last executing test programs: 5.223700915s ago: executing program 0 (id=8240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x2, 0x6}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x4) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000003440)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f0000000640)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8127511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cf2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf4cd8d753e859a0114047fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777ddef657a489fe85f61ae70ac345b13dda6ebc6b53176140df49ecd9b09728806bb5ef9dd4ae222e47a3b4731f49b87c93d0cd174e5d670dbd4c915674f20327e549", 0xf3}, {&(0x7f0000000440)="1da19d23fdff85b98167afffffffff20df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16b48669fd2863efe80b92787339069a0f79bc832754fc4c564bc7c61f70be9565f15584fd519f000000005d433935485cdc2ffa2be958749701504aefae9ac942fd1dfc86b59a3d1caf7923edfc844f870f12b251ce19cedc69367b", 0xa8}, {&(0x7f0000000f80)="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", 0x131}, {&(0x7f00000007c0)="52a8d1d111095a87c1484a0130b027c6d508c0a2525d7f60a7fe125fe0686c6b17ff484cffe3be7fdaee684c7a77ca55c3108b09dd1ff94fe2a038e7aa", 0x3d}, {&(0x7f0000000900)="299ff5aa119f9a667b0b1e858ad1a1bfcfd6c87bb4cb5abbe81601a3830bc642a3646bcbab832af042f8415340866790c7c241200f951c7ebb4294af9526ed0c27a4859e0dee5d86dc81ee6e", 0x4c}, {&(0x7f0000002380)="0b46c572fb7ce9c17865919b9683196e832e2c0c205afa0e76af7adf910b7b4f2c072d98f69ddf80636b05d36324f72aa2e2fb39982295c93a1b92b137faf2d079900bf24ac2bc66a432d53ea79a1b6a501d6df6b72ec5368965199e9d50e1b359e11f2eba1259e53c2cca66d81bcabe470f7b995a81a6c5c7b14db27f3156aad8055f0760a0c3586018091384c78ca110fabf675cbbd62f4e2dbadf07270939cdad782b0417413ea84d2f3dd2d3a607ddb70e9d360b7fffe1e7691e0a1955c0c5cc9554e448e64ebd95c3aed2f8a91b5a3c62a796930229c1c9a56393faf7feca6a88ad44c2146b15b25411a072c69044abf08833367947f7337f94e63330f5a7fdb1f72e6fdeff67e0634236b94e68b9330c9b7bbc1e3c1ff7c63999a9e3fad6f09a430b68a7f9f1352f55cdfa58f5c7f65cf1a882a6bd9f5cbae7739b0ba18b32be4afe6cf1675ca14bc14e4be3b006448f8f60c2048e8fd16f2c9ce7ed7508c5922bbf5cba9e641e00fd75e1f83c0aa8b50d67f827f176016479d171cc398dc3e83ba01f7e528ab1e4316f502bd4cd777279ac189131dd72a422c358a72690bb9a60dc5774c4dbd85a3c75589b826020ada7f3e2b190606acaa8e8f83547fc388e49972106b6dc1c38b09b65dc660ce3bb5e14c2d394d01e8ea6bfc87fbbb375bf472add8890d1603f3de2128771d32e78474bfa6cdca4389d1df5629e41c5722690b41bb520d1cb51c03a0fd17c1e46f35b08ce0a457a72ffe9cc085b0e3790fc88504616da2536f96abca46f259d3a5b65ef8f92983ce97683965461e8bd89387d003e9e2578e2f16a7d9a8917c930b85c57ecca7743dd8fb90f8554eef7ccb78a0b4a837cf4216c06b0b55571a334d2b386b96a304edefd9208f13125433841acab46798a5c7bd5c89dc89c6e1b89fc815e35e9b96d1c631c2c6221a465d969bd3c687f3664b3b04bbddfc2f743fdb1528ea28dfe2af476f88c570bf463804e68b94cc8edbd2ad0a2c3b3b67d5678d2e9cb3de7ce6829cfb8e2f10fb46b6bea1bfed81a33acd931126d4b6a8fb673dd1c03000cd6be8c404664ec4c551e4c5a7d5f8c38142ad4766ff19c697bf8d4105c9c331b97083be95bda8fcf9749b49bd7a4ee1cc7db3e21d1e27624b54a9a37921b536fd8a3cb998c64b4a2399025e89f2803faa84a91fb17f65ce5a594ae126cb379869659f877d79eae8f31157a27e7cb36eb3158a71fc6735ded0e22036732462a86a274ba5a06af93af2c613e78de1b2db35c667d34cb8c61e7f81b9f29e92e510418e717634964a96a27a1dad4faed509c455ab9deb167101227e9f469ca7f40f70e08d3df4c33aa55cbbdd62971ae4840f11d2bf1ebda8493169d198db560e03e3eef21a4a2138fec44403fb372094990717f4d5b3f090dc6dd2cdde59734900af8a651fbf56a1571fa4b50d3ba7377c5e7ae19c8b69eff6eac75ccf34d5f101d997ef47c5e6726e366b4871ea77ea3e9f8b341ec85c0b6f5db7a0412b09a7783ece569e4e09a6232d82b0ae1626fa3e34139e2087c9fec257668086d339a94e09fe1e8aff17a949daa18ba3fc687699a5861aab8b1e7702bad7808d62fb5d67c66a45790ebcece6c249e1e8bb8795d05abd86d2417aa1fb94c66bca3676dadc6ef46dc00ca1fee49a581541c2927cd777cfbd881e0e3eec1335759372be7b8c7e022ea72ed36bbff09f3a07e741402bdec3075da9002891bf8ff9089b02b18798ed01abdfadd0ba9d64edec539fcda6b9ab9c4ea426aaffe08cd3dc012a8f303fe8ee26988a12ab12bb6969b2100b3c66eab569cb8d42d0db5f8fda3615c0176efdb2511550daaf4d22dc334ad9a27fedac44f9640121ea33ade8671e9e56571522283f9ce77d06b614765201089b5ab30c6177b522c04f2e84b0926e4627b7aa1cd7a296c68eb4144c2c286ccc0d3a90a735757a08de410967f2816dbf9a300a3934b069340b707746213e07a1ed29d57a4c6297261f283b6bfd6b0a70be935a87771fa89cb4d5949724e5ccb6b6856118141f4f6270594de5393c1cfa3ad63d17472b0208e721fd6ae7e400362d2e9208742b1e54b23c9210d5bd2c59f9ba432a78a7b8a24b1b57c37776ea4ddde74df0c05e6495cc403c57577c7f48a00f352b11c0d4eebd4d79fe3a138ae6244385eb76d94d198b4519a2020601a62f8c2ce428ba3d06329f8cb8b216f51aa9cf3931acd11ecdaa0c091ebbb79958ed866edfc68f1aacffe62e47991f97a3375d7f19f7dc202db3dad973f2cfd54a193ad5181c20de6679eff3d391ec39a5c286329ba9630c76cd798b711b60fe5ddde6c28fef0b6bfc6714ac41e9dd0957ee39bb3e480d0c7493692827974c47af2a1bf83c089a6c3d493caafc0a038204aef2a6f8b7fed9a76f1c3c152df82f6604b0737f930336f8bc5afad98925a48383d06c57b2d249790b92097df85aef6d9de398e77172d7fb3b748683f99144b23a4477ca0cba226a9ddfe1b39dadfdc52a4cebabc0ccf0638a569851a92a1efc1027dee2a33fdf03cac082ff91acd1f662a255b48295aca8c98bd453a9f94751c20e4f2431c1ca5597e22f75b14d19a69242bc4aed8c8eef884770f6fb1f4756ff97220b2e6aa5c5ace072f2239a4a16d367365d30906632c8d69642dda4efd07670159a81e7ae1137553f73bdd801f9bd3183f4ecceb3e7260a9c57b4563a90ddbb930789530c8dd6aab284b8f87b5fbf036bd37dd4f4897b597dae799854d309ed2859b3cdbd3c7c67c16b8e7859b9bc590f8e9b4eb5686b8368683d8ab42c90a567a8f50d0c1549b5c2fd6af6e53ec38e0991182c0644e982e82abbfffccc87635de54a08a8f72376e073ef0411f35594dbeee9b556d730227706a96a64b44a9b54ffcb103f70bcc84bc19db61449d25d3f161da538b635c83b6ae3a1d2ff2504aac9dfa0fa6ee56b9cba10d653411c1528b7dbea740560efb596fc9b9af79de0438c9942224b2fb49ec8737a57f76634b233cbf359630326dead15be707e6a6942ad268da9f187e2889848ef4b1f6ca3543e54beede0b0b40de19aa2e2bbc8f66330c60b8c5df33f19581f4dbf18174c8b598694000c73f4f24ba4509ba2bd2e1d63bf9e02b85454cd607e5ed26e0ddef5347a8224371c704b6347b81e1c3ffef4b8e1a7c582d1e6f473c93be88213632546b451097329e607acca645ed3787ecc51ae1490a9be11aa7f6703af26e88faf667fb635f233de72ea877108c0e5fc8d93edb35cc5f37c47a4fec8d06974be0ae802f218ebcbb791d4e73249a81a3ea4f1f8571e44583f4623b5c30f60e2cdec1c4cb7ac35e36bff965b55988d9593ef2571fe5501e552a35344fa50c544898c144999b5aca1b81647e28276782f35175573ab07243396167049f7b4e310b01dd542d326737d6c36228190411d1dabc796001f0485d2e039bf3eb45984fe853140bd54eb04956436047756a4aebf4947b9c43c69acece6f715e5fe777f19e38b5df415d0db8efaa7ab155e2f58de2379872c28a35b8c4be3f94b49b1db4db3e3d177958efb8d7e4ea8d9f3dcc63da66aaea9c0eee02dec7ac0a535c40dd6d4424a36a2ae0bf33bc02407cbd6a90400d953243ce2b26a053a0152d12ac519f57b18d2931bb8496bd4752fa2f5710edc66fff51f1752919ea4fccbcc610d3623dfbd1e0eac07c7305a0213b29f96d430a33624f5aecfbcc3efeeaa6d58ee126172c8dad8d595345c595cbda9aeab5099895724790a6264ed89a40e06cc58d55e5b350abc613cec6ef10a121cf6d9e7cb89fd863d321bef1a165708d4e15d2236639380741475759887264ac9bbe7653201da92df901ac9343ca98ecf4e1ae3618d13ad1daf7cd3cb841cd4566cd1d86c90b1dbae0758be0782e08a606d9c0c3261ce360a09541f8a3d7eac2df57ac1b0e4a9ed03f3822a96d65df6891bf402c8fff142a9dd52d510282f1140e8712be437f1d8395af250c0ac3e72ea29e488094553d548640f22a57871b960fd6ab40eae6cc0a815fdaf3ddf9db1183508d434232b510e823138994b6f612aafe98c02758dd1aea85a2971afc105c2e9882673a722fc6ae7e2ae2fae775fa32e3eea9ff5508c379ec9017c0148259e0313695b818c593d54d62a06b270d657bee6977a50538c28f0b97c3292b6dd218dd997d3e7d6b522731587dea071aca16276e1116be581d585f9c828ebcc10ab8ef070f1465b64587c31c2ef8c1f2bf5476d400ac6f0beb431d302fa3bde1489398d91f641d385021184b4f43a1480cb7d8b37c3d871dd4a8fdc4449396c32f5a2f3f00301a1fec81898e650ab4db49b37cb3d5a82c43dac56ca49dc361e1d98b00264a7323c17b904d9ecf86bb18ca2430817f180617c88a3e05b16aeb3cb6b4c4b1e97e016025fa3a36bfde6a9919dee72af4ee2ccec3feea02db359e0a5252876bdce4cbc207fbaab95e995b79cec6bfd98ffd6cb5fef2d41e7d82101488a78383465b8d7f3a7efd824e5f120fb2b0f11ffc05b769b608ff664df038e4d4764e51a67377e523820c7f9c644b6796cc8521a4b1a0cdc63e22fe967cd4adef58f74e863da46be676aca562175a965cf56ef99fa487ac46ecae12f5c838a25f85e1ccbab3fc1ad1ff12e4203f45dfb0b5321592bf3c810c71e009edb4b42f96228afb1ab6758e5f1cff564cb7f8435eeed182601dda4719ed2e1cd230a2a1d02a61b3cca6e2fd1dd292a85cdf90a748a6a987f05691dda1f11c2e17fe8f611fa3e4f4a79cfc67b85dcb37a88954ad1c0e60e0c0341cd19f5d1de3a424bdd32ad81e14baf403566b992b3c045d27b218da6545ae5c024e57b721b6c32181891c6d0e3f6de53bc13c3ee5ff76059ea7245e52c46d2c2798019958f160473b2492023d34612ebbc752d91c88fa03e64a8ed20e0f79ff5192cfa925a39a9974a7952f4eed5b16e0677b446805f87df1cfdfd346a14edc4667e4d307c365769ab3778d2b04b1b8691b82944e4f7e1cd69e1d4eee5972bfecbeaadd96d60d4bac17f78e4fb053102a8ea83ec95ef4f4ce7e46be909b12d80f93e7beb981e5087803fc4ef5e097c5d31fcfdd0a5c15942362f547ff615f3bb1ce413b02c14c1ac0d83ae180c9eb0e8ee1ffba3d6b71b9479b19f75761312eb9d110b62210ca3f4c83084b4e6010db54095229ec82ee58000786a78cf3bce737de1cd83dc900663f003e1901b0b9d11d7edfa556f13c7f3a4bad4cef8e5874fc034b7a4396696141555be90f3c426f8c4c923bd017d0cbe154027a2d32238dfd7ec53ddbf8be990e399d", 0xeb2}], 0x8}, 0x8bb3a321ef809a) 4.552403824s ago: executing program 0 (id=8250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 4.437759313s ago: executing program 0 (id=8252): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, 0xffffffffffffffff, 0x33, 0x2038, 0x4}, 0x20) 4.325034841s ago: executing program 0 (id=8254): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 3.419010138s ago: executing program 1 (id=8260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 3.285474727s ago: executing program 1 (id=8262): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0xf, @local, 0xfffffff8}], 0x1c) 3.073250703s ago: executing program 1 (id=8264): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400000000000000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="213e38413de103adb7749f94306c4869c2577055c6bb", @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) syslog(0x3, &(0x7f0000002ac0)=""/148, 0x94) pipe2(&(0x7f00000003c0), 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="2401000012000501000000000000000005001900"], 0x124}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000800) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x47, 0x3a, '#! ', 0x3a, '\a\x00\x8aH\xef\xe8\xafM\x85\xcfS\xe4\x11\x1e\xc5\xb8\x88\x1a\f{vLm\xd2_\x03\xcdm\xf19+\x19\x87\xd0.\xa27?\xdagE\xdd\xcf\xed\xc8\xef\xdc\x9f\x86\xfe\xc6jcj\xdbM\x127)\x8b\xc6\x10\xe7G\v\xcf', 0x3a, './file1'}, 0x6c) socket(0x3, 0x4, 0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x19, 0x116d) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf7aa}}, './file0\x00'}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xdab1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000140)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001b40)}, 0x90) 3.012467118s ago: executing program 0 (id=8265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000600)="63e4ed8e46080000003389f7f986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.539253733s ago: executing program 3 (id=8267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.369438615s ago: executing program 0 (id=8268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="000000462fe79500280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x501, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xf}, {0xfff3, 0xffff}, {0xfff4, 0xfff1}}}, 0x24}}, 0x4040004) 1.948677116s ago: executing program 32 (id=8268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="000000462fe79500280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x501, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xf}, {0xfff3, 0xffff}, {0xfff4, 0xfff1}}}, 0x24}}, 0x4040004) 1.937132767s ago: executing program 3 (id=8271): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190) 1.775071989s ago: executing program 2 (id=8272): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'u'}]}], {0x14}}, 0xa2}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.637079049s ago: executing program 3 (id=8273): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x16, 0x6, 0x481a9b17b5b03f47, 0xf, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_address={0x5, 0x7, 0x6c, 0x80, 0x0, @in6={0xa, 0x4e22, 0x7, @loopback, 0x4}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbb, 0x2, {0x6, 0xff, 0x1, 0x9b, 0x0, 0x8, 0x0, @in=@empty, @in=@multicast1}}]}, 0x78}}, 0x4844) 1.554009665s ago: executing program 2 (id=8274): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrquota}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) 1.539700346s ago: executing program 3 (id=8275): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040)={[{@resgid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x8, 0x4000, 0x10000) 1.143186175s ago: executing program 1 (id=8276): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0xa8) 877.061565ms ago: executing program 2 (id=8277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000020000100fcfffffffcefffff0a1414000000000713f1000014000200fc0200007c0000000000000000000001050016002e000000140001002001"], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 813.79856ms ago: executing program 3 (id=8278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x5ac}, 0x1, 0x0, 0x0, 0x4040050}, 0x40) 715.768397ms ago: executing program 1 (id=8279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 492.315733ms ago: executing program 1 (id=8280): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 368.539372ms ago: executing program 2 (id=8281): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1, 0x1, 0xfb, 0xbe3b, 0x1, "c74192f3b7e8720700000000000010ee0800", 0x0, 0x8}) ioctl$TIOCSTI(r0, 0x5412, 0x0) 367.301072ms ago: executing program 3 (id=8282): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x40}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8936, &(0x7f0000000000)) 220.392994ms ago: executing program 2 (id=8283): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)='3\x00\x00\x00', 0x4) 0s ago: executing program 2 (id=8284): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrquota}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0) kernel console output (not intermixed with test programs): b error = -90 [ 2558.517876][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2558.570481][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2558.681352][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2558.710165][ T788] vhci_hcd: vhci_device speed not set [ 2558.874479][T18016] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2558.992165][T18016] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2559.118707][ T3245] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2559.125407][ T3245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2559.133519][ T3245] vhci_hcd vhci_hcd.0: Device attached [ 2559.285847][T18016] usb 4-1: USB disconnect, device number 61 [ 2559.654452][ T3246] vhci_hcd: connection closed [ 2559.720550][T24948] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 2559.814472][ T2774] vhci_hcd: stop threads [ 2559.878378][ T2774] vhci_hcd: release socket [ 2559.917020][ T2774] vhci_hcd: disconnect device [ 2560.532551][ T3252] loop6: detected capacity change from 0 to 7 [ 2560.544497][ T3252] Dev loop6: unable to read RDB block 7 [ 2560.550707][ T3252] loop6: unable to read partition table [ 2560.557449][ T3252] loop6: partition table beyond EOD, truncated [ 2560.564431][ T3252] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 2562.996172][ T3274] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2563.002964][ T3274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2563.011045][ T3274] vhci_hcd vhci_hcd.0: Device attached [ 2563.350237][ T9499] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 2564.565919][ T3276] vhci_hcd: connection closed [ 2564.568956][ T3277] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2565.020200][T24948] vhci_hcd: vhci_device speed not set [ 2565.091861][T18555] vhci_hcd: stop threads [ 2565.135463][T18555] vhci_hcd: release socket [ 2565.185397][T18555] vhci_hcd: disconnect device [ 2565.491845][ T3279] loop2: detected capacity change from 0 to 32768 [ 2566.406351][ T788] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2567.305546][ T3285] loop1: detected capacity change from 0 to 32768 [ 2567.349440][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 2567.867578][ T788] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 2567.884149][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2567.950171][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2567.980135][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2567.989905][ T788] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2568.032535][ T788] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2568.060180][ T788] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2568.095347][ T788] usb 4-1: Manufacturer: syz [ 2568.124171][ T788] usb 4-1: config 0 descriptor?? [ 2568.770302][ T3301] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2568.776906][ T3301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2568.784854][ T3301] vhci_hcd vhci_hcd.0: Device attached [ 2569.087739][ T3303] vhci_hcd: connection closed [ 2569.151711][ T3183] vhci_hcd: stop threads [ 2569.217314][ T5774] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 2569.348243][ T3183] vhci_hcd: release socket [ 2569.487335][ T3183] vhci_hcd: disconnect device [ 2569.630967][ T788] rc_core: IR keymap rc-hauppauge not found [ 2569.660170][ T9499] vhci_hcd: vhci_device speed not set [ 2571.160179][ T788] Registered IR keymap rc-empty [ 2571.165324][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2571.250213][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2571.311428][ T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2571.351347][ T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input190 [ 2571.559072][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2571.611185][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2571.657331][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2572.499673][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2572.582255][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2572.620163][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2572.670129][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2572.709773][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2572.752468][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2572.860085][ T788] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2573.162236][ T788] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2573.655501][ T3334] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2573.662298][ T3334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2573.753353][ T3334] vhci_hcd vhci_hcd.0: Device attached [ 2574.303477][ T3335] vhci_hcd: connection closed [ 2574.610331][ T5774] vhci_hcd: vhci_device speed not set [ 2574.736949][T25837] vhci_hcd: stop threads [ 2574.796883][T25837] vhci_hcd: release socket [ 2575.124675][T25837] vhci_hcd: disconnect device [ 2575.661660][ T788] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2575.679043][ T788] usb 4-1: USB disconnect, device number 62 [ 2577.169657][ T3350] loop2: detected capacity change from 0 to 32768 [ 2579.270233][ T9499] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2580.426413][ T3366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2580.433078][ T3366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2580.453739][ T3366] vhci_hcd vhci_hcd.0: Device attached [ 2580.748363][ T788] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 2580.912916][ T3371] vhci_hcd: connection reset by peer [ 2581.100113][ T9499] usb 2-1: Using ep0 maxpacket: 16 [ 2581.108724][T15407] vhci_hcd: stop threads [ 2581.122822][T15407] vhci_hcd: release socket [ 2581.197421][T15407] vhci_hcd: disconnect device [ 2581.404345][ T9499] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 2581.416239][ T9499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2581.442275][ T9499] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2581.454150][ T9499] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2581.463972][ T9499] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2581.492108][ T9499] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2581.510187][ T9499] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2581.518251][ T9499] usb 2-1: Manufacturer: syz [ 2581.526205][ T9499] usb 2-1: config 0 descriptor?? [ 2582.711904][ T9499] rc_core: IR keymap rc-hauppauge not found [ 2582.718052][ T9499] Registered IR keymap rc-empty [ 2582.735472][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2582.770453][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2582.821322][ T9499] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2582.869178][ T9499] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input191 [ 2582.906444][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2582.956912][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.021198][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.030311][T18016] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2583.050784][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.081025][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.110215][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.141144][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.170745][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.201848][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.220184][T18016] usb 1-1: Using ep0 maxpacket: 16 [ 2583.228672][T18016] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2583.250154][ T9499] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2583.257531][T18016] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2583.304079][ T9499] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2583.323846][T18016] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2583.333186][ T9499] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2583.355138][T18016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2583.384379][T18016] usb 1-1: Product: syz [ 2583.389054][ T9499] usb 2-1: USB disconnect, device number 51 [ 2583.395273][T18016] usb 1-1: Manufacturer: syz [ 2583.402398][T18016] usb 1-1: SerialNumber: syz [ 2583.854727][T18016] usb 1-1: 0:2 : does not exist [ 2583.876017][T18016] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2583.955913][T18016] usb 1-1: USB disconnect, device number 44 [ 2584.032366][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2584.708523][T18016] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2585.570120][T18016] usb 4-1: Using ep0 maxpacket: 16 [ 2585.584969][T18016] usb 4-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 2585.623887][T18016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2585.767292][T18016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2585.882478][ T3432] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2585.889081][ T3432] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2585.897445][ T3432] vhci_hcd vhci_hcd.0: Device attached [ 2585.934772][T18016] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2585.990790][ T788] vhci_hcd: vhci_device speed not set [ 2586.029432][T18016] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2586.221214][T18016] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2586.293894][T18016] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2586.346459][ T3433] vhci_hcd: connection closed [ 2586.398166][T18016] usb 4-1: Manufacturer: syz [ 2586.419048][ T9499] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 2586.450759][ T2774] vhci_hcd: stop threads [ 2586.483989][ T2774] vhci_hcd: release socket [ 2586.529637][ T2774] vhci_hcd: disconnect device [ 2586.618579][T18016] usb 4-1: config 0 descriptor?? [ 2586.684936][T24948] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2587.019450][T24948] usb 3-1: Using ep0 maxpacket: 16 [ 2587.095736][T24948] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 2587.222145][T24948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2587.346254][T24948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2587.447971][T24948] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2587.557080][T24948] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2587.732546][T24948] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2587.833141][T24948] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2588.347492][T24948] usb 3-1: Manufacturer: syz [ 2588.479737][T24948] usb 3-1: config 0 descriptor?? [ 2588.626780][ T3447] loop3: detected capacity change from 0 to 2048 [ 2588.692507][ T3447] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2588.710283][T18016] rc_core: IR keymap rc-hauppauge not found [ 2588.716476][T18016] Registered IR keymap rc-empty [ 2588.721564][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2588.764734][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2588.798117][ T3447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2588.821372][T18016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2588.841681][T18016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input192 [ 2588.880334][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2588.887765][T24948] rc_core: IR keymap rc-hauppauge not found [ 2588.905640][T24948] Registered IR keymap rc-empty [ 2588.920241][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2588.940274][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2588.960342][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2588.972974][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2589.009023][T24948] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 