7126] erofs: (device loop1): mounted with root inode @ nid 36. [ 159.908941][ T7128] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1080: invalid indirect mapped block 10 (level 1) [ 159.926117][ T7128] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1080: invalid indirect mapped block 8 (level 1) [ 159.970803][ T7126] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 160.031484][ T7128] EXT4-fs (loop2): 1 truncate cleaned up [ 160.037174][ T7128] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.073262][ T7126] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86 [ 160.244536][ T7110] loop0: detected capacity change from 0 to 40427 [ 160.268720][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.297067][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.327682][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.354491][ T7110] F2FS-fs (loop0): invalid crc value [ 160.361102][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.371369][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.380955][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.389281][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.397118][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.406864][ T7110] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.418780][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.444005][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.464051][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.480801][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.498407][ T7110] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 160.505661][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.518606][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.527877][ T7110] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 160.535659][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.543664][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.546806][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.559626][ T5166] hid-generic 0006:0008:0001.0014: unknown main item tag 0x0 [ 160.575567][ T5166] hid-generic 0006:0008:0001.0014: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 160.744415][ T7156] loop3: detected capacity change from 0 to 256 [ 160.860444][ T7159] loop1: detected capacity change from 0 to 4096 [ 160.960836][ T4639] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.047717][ T7165] fido_id[7165]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.221457][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 161.230962][ T4639] usb 3-1: Using ep0 maxpacket: 8 [ 161.390807][ T4639] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.480967][ T4639] usb 3-1: config 7 has an invalid interface number: 3 but max is 0 [ 161.519304][ T4639] usb 3-1: config 7 has no interface number 0 [ 161.577533][ T4639] usb 3-1: config 7 interface 3 altsetting 129 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 161.621523][ T4639] usb 3-1: config 7 interface 3 altsetting 129 endpoint 0xA has invalid wMaxPacketSize 0 [ 161.665491][ T4639] usb 3-1: config 7 interface 3 has no altsetting 0 [ 161.729416][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.738426][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.751355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.768689][ T7192] loop3: detected capacity change from 0 to 64 [ 161.875736][ T7200] loop4: detected capacity change from 0 to 512 [ 161.882440][ T7199] nbd: couldn't find device at index 10275584 [ 161.882601][ T4639] usb 3-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=17.82 [ 161.908246][ T4639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.930147][ T4639] usb 3-1: Product: syz [ 161.938636][ T4639] usb 3-1: Manufacturer: syz [ 161.968041][ T4639] usb 3-1: SerialNumber: syz [ 161.975445][ T7200] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.010019][ T7200] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.1111: ea_inode with extended attributes [ 162.025514][ T7205] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1113'. [ 162.111572][ T7200] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1111: error while reading EA inode 11 err=-117 [ 162.181389][ T7200] EXT4-fs (loop4): 1 orphan inode deleted [ 162.187178][ T7200] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,dioread_lock,debug_want_extra_isize=0x0000000000000006,nojournal_checksum,resgid=0x0000000000000000,acl,barrier,,errors=continue. Quota mode: none. [ 162.250888][ T4230] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 162.312284][ T4639] ftdi_sio 3-1:7.3: FTDI USB Serial Device converter detected [ 162.331869][ T4639] usb 3-1: Detected FT-X [ 162.336169][ T4639] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 10 [ 162.360996][ T4639] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 162.421082][ T4639] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 162.451575][ T4639] ftdi_sio 3-1:7.3: GPIO initialisation failed: -71 [ 162.484403][ T4639] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.533561][ T7215] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1117: inode has both inline data and extents flags [ 162.541956][ T4639] usb 3-1: USB disconnect, device number 7 [ 162.608645][ T7215] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1117: couldn't read orphan inode 15 (err -117) [ 162.660961][ T4230] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 162.676575][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.698309][ T7215] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 162.725369][ T4639] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.747795][ T4639] ftdi_sio 3-1:7.3: device disconnected [ 162.800890][ T4230] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 162.818342][ T4230] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 162.847100][ T4230] usb 1-1: Manufacturer: syz [ 162.868471][ T4230] usb 1-1: config 0 descriptor?? [ 163.030895][ T4230] rc_core: IR keymap rc-hauppauge not found [ 163.036949][ T4230] Registered IR keymap rc-empty [ 163.067071][ T4230] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 163.118802][ T4230] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 163.144241][ T7233] EXT4-fs (loop2): Ignoring removed nobh option [ 163.187581][ T7233] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 163.243164][ T7233] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 163.261069][ T7233] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #13: comm syz.2.1126: inode has both inline data and extents flags [ 163.500819][ C1] igorplugusb 1-1:0.0: receive overflow, at least 27 lost [ 163.510395][ T7236] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 163.565045][ T7233] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1126: couldn't read orphan inode 13 (err -117) [ 163.597642][ T7233] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 163.598083][ T7236] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.672182][ T7233] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 163.711748][ T7251] sg_write: data in/out 163806/20 bytes for SCSI command 0xce-- guessing data in; [ 163.711748][ T7251] program syz.4.1132 not setting count and/or reply_len properly [ 163.713460][ T4230] usb 1-1: USB disconnect, device number 13 [ 163.858507][ T7255] fuse: Bad value for 'fd' [ 164.062997][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1135'. [ 164.138994][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'. [ 164.348904][ T7269] set_capacity_and_notify: 3 callbacks suppressed [ 164.348920][ T7269] loop4: detected capacity change from 0 to 16 [ 164.440345][ T7269] erofs: Unexpected value for 'user_xattr' [ 164.682236][ T7279] netlink: 'syz.4.1146': attribute type 4 has an invalid length. [ 164.978062][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 165.006027][ T7253] loop1: detected capacity change from 0 to 32768 [ 165.087894][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 165.087910][ T26] audit: type=1326 audit(1787908126.992:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7294 comm="syz.0.1154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53307aa159 code=0x0 [ 165.120838][ T5166] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.174654][ T7253] XFS (loop1): Mounting V5 Filesystem [ 165.264218][ T7274] loop2: detected capacity change from 0 to 40427 [ 165.344298][ T7274] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 165.354429][ T7274] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 165.373350][ T7274] F2FS-fs (loop2): invalid crc value [ 165.404919][ T7274] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 165.453412][ T7253] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 165.560898][ T5166] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.586835][ T5166] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.615334][ T7253] XFS (loop1): Starting recovery (logdev: internal) [ 165.623471][ T7274] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 165.633961][ T5166] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.652537][ T7274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 165.671146][ T5166] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.707777][ T5166] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 165.729712][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.748343][ T7253] XFS (loop1): Ending recovery (logdev: internal) [ 165.790409][ T4185] attempt to access beyond end of device [ 165.790409][ T4185] loop2: rw=2049, want=45104, limit=40427 [ 165.943752][ T4188] XFS (loop1): Unmounting Filesystem [ 166.399243][ T7329] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 166.450900][ T5166] gud 4-1:1.0: Failed to get properties (error=-71) [ 166.457596][ T5166] gud: probe of 4-1:1.0 failed with error -71 [ 166.527020][ T5166] usb 4-1: USB disconnect, device number 12 [ 166.634581][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1168'. [ 167.116452][ T7362] loop3: detected capacity change from 0 to 1024 [ 167.176145][ T7362] EXT4-fs (loop3): Ignoring removed bh option [ 167.206356][ T7362] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000] [ 167.221575][ T7362] System zones: 0-1, 3-12 [ 167.255705][ T7369] loop0: detected capacity change from 0 to 512 [ 167.286774][ T7362] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #3: block 1: comm syz.3.1179: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.311817][ T7372] loop2: detected capacity change from 0 to 256 [ 167.336241][ T7369] FAT-fs (loop0): bogus logical sector size 0 [ 167.345983][ T7369] FAT-fs (loop0): Can't find a valid FAT filesystem [ 167.371341][ T7372] exfat: Deprecated parameter 'utf8' [ 167.376881][ T7372] exfat: Deprecated parameter 'utf8' [ 167.384771][ T7372] exfat: Deprecated parameter 'namecase' [ 167.393869][ T7372] exfat: Unknown parameter 'keep_last_dots' [ 167.414450][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1181'. [ 167.429753][ T7362] EXT4-fs (loop3): Remounting filesystem read-only [ 167.451370][ T7362] Quota error (device loop3): write_blk: dquota write failed [ 167.471077][ T7362] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 167.541395][ T7362] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1179: Failed to acquire dquot type 0 [ 167.598855][ T7362] EXT4-fs (loop3): Remounting filesystem read-only [ 167.628545][ T7362] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.1179: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.680283][ T7380] loop0: detected capacity change from 0 to 1024 [ 167.703738][ T7362] EXT4-fs (loop3): Remounting filesystem read-only [ 167.749662][ T7362] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1179: Invalid inode bitmap blk 0 in block_group 0 [ 167.771350][ T7362] EXT4-fs (loop3): Remounting filesystem read-only [ 167.774143][ T4240] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.791626][ T7362] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 167.898485][ T7362] EXT4-fs (loop3): Remounting filesystem read-only [ 167.915112][ T7362] EXT4-fs (loop3): 1 orphan inode deleted [ 167.924328][ T4240] EXT4-fs (loop3): Remounting filesystem read-only [ 167.952884][ T7362] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000008c9,debug,errors=remount-ro,. Quota mode: writeback. [ 167.999833][ T4240] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 168.024845][ T4240] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 168.105208][ T4240] EXT4-fs (loop3): Remounting filesystem read-only [ 168.105228][ T7394] loop1: detected capacity change from 0 to 16 [ 168.118533][ T7362] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.1179: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 168.178157][ T7394] erofs: (device loop1): mounted with root inode @ nid 36. [ 168.217467][ T7362] EXT4-fs (loop3): Remounting filesystem read-only [ 168.345037][ T7394] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 1740 of nid 36 [ 168.713859][ T7384] loop4: detected capacity change from 0 to 32768 [ 168.767766][ T7407] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1195'. [ 168.794120][ T7384] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 168.794120][ T7384] [ 168.877958][ T7384] read_mapping_page failed! [ 168.893710][ T7384] ERROR: (device loop4): txCommit: [ 168.893710][ T7384] [ 168.968986][ T7416] loop3: detected capacity change from 0 to 512 [ 169.086373][ T7416] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.183034][ T4639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.191585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.250533][ T7416] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.489658][ T7433] set_capacity_and_notify: 1 callbacks suppressed [ 169.489676][ T7433] loop4: detected capacity change from 0 to 256 [ 169.890045][ T7443] loop2: detected capacity change from 0 to 2048 [ 169.982678][ T7455] loop3: detected capacity change from 0 to 64 [ 169.989646][ T7443] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.048088][ T4652] udevd[4652]: incorrect nilfs2 checksum on /dev/loop2 [ 170.086960][ T7460] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.277984][ T7467] netlink: 'syz.2.1223': attribute type 3 has an invalid length. [ 170.346756][ T7467] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 170.380813][ T7467] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1223'. [ 170.445886][ T7464] loop4: detected capacity change from 0 to 4096 [ 170.736915][ T7483] loop3: detected capacity change from 0 to 512 [ 170.919207][ T7483] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 170.961103][ T7487] loop4: detected capacity change from 0 to 4096 [ 170.967996][ T7483] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.001480][ T7483] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 171.090808][ T5506] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.100848][ T7494] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.160416][ T6554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.255728][ T7498] UHID_CREATE from different security context by process 527 (syz.0.1236), this is not allowed. [ 171.470913][ T5506] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 171.491504][ T5506] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 171.500586][ T5506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.613400][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1244'. [ 171.624659][ T5506] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 171.929643][ T7482] loop2: detected capacity change from 0 to 40427 [ 171.963850][ T7482] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 171.986234][ T7482] F2FS-fs (loop2): invalid crc value [ 172.013930][ T7482] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.135812][ T7482] F2FS-fs (loop2): recover fsync data on readonly fs [ 172.159121][ T7482] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 172.167640][ T7482] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 172.185828][ T7482] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 172.301940][ T7537] loop0: detected capacity change from 0 to 8192 [ 172.320847][ T6554] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 172.342098][ T7537] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.401564][ T5166] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 172.582225][ T7544] loop0: detected capacity change from 0 to 128 [ 172.614938][ T7544] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 172.653235][ T7544] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.701079][ T6554] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.722874][ T6554] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 172.740027][ T6554] usb 5-1: config 0 interface 0 has no altsetting 0 [ 172.747136][ T5506] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 172.760401][ T5506] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 172.810963][ T5506] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 172.881036][ T5166] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.888872][ T6554] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 172.904459][ T6554] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 172.913780][ T6554] usb 5-1: Manufacturer: syz [ 172.918427][ T6554] usb 5-1: SerialNumber: syz [ 172.929259][ T6554] usb 5-1: config 0 descriptor?? [ 172.954762][ T7531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 172.979471][ T7553] loop0: detected capacity change from 0 to 4096 [ 173.001188][ T5166] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.012715][ T5166] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.031896][ T5460] usb 2-1: USB disconnect, device number 8 [ 173.038724][ T5506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.047143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.064699][ T7554] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.187088][ T7531] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 173.238927][ T6554] plusb 5-1:0.0 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 12:7d:78:65:c8:a5 [ 173.252095][ T5166] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 173.268749][ T5166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.277073][ T5166] usb 4-1: Product: syz [ 173.294831][ T5166] usb 4-1: Manufacturer: syz [ 173.301883][ T5166] usb 4-1: SerialNumber: syz [ 173.367067][ T5166] usb 4-1: selecting invalid altsetting 1 [ 173.382078][ T5166] usb 4-1: unit 6 not found! [ 173.396498][ T5166] usb 4-1: unit 0 not found! [ 173.453715][ T5166] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 173.471650][ T5166] usb 5-1: USB disconnect, device number 9 [ 173.488069][ T5166] plusb 5-1:0.0 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 173.548784][ T4652] udevd[4652]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.600881][ T5460] usb 4-1: USB disconnect, device number 13 [ 174.331262][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.392542][ T7608] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.393821][ T7606] erofs: (device loop2): mounted with root inode @ nid 36. [ 174.413243][ T7597] NILFS (loop4): error -22 preparing GC: cannot mark copying blocks dirty [ 174.499670][ T26] audit: type=1800 audit(1787908136.402:10): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1281" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 174.699886][ T7610] set_capacity_and_notify: 3 callbacks suppressed [ 174.699903][ T7610] loop1: detected capacity change from 0 to 4096 [ 174.776493][ T7610] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 174.787782][ T5165] Bluetooth: hci0: command 0x0405 tx timeout [ 174.886519][ T7610] ntfs: volume version 3.1. [ 175.005094][ T7590] loop0: detected capacity change from 0 to 32768 [ 175.020801][ T4639] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 175.029503][ T7610] ntfs: (device loop1): ntfs_bmap(): BMAP does not make sense for resident attributes, returning 0. [ 175.151398][ T7590] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 175.151398][ T7590] [ 175.191778][ T7590] read_mapping_page failed! [ 175.196361][ T7590] ERROR: (device loop0): txCommit: [ 175.196361][ T7590] [ 175.245384][ T7635] loop1: detected capacity change from 0 to 1024 [ 175.289973][ T7635] EXT4-fs (loop1): Ignoring removed bh option [ 175.355559][ T7635] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #3: block 1: comm syz.1.1290: lblock 1 mapped to illegal pblock 1 (length 1) [ 175.394427][ T7642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.415834][ T4639] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29715, setting to 64 [ 175.462815][ T4639] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.479232][ T7635] EXT4-fs (loop1): Remounting filesystem read-only [ 175.490857][ T7635] Quota error (device loop1): write_blk: dquota write failed [ 175.503973][ T7635] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 175.514542][ T7635] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1290: Failed to acquire dquot type 0 [ 175.548130][ T4639] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.548253][ T7635] EXT4-fs (loop1): Remounting filesystem read-only [ 175.564396][ T7635] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.1290: Freeing blocks not in datazone - block = 0, count = 4096 [ 175.606736][ T7635] EXT4-fs (loop1): Remounting filesystem read-only [ 175.626145][ T4639] usb 5-1: config 0 descriptor?? [ 175.641519][ T7635] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1290: Invalid inode bitmap blk 0 in block_group 0 [ 175.671127][ T7618] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 175.679617][ T7648] loop3: detected capacity change from 0 to 512 [ 175.686800][ T7635] EXT4-fs (loop1): Remounting filesystem read-only [ 175.693675][ T4639] hub 5-1:0.0: USB hub found [ 175.698659][ T154] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 175.701061][ T7635] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 175.748760][ T154] EXT4-fs (loop1): Remounting filesystem read-only [ 175.766211][ T154] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 175.775091][ T7635] EXT4-fs (loop1): Remounting filesystem read-only [ 175.797631][ T7635] EXT4-fs (loop1): 1 orphan inode deleted [ 175.805888][ T7648] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 175.830779][ T7648] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 175.843292][ T154] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 0 [ 175.853571][ T7648] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 175.863945][ T7635] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000003fd,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: writeback. [ 175.895598][ T154] EXT4-fs (loop1): Remounting filesystem read-only [ 175.931099][ T4639] hub 5-1:0.0: 1 port detected [ 175.968269][ T7648] EXT4-fs (loop3): 1 truncate cleaned up [ 175.980940][ T7648] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 176.044761][ T7654] loop2: detected capacity change from 0 to 4096 [ 176.083510][ T7635] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm syz.1.1290: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.116181][ T7654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.148367][ T7635] EXT4-fs (loop1): Remounting filesystem read-only [ 176.155690][ T4639] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 176.165491][ T4639] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 176.209573][ T7635] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 176.224107][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.232586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.302965][ T4639] usbhid 5-1:0.0: can't add hid device: -71 [ 176.311858][ T4639] usbhid: probe of 5-1:0.0 failed with error -71 [ 176.401581][ T4639] usb 5-1: USB disconnect, device number 10 [ 177.118400][ T7702] netlink: 'syz.3.1317': attribute type 5 has an invalid length. [ 177.148272][ T7702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1317'. [ 177.163126][ T7704] loop4: detected capacity change from 0 to 256 [ 177.190757][ T5165] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 177.232620][ T7704] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 177.328034][ T26] audit: type=1800 audit(1787908139.232:11): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1318" name="file2" dev="loop4" ino=1048654 res=0 errno=0 [ 177.525251][ T7708] netlink: 'syz.4.1320': attribute type 2 has an invalid length. [ 177.581008][ T5165] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 177.597562][ T5165] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 177.631000][ T5165] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.681060][ T5165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.687734][ T5165] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 177.732176][ T5165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.743502][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 177.758612][ T5165] usb 3-1: config 0 descriptor?? [ 177.801146][ T7688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.836333][ T7700] loop0: detected capacity change from 0 to 32768 [ 177.919333][ T7718] loop4: detected capacity change from 0 to 4096 [ 178.029996][ T7718] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 178.108428][ T7718] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 178.139235][ T7724] loop1: detected capacity change from 0 to 8192 [ 178.171636][ T7730] loop0: detected capacity change from 0 to 22 [ 178.183581][ T7732] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1330'. [ 178.232553][ T7730] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 178.252666][ T7724] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 178.254675][ T5165] uclogic 0003:28BD:0074.0015: interface is invalid, ignoring [ 178.298980][ T7730] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 178.310871][ T7724] REISERFS (device loop1): using ordered data mode [ 178.328846][ T7724] reiserfs: using flush barriers [ 178.369719][ T7724] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.415260][ T7739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 178.424743][ T7739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 178.451864][ T7724] REISERFS (device loop1): checking transaction log (loop1) [ 178.463965][ T6554] usb 3-1: USB disconnect, device number 8 [ 178.494448][ T7724] REISERFS (device loop1): Using r5 hash to sort names [ 178.506581][ T7724] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 178.516675][ T7737] exfat: Deprecated parameter 'utf8' [ 178.536549][ T7737] exfat: Deprecated parameter 'namecase' [ 178.616748][ T7737] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 179.049847][ T7754] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.085634][ T7754] EXT4-fs (loop1): 1 truncate cleaned up [ 179.100897][ T7754] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,grpjquota=,mb_optimize_scan=0x0000000000000001,minixdf,dioread_lock,. Quota mode: none. [ 179.374903][ T7767] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 179.398442][ T7767] REISERFS (device loop3): using ordered data mode [ 179.407420][ T7767] reiserfs: using flush barriers [ 179.448218][ T7767] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.477940][ T7776] MINIX-fs: mounting file system with errors, running fsck is recommended [ 179.573460][ T7767] REISERFS (device loop3): checking transaction log (loop3) [ 179.604323][ T7767] REISERFS (device loop3): Using r5 hash to sort names [ 179.621328][ T7767] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 179.806494][ T7790] set_capacity_and_notify: 5 callbacks suppressed [ 179.806509][ T7790] loop1: detected capacity change from 0 to 256 [ 179.811252][ T6554] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 179.861261][ T7784] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 180.115807][ T6554] usb 1-1: Using ep0 maxpacket: 32 [ 180.161197][ T5460] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.241370][ T6554] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 180.261817][ T6554] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 180.285447][ T6554] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 180.304121][ T6554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.329664][ T6554] usb 1-1: config 0 descriptor?? [ 180.604605][ T5460] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.637597][ T5460] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.660714][ T5460] usb 4-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 180.663286][ T7825] loop2: detected capacity change from 0 to 256 [ 180.690502][ T5460] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.821890][ T7825] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 180.836915][ T6554] kye 0003:0458:5010.0016: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 180.867675][ T7798] loop1: detected capacity change from 0 to 32768 [ 180.885482][ T6554] kye 0003:0458:5010.0016: tablet-enabling feature report not found [ 180.914058][ T6554] kye 0003:0458:5010.0016: tablet enabling failed [ 181.047695][ T6554] usb 1-1: USB disconnect, device number 14 [ 181.084838][ T7798] XFS (loop1): Mounting V5 Filesystem [ 181.161072][ T7815] loop4: detected capacity change from 0 to 32768 [ 181.210960][ T5460] dvb_usb_af9035 4-1:1.0: command=00 checksum mismatch (0000 != fdfc) [ 181.219767][ T5460] dvb_usb_af9035: probe of 4-1:1.0 failed with error -5 [ 181.270236][ T7798] XFS (loop1): Ending clean mount [ 181.277640][ T7815] XFS (loop4): Mounting V5 Filesystem [ 181.347924][ T4188] XFS (loop1): Unmounting Filesystem [ 181.472700][ T4639] usb 4-1: USB disconnect, device number 14 [ 181.502783][ T7815] XFS (loop4): Ending clean mount [ 181.537503][ T7861] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 181.604781][ T4189] XFS (loop4): Unmounting Filesystem [ 181.990792][ T4639] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 182.350937][ T4639] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.384829][ T4639] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 182.418732][ T4639] usb 1-1: config 0 interface 0 has no altsetting 0 [ 182.541009][ T4639] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 182.563174][ T4639] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 182.574898][ T7911] loop4: detected capacity change from 0 to 256 [ 182.589031][ T4639] usb 1-1: Manufacturer: syz [ 182.604510][ T4639] usb 1-1: SerialNumber: syz [ 182.620469][ T4639] usb 1-1: config 0 descriptor?? [ 182.639936][ T7914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1397'. [ 182.649569][ T7869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.699679][ T7911] FAT-fs (loop4): Directory bread(block 64) failed [ 182.716378][ T7911] FAT-fs (loop4): Directory bread(block 65) failed [ 182.730982][ T7911] FAT-fs (loop4): Directory bread(block 66) failed [ 182.751301][ T7911] FAT-fs (loop4): Directory bread(block 67) failed [ 182.786119][ T7911] FAT-fs (loop4): Directory bread(block 68) failed [ 182.801904][ T7911] FAT-fs (loop4): Directory bread(block 69) failed [ 182.820877][ T7911] FAT-fs (loop4): Directory bread(block 70) failed [ 182.841208][ T7911] FAT-fs (loop4): Directory bread(block 71) failed [ 182.847853][ T7911] FAT-fs (loop4): Directory bread(block 72) failed [ 182.862785][ T7911] FAT-fs (loop4): Directory bread(block 73) failed [ 182.890191][ T7869] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.941581][ T4639] plusb 1-1:0.0 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 32:7c:eb:b7:e7:85 [ 183.112721][ T7926] loop1: detected capacity change from 0 to 4096 [ 183.166256][ T7087] usb 1-1: USB disconnect, device number 15 [ 183.181623][ T7087] plusb 1-1:0.0 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 183.238621][ T7926] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 183.266193][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.274733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.288662][ T7926] ntfs3: loop1: Failed to load $Extend. [ 183.310874][ T5460] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.410446][ T7935] loop2: detected capacity change from 0 to 8192 [ 183.587063][ T7935] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 183.642057][ T7953] loop3: detected capacity change from 0 to 16 [ 183.649755][ T7935] REISERFS (device loop2): using ordered data mode [ 183.656410][ T7935] reiserfs: using flush barriers [ 183.671582][ T7935] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.725753][ T7953] erofs: (device loop3): mounted with root inode @ nid 36. [ 183.740990][ T7935] REISERFS (device loop2): checking transaction log (loop2) [ 183.785977][ T7935] REISERFS (device loop2): Using r5 hash to sort names [ 183.813886][ T7935] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 183.902425][ T5166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.911285][ T5166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.310774][ T5166] Bluetooth: hci0: command 0x0405 tx timeout [ 184.479203][ T7996] loop0: detected capacity change from 0 to 512 [ 184.556932][ T7996] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 184.639570][ T7996] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,nogrpid,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 184.710341][ T7996] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.721223][ T7958] loop1: detected capacity change from 0 to 40427 [ 184.735918][ T7958] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 184.767461][ T7958] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 184.792006][ T7958] F2FS-fs (loop1): invalid crc value [ 184.824471][ T7996] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz.0.1426: resize_inode disabled but reserved GDT blocks non-zero [ 184.862167][ T7958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 185.120872][ T7958] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 185.127997][ T7958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.446739][ T8046] loop3: detected capacity change from 0 to 512 [ 185.542196][ T8046] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 185.609282][ T8048] loop0: detected capacity change from 0 to 512 [ 185.767911][ T8048] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,norecovery,quota,,errors=continue. Quota mode: writeback. [ 185.795701][ T8046] EXT4-fs (loop3): Test dummy encryption mode enabled [ 185.819812][ T8048] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 185.862743][ T8046] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000000. Quota mode: none. [ 185.913793][ T8060] loop4: detected capacity change from 0 to 1024 [ 185.978066][ T8048] EXT4-fs (loop0): re-mounted. Opts: noquota,noblock_validity,nogrpid,data=journal,. Quota mode: writeback. [ 186.000147][ T8060] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 186.028151][ T8048] ext4 filesystem being remounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.084900][ T8060] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 2: comm syz.4.1448: lblock 2 mapped to illegal pblock 2 (length 1) [ 186.108026][ T8060] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 186.135409][ T8060] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 48: comm syz.4.1448: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.197730][ T8060] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 186.214110][ T8035] loop2: detected capacity change from 0 to 40427 [ 186.261639][ T8060] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1448: Failed to acquire dquot type 0 [ 186.277725][ T8035] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 186.296621][ T8035] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 186.317515][ T8060] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 186.329364][ T8035] F2FS-fs (loop2): invalid crc value [ 186.340206][ T8073] netlink: 'syz.0.1453': attribute type 2 has an invalid length. [ 186.350580][ T8060] EXT4-fs error (device loop4): ext4_evict_inode:284: inode #11: comm syz.4.1448: mark_inode_dirty error [ 186.398153][ T8060] EXT4-fs warning (device loop4): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 186.447799][ T8035] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 186.517169][ T8060] EXT4-fs (loop4): 1 orphan inode deleted [ 186.540954][ T5854] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.573551][ T8060] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,resuid=0x0000000000000000,norecovery,nodiscard,nodioread_nolock,nomblk_io_submit,,errors=continue. Quota mode: none. [ 186.641702][ T5854] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 186.654890][ T5854] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 186.741798][ T8086] loop1: detected capacity change from 0 to 16 [ 186.795757][ T8086] erofs: (device loop1): mounted with root inode @ nid 36. [ 186.810426][ T8035] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 186.820839][ T8035] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 186.830884][ T7087] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 186.865348][ T5854] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.921771][ T5854] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 186.930254][ T5854] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 186.965956][ T4189] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 187.026527][ T4189] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 187.026723][ T5460] Bluetooth: hci0: command 0x0c20 tx timeout [ 187.065999][ T4185] attempt to access beyond end of device [ 187.065999][ T4185] loop2: rw=2049, want=45104, limit=40427 [ 187.067049][ T4189] EXT4-fs error (device loop4): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 187.091355][ T7087] usb 4-1: Using ep0 maxpacket: 32 [ 187.101155][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.109470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.220992][ T7087] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 187.251991][ T7087] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.296743][ T8105] loop0: detected capacity change from 0 to 512 [ 187.303183][ T7087] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.326304][ T7087] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 187.337736][ T7087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.372698][ T7087] usb 4-1: config 0 descriptor?? [ 187.399874][ T8105] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 187.472012][ T8105] EXT4-fs (loop0): orphan cleanup on readonly fs [ 187.484261][ T8105] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 187.545241][ T8105] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 187.572506][ T8105] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2928: inode #16: comm syz.0.1467: corrupted xattr block 31 [ 187.590005][ T8112] device vlan3 entered promiscuous mode [ 187.595771][ T8112] device bridge0 entered promiscuous mode [ 187.638360][ T8105] EXT4-fs (loop0): Remounting filesystem read-only [ 187.654330][ T8105] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -117) [ 187.667799][ T8105] EXT4-fs (loop0): 1 orphan inode deleted [ 187.674994][ T8105] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 187.760730][ T4637] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 188.106454][ T7087] usb 4-1: string descriptor 0 read error: -71 [ 188.130860][ T7087] uclogic 0003:5543:004D.0017: failed retrieving string descriptor #200: -71 [ 188.150997][ T4637] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 188.172511][ T7087] uclogic 0003:5543:004D.0017: failed retrieving pen parameters: -71 [ 188.181510][ T4637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.189859][ T8114] loop2: detected capacity change from 0 to 32768 [ 188.200745][ T7087] uclogic 0003:5543:004D.0017: failed probing pen v2 parameters: -71 [ 188.209124][ T7087] uclogic 0003:5543:004D.0017: failed probing parameters: -71 [ 188.217843][ T4637] usb 2-1: config 0 descriptor?? [ 188.230827][ T7087] uclogic: probe of 0003:5543:004D.0017 failed with error -71 [ 188.262701][ T4637] cp210x 2-1:0.0: cp210x converter detected [ 188.280443][ T7087] usb 4-1: USB disconnect, device number 15 [ 188.348712][ T8114] XFS (loop2): Mounting V5 Filesystem [ 188.439773][ T8114] XFS (loop2): Ending clean mount [ 188.568814][ T26] audit: type=1800 audit(1787908150.472:12): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1463" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 188.668042][ T4185] XFS (loop2): Unmounting Filesystem [ 188.715704][ T4637] usb 2-1: cp210x converter now attached to ttyUSB0 [ 188.780725][ T7087] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 188.792420][ T8153] loop3: detected capacity change from 0 to 8 [ 188.885849][ T8153] SQUASHFS error: xz decompression failed, data probably corrupt [ 188.895910][ T8153] SQUASHFS error: Failed to read block 0x108: -5 [ 188.902642][ T8153] SQUASHFS error: Unable to read metadata cache entry [106] [ 188.910080][ T8153] SQUASHFS error: Unable to read inode 0x101f [ 188.930820][ T5166] usb 2-1: USB disconnect, device number 9 [ 188.947587][ T5166] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.979406][ T5166] cp210x 2-1:0.0: device disconnected [ 189.015570][ T8155] loop0: detected capacity change from 0 to 4096 [ 189.101663][ T8155] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 189.114476][ T8155] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 189.132238][ T8155] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 189.143847][ T8155] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 189.158356][ T8155] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 189.161536][ T7087] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 189.229884][ T7087] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 189.254944][ T7087] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 189.263795][ T8155] ntfs: volume version 3.1. [ 189.296679][ T7087] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 189.364138][ T7087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.406312][ T7087] usb 5-1: config 0 descriptor?? [ 189.441277][ T8147] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.876677][ T8186] loop2: detected capacity change from 0 to 2048 [ 189.903015][ T7087] hid-multitouch 0003:1FD2:6007.0018: unknown main item tag 0x2 [ 189.928268][ T7087] hid-multitouch 0003:1FD2:6007.0018: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 189.946388][ T8186] loop2: p4 < > [ 190.051138][ T3558] loop2: p4 < > [ 190.105804][ T7087] usb 5-1: USB disconnect, device number 12 [ 190.146716][ T5166] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 190.206596][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 190.263850][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 190.304338][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.312758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.522125][ T5460] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.541189][ T5166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.559409][ T5166] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.590765][ T5166] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 190.610119][ T5166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.630425][ T5166] usb 2-1: config 0 descriptor?? [ 190.769855][ T8182] loop0: detected capacity change from 0 to 32768 [ 190.941799][ T5460] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 190.970830][ T5460] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 190.985262][ T5460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.012812][ T5460] usb 3-1: config 0 descriptor?? [ 191.033404][ T8205] loop3: detected capacity change from 0 to 32768 [ 191.065269][ T5460] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 191.088805][ T8205] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1510 (8205) [ 191.114143][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 191.124472][ T5166] input: HID 1b1c:1b02 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B1C:1B02.0019/input/input21 [ 191.172348][ T4267] Bluetooth: hci4: command 0x0406 tx timeout [ 191.178434][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 191.206672][ T8205] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 191.243368][ T5166] corsair 0003:1B1C:1B02.0019: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 191.261081][ T8205] BTRFS info (device loop3): using free space tree [ 191.280374][ T7087] usb 3-1: USB disconnect, device number 9 [ 191.286699][ T8205] BTRFS info (device loop3): has skinny extents [ 191.341393][ T5166] corsair 0003:1B1C:1B02.0019: Failed to get K90 initial state (error -71). [ 191.362603][ T5166] usb 2-1: USB disconnect, device number 10 [ 191.465956][ T8227] fido_id[8227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 191.649766][ T8205] BTRFS info (device loop3): enabling ssd optimizations [ 191.986617][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4178) [ 192.117095][ T8264] loop4: detected capacity change from 0 to 16 [ 192.212262][ T8264] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 192.451249][ T8267] loop1: detected capacity change from 0 to 4096 [ 192.470893][ T4633] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.527330][ T8267] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 192.597079][ T8267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 192.783449][ T8286] netlink: 'syz.4.1538': attribute type 4 has an invalid length. [ 192.990968][ T4633] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 193.029956][ T4633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.038447][ T4633] usb 3-1: Product: syz [ 193.057279][ T4633] usb 3-1: Manufacturer: syz [ 193.076009][ T4633] usb 3-1: SerialNumber: syz [ 193.104135][ T4633] usb 3-1: config 0 descriptor?? [ 193.161608][ T4633] hub 3-1:0.0: bad descriptor, ignoring hub [ 193.170810][ T4633] hub: probe of 3-1:0.0 failed with error -5 [ 193.215926][ T8313] loop3: detected capacity change from 0 to 256 [ 193.285690][ T8313] exfat: Deprecated parameter 'utf8' [ 193.296705][ T8313] exfat: Deprecated parameter 'namecase' [ 193.333207][ T8313] exfat: Deprecated parameter 'namecase' [ 193.370939][ T4633] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 193.394804][ T4633] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.405103][ T8313] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 193.429490][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 193.429504][ T26] audit: type=1800 audit(1787908155.332:13): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1548" name="file1" dev="loop3" ino=1048681 res=0 errno=0 [ 193.431733][ T4633] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 193.479655][ T4633] usb 3-1: media controller created [ 193.497286][ T4633] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.516593][ T5166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.608573][ T4633] DVB: Unable to find symbol dib7000p_attach() [ 193.618970][ T4633] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 193.650833][ T5165] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 193.683390][ T8327] loop4: detected capacity change from 0 to 1024 [ 193.740885][ T4633] rc_core: IR keymap rc-dib0700-rc5 not found [ 193.747285][ T4633] Registered IR keymap rc-empty [ 193.770287][ T4633] dvb-usb: could not initialize remote control. [ 193.796585][ T8327] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,mb_optimize_scan=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x000000000000001f,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,errors=continue. Quota mode: none. [ 193.801173][ T4633] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 193.826658][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.850991][ T8327] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1554: bg 0: block 153: padding at end of block bitmap is not set [ 194.070914][ T5165] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 194.091167][ T5165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 194.151073][ T5166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.162463][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.169103][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.220040][ T4232] usb 3-1: USB disconnect, device number 10 [ 194.228934][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'. [ 194.266680][ T8354] loop0: detected capacity change from 0 to 512 [ 194.290539][ T4232] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 194.326568][ T5165] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 194.336789][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.350705][ T5165] usb 2-1: Product: syz [ 194.358496][ T5165] usb 2-1: Manufacturer: syz [ 194.370118][ T5165] usb 2-1: SerialNumber: syz [ 194.378619][ T5165] usb 2-1: config 0 descriptor?? [ 194.389891][ T8354] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.1567: corrupted in-inode xattr [ 194.450364][ T8354] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1567: couldn't read orphan inode 15 (err -117) [ 194.470813][ T4633] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 194.558537][ T8354] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,resgid=0x000000000000ee01,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 194.652203][ T5166] usb 2-1: USB disconnect, device number 11 [ 194.691382][ T8356] loop4: detected capacity change from 0 to 32768 [ 194.725962][ T4633] usb 4-1: Using ep0 maxpacket: 8 [ 194.768830][ T8359] loop2: detected capacity change from 0 to 16 [ 194.847521][ T8359] erofs: (device loop2): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 194.861061][ T4633] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.989927][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 195.025593][ T4633] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 195.044939][ T4633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.085423][ T4633] usb 4-1: Product: syz [ 195.113885][ T4633] usb 4-1: Manufacturer: syz [ 195.138965][ T4633] usb 4-1: SerialNumber: syz [ 195.170306][ T4633] usb 4-1: config 0 descriptor?? [ 195.187291][ T8375] loop4: detected capacity change from 0 to 128 [ 195.214356][ T4633] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 195.380958][ T5165] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 195.433852][ T4633] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 195.463787][ T4633] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 195.661041][ T5165] usb 1-1: Using ep0 maxpacket: 32 [ 195.685432][ T4633] usb 4-1: USB disconnect, device number 16 [ 195.780983][ T5165] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 195.825180][ T8407] set_capacity_and_notify: 1 callbacks suppressed [ 195.825195][ T8407] loop4: detected capacity change from 0 to 512 [ 195.888158][ T8407] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 195.909490][ T8407] EXT4-fs (loop4): orphan cleanup on readonly fs [ 195.909835][ T8407] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.1593: Block bitmap for bg 0 marked uninitialized [ 195.921350][ T8407] EXT4-fs (loop4): Remounting filesystem read-only [ 195.921372][ T8407] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 195.922304][ T8407] EXT4-fs (loop4): Remounting filesystem read-only [ 196.022975][ T5165] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 196.022998][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.023013][ T5165] usb 1-1: Product: syz [ 196.023024][ T5165] usb 1-1: Manufacturer: syz [ 196.023035][ T5165] usb 1-1: SerialNumber: syz [ 196.030471][ T8407] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.1593: Block bitmap for bg 0 marked uninitialized [ 196.073114][ T8407] EXT4-fs (loop4): Remounting filesystem read-only [ 196.079653][ T8407] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 196.107629][ T8407] EXT4-fs (loop4): Remounting filesystem read-only [ 196.115003][ T8407] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.1593: Block bitmap for bg 0 marked uninitialized [ 196.133975][ T8407] EXT4-fs (loop4): Remounting filesystem read-only [ 196.141844][ T8407] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 196.173875][ T8407] EXT4-fs (loop4): Remounting filesystem read-only [ 196.185632][ T8407] EXT4-fs (loop4): 1 orphan inode deleted [ 196.192587][ T8407] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 196.312895][ T5165] usb 1-1: USB disconnect, device number 16 [ 196.948186][ T8448] Zero length message leads to an empty skb [ 197.016293][ T8452] loop3: detected capacity change from 0 to 1024 [ 197.075977][ T8425] loop4: detected capacity change from 0 to 32768 [ 197.155353][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 197.164507][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1619'. [ 197.222364][ T8452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.341766][ T4633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.350121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.397980][ T8473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.401333][ T7087] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 197.422705][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.433028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.727555][ T7087] usb 1-1: Using ep0 maxpacket: 16 [ 197.850796][ T5165] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.851324][ T7087] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 197.871567][ T7087] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.884650][ T7087] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 197.894010][ T4232] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 197.901868][ T7087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.919111][ T7087] usb 1-1: config 0 descriptor?? [ 197.991525][ T4203] Bluetooth: hci0: link tx timeout [ 197.997411][ T4203] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 198.005788][ T5166] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 198.115320][ T8503] netlink: 'syz.2.1639': attribute type 4 has an invalid length. [ 198.131119][ T5165] usb 4-1: Using ep0 maxpacket: 16 [ 198.182649][ T8505] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1640'. [ 198.270922][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.282400][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.292755][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.306278][ T4232] usb 2-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 198.315603][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.330512][ T4232] usb 2-1: config 0 descriptor?? [ 198.402529][ T7087] holtek 0003:1241:5015.001A: unknown main item tag 0x7 [ 198.409885][ T7087] holtek 0003:1241:5015.001A: unknown main item tag 0x0 [ 198.421247][ T5166] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.426136][ T7087] holtek 0003:1241:5015.001A: unknown main item tag 0x1 [ 198.434725][ T5166] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 198.451464][ T5165] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 198.460496][ T7087] holtek 0003:1241:5015.001A: unknown main item tag 0xd [ 198.471072][ T7087] holtek 0003:1241:5015.001A: hidraw0: USB HID v0.77 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 198.480904][ T5166] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.496133][ T7087] holtek 0003:1241:5015.001A: no inputs found [ 198.512106][ T5165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.520795][ T5166] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.527726][ T5165] usb 4-1: Product: syz [ 198.532042][ T5166] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 198.541206][ T5165] usb 4-1: Manufacturer: syz [ 198.545878][ T5165] usb 4-1: SerialNumber: syz [ 198.550911][ T5166] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.576589][ T5166] usb 5-1: config 0 descriptor?? [ 198.591506][ T5165] usb 4-1: config 0 descriptor?? [ 198.601267][ T8489] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 198.635967][ T5165] gspca_main: spca508-2.14.0 probing 041e:4018 [ 198.651232][ T5460] usb 1-1: USB disconnect, device number 17 [ 198.719846][ T8517] fido_id[8517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 198.771745][ T8523] loop2: detected capacity change from 0 to 256 [ 198.843589][ T5165] gspca_spca508: reg_read err -32 [ 198.850177][ T4232] thrustmaster 0003:044F:B324.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.1-1/input0 [ 198.867548][ T4232] thrustmaster 0003:044F:B324.001B: no inputs found [ 199.037878][ T4232] usb 2-1: USB disconnect, device number 12 [ 199.071398][ T5166] hid (null): bogus close delimiter [ 199.079066][ T5166] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 199.100849][ T5165] gspca_spca508: reg_read err -71 [ 199.108799][ T5166] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 199.118984][ T5166] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 199.126702][ T5165] gspca_spca508: reg_read err -71 [ 199.131920][ T5166] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 199.139471][ T5166] hid-u2fzero 0003:10C4:8ACF.001C: unknown main item tag 0x0 [ 199.148122][ T5166] hid-u2fzero 0003:10C4:8ACF.001C: bogus close delimiter [ 199.155889][ T5165] gspca_spca508: reg_read err -71 [ 199.173420][ T5166] hid-u2fzero 0003:10C4:8ACF.001C: item 0 0 2 10 parsing failed [ 199.183046][ T5166] hid-u2fzero: probe of 0003:10C4:8ACF.001C failed with error -22 [ 199.205324][ T5165] gspca_spca508: reg write: error -71 [ 199.211344][ T5165] spca508: probe of 4-1:0.0 failed with error -71 [ 199.240187][ T5165] usb 4-1: USB disconnect, device number 17 [ 199.285343][ T7087] usb 5-1: USB disconnect, device number 13 [ 199.471761][ T8545] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 199.471761][ T8545] The task syz.0.1658 (8545) triggered the difference, watch for misbehavior. [ 199.930954][ T4232] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.984677][ T8567] loop4: detected capacity change from 0 to 2048 [ 200.008983][ T8567] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.070960][ T5166] Bluetooth: hci0: command 0x0406 tx timeout [ 200.140897][ T8576] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.191027][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 200.202054][ T8567] NILFS (loop4): unrecognized mount option "jqfmt=vfsold" [ 200.350992][ T4232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.430930][ T4232] usb 2-1: config 4 interface 0 has no altsetting 0 [ 200.500893][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 200.512802][ T8596] loop4: detected capacity change from 0 to 256 [ 200.584397][ T8596] FAT-fs (loop4): Directory bread(block 64) failed [ 200.591351][ T8596] FAT-fs (loop4): Directory bread(block 65) failed [ 200.598957][ T8596] FAT-fs (loop4): Directory bread(block 66) failed [ 200.606218][ T8596] FAT-fs (loop4): Directory bread(block 67) failed [ 200.624853][ T8596] FAT-fs (loop4): Directory bread(block 68) failed [ 200.639517][ T8596] FAT-fs (loop4): Directory bread(block 69) failed [ 200.656970][ T8596] FAT-fs (loop4): Directory bread(block 70) failed [ 200.664468][ T8596] FAT-fs (loop4): Directory bread(block 71) failed [ 200.671683][ T8596] FAT-fs (loop4): Directory bread(block 72) failed [ 200.678353][ T8596] FAT-fs (loop4): Directory bread(block 73) failed [ 200.690953][ T4232] usb 2-1: string descriptor 0 read error: -22 [ 200.698401][ T4232] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 200.716168][ T4232] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 200.763842][ T4232] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 200.787545][ T4232] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.798369][ T4633] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 200.811810][ T4232] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 200.813154][ T8603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1686'. [ 200.830900][ T4232] usb 2-1: media controller created [ 200.857009][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.941973][ T8607] overlayfs: failed to set xattr on upper [ 200.967194][ T8607] overlayfs: ...falling back to index=off,metacopy=off. [ 200.979499][ T8607] overlayfs: ...falling back to xino=off. [ 200.996346][ T8607] overlayfs: conflicting lowerdir path [ 201.117392][ T8615] loop4: detected capacity change from 0 to 64 [ 201.181060][ T4633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.195218][ T8619] loop2: detected capacity change from 0 to 8 [ 201.204913][ T4633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.217651][ T4633] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.233869][ T4633] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 201.245260][ T4633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.274570][ T4633] usb 1-1: config 0 descriptor?? [ 201.295285][ T7087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.303765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.323270][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.332211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.474474][ T8625] kernel profiling enabled (shift: 5) [ 201.616505][ T8632] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 201.775603][ T4633] thrustmaster 0003:044F:B324.001D: unknown main item tag 0x0 [ 201.800483][ T4633] thrustmaster 0003:044F:B324.001D: unknown main item tag 0x0 [ 201.830454][ T4633] thrustmaster 0003:044F:B324.001D: unknown main item tag 0x0 [ 201.846237][ T4633] thrustmaster 0003:044F:B324.001D: unknown main item tag 0x0 [ 201.862218][ T4633] thrustmaster 0003:044F:B324.001D: unknown main item tag 0x0 [ 201.898623][ T4633] thrustmaster 0003:044F:B324.001D: unknown main item tag 0x0 [ 201.922330][ T4232] zl10353_read_register: readreg error (reg=127, ret==0) [ 201.929964][ T8553] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 201.942756][ T8553] usb 2-1: dvb_usb_au6610: wlen=4100, aborting [ 201.954443][ T4633] thrustmaster 0003:044F:B324.001D: unknown main item tag 0x0 [ 201.978149][ T4633] thrustmaster 0003:044F:B324.001D: unbalanced delimiter at end of report description [ 202.017773][ T4232] usb 2-1: USB disconnect, device number 13 [ 202.031271][ T4633] thrustmaster 0003:044F:B324.001D: parse failed [ 202.047308][ T4633] thrustmaster: probe of 0003:044F:B324.001D failed with error -22 [ 202.060190][ T4633] usb 1-1: USB disconnect, device number 18 [ 202.160855][ T5460] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 202.251577][ T8644] loop2: detected capacity change from 0 to 40427 [ 202.272372][ T8644] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 202.280198][ T8644] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 202.291067][ T8644] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 202.308049][ T8644] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.365972][ T8644] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 202.376733][ T8644] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.561048][ T5460] usb 4-1: config 0 has no interfaces? [ 202.586908][ T8659] loop1: detected capacity change from 0 to 512 [ 202.598957][ T8657] loop0: detected capacity change from 0 to 2048 [ 202.649469][ T8657] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 202.668955][ T8659] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 202.699836][ T8659] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 202.709158][ T5460] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.739861][ T8661] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.771613][ T5460] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.775965][ T8659] System zones: [ 202.779652][ T5460] usb 4-1: Product: syz [ 202.779671][ T5460] usb 4-1: Manufacturer: syz [ 202.802339][ T8659] 0-1, 15-15, 18-18 [ 202.802380][ T5460] usb 4-1: config 0 descriptor?? [ 202.813214][ T8659] , 34-34 [ 202.817142][ T8659] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.823776][ T8659] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 202.833231][ T8659] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 202.848988][ T8659] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 202.888898][ T8659] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1710: bg 0: block 40: padding at end of block bitmap is not set [ 202.921942][ T8659] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 202.948557][ T8659] EXT4-fs (loop1): 1 truncate cleaned up [ 202.956017][ T8659] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.087455][ T26] audit: type=1400 audit(1787908164.992:14): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F260902 pid=8645 comm="syz.3.1717" [ 203.111004][ T5779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.119347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.140913][ T4232] usb 4-1: USB