2589.032408][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2589.061781][T24948] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input193 [ 2589.079930][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.095535][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2589.140278][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2589.149019][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.180633][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2589.190245][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.230359][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2589.239460][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.266916][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2589.292352][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.310412][T18016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2589.331766][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.356078][T18016] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2589.386343][T18016] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2589.408718][T18016] usb 4-1: USB disconnect, device number 63 [ 2589.415027][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.450328][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.526008][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2589.739474][ T3465] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2589.746078][ T3465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2589.754381][ T3465] vhci_hcd vhci_hcd.0: Device attached [ 2590.552484][ T3466] vhci_hcd: connection reset by peer [ 2590.642557][T15407] vhci_hcd: stop threads [ 2590.702986][T15407] vhci_hcd: release socket [ 2590.781604][T15407] vhci_hcd: disconnect device [ 2590.944966][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.951974][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.020225][T24948] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2591.116153][T24948] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2592.104277][ T3475] loop2: detected capacity change from 0 to 32768 [ 2593.078740][T24948] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2593.585059][T24948] usb 3-1: USB disconnect, device number 64 [ 2593.650176][ T9499] vhci_hcd: vhci_device speed not set [ 2594.120223][ T3441] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2594.310118][ T788] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2594.320603][ T3441] usb 4-1: Using ep0 maxpacket: 16 [ 2594.337197][ T3441] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2594.356908][ T3441] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2594.383484][ T3441] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2594.417994][ T3441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.429914][ T3441] usb 4-1: Product: syz [ 2594.434751][ T3441] usb 4-1: Manufacturer: syz [ 2594.439889][ T3441] usb 4-1: SerialNumber: syz [ 2594.501431][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 2594.532781][ T788] usb 2-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config [ 2594.607575][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2594.669794][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2594.709154][ T788] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2594.727459][ T3441] usb 4-1: 0:2 : does not exist [ 2594.794600][ T788] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2595.085780][ T788] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2595.126302][ T788] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2595.175772][ T788] usb 2-1: Manufacturer: syz [ 2595.363669][ T788] usb 2-1: config 0 descriptor?? [ 2596.180639][ T3489] loop0: detected capacity change from 0 to 32768 [ 2596.580211][ T3441] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2596.880279][ T788] rc_core: IR keymap rc-hauppauge not found [ 2596.886536][ T788] Registered IR keymap rc-empty [ 2596.892475][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2596.987415][ T3441] usb 4-1: USB disconnect, device number 64 [ 2597.093118][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2597.228922][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2597.272011][ T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2597.502600][ T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input194 [ 2597.853454][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2597.930312][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2597.990255][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2598.035726][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2598.074197][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2598.127655][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2598.180343][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2598.221128][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2598.270233][ T9499] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2598.280147][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2598.329757][ T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2598.360150][ T3441] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2598.417377][ T788] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2598.524209][ T788] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2598.739357][ T788] usb 2-1: USB disconnect, device number 52 [ 2599.590138][ T3441] usb 4-1: Using ep0 maxpacket: 32 [ 2599.648789][ T3512] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2599.655378][ T3512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2599.690214][ T9499] usb 3-1: Using ep0 maxpacket: 16 [ 2599.782452][ T3512] vhci_hcd vhci_hcd.0: Device attached [ 2600.183580][ T788] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 2600.470995][ T3513] vhci_hcd: connection reset by peer [ 2600.516411][ T2774] vhci_hcd: stop threads [ 2600.542028][ T2774] vhci_hcd: release socket [ 2600.576705][ T2774] vhci_hcd: disconnect device [ 2600.819702][ T3441] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2600.980081][ T3441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.988457][ T3441] usb 4-1: Product: syz [ 2601.000112][ T9499] usb 3-1: device descriptor read/all, error -71 [ 2601.008104][ T3441] usb 4-1: Manufacturer: syz [ 2601.013005][ T3441] usb 4-1: SerialNumber: syz [ 2601.020451][ T3441] usb 4-1: config 0 descriptor?? [ 2601.026137][ T3441] usb 4-1: can't set config #0, error -71 [ 2601.033926][ T3441] usb 4-1: USB disconnect, device number 65 [ 2601.347182][ T3530] loop1: detected capacity change from 0 to 2048 [ 2601.373694][ T3530] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2601.400525][ T3530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2604.371322][ T5774] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2604.501632][ T3553] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2604.508403][ T3553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2604.516235][ T3553] vhci_hcd vhci_hcd.0: Device attached [ 2604.647728][ T5774] usb 1-1: Using ep0 maxpacket: 16 [ 2604.679605][ T5774] usb 1-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 2604.756968][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2604.865707][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2604.965169][ T5774] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2605.076073][ T5774] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2605.148335][ T3554] vhci_hcd: connection closed [ 2605.203553][ T5774] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2605.229303][T15407] vhci_hcd: stop threads [ 2605.263877][T15407] vhci_hcd: release socket [ 2605.304924][T15407] vhci_hcd: disconnect device [ 2605.330938][ T5774] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2605.380885][ T5774] usb 1-1: Manufacturer: syz [ 2605.400461][ T788] vhci_hcd: vhci_device speed not set [ 2605.558560][ T5774] usb 1-1: config 0 descriptor?? [ 2605.638551][ T5774] usb 1-1: can't set config #0, error -71 [ 2605.658784][ T5774] usb 1-1: USB disconnect, device number 45 [ 2606.120133][ T3441] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2606.177349][ T3571] loop3: detected capacity change from 0 to 2048 [ 2606.193187][ T3571] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2606.222831][ T3571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2606.281214][ T5774] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2606.310214][ T3441] usb 3-1: Using ep0 maxpacket: 16 [ 2606.327990][ T3441] usb 3-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 2606.352617][ T3441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2606.394619][ T3441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2606.423740][ T3441] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2606.439467][ T3441] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2606.455918][ T3441] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2606.465439][ T3441] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2606.475119][ T3441] usb 3-1: Manufacturer: syz [ 2606.481370][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 2606.484027][ T3441] usb 3-1: config 0 descriptor?? [ 2606.505262][ T5774] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2606.525002][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.541146][ T5774] usb 2-1: Product: syz [ 2606.550413][ T5774] usb 2-1: Manufacturer: syz [ 2606.555073][ T5774] usb 2-1: SerialNumber: syz [ 2606.573230][ T5774] usb 2-1: config 0 descriptor?? [ 2606.591734][ T5774] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2606.840378][ T3441] rc_core: IR keymap rc-hauppauge not found [ 2606.854512][ T3441] Registered IR keymap rc-empty [ 2606.920274][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2608.414699][ T3581] loop3: detected capacity change from 0 to 32768 [ 2608.708633][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2608.912350][ T3441] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2608.952939][ T3441] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input195 [ 2608.988509][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.048571][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.104238][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.164648][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.210365][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.250265][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.286470][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.320302][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.360140][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.396559][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2609.441377][ T3441] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2609.450672][ T3441] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2609.466960][ T3441] usb 3-1: USB disconnect, device number 67 [ 2609.510348][ T5774] gspca_ov534_9: reg_r err -110 [ 2609.870224][ T3441] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2609.880258][ T5774] gspca_ov534_9: Unknown sensor 0000 [ 2609.880354][ T5774] ov534_9: probe of 2-1:0.0 failed with error -22 [ 2610.090270][ T3441] usb 3-1: Using ep0 maxpacket: 16 [ 2610.171916][ T3441] usb 3-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 2610.264491][ T3441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2610.356470][ T3441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2610.456804][ T3441] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2610.561026][ T3441] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2610.671876][ T3441] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2610.768599][ T3441] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2610.790789][ T5774] usb 2-1: USB disconnect, device number 53 [ 2610.843235][ T3441] usb 3-1: Manufacturer: syz [ 2610.879071][ T3441] usb 3-1: config 0 descriptor?? [ 2611.300867][ T3441] rc_core: IR keymap rc-hauppauge not found [ 2611.310399][ T3441] Registered IR keymap rc-empty [ 2611.316136][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2611.354783][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2611.507974][ T3441] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2611.784519][ T3441] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input196 [ 2611.983172][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.057232][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.130653][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.181044][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.222086][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.280278][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.320270][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.380610][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.416451][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.461099][ T3441] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2612.496755][ T3441] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2612.507048][ T3441] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2612.523198][ T3441] usb 3-1: USB disconnect, device number 68 [ 2612.710568][T24948] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2612.890368][T24948] usb 2-1: Using ep0 maxpacket: 16 [ 2612.903125][T24948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2612.921346][T24948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2612.944162][T24948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2612.960112][T24948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2612.970325][T24948] usb 2-1: Product: syz [ 2612.991317][T24948] usb 2-1: Manufacturer: syz [ 2612.996005][T24948] usb 2-1: SerialNumber: syz [ 2613.051084][ T3623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2613.268861][T24948] usb 2-1: 0:2 : does not exist [ 2613.285865][T24948] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2613.336443][T24948] usb 2-1: USB disconnect, device number 54 [ 2613.384610][ T3626] loop0: detected capacity change from 0 to 2048 [ 2613.412597][ T3628] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2613.441933][ T3626] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2613.442362][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2613.509445][ T3626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2613.590693][ T3626] overlayfs: failed to resolve './file1': -2 [ 2615.258304][ T3655] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2615.264905][ T3655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2615.273355][ T3655] vhci_hcd vhci_hcd.0: Device attached [ 2615.603580][T24948] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 2615.660345][ T3441] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2615.940256][ T3441] usb 4-1: Using ep0 maxpacket: 16 [ 2615.984146][ T3441] usb 4-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 2615.995843][ T3658] vhci_hcd: connection reset by peer [ 2616.024889][ T12] vhci_hcd: stop threads [ 2616.035790][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2616.064631][ T12] vhci_hcd: release socket [ 2616.086565][ T12] vhci_hcd: disconnect device [ 2616.109412][ T3441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2616.157106][ T3441] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2616.200495][ T3441] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2616.304093][ T3441] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2616.341771][ T3441] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2616.392937][ T3441] usb 4-1: Manufacturer: syz [ 2616.475506][ T3441] usb 4-1: config 0 descriptor?? [ 2616.860916][ T3441] rc_core: IR keymap rc-hauppauge not found [ 2616.894836][ T3441] Registered IR keymap rc-empty [ 2616.919639][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2616.962006][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.027594][ T3441] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2617.072981][ T3441] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input197 [ 2617.405896][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.448012][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.470949][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.500342][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.532436][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.560272][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.590224][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.640391][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.690510][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.731433][ T3441] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2617.777349][ T3441] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2617.807499][ T3441] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2617.849369][ T3441] usb 4-1: USB disconnect, device number 66 [ 2618.219940][ T3688] loop2: detected capacity change from 0 to 16 [ 2618.277977][ T3688] erofs: (device loop2): mounted with root inode @ nid 36. [ 2618.368926][ T1352] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 2618.403043][ T3688] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 2618.433996][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2618.434016][ T28] audit: type=1800 audit(1775270182.201:20): pid=3688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7645" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2618.460967][ T3688] syz.2.7645 (3688) used greatest stack depth: 20080 bytes left [ 2619.994928][ T3722] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2620.001605][ T3722] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2620.010079][ T3722] vhci_hcd vhci_hcd.0: Device attached [ 2620.367774][ T5809] usb 33-1: new low-speed USB device number 7 using vhci_hcd [ 2620.583154][ T3726] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2620.661854][ T3723] vhci_hcd: connection closed [ 2620.698087][T15407] vhci_hcd: stop threads [ 2620.780156][T24948] vhci_hcd: vhci_device speed not set [ 2620.805256][T15407] vhci_hcd: release socket [ 2620.852042][T15407] vhci_hcd: disconnect device [ 2621.248132][ T3732] loop3: detected capacity change from 0 to 2048 [ 2621.288925][ T3732] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2621.354949][ T3732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2624.291176][ T3766] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2624.297773][ T3766] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2624.305774][ T3766] vhci_hcd vhci_hcd.0: Device attached [ 2624.996283][ T3770] vhci_hcd: connection closed [ 2624.997089][ T12] vhci_hcd: stop threads [ 2625.131153][ T12] vhci_hcd: release socket [ 2625.210908][ T12] vhci_hcd: disconnect device [ 2625.590956][ T5809] vhci_hcd: vhci_device speed not set [ 2628.290492][ T3785] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2628.297095][ T3785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2628.304957][ T3785] vhci_hcd vhci_hcd.0: Device attached [ 2628.670584][ T5809] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 2629.588791][ T3786] vhci_hcd: connection reset by peer [ 2629.597310][ T1005] vhci_hcd: stop threads [ 2629.643881][ T1005] vhci_hcd: release socket [ 2629.685748][ T1005] vhci_hcd: disconnect device [ 2630.414409][ T3803] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2630.421057][ T3803] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2630.429087][ T3803] vhci_hcd vhci_hcd.0: Device attached [ 2630.818372][T24948] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 2631.712240][ T3804] vhci_hcd: connection reset by peer [ 2631.772479][ T1005] vhci_hcd: stop threads [ 2631.811203][ T1005] vhci_hcd: release socket [ 2631.861430][ T1005] vhci_hcd: disconnect device [ 2633.645472][ T3824] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2633.652330][ T3824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2633.662949][ T3824] vhci_hcd vhci_hcd.0: Device attached [ 2633.708957][ T3825] vhci_hcd: connection closed [ 2633.761732][T13788] vhci_hcd: stop threads [ 2633.888670][T13788] vhci_hcd: release socket [ 2633.921679][T13788] vhci_hcd: disconnect device [ 2634.621924][ T5809] vhci_hcd: vhci_device speed not set [ 2635.980355][T24948] vhci_hcd: vhci_device speed not set [ 2636.060846][T14513] Bluetooth: hci4: command 0x1003 tx timeout [ 2636.068530][ T1352] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2636.260203][ T2524] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2636.401483][ T9499] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2636.440087][ T2524] usb 1-1: Using ep0 maxpacket: 32 [ 2636.450489][ T2524] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2636.459753][ T2524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.487049][ T2524] usb 1-1: Product: syz [ 2636.494999][ T2524] usb 1-1: Manufacturer: syz [ 2636.504065][ T2524] usb 1-1: SerialNumber: syz [ 2636.511943][ T2524] usb 1-1: config 0 descriptor?? [ 2636.529545][ T2524] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2636.591661][ T9499] usb 3-1: Using ep0 maxpacket: 16 [ 2636.630589][ T9499] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2636.650948][ T9499] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2636.680179][ T9499] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2636.701933][ T9499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.721694][ T9499] usb 3-1: Product: syz [ 2636.725945][ T9499] usb 3-1: Manufacturer: syz [ 2636.740099][ T9499] usb 3-1: SerialNumber: syz [ 2636.969310][ T9499] usb 3-1: 0:2 : does not exist [ 2636.989777][ T9499] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2637.040229][ T9499] usb 3-1: USB disconnect, device number 69 [ 2637.128336][T10568] udevd[10568]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2638.416187][ T3848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7683'. [ 2638.790645][ T2524] gspca_ov534_9: reg_r err -110 [ 2639.007688][T14513] Bluetooth: hci4: sending frame failed (-49) [ 2639.018978][ T1352] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 2639.150119][ T2524] gspca_ov534_9: Unknown sensor 0000 [ 2639.150221][ T2524] ov534_9: probe of 1-1:0.0 failed with error -22 [ 2639.347765][ T2524] usb 1-1: USB disconnect, device number 46 [ 2639.724315][ T3906] loop2: detected capacity change from 0 to 16 [ 2639.786107][ T3906] erofs: (device loop2): mounted with root inode @ nid 36. [ 2639.852663][ T1352] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 2639.916362][ T3906] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 2639.967643][ T28] audit: type=1800 audit(1775270203.751:21): pid=3906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7702" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 2641.675411][ T3930] loop1: detected capacity change from 0 to 16 [ 2641.688141][ T3932] loop3: detected capacity change from 0 to 16 [ 2641.705745][ T3932] erofs: (device loop3): mounted with root inode @ nid 36. [ 2641.715147][ T3930] erofs: (device loop1): mounted with root inode @ nid 36. [ 2641.744632][ T1352] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 2641.761895][ T1352] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 2641.770569][ T3932] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 2641.813249][ T3930] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 2641.824965][ T28] audit: type=1800 audit(1775270205.611:22): pid=3932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7710" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 2641.923171][ T28] audit: type=1800 audit(1775270205.661:23): pid=3930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7717" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2643.980375][ T1352] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2645.503830][ T3972] ubi31: attaching mtd0 [ 2645.516303][ T3972] ubi31: scanning is finished [ 2646.444473][ T3972] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 2646.650693][T17609] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2646.860235][T17609] usb 1-1: Using ep0 maxpacket: 16 [ 2647.272044][T17609] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2647.366125][T17609] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2647.454833][T17609] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2647.510368][T17609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.518453][T17609] usb 1-1: Product: syz [ 2647.550237][T17609] usb 1-1: Manufacturer: syz [ 2647.554919][T17609] usb 1-1: SerialNumber: syz [ 2648.361682][T17609] usb 1-1: 0:2 : does not exist [ 2648.423726][T17609] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2648.516185][T17609] usb 1-1: USB disconnect, device number 47 [ 2648.687493][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2649.943095][ T4004] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2649.949693][ T4004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2649.957476][ T4004] vhci_hcd vhci_hcd.0: Device attached [ 2650.293406][ T4005] vhci_hcd: connection closed [ 2650.697524][T17644] vhci_hcd: stop threads [ 2650.706994][T17644] vhci_hcd: release socket [ 2650.732982][T17644] vhci_hcd: disconnect device [ 2651.396722][ T4018] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2651.403408][ T4018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2651.411585][ T4018] vhci_hcd vhci_hcd.0: Device attached [ 2651.982508][ T4019] vhci_hcd: connection closed [ 2652.057922][ T5809] usb 33-1: new low-speed USB device number 8 using vhci_hcd [ 2652.237577][ T4020] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2652.458616][T13789] vhci_hcd: stop threads [ 2652.463700][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.463905][T13789] vhci_hcd: release socket [ 2652.470281][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.490212][T13789] vhci_hcd: disconnect device [ 2653.066145][ T4025] ubi31: attaching mtd0 [ 2653.078723][ T4025] ubi31: scanning is finished [ 2653.977208][ T4025] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 2654.570496][T24948] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2654.790075][T24948] usb 3-1: Using ep0 maxpacket: 16 [ 2654.864551][T24948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2654.875459][T24948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2654.914082][T24948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2654.926800][T24948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.945249][T24948] usb 3-1: Product: syz [ 2654.980258][T24948] usb 3-1: Manufacturer: syz [ 2654.985089][T24948] usb 3-1: SerialNumber: syz [ 2655.210693][T24948] usb 3-1: 0:2 : does not exist [ 2655.224085][T24948] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2655.342239][T24948] usb 3-1: USB disconnect, device number 70 [ 2655.448259][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2655.823022][ T4042] overlayfs: failed to resolve './file0/file0': -2 [ 2657.280640][ T5809] vhci_hcd: vhci_device speed not set [ 2658.258065][ T4073] loop6: detected capacity change from 0 to 7 [ 2658.331934][ T4073] Dev loop6: unable to read RDB block 7 [ 2658.339397][ T4073] loop6: unable to read partition table [ 2658.346776][ T4073] loop6: partition table beyond EOD, truncated [ 2658.353146][ T4073] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 2658.372451][ T2524] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2659.270324][ T2524] usb 4-1: Using ep0 maxpacket: 16 [ 2659.289376][ T2524] usb 4-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 2659.316703][ T2524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2659.356342][ T2524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2659.379087][ T2524] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2659.403566][ T2524] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2659.481655][ T2524] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2659.505106][ T2524] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2659.521037][ T2524] usb 4-1: Manufacturer: syz [ 2659.575087][ T2524] usb 4-1: config 0 descriptor?? [ 2659.676402][ T4084] loop6: detected capacity change from 0 to 7 [ 2659.687902][ T4084] Dev loop6: unable to read RDB block 7 [ 2659.694425][ T4084] loop6: unable to read partition table [ 2659.701770][ T4084] loop6: partition table beyond EOD, truncated [ 2659.708347][ T4084] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 2660.625679][ T4089] loop1: detected capacity change from 0 to 16 [ 2660.654642][ T4089] erofs: (device loop1): mounted with root inode @ nid 36. [ 2660.854900][T14513] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 2660.878760][ T4089] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 2660.890531][ T28] audit: type=1800 audit(1775270224.681:24): pid=4089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7753" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 2660.920319][ T2524] rc_core: IR keymap rc-hauppauge not found [ 2661.672322][ T2524] Registered IR keymap rc-empty [ 2661.770175][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2661.808906][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2661.898998][ T2524] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2661.944804][ T2524] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input198 [ 2661.995198][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.040098][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.100137][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.155674][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.200302][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.240340][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.289246][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.331888][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.381629][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.434034][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2662.485329][ T2524] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2662.519691][ T2524] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2662.553242][ T2524] usb 4-1: USB disconnect, device number 67 [ 2663.627873][ T4120] ubi31: attaching mtd0 [ 2663.640927][ T4120] ubi31: scanning is finished [ 2664.611090][ T4120] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 2665.287158][T29162] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2665.432029][ T4137] syzkaller0: entered promiscuous mode [ 2665.437572][ T4137] syzkaller0: entered allmulticast mode [ 2665.488991][T29162] usb 3-1: Using ep0 maxpacket: 16 [ 2665.508652][T29162] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 2665.521408][T29162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2665.532811][ T4138] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7766'. [ 2665.568388][T29162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2665.601436][T29162] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2665.615427][T29162] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2665.637458][T29162] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2665.647278][T29162] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2665.670225][T29162] usb 3-1: Manufacturer: syz [ 2665.691424][T29162] usb 3-1: config 0 descriptor?? [ 2667.710107][T29162] rc_core: IR keymap rc-hauppauge not found [ 2667.716306][T29162] Registered IR keymap rc-empty [ 2667.807582][ T4153] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2667.814185][ T4153] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2667.822291][ T4153] vhci_hcd vhci_hcd.0: Device attached [ 2668.162450][ T5809] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 2668.246318][ T4154] vhci_hcd: connection closed [ 2668.294783][T13788] vhci_hcd: stop threads [ 2668.347032][T13788] vhci_hcd: release socket [ 2668.391627][T13788] vhci_hcd: disconnect device [ 2668.705746][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2668.740299][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2668.782236][T29162] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2668.797871][T29162] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input199 [ 2668.819549][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2668.854895][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2668.900161][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2668.950148][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2668.996315][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2669.050137][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2669.111430][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2669.150716][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2669.180620][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2669.211234][T29162] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2669.260260][T29162] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2669.273373][T29162] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2669.311082][T29162] usb 3-1: USB disconnect, device number 71 [ 2670.537590][ T4173] ubi31: attaching mtd0 [ 2670.550328][ T4173] ubi31: scanning is finished [ 2671.455045][ T4173] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 2673.460277][ T5809] vhci_hcd: vhci_device speed not set [ 2674.819189][ T4209] loop3: detected capacity change from 0 to 32768 [ 2676.017392][ T2524] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2676.280339][ T2524] usb 1-1: Using ep0 maxpacket: 16 [ 2676.377467][ T2524] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2676.455881][ T2524] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2676.484083][ T2524] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2676.493346][ T2524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.520045][ T2524] usb 1-1: Product: syz [ 2676.528303][ T2524] usb 1-1: Manufacturer: syz [ 2676.564951][ T2524] usb 1-1: SerialNumber: syz [ 2676.799855][ T4219] loop6: detected capacity change from 0 to 7 [ 2676.846959][ T4219] Dev loop6: unable to read RDB block 7 [ 2676.853184][ T4219] loop6: unable to read partition table [ 2676.934600][ T4219] loop6: partition table beyond EOD, truncated [ 2676.957359][ T4219] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 2677.824079][ T2524] usb 1-1: 0:2 : does not exist [ 2677.895172][ T2524] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2677.963509][ T2524] usb 1-1: USB disconnect, device number 48 [ 2678.046694][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2679.341604][ T2524] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2680.129782][ T4237] loop6: detected capacity change from 0 to 7 [ 2680.141591][ T4237] Dev loop6: unable to read RDB block 7 [ 2680.147744][ T4237] loop6: unable to read partition table [ 2680.154469][ T4237] loop6: partition table beyond EOD, truncated [ 2680.160977][ T4237] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 2680.691577][ T2524] usb 4-1: Using ep0 maxpacket: 16 [ 2680.709273][ T2524] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2680.787188][ T2524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2680.833613][ T2524] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2680.875074][ T2524] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2680.908416][ T2524] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2681.015328][ T2524] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2681.041718][ T2524] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2681.081468][ T2524] usb 4-1: Manufacturer: syz [ 2681.107722][ T2524] usb 4-1: config 0 descriptor?? [ 2682.298628][ T4243] loop2: detected capacity change from 0 to 32768 [ 2682.991184][ T2524] rc_core: IR keymap rc-hauppauge not found [ 2682.997259][ T2524] Registered IR keymap rc-empty [ 2683.110110][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2683.421613][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2683.474792][ T2524] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2683.529780][ T2524] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input200 [ 2683.581361][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2683.630623][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2683.690184][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2683.745290][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2683.780330][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2683.837970][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2684.003029][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2685.094510][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2685.297908][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2685.630769][ T2524] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2686.429648][ T2524] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 2686.527386][ T2524] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2686.585616][ T2524] usb 4-1: USB disconnect, device number 68 [ 2689.377617][ T5774] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2689.600031][ T5774] usb 2-1: Using ep0 maxpacket: 16 [ 2689.640670][ T5774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2689.651837][ T5774] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2689.679793][ T5774] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2689.690218][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.698392][ T5774] usb 2-1: Product: syz [ 2689.723640][ T5774] usb 2-1: Manufacturer: syz [ 2689.728388][ T5774] usb 2-1: SerialNumber: syz [ 2689.973321][ T5774] usb 2-1: 0:2 : does not exist [ 2690.002468][ T5774] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2690.061429][ T5774] usb 2-1: USB disconnect, device number 55 [ 2690.186476][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2690.700194][ T9499] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2691.121072][ T9499] usb 1-1: Using ep0 maxpacket: 16 [ 2691.136483][ T9499] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2691.199478][ T9499] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2691.353687][ T9499] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2691.368973][ T9499] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2691.380591][ T9499] usb 1-1: Product: syz [ 2691.384927][ T9499] usb 1-1: Manufacturer: syz [ 2691.389913][ T9499] usb 1-1: SerialNumber: syz [ 2691.684667][ T9499] usb 1-1: 0:2 : does not exist [ 2691.695149][ T9499] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 2691.745426][ T9499] usb 1-1: USB disconnect, device number 49 [ 2692.096498][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2694.542575][ T4342] Bluetooth: hci4: command 0x1003 tx timeout [ 2694.549284][T14513] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2696.608258][ T4373] loop2: detected capacity change from 0 to 32768 [ 2699.221771][ T4395] loop0: detected capacity change from 0 to 32768 [ 2699.984237][T14513] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2700.220081][ T5774] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2700.444258][ T5774] usb 3-1: Using ep0 maxpacket: 16 [ 2700.475354][ T5774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2700.518503][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2700.575476][ T5774] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2700.623889][ T5774] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2700.649577][ T5774] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2700.682620][ T5774] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2700.700466][ T5774] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2700.723416][ T5774] usb 3-1: Manufacturer: syz [ 2700.755035][ T5774] usb 3-1: config 0 descriptor?? [ 2701.230445][ T5774] rc_core: IR keymap rc-hauppauge not found [ 2701.238910][ T5774] Registered IR keymap rc-empty [ 2701.259134][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.330136][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.371144][ T5774] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2701.402544][ T5774] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input201 [ 2701.450153][T31121] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2701.469790][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.520222][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.556787][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.622793][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.661547][T31121] usb 1-1: Using ep0 maxpacket: 16 [ 2701.679811][T31121] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2701.700783][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.730221][T31121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2701.763100][T31121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2701.782004][T31121] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2701.792427][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.810317][T31121] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2701.840266][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.880334][T31121] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2701.889648][T31121] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2701.908201][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.915905][T31121] usb 1-1: Manufacturer: syz [ 2701.928901][T31121] usb 1-1: config 0 descriptor?? [ 2701.960246][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2701.990450][ T5774] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 2702.053486][ T5774] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2702.075095][ T5774] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2702.106272][ T5774] usb 3-1: USB disconnect, device number 72 [ 2702.312015][T31121] rc_core: IR keymap rc-hauppauge not found [ 2702.559015][T31121] Registered IR keymap rc-empty [ 2702.844765][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2702.910124][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2702.950735][T31121] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 2703.008557][T31121] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input202 [ 2703.111165][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.180318][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.212152][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.250227][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.291929][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.363272][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.412183][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.471551][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.510243][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.545753][T31121] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2703.593820][T31121] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2703.627945][T31121] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2703.683664][T31121] usb 1-1: USB disconnect, device number 50 [ 2703.918592][ T4451] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2703.925672][ T4451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2703.933889][ T4451] vhci_hcd vhci_hcd.0: Device attached [ 2704.309551][ T9499] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 2704.834796][ T4452] vhci_hcd: connection reset by peer [ 2705.314038][T17644] vhci_hcd: stop threads [ 2705.318918][T17644] vhci_hcd: release socket [ 2705.332081][T17644] vhci_hcd: disconnect device [ 2705.348648][ T4455] syzkaller0: entered promiscuous mode [ 2705.364177][ T4455] syzkaller0: entered allmulticast mode [ 2705.483686][ T4455] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7847'. [ 2706.972483][ T4470] loop0: detected capacity change from 0 to 32768 [ 2708.550521][T31121] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2708.760992][T31121] usb 2-1: Using ep0 maxpacket: 16 [ 2708.772929][T31121] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2708.810124][T31121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2708.854099][T31121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2708.884484][T31121] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2708.910557][T31121] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2708.970754][T31121] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2708.999442][T31121] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2709.012057][T31121] usb 2-1: Manufacturer: syz [ 2709.062296][T31121] usb 2-1: config 0 descriptor?? [ 2709.420255][T31121] rc_core: IR keymap rc-hauppauge not found [ 2709.435778][T31121] Registered IR keymap rc-empty [ 2709.460293][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2709.509496][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2709.541177][T31121] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2709.580191][ T9499] vhci_hcd: vhci_device speed not set [ 2709.586688][T31121] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input203 [ 2709.624301][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2709.682410][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2709.732075][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2709.800238][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2709.840430][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2709.891678][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2709.950437][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2710.000960][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2710.050598][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2710.107474][ T4498] loop2: detected capacity change from 0 to 2048 [ 2710.116587][T31121] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2710.146444][ T4498] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2710.162033][T31121] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2710.187660][T31121] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2710.188814][ T4498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2710.230615][T31121] usb 2-1: USB disconnect, device number 56 [ 2710.307442][ T4498] overlayfs: missing 'workdir' [ 2710.970088][T31121] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2711.190193][T31121] usb 3-1: Using ep0 maxpacket: 16 [ 2711.206127][T31121] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2711.249994][T31121] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2711.281200][T31121] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2711.310019][T31121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2711.318075][T31121] usb 3-1: Product: syz [ 2711.330256][T31121] usb 3-1: Manufacturer: syz [ 2711.345759][T31121] usb 3-1: SerialNumber: syz [ 2711.597090][T31121] usb 3-1: 0:2 : does not exist [ 2711.647680][T31121] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2711.718956][T31121] usb 3-1: USB disconnect, device number 73 [ 2711.856360][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2713.839783][ T5827] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2713.914934][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.938867][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.748581][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 2714.811122][ T4534] loop2: detected capacity change from 0 to 32768 [ 2715.643190][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2715.660551][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2715.830172][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2715.868003][ T5827] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2715.884560][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2715.940076][ T5827] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2715.950045][ T5827] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2715.958119][ T5827] usb 1-1: Manufacturer: syz [ 2716.060897][ T5827] usb 1-1: config 0 descriptor?? [ 2716.460178][ T5827] rc_core: IR keymap rc-hauppauge not found [ 2716.490514][ T5827] Registered IR keymap rc-empty [ 2716.520348][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2716.580443][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2717.169320][ T5827] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2717.745060][ T4547] loop1: detected capacity change from 0 to 32768 [ 2718.716679][ T5827] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input204 [ 2718.781578][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2718.821618][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2718.881128][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2718.940979][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2718.980334][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2719.010090][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2719.075782][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2719.140264][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2719.170266][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2719.227506][ T5827] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 2719.272076][ T5827] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2719.324610][ T5827] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2719.408368][ T5827] usb 1-1: USB disconnect, device number 51 [ 2719.661864][T31121] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2720.010166][T31121] usb 4-1: Using ep0 maxpacket: 16 [ 2720.199475][T31121] usb 4-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 2720.221869][T31121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2720.254426][T31121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2720.280465][T31121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2720.320089][T31121] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2720.355075][T31121] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2720.374554][T31121] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2720.400004][T31121] usb 4-1: Manufacturer: syz [ 2720.423075][T31121] usb 4-1: config 0 descriptor?? [ 2720.885531][T31121] rc_core: IR keymap rc-hauppauge not found [ 2720.916671][T31121] Registered IR keymap rc-empty [ 2720.941216][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2720.990336][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.031267][T31121] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2721.074042][T31121] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input205 [ 2721.109023][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.150221][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.212418][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.260924][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.300290][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.319897][ T4585] syzkaller0: entered promiscuous mode [ 2721.329806][ T4585] syzkaller0: entered allmulticast mode [ 2721.365975][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.400185][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.440305][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.478534][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.530189][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2721.572637][T31121] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2721.590330][ T5827] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2721.606583][T31121] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2721.642335][T31121] usb 