disconnect, device number 18 [ 203.309369][ T8683] UBIFS error (pid: 8683): cannot open "upperdir=./file1,", error -22 [ 203.452116][ T8688] loop4: detected capacity change from 0 to 1764 [ 203.501275][ T8694] loop0: detected capacity change from 0 to 64 [ 203.601282][ T8694] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 203.670994][ T8700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 203.784558][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.805245][ T8710] loop0: detected capacity change from 0 to 64 [ 203.948880][ T8721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1738'. [ 204.034021][ T8726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1738'. [ 204.340914][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 204.384188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.396372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.532995][ T8756] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.1751'. [ 204.587150][ T8756] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 204.750939][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.776957][ T23] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.807448][ T26] audit: type=1800 audit(1787908166.712:15): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1733" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 204.939766][ T8775] loop3: detected capacity change from 0 to 128 [ 204.980873][ T23] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 204.994953][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.035441][ T23] usb 5-1: Product: syz [ 205.040159][ T23] usb 5-1: Manufacturer: syz [ 205.046163][ T8775] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 205.055736][ T23] usb 5-1: SerialNumber: syz [ 205.142042][ T23] usb 5-1: unsupported MDLM descriptors [ 205.231551][ T5640] sysv_free_block: flc_count > flc_size [ 205.264881][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 205.301259][ T5640] sysv_free_block: flc_count > flc_size [ 205.306894][ T5640] sysv_free_block: flc_count > flc_size [ 205.358876][ T8781] loop1: detected capacity change from 0 to 4096 [ 205.390334][ T5640] sysv_free_block: flc_count > flc_size [ 205.406742][ T5640] sysv_free_block: flc_count > flc_size [ 205.422623][ T5640] sysv_free_block: flc_count > flc_size [ 205.428222][ T5640] sysv_free_block: flc_count > flc_size [ 205.450796][ T8781] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 205.477691][ T5640] sysv_free_block: flc_count > flc_size [ 205.487825][ T5640] sysv_free_block: flc_count > flc_size [ 205.508148][ T5640] sysv_free_block: flc_count > flc_size [ 205.560359][ T8781] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 205.579301][ T5640] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 205.587408][ T4633] usb 5-1: USB disconnect, device number 14 [ 205.616847][ T8781] ntfs3: loop1: Inode r=b is not in use! [ 205.652496][ T8781] ntfs3: loop1: Failed to load $Extend. [ 205.893348][ T4232] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 206.150752][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 206.177241][ T8821] binder: 8820:8821 ioctl 80089418 0 returned -22 [ 206.197270][ T8821] binder: 8820:8821 ioctl c0046209 100000000000000 returned -22 [ 206.229329][ T8825] loop2: detected capacity change from 0 to 16 [ 206.274462][ T4232] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 206.314902][ T8825] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 206.354143][ T8827] loop4: detected capacity change from 0 to 4096 [ 206.388638][ T8836] loop3: detected capacity change from 0 to 1024 [ 206.406555][ T8827] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 206.450906][ T4232] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 206.469398][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.485670][ T8836] EXT4-fs (loop3): Ignoring removed orlov option [ 206.501662][ T4232] usb 1-1: Product: syz [ 206.510943][ T4232] usb 1-1: Manufacturer: syz [ 206.515576][ T4232] usb 1-1: SerialNumber: syz [ 206.529456][ T4232] usb 1-1: config 0 descriptor?? [ 206.576795][ T8836] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 206.588121][ T4232] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 206.613339][ T4232] usb 1-1: setting power ON [ 206.618535][ T4232] dvb-usb: bulk message failed: -22 (2/0) [ 206.627284][ T8827] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 206.634097][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.667464][ T4232] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 206.683553][ T4232] usb 1-1: media controller created [ 206.703167][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.722628][ T4232] usb 1-1: selecting invalid altsetting 6 [ 206.729590][ T4232] usb 1-1: digital interface selection failed (-22) [ 206.736622][ T4232] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 206.752239][ T8845] loop2: detected capacity change from 0 to 1764 [ 206.781227][ T4232] usb 1-1: setting power OFF [ 206.797715][ T8792] dvb-usb: bulk message failed: -22 (3/0) [ 206.825706][ T4232] dvb-usb: bulk message failed: -22 (2/0) [ 206.838072][ T8792] dvb-usb: bulk message failed: -22 (3/0) [ 206.839185][ T4232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 206.885628][ T4232] (NULL device *): no alternate interface [ 206.925392][ T8853] i2c i2c-0: Invalid block write size 84 [ 206.949469][ T4239] ntfs3: loop4: ino=1b, Internal error [ 206.968903][ T4232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 206.979633][ T4239] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22. [ 206.992830][ T4189] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 207.014655][ T4189] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 207.031706][ T4232] usb 1-1: USB disconnect, device number 19 [ 207.173299][ T8860] loop4: detected capacity change from 0 to 64 [ 207.375292][ T8872] loop3: detected capacity change from 0 to 256 [ 207.516043][ T8874] loop4: detected capacity change from 0 to 2048 [ 207.617408][ T8874] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.150548][ T8904] netlink: 'syz.4.1814': attribute type 8 has an invalid length. [ 208.213685][ T8902] loop0: detected capacity change from 0 to 8192 [ 208.616000][ T8926] loop1: detected capacity change from 0 to 1764 [ 208.776953][ T8926] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 208.912669][ T8946] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1834'. [ 208.941247][ T8946] tipc: Enabling of bearer rejected, media not registered [ 209.160735][ T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 209.180321][ T8958] loop0: detected capacity change from 0 to 2048 [ 209.227015][ T8958] EXT4-fs (loop0): Ignoring removed nobh option [ 209.287757][ T8958] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,grpquota,nobh,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 209.300965][ T4633] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.311944][ T8958] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.418147][ T8958] EXT4-fs warning (device loop0): ext4_resize_fs:1981: can't read last block, resize aborted [ 209.520903][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 209.539157][ T8970] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 209.600880][ T4633] usb 2-1: Using ep0 maxpacket: 8 [ 209.606869][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.636916][ T23] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.720944][ T4633] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.760893][ T8977] netlink: 'syz.3.1845': attribute type 2 has an invalid length. [ 209.771594][ T4633] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.820967][ T23] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 209.854274][ T4633] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.867289][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.893662][ T4633] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 209.907652][ T23] usb 5-1: Product: syz [ 209.911994][ T23] usb 5-1: Manufacturer: syz [ 209.920825][ T4633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.928953][ T23] usb 5-1: SerialNumber: syz [ 209.954780][ T4633] usb 2-1: config 0 descriptor?? [ 209.971308][ T8945] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 209.993250][ T23] port100 5-1:1.0: NFC: Could not get supported command types [ 210.246515][ T4232] usb 5-1: USB disconnect, device number 15 [ 210.444970][ T4633] input: HID 046d:c50c as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:046D:C50C.001E/input/input25 [ 210.573153][ T4633] logitech 0003:046D:C50C.001E: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 210.586379][ T9004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1859'. [ 210.696647][ T4267] usb 2-1: USB disconnect, device number 14 [ 210.819502][ T9006] fido_id[9006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 210.980780][ T4633] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 211.008525][ T4633] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 211.012839][ T9019] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 211.043335][ T4203] Bluetooth: hci0: link tx timeout [ 211.048500][ T4203] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.096768][ T9019] attempt to access beyond end of device [ 211.096768][ T9019] loop0: rw=2049, want=34225520826, limit=256 [ 211.123590][ T4177] udevd[4177]: Error opening device "/dev/input/event4": No such file or directory [ 211.137108][ T4177] udevd[4177]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xcc, key code 108): Inappropriate ioctl for device [ 211.157789][ T4177] udevd[4177]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xd4, key code 103): Inappropriate ioctl for device [ 211.212532][ T9019] Buffer I/O error on dev loop0, logical block 34225520825, lost async page write [ 211.234094][ T9019] attempt to access beyond end of device [ 211.234094][ T9019] loop0: rw=2049, want=34225520827, limit=256 [ 211.246336][ T9019] Buffer I/O error on dev loop0, logical block 34225520826, lost async page write [ 211.255760][ T9019] attempt to access beyond end of device [ 211.255760][ T9019] loop0: rw=2049, want=34225520828, limit=256 [ 211.272282][ T9019] Buffer I/O error on dev loop0, logical block 34225520827, lost async page write [ 211.488525][ T9043] mmap: syz.1.1877 (9043): VmData 37474304 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 211.728192][ T9046] set_capacity_and_notify: 5 callbacks suppressed [ 211.728208][ T9046] loop0: detected capacity change from 0 to 2048 [ 211.747008][ T9045] fido_id[9045]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.874431][ T9046] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.926575][ T9046] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.997609][ T9039] loop4: detected capacity change from 0 to 32768 [ 212.079225][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 212.340985][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 212.387412][ T9065] loop0: detected capacity change from 0 to 4096 [ 212.438775][ T9078] netlink: 'syz.4.1892': attribute type 3 has an invalid length. [ 212.463647][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.475547][ T9065] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 212.477193][ T9078] netlink: 'syz.4.1892': attribute type 304 has an invalid length. [ 212.507035][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 212.529085][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 212.542201][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.570827][ T4267] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.589056][ T23] usb 2-1: config 0 descriptor?? [ 212.960986][ T4267] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.997163][ T4267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.016973][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'. [ 213.030886][ T4267] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 213.074674][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.123508][ T4267] usb 3-1: config 0 descriptor?? [ 213.478856][ T9082] loop4: detected capacity change from 0 to 131072 [ 213.522998][ T23] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x1 [ 213.529832][ T23] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 213.550775][ T23] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 213.557641][ T23] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 213.581113][ T23] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 213.588965][ T23] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 213.596006][ T9082] F2FS-fs (loop4): invalid crc value [ 213.610785][ T23] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 213.616246][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.617644][ T23] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 213.635794][ T23] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.09 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 213.650773][ T5166] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 213.667014][ T9082] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:1 [ 213.681571][ T9082] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 213.692626][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.712777][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.791570][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.801211][ T23] usb 2-1: USB disconnect, device number 15 [ 213.808512][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.839229][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.895291][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.924925][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.941036][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.948824][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.962782][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.969813][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 213.987678][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.020981][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.028005][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.036328][ T5166] usb 4-1: not running at top speed; connect to a high speed hub [ 214.061290][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.078622][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.098886][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.106479][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.120923][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.136971][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.144631][ T5166] usb 4-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 214.153756][ T9110] loop4: detected capacity change from 0 to 8192 [ 214.177020][ T5166] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.187331][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.207566][ T5166] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 214.222984][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.230108][ T4267] elecom 0003:056E:010D.0021: unknown main item tag 0x0 [ 214.241929][ T5166] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 214.256967][ T4267] elecom 0003:056E:010D.0021: hidraw0: USB HID v80.00 Device [HID 056e:010d] on usb-dummy_hcd.2-1/input0 [ 214.279962][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.293370][ T9110] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 214.321299][ T9110] REISERFS (device loop4): using ordered data mode [ 214.364155][ T9110] reiserfs: using flush barriers [ 214.370031][ T5166] usb 4-1: config 0 descriptor?? [ 214.389854][ T4267] usb 3-1: USB disconnect, device number 11 [ 214.489504][ T9112] loop0: detected capacity change from 0 to 32768 [ 214.492350][ T9110] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 214.514884][ T5166] usb 4-1: Found UVC 9.00 device (046d:0825) [ 214.529398][ T9110] REISERFS (device loop4): checking transaction log (loop4) [ 214.548614][ T9110] REISERFS (device loop4): Using r5 hash to sort names [ 214.556200][ T9118] loop2: detected capacity change from 0 to 512 [ 214.564235][ T9110] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 214.609255][ T9110] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 214.612469][ T9118] EXT4-fs (loop2): Ignoring removed orlov option [ 214.645424][ T9112] JBD2: Ignoring recovery information on journal [ 214.728650][ T9106] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "./cgroup" [ 214.752266][ T9114] fido_id[9114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 214.777090][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 214.789978][ T9112] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 214.826058][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 214.911015][ T9121] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 214.926671][ T9118] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 214.975599][ T9112] (syz.0.1905,9112,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 215.001312][ T9118] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.1907: corrupted inode contents [ 215.053991][ T9112] (syz.0.1905,9112,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 215.064197][ T9118] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #11: comm syz.2.1907: mark_inode_dirty error [ 215.083896][ T9112] (syz.0.1905,9112,1):ocfs2_mknod:298 ERROR: status = -2 [ 215.100323][ T9118] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1907: invalid indirect mapped block 1 (level 1) [ 215.119371][ T9112] (syz.0.1905,9112,1):ocfs2_mknod:502 ERROR: status = -2 [ 215.133801][ T9112] (syz.0.1905,9112,1):ocfs2_create:676 ERROR: status = -2 [ 215.153132][ T9118] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.1907: corrupted inode contents [ 215.170939][ T5166] uvcvideo 4-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 215.210794][ T5166] uvcvideo 4-1:0.1: Failed to query (129) UVC probe control : -71 (exp. 48). [ 215.219655][ T5166] uvcvideo 4-1:0.1: Failed to initialize the device (-5). [ 215.234968][ T9118] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 215.246366][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 215.253451][ T9118] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #11: comm syz.2.1907: corrupted inode contents [ 215.289451][ T5166] usb 4-1: USB disconnect, device number 19 [ 215.321008][ T9118] EXT4-fs error (device loop2): ext4_truncate:4286: inode #11: comm syz.2.1907: mark_inode_dirty error [ 215.392601][ T9118] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 215.458461][ T9118] EXT4-fs (loop2): 1 truncate cleaned up [ 215.489107][ T9118] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000001,nodelalloc,orlov,,errors=continue. Quota mode: none. [ 215.618918][ T9118] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz.2.1907: path /423/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 215.974088][ T9156] loop2: detected capacity change from 0 to 256 [ 216.076873][ T9156] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 216.194225][ T9166] loop4: detected capacity change from 0 to 1024 [ 216.289607][ T9166] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 216.606491][ T9141] loop1: detected capacity change from 0 to 40427 [ 216.634541][ T26] audit: type=1326 audit(1787908178.542:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.4.1936" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d95ad2159 code=0x0 [ 216.722026][ T9141] F2FS-fs (loop1): invalid crc value [ 216.767725][ T9184] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.790681][ T9141] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.828286][ T9150] set_capacity_and_notify: 1 callbacks suppressed [ 216.828302][ T9150] loop0: detected capacity change from 0 to 40427 [ 216.962983][ T9141] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 216.990514][ T9141] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 217.004234][ T9150] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 217.030741][ T9150] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 217.118982][ T9150] F2FS-fs (loop0): invalid crc value [ 217.190284][ T9150] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 217.424529][ T9150] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 217.436191][ T9150] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 217.571624][ T9208] loop3: detected capacity change from 0 to 256 [ 217.607360][ T4187] attempt to access beyond end of device [ 217.607360][ T4187] loop0: rw=2049, want=45104, limit=40427 [ 217.672231][ T9208] exfat: Deprecated parameter 'namecase' [ 217.677953][ T9208] exfat: Deprecated parameter 'namecase' [ 217.746694][ T9208] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 217.797379][ T9191] loop2: detected capacity change from 0 to 32768 [ 217.949096][ T9219] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1950'. [ 218.114818][ T23] kernel write not supported for file /amidi2 (pid: 23 comm: kworker/1:1) [ 218.173414][ T9191] XFS (loop2): Mounting V5 Filesystem [ 218.279094][ T9191] XFS (loop2): Ending clean mount [ 218.344187][ T4185] XFS (loop2): Unmounting Filesystem [ 218.520843][ T5166] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 218.839429][ T9273] loop4: detected capacity change from 0 to 512 [ 218.912832][ T9273] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1969: attempt to clear invalid blocks 2 len 1 [ 218.914257][ T9273] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 218.933984][ T9273] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1969: invalid indirect mapped block 1819239214 (level 0) [ 218.951112][ T5166] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 218.981945][ T5166] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.993341][ T5166] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.003329][ T5166] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 219.016539][ T5166] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.023260][ T5166] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 219.032381][ T5166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.042783][ T5166] usb 4-1: config 0 descriptor?? [ 219.086574][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1974'. [ 219.098625][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 219.107876][ T9285] netlink: 'syz.0.1974': attribute type 1 has an invalid length. [ 219.115892][ T9273] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1969: invalid indirect mapped block 1819239214 (level 1) [ 219.132850][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 219.153838][ T9273] EXT4-fs (loop4): 1 truncate cleaned up [ 219.159539][ T9273] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000003,,errors=continue. Quota mode: none. [ 219.533372][ T5166] hid-alps 0003:044E:120C.0022: unknown main item tag 0x0 [ 219.564922][ T5166] hid-alps 0003:044E:120C.0022: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0 [ 219.739136][ T23] usb 4-1: USB disconnect, device number 20 [ 219.829754][ T9299] fido_id[9299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 219.874134][ T9307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1981'. [ 220.029095][ T9312] device sit1 entered promiscuous mode [ 220.057311][ T9312] team0: Device sit1 is of different type [ 220.070800][ T9294] loop4: detected capacity change from 0 to 32768 [ 220.280398][ T9294] XFS (loop4): Mounting V5 Filesystem [ 220.335257][ T9298] loop0: detected capacity change from 0 to 32768 [ 220.374675][ T9294] XFS (loop4): Ending clean mount [ 220.424912][ T9294] XFS (loop4): Quotacheck needed: Please wait. [ 220.487665][ T9298] jfs: Unrecognized mount option "jfs" or missing value [ 220.618651][ T9294] XFS (loop4): Quotacheck: Done. [ 220.684969][ T4189] XFS (loop4): Unmounting Filesystem [ 220.770217][ T9337] loop0: detected capacity change from 0 to 1024 [ 220.912050][ T9310] loop2: detected capacity change from 0 to 32768 [ 221.068300][ T9] hfsplus: b-tree write err: -5, ino 8 [ 221.327293][ T9332] loop3: detected capacity change from 0 to 32768 [ 221.561674][ T9332] XFS (loop3): Mounting V5 Filesystem [ 221.733158][ T9374] loop0: detected capacity change from 0 to 2048 [ 221.753091][ T9332] XFS (loop3): Ending clean mount [ 221.837435][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 221.845642][ T5640] XFS (loop3): Unmounting Filesystem [ 222.007555][ T9374] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.110903][ T9374] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.125568][ T9393] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 222.637703][ T9400] loop3: detected capacity change from 0 to 1024 [ 222.689851][ T9384] loop4: detected capacity change from 0 to 32768 [ 222.726793][ T9386] loop2: detected capacity change from 0 to 40427 [ 222.770811][ T26] audit: type=1800 audit(1787908184.682:17): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1999" name=E91F7189591E9233614B dev="loop4" ino=7 res=0 errno=0 [ 222.812957][ T9386] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 222.836787][ T9386] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 222.910327][ T9386] F2FS-fs (loop2): invalid crc value [ 222.954466][ T9386] F2FS-fs (loop2): Found nat_bits in checkpoint [ 223.088419][ T9386] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 223.106147][ T9386] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 223.313101][ T9418] loop0: detected capacity change from 0 to 2048 [ 223.412434][ T9418] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4096, location=4096 [ 223.445605][ T9418] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 223.490273][ T9418] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 223.540557][ T9433] netlink: 'syz.3.2021': attribute type 29 has an invalid length. [ 223.540951][ T9418] UDF-fs: Scanning with blocksize 512 failed [ 223.570171][ T9433] netlink: 'syz.3.2021': attribute type 29 has an invalid length. [ 223.624550][ T9418] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 223.636622][ T9435] netlink: 'syz.3.2021': attribute type 29 has an invalid length. [ 223.692176][ T9430] loop4: detected capacity change from 0 to 4096 [ 223.721746][ T9418] UDF-fs: Scanning with blocksize 1024 failed [ 223.736546][ T9430] ntfs3: Invalid value for gid. [ 223.776878][ T9418] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 223.837797][ T9418] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 223.857619][ T9418] UDF-fs: Scanning with blocksize 2048 failed [ 223.886735][ T9418] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 223.909450][ T9439] loop1: detected capacity change from 0 to 4096 [ 223.932234][ T9418] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 223.956043][ T9418] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 223.973482][ T9418] UDF-fs: Scanning with blocksize 4096 failed [ 223.979701][ T9418] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 224.056003][ T9447] device veth1_macvtap left promiscuous mode [ 224.062846][ T9450] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.083673][ T9447] device macsec0 entered promiscuous mode [ 224.134597][ T9448] device sit1 entered promiscuous mode [ 224.216206][ T9448] team0: Device sit1 is of different type [ 224.340891][ T5165] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 224.352796][ T9451] device veth1_macvtap entered promiscuous mode [ 224.361201][ T9451] device macsec0 left promiscuous mode [ 224.378955][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.731081][ T5165] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.756501][ T5165] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.789055][ T9479] comedi comedi3: Minor 256 is invalid! [ 224.984964][ T5165] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 225.003916][ T5165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.031026][ T9492] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2047'. [ 225.034789][ T5165] usb 4-1: Product: syz [ 225.055105][ T5165] usb 4-1: Manufacturer: syz [ 225.059846][ T5165] usb 4-1: SerialNumber: syz [ 225.135046][ T5165] hub 4-1:1.0: bad descriptor, ignoring hub [ 225.155622][ T5165] hub: probe of 4-1:1.0 failed with error -5 [ 225.670844][ T23] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 225.684635][ T9526] device ipip0 entered promiscuous mode [ 225.701871][ T9526] team0: Device ipip0 is of different type [ 225.722426][ T4633] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 225.809998][ T9526] syz.0.2063 (9526) used greatest stack depth: 20336 bytes left [ 225.906777][ T9533] loop0: detected capacity change from 0 to 512 [ 226.033786][ T9533] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 226.046424][ T9539] sp0: Synchronizing with TNC [ 226.080911][ T9533] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.092338][ T4633] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 226.130365][ T4633] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 226.139922][ T4633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.171514][ T4633] usb 2-1: config 0 descriptor?? [ 226.237290][ T9545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2071'. [ 226.424068][ T23] usb 4-1: USB disconnect, device number 21 [ 226.617101][ T9547] loop4: detected capacity change from 0 to 32768 [ 226.652567][ T4633] kye 0003:0458:0138.0023: unknown main item tag 0x3 [ 226.660634][ T4633] kye 0003:0458:0138.0023: unexpected long global item [ 226.668531][ T4633] kye 0003:0458:0138.0023: parse failed [ 226.675064][ T4633] kye: probe of 0003:0458:0138.0023 failed with error -22 [ 226.684765][ T9547] JBD2: Ignoring recovery information on journal [ 226.712896][ T9551] loop0: detected capacity change from 0 to 32768 [ 226.753376][ T9547] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 226.769583][ T9551] JBD2: Ignoring recovery information on journal [ 226.809285][ T9547] (syz.4.2072,9547,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 226.831070][ T9547] (syz.4.2072,9547,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 226.881804][ T9547] (syz.4.2072,9547,1):ocfs2_mknod:298 ERROR: status = -2 [ 226.888918][ T9547] (syz.4.2072,9547,1):ocfs2_mknod:502 ERROR: status = -2 [ 226.896535][ T9547] (syz.4.2072,9547,1):ocfs2_create:676 ERROR: status = -2 [ 226.908168][ T5165] usb 2-1: USB disconnect, device number 16 [ 226.910568][ T9551] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 226.980481][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 227.000137][ T9551] [ 227.002528][ T9551] ====================================================== [ 227.009562][ T9551] WARNING: possible circular locking dependency detected [ 227.016645][ T9551] syzkaller #0 Not tainted [ 227.021076][ T9551] ------------------------------------------------------ [ 227.028120][ T9551] syz.0.2073/9551 is trying to acquire lock: [ 227.034105][ T9551] ffff88805f2d42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xbd0/0x1390 [ 227.046343][ T9551] [ 227.046343][ T9551] but task is already holding lock: [ 227.053729][ T9551] ffff88805f343ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x47d/0x1390 [ 227.063260][ T9551] [ 227.063260][ T9551] which lock already depends on the new lock. [ 227.063260][ T9551] [ 227.073681][ T9551] [ 227.073681][ T9551] the existing dependency chain (in reverse order) is: [ 227.082710][ T9551] [ 227.082710][ T9551] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 227.090562][ T9551] down_read+0x44/0x2e0 [ 227.095271][ T9551] ocfs2_init_acl+0x307/0x770 [ 227.100478][ T9551] ocfs2_mknod+0x15de/0x2510 [ 227.105595][ T9551] ocfs2_mkdir+0x192/0x420 [ 227.110540][ T9551] vfs_mkdir+0x386/0x570 [ 227.115311][ T9551] do_mkdirat+0x1dd/0x5c0 [ 227.120173][ T9551] __x64_sys_mkdirat+0x85/0x90 [ 227.125460][ T9551] do_syscall_64+0x4c/0xa0 [ 227.130414][ T9551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.136832][ T9551] [ 227.136832][ T9551] -> #1 (jbd2_handle){++++}-{0:0}: [ 227.144133][ T9551] jbd2_journal_lock_updates+0xa4/0x390 [ 227.150206][ T9551] __ocfs2_flush_truncate_log+0x2b4/0x1110 [ 227.156542][ T9551] ocfs2_flush_truncate_log+0x4b/0x60 [ 227.162448][ T9551] ocfs2_sync_fs+0x119/0x330 [ 227.167565][ T9551] sync_filesystem+0x1be/0x220 [ 227.172882][ T9551] ocfs2_remount+0x123/0xb30 [ 227.178000][ T9551] reconfigure_super+0x224/0x8d0 [ 227.183464][ T9551] path_mount+0xc5a/0xfe0 [ 227.188339][ T9551] __se_sys_mount+0x2e3/0x3d0 [ 227.193547][ T9551] do_syscall_64+0x4c/0xa0 [ 227.198501][ T9551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.204924][ T9551] [ 227.204924][ T9551] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 227.215437][ T9551] __lock_acquire+0x2c66/0x7b50 [ 227.220823][ T9551] lock_acquire+0x19e/0x400 [ 227.225870][ T9551] down_write+0x38/0x60 [ 227.230578][ T9551] ocfs2_xattr_set+0xbd0/0x1390 [ 227.236045][ T9551] ocfs2_set_acl+0x4d4/0x580 [ 227.241159][ T9551] ocfs2_iop_set_acl+0x190/0x2b0 [ 227.246624][ T9551] posix_acl_xattr_set+0x324/0x390 [ 227.252269][ T9551] __vfs_setxattr+0x3d8/0x410 [ 227.257474][ T9551] __vfs_setxattr_noperm+0x126/0x5e0 [ 227.263282][ T9551] vfs_setxattr+0x167/0x2e0 [ 227.268317][ T9551] setxattr+0x2cb/0x360 [ 227.273015][ T9551] path_setxattr+0x147/0x290 [ 227.278138][ T9551] __x64_sys_lsetxattr+0xb4/0xd0 [ 227.283607][ T9551] do_syscall_64+0x4c/0xa0 [ 227.288572][ T9551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.294987][ T9551] [ 227.294987][ T9551] other info that might help us debug this: [ 227.294987][ T9551] [ 227.305209][ T9551] Chain exists of: [ 227.305209][ T9551] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 227.305209][ T9551] [ 227.320939][ T9551] Possible unsafe locking scenario: [ 227.320939][ T9551] [ 227.328388][ T9551] CPU0 CPU1 [ 227.333756][ T9551] ---- ---- [ 227.339136][ T9551] lock(&oi->ip_xattr_sem); [ 227.343737][ T9551] lock(jbd2_handle); [ 227.350330][ T9551] lock(&oi->ip_xattr_sem); [ 227.357445][ T9551] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 227.364741][ T9551] [ 227.364741][ T9551] *** DEADLOCK *** [ 227.364741][ T9551] [ 227.372891][ T9551] 3 locks held by syz.0.2073/9551: [ 227.378008][ T9551] #0: ffff88807daac460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 227.387235][ T9551] #1: ffff88805f3442c8 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 227.397500][ T9551] #2: ffff88805f343ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x47d/0x1390 [ 227.407418][ T9551] [ 227.407418][ T9551] stack backtrace: [ 227.413307][ T9551] CPU: 1 PID: 9551 Comm: syz.0.2073 Not tainted syzkaller #0 [ 227.420692][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.430768][ T9551] Call Trace: [ 227.434064][ T9551] [ 227.436998][ T9551] dump_stack_lvl+0x188/0x250 [ 227.441684][ T9551] ? load_image+0x410/0x410 [ 227.446197][ T9551] ? show_regs_print_info+0x20/0x20 [ 227.451406][ T9551] ? print_circular_bug+0x12b/0x1a0 [ 227.456615][ T9551] check_noncircular+0x296/0x330 [ 227.461559][ T9551] ? look_up_lock_class+0x71/0x110 [ 227.466685][ T9551] ? add_chain_block+0x9b0/0x9b0 [ 227.471637][ T9551] ? lockdep_lock+0xf1/0x1f0 [ 227.476234][ T9551] ? lockdep_unlock+0x143/0x2e0 [ 227.481091][ T9551] ? mark_lock+0x94/0x320 [ 227.485422][ T9551] ? _find_first_zero_bit+0xd1/0xf0 [ 227.490633][ T9551] __lock_acquire+0x2c66/0x7b50 [ 227.495498][ T9551] ? _raw_spin_unlock+0x40/0x40 [ 227.500354][ T9551] ? ocfs2_downconvert_lock+0x500/0x500 [ 227.505902][ T9551] ? verify_lock_unused+0x140/0x140 [ 227.511110][ T9551] ? ocfs2_inode_lock_tracker+0x14f/0x700 [ 227.516836][ T9551] ? do_raw_spin_lock+0x128/0x2f0 [ 227.521895][ T9551] lock_acquire+0x19e/0x400 [ 227.526413][ T9551] ? ocfs2_xattr_set+0xbd0/0x1390 [ 227.531443][ T9551] ? ocfs2_xattr_block_find+0x157/0x4e0 [ 227.536991][ T9551] ? __might_sleep+0xf0/0xf0 [ 227.541586][ T9551] ? read_lock_is_recursive+0x10/0x10 [ 227.546959][ T9551] ? rwsem_write_trylock+0x135/0x1c0 [ 227.552249][ T9551] ? ocfs2_xattr_ibody_find+0x780/0x780 [ 227.557793][ T9551] ? ocfs2_xattr_ibody_find+0xc6/0x780 [ 227.563264][ T9551] down_write+0x38/0x60 [ 227.567431][ T9551] ? ocfs2_xattr_set+0xbd0/0x1390 [ 227.572461][ T9551] ocfs2_xattr_set+0xbd0/0x1390 [ 227.577333][ T9551] ? __ocfs2_xattr_set_handle+0xf20/0xf20 [ 227.583067][ T9551] ? __vfs_setxattr+0x3d8/0x410 [ 227.587951][ T9551] ? __vfs_setxattr_noperm+0x126/0x5e0 [ 227.593416][ T9551] ? vfs_setxattr+0x167/0x2e0 [ 227.598113][ T9551] ? setxattr+0x2cb/0x360 [ 227.602443][ T9551] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 227.607551][ T9551] ? do_syscall_64+0x4c/0xa0 [ 227.612161][ T9551] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.618246][ T9551] ? from_kgid+0x14f/0x6a0 [ 227.622676][ T9551] ? make_kgid+0x650/0x650 [ 227.627091][ T9551] ocfs2_set_acl+0x4d4/0x580 [ 227.631682][ T9551] ocfs2_iop_set_acl+0x190/0x2b0 [ 227.636619][ T9551] ? ocfs2_xattr_get+0x260/0x260 [ 227.641553][ T9551] ? make_kgid+0x1c4/0x650 [ 227.645971][ T9551] ? from_kgid+0x14f/0x6a0 [ 227.650386][ T9551] ? make_kgid+0x650/0x650 [ 227.654805][ T9551] ? posix_acl_valid+0x37d/0x3f0 [ 227.659750][ T9551] posix_acl_xattr_set+0x324/0x390 [ 227.664867][ T9551] ? posix_acl_xattr_get+0x540/0x540 [ 227.670152][ T9551] __vfs_setxattr+0x3d8/0x410 [ 227.674830][ T9551] __vfs_setxattr_noperm+0x126/0x5e0 [ 227.680112][ T9551] vfs_setxattr+0x167/0x2e0 [ 227.684616][ T9551] ? xattr_permission+0x510/0x510 [ 227.689642][ T9551] ? _copy_from_user+0x111/0x170 [ 227.694585][ T9551] ? posix_acl_fix_xattr_from_user+0xcf/0x110 [ 227.700657][ T9551] setxattr+0x2cb/0x360 [ 227.704816][ T9551] ? path_setxattr+0x290/0x290 [ 227.709585][ T9551] ? __mnt_want_write+0x1e2/0x260 [ 227.714607][ T9551] path_setxattr+0x147/0x290 [ 227.719202][ T9551] ? simple_xattr_list_add+0xf0/0xf0 [ 227.724485][ T9551] ? lock_chain_count+0x20/0x20 [ 227.729344][ T9551] __x64_sys_lsetxattr+0xb4/0xd0 [ 227.734283][ T9551] do_syscall_64+0x4c/0xa0 [ 227.738924][ T9551] ? clear_bhb_loop+0x30/0x80 [ 227.743602][ T9551] ? clear_bhb_loop+0x30/0x80 [ 227.748289][ T9551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 227.754191][ T9551] RIP: 0033:0x7f53307aa159 [ 227.758631][ T9551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.778237][ T9551] RSP: 002b:00007f532ea02028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 227.786670][ T9551] RAX: ffffffffffffffda RBX: 00007f5330a31fa0 RCX: 00007f53307aa159 [ 227.794653][ T9551] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 0000200000000400 [ 227.802637][ T9551] RBP: 00007f5330841024 R08: 0000000000000000 R09: 0000000000000000 [ 227.810619][ T9551] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000000 [ 227.818593][ T9551] R13: 00007f5330a32038 R14: 00007f5330a31fa0 R15: 00007fff3b7dcc88 [ 227.826576][ T9551] [ 227.875493][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 228.380813][ T7087] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.460702][ T7087] Bluetooth: hci0: command 0x0406 tx timeout