4-1: USB disconnect, device number 69 [ 2721.800324][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 2721.827011][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2721.874529][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2721.906203][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2721.931222][ T5827] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2721.943534][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2721.965078][ T5827] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2721.986011][ T5827] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2721.999810][ T5827] usb 2-1: Manufacturer: syz [ 2722.012577][ T5827] usb 2-1: config 0 descriptor?? [ 2723.432588][ T4597] loop3: detected capacity change from 0 to 32768 [ 2724.046107][ T5827] rc_core: IR keymap rc-hauppauge not found [ 2724.134061][ T5827] Registered IR keymap rc-empty [ 2724.139157][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.202975][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.362274][ T5827] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2724.472841][ T5827] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input206 [ 2724.515848][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.580100][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.620351][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.689842][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.742564][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.800249][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.862449][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.911515][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2724.960195][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2725.025219][ T5827] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2725.082161][ T5827] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2725.121950][ T5827] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2725.170258][ T5827] usb 2-1: USB disconnect, device number 57 [ 2727.664737][ T4342] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2727.670471][T14513] Bluetooth: hci4: command 0x1003 tx timeout [ 2727.970168][T31121] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2728.170831][T31121] usb 4-1: Using ep0 maxpacket: 16 [ 2728.212388][T31121] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2728.230089][T31121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2728.243531][T31121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2728.258808][T31121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2728.290180][T31121] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2728.336924][T31121] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2728.349984][T31121] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2728.358054][T31121] usb 4-1: Manufacturer: syz [ 2728.387605][T31121] usb 4-1: config 0 descriptor?? [ 2728.669211][T29162] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 2728.760211][T31121] rc_core: IR keymap rc-hauppauge not found [ 2728.790114][T31121] Registered IR keymap rc-empty [ 2728.798132][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2728.837389][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2728.868025][T29162] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2728.868135][T31121] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2728.877198][T29162] usb 2-1: config 0 has no interface number 0 [ 2728.922017][T31121] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input207 [ 2728.930893][T29162] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2728.963561][T29162] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2728.965971][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2728.980047][T29162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2728.990553][T29162] usb 2-1: Product: syz [ 2728.994868][T29162] usb 2-1: Manufacturer: syz [ 2728.999520][T29162] usb 2-1: SerialNumber: syz [ 2729.051445][T29162] usb 2-1: config 0 descriptor?? [ 2729.058572][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.113376][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.169468][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.212033][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.245092][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.300492][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.342434][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.384323][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.430755][T31121] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 2729.464797][T31121] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2729.474140][T31121] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2729.487374][T31121] usb 4-1: USB disconnect, device number 70 [ 2729.527528][T29162] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2729.552284][T29162] CoreChips: probe of 2-1:0.41 failed with error -71 [ 2729.585212][T29162] usb 2-1: USB disconnect, device number 58 [ 2730.104148][ T4660] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7905'. [ 2730.258943][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7909'. [ 2730.311444][T31121] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2730.510087][T31121] usb 4-1: Using ep0 maxpacket: 16 [ 2730.534983][T31121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2730.566180][T31121] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2730.583617][T31121] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2730.603533][T31121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2730.620385][T31121] usb 4-1: Product: syz [ 2730.630967][T31121] usb 4-1: Manufacturer: syz [ 2730.640162][T31121] usb 4-1: SerialNumber: syz [ 2730.866365][T31121] usb 4-1: 0:2 : does not exist [ 2730.893495][T31121] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2730.956006][T31121] usb 4-1: USB disconnect, device number 71 [ 2731.090160][T32635] udevd[32635]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2731.098806][ T4695] loop0: detected capacity change from 0 to 764 [ 2732.059244][ T4705] loop2: detected capacity change from 0 to 512 [ 2732.088137][ T4705] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 2732.152322][ T4705] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 2732.161826][ T4705] System zones: 0-2, 18-18, 34-34 [ 2732.247125][ T4705] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 2732.272617][ T4705] EXT4-fs (loop2): Remounting filesystem read-only [ 2732.417193][ T4705] EXT4-fs (loop2): 1 truncate cleaned up [ 2732.452710][ T12] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 2732.477462][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2732.500620][ T12] Quota error (device loop2): write_blk: dquota write failed [ 2732.513839][ T12] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 2732.537907][ T12] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 2732.558617][ T12] Quota error (device loop2): write_blk: dquota write failed [ 2732.580484][ T12] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 2732.606180][ T4705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2732.606226][ T12] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 2732.620140][ T4705] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2732.637459][ T12] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 2732.701489][ T12] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 2732.730314][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2732.862464][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2733.239525][ T4745] loop1: detected capacity change from 0 to 136 [ 2733.727119][ T4758] ieee802154 phy0 wpan0: encryption failed: -22 [ 2733.888837][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7944'. [ 2733.911139][ T4760] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7944'. [ 2734.375949][ T4776] loop0: detected capacity change from 0 to 512 [ 2734.917489][ T4790] syz_tun: entered allmulticast mode [ 2734.939804][ T4789] syz_tun: left allmulticast mode [ 2734.973651][ T4792] loop1: detected capacity change from 0 to 512 [ 2735.008614][ T4792] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2735.045691][ T4794] 8021q: VLANs not supported on lo [ 2735.052611][ T4792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c02c, mo2=0003] [ 2735.080969][ T4792] System zones: 1-12 [ 2735.124196][ T4792] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.7958: error while reading EA inode 32 err=-116 [ 2735.243398][ T4792] EXT4-fs (loop1): Remounting filesystem read-only [ 2735.276815][ T4792] EXT4-fs (loop1): 1 orphan inode deleted [ 2735.291036][ T4792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2735.329302][ T1144] kworker/u4:8: attempt to access beyond end of device [ 2735.329302][ T1144] loop0: rw=1, sector=3480, nr_sectors = 3224 limit=512 [ 2735.356509][ T1144] kworker/u4:8: attempt to access beyond end of device [ 2735.356509][ T1144] loop0: rw=1, sector=6704, nr_sectors = 3632 limit=512 [ 2735.393085][ T1144] kworker/u4:8: attempt to access beyond end of device [ 2735.393085][ T1144] loop0: rw=1, sector=10336, nr_sectors = 2264 limit=512 [ 2735.493070][ T2247] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2735.819836][ T4809] loop1: detected capacity change from 0 to 512 [ 2735.866286][ T4809] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2735.962717][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7966'. [ 2736.216919][ T4818] loop0: detected capacity change from 0 to 164 [ 2736.233565][ T4819] loop2: detected capacity change from 0 to 1024 [ 2736.268147][ T4818] Unable to read rock-ridge attributes [ 2736.390925][ T4819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2736.551305][ T4831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7974'. [ 2736.576422][ T4831] bridge1: entered promiscuous mode [ 2736.591715][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2736.764138][ T4837] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2736.943441][ T4841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2737.906505][ T4847] loop0: detected capacity change from 0 to 512 [ 2737.921864][ T4851] loop3: detected capacity change from 0 to 128 [ 2737.941740][ T4847] EXT4-fs: Ignoring removed orlov option [ 2737.979311][ T4847] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 2738.000653][ T4851] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2738.034667][ T4857] loop1: detected capacity change from 0 to 512 [ 2738.069153][ T4847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 2738.080980][ T4851] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2738.082385][ T4847] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.7983: corrupted in-inode xattr: e_value size too large [ 2738.129792][ T4857] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2738.156876][ T4847] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.7983: couldn't read orphan inode 15 (err -117) [ 2738.194945][ T4857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c02c, mo2=0003] [ 2738.228599][ T4857] System zones: 1-12 [ 2738.250552][ T4857] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.7984: error while reading EA inode 32 err=-116 [ 2738.276083][ T4847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2738.292647][ T4857] EXT4-fs (loop1): Remounting filesystem read-only [ 2738.333149][ T4857] EXT4-fs (loop1): 1 orphan inode deleted [ 2738.366132][ T4857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2738.402121][ T1664] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2738.564625][ T2247] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2738.649441][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2738.779388][ T4867] loop0: detected capacity change from 0 to 128 [ 2739.003434][ T4873] loop3: detected capacity change from 0 to 128 [ 2739.066597][ T4875] loop1: detected capacity change from 0 to 256 [ 2739.101635][ T4873] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2739.115810][ T4873] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2739.295503][ T4880] loop2: detected capacity change from 0 to 1024 [ 2739.351234][ T1664] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2739.397446][ T4880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 2739.475397][ T4880] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2739.625175][ T28] audit: type=1800 audit(1775270303.411:25): pid=4880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7996" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 2739.730213][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2741.901393][ T5774] kernel write not supported for file /vcs (pid: 5774 comm: kworker/0:3) [ 2742.122965][ T4925] loop1: detected capacity change from 0 to 1024 [ 2742.194476][ T4928] loop2: detected capacity change from 0 to 512 [ 2742.235037][ T4925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2742.274049][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8015'. [ 2742.368642][ T2247] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2742.653851][ T4943] loop0: detected capacity change from 0 to 512 [ 2742.747006][ T4943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2742.774227][ T1005] Bluetooth: hci4: Frame reassembly failed (-84) [ 2742.837776][ T4943] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2743.142202][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2743.343213][ T4965] loop0: detected capacity change from 0 to 1024 [ 2743.388389][ T4965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2743.502282][ T4969] loop3: detected capacity change from 0 to 1024 [ 2743.528422][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2743.561306][ T4969] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 2743.575965][ T4969] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2743.639311][ T4969] EXT4-fs (loop3): mount failed [ 2743.666794][ T4972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8028'. [ 2743.688051][ T4972] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8028'. [ 2743.870232][ T4974] loop2: detected capacity change from 0 to 1024 [ 2743.910416][ T4974] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 2744.431093][ T4991] loop0: detected capacity change from 0 to 1024 [ 2744.461169][ T28] audit: type=1326 audit(1775270308.251:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.2.8038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2744.528281][ T4991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2744.564209][ T28] audit: type=1326 audit(1775270308.271:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.2.8038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2744.598247][ T28] audit: type=1326 audit(1775270308.291:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.2.8038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2744.649195][ T28] audit: type=1326 audit(1775270308.291:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.2.8038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2744.674448][ T28] audit: type=1326 audit(1775270308.291:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.2.8038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2744.696744][ C1] vkms_vblank_simulate: vblank timer overrun [ 2744.727969][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2744.780573][ T4637] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2745.117987][ T5010] loop2: detected capacity change from 0 to 512 [ 2745.139825][ T5010] EXT4-fs: Ignoring removed bh option [ 2745.160953][ T5010] EXT4-fs: inline encryption not supported [ 2745.198085][ T5010] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2745.237854][ T5010] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 2745.301869][ T5016] syzkaller0: entered promiscuous mode [ 2745.326920][ T5010] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.8042: bg 0: block 248: padding at end of block bitmap is not set [ 2745.440836][ T5010] Quota error (device loop2): write_blk: dquota write failed [ 2745.449006][ T5010] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2745.507462][ T5010] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.8042: Failed to acquire dquot type 1 [ 2745.550178][ T5010] EXT4-fs (loop2): 1 truncate cleaned up [ 2745.559841][ T5010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 2745.613486][ T5010] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 2745.630663][ T5010] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2745.704601][ T5010] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.8042: Failed to acquire dquot type 1 [ 2745.852273][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 2745.870263][ T1005] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 2745.880960][ T1005] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:6: Failed to release dquot type 1 [ 2746.099176][ T5031] loop3: detected capacity change from 0 to 512 [ 2746.114266][ T5032] loop2: detected capacity change from 0 to 512 [ 2746.132400][ T5032] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.8050: inode has both inline data and extents flags [ 2746.156420][ T5032] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.8050: couldn't read orphan inode 15 (err -117) [ 2746.172758][ T5032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000400000000 r/w without journal. Quota mode: writeback. [ 2746.321814][ T5031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2746.363805][ T5031] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2746.406738][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000400000000. [ 2746.493268][ T5045] program syz.1.8057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2746.661893][ T1664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2746.760810][ T5049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8059'. [ 2746.884540][ T5053] EXT4-fs: Ignoring removed bh option [ 2746.916278][ T5053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2746.917540][T17609] kernel write not supported for file /vcs (pid: 17609 comm: kworker/0:0) [ 2746.976002][ T5053] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2747.005151][ T5053] EXT4-fs (loop3): 1 truncate cleaned up [ 2747.016469][ T5053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2747.207901][ T1664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2747.242069][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8064'. [ 2747.299608][ T5064] set_capacity_and_notify: 2 callbacks suppressed [ 2747.299626][ T5064] loop0: detected capacity change from 0 to 2048 [ 2747.315047][ T5066] loop1: detected capacity change from 0 to 512 [ 2747.343784][ T5066] FAT-fs (loop1): bogus number of FAT sectors [ 2747.358296][ T5066] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2747.387667][ T5064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2747.462021][ T5064] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2747.644790][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2747.647891][ T5072] loop3: detected capacity change from 0 to 8192 [ 2747.660409][ T5061] hsr_slave_1 (unregistering): left promiscuous mode [ 2747.736529][ T5072] loop3: p1 p2 [ 2747.741177][ T5072] loop3: p1 start 51314688 is beyond EOD, truncated [ 2748.220243][ T5093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2748.283310][ T5096] loop1: detected capacity change from 0 to 512 [ 2748.353834][ T5096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2748.366701][ T5096] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2748.596731][ T2247] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2748.726276][ T5110] loop1: detected capacity change from 0 to 1024 [ 2748.742622][ T5110] EXT4-fs: Mount option(s) incompatible with ext2 [ 2748.876545][ T5113] loop2: detected capacity change from 0 to 512 [ 2748.917049][ T5113] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2749.013948][ T5113] EXT4-fs (loop2): 1 orphan inode deleted [ 2749.019768][ T5113] EXT4-fs (loop2): 1 truncate cleaned up [ 2749.106110][ T5113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2749.265265][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2749.356765][ T5131] bridge_slave_0: left allmulticast mode [ 2749.392772][ T5131] bridge_slave_0: left promiscuous mode [ 2749.403440][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.440931][ T5131] bridge_slave_1: left allmulticast mode [ 2749.446666][ T5131] bridge_slave_1: left promiscuous mode [ 2749.457743][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.473591][ T5131] bond0: (slave bond_slave_0): Releasing backup interface [ 2749.503626][ T5131] bond0: (slave bond_slave_1): Releasing backup interface [ 2749.587555][ T5131] team0: Port device team_slave_0 removed [ 2749.624407][ T5131] team0: Port device team_slave_1 removed [ 2749.638231][ T5131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2749.648038][ T5131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2749.667519][ T5131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2749.688226][ T5131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2749.739492][ T5137] team0: Mode changed to "loadbalance" [ 2749.743077][ T5149] loop3: detected capacity change from 0 to 256 [ 2749.789831][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8086'. [ 2749.811240][ T28] audit: type=1800 audit(1775270313.591:31): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8090" name="file0" dev="loop3" ino=1048636 res=0 errno=0 [ 2750.706533][ T1352] Bluetooth: hci4: command 0x1003 tx timeout [ 2750.716064][ T4637] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2750.835460][ T5176] loop3: detected capacity change from 0 to 512 [ 2750.877043][ T5176] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2750.892242][ T5176] EXT4-fs (loop3): 1 truncate cleaned up [ 2750.905975][ T5176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2750.930681][ T5181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8102'. [ 2750.980732][ T5181] netlink: 288 bytes leftover after parsing attributes in process `syz.1.8102'. [ 2751.168964][ T1664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2751.382009][ T5192] syzkaller0: entered promiscuous mode [ 2751.774626][T24948] kernel write not supported for file /vcs (pid: 24948 comm: kworker/1:4) [ 2751.884920][ T5211] loop1: detected capacity change from 0 to 128 [ 2751.975473][ T28] audit: type=1800 audit(1775270315.761:32): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8117" name="file2" dev="loop1" ino=1048638 res=0 errno=0 [ 2752.506962][ T5225] syzkaller0: entered promiscuous mode [ 2752.705107][ T5774] kernel write not supported for file /vcs (pid: 5774 comm: kworker/0:3) [ 2753.601225][ T5261] ieee802154 phy0 wpan0: encryption failed: -22 [ 2753.667029][ T5827] kernel write not supported for file /vcs (pid: 5827 comm: kworker/1:5) [ 2753.799339][ T5267] syzkaller0: entered promiscuous mode [ 2753.946959][ T28] audit: type=1326 audit(1775270317.731:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.0.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d79c819 code=0x7ffc0000 [ 2753.971751][ T28] audit: type=1326 audit(1775270317.731:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.0.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d79c819 code=0x7ffc0000 [ 2753.995080][ T28] audit: type=1326 audit(1775270317.761:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.0.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d79c819 code=0x7ffc0000 [ 2754.017813][ T28] audit: type=1326 audit(1775270317.761:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.0.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d79c819 code=0x7ffc0000 [ 2754.040770][ T28] audit: type=1326 audit(1775270317.761:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.0.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f740d79c819 code=0x7ffc0000 [ 2754.070586][ T28] audit: type=1326 audit(1775270317.761:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.0.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d79c819 code=0x7ffc0000 [ 2754.096553][ T28] audit: type=1326 audit(1775270317.761:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.0.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d79c819 code=0x7ffc0000 [ 2754.123993][ T28] audit: type=1326 audit(1775270317.781:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5268 comm="syz.0.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d79c819 code=0x7ffc0000 [ 2754.216556][ T5272] sch_fq: defrate 0 ignored. [ 2754.360990][ T5276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8140'. [ 2754.410407][ T5276] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8140'. [ 2754.686771][ T5286] syzkaller0: entered promiscuous mode [ 2754.701062][ T5284] loop2: detected capacity change from 0 to 4096 [ 2754.728547][ T5284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2754.815661][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2755.036942][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 2755.036962][ T28] audit: type=1107 audit(1775270318.821:151): pid=5296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='#' [ 2755.110493][ T4637] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2755.733903][ T5317] netlink: 'syz.3.8153': attribute type 10 has an invalid length. [ 2755.783388][ T5317] 8021q: adding VLAN 0 to HW filter on device team0 [ 2755.828091][ T5317] bond0: (slave team0): Enslaving as an active interface with an up link [ 2755.833897][ T5321] loop1: detected capacity change from 0 to 512 [ 2755.931675][ T5321] EXT4-fs (loop1): 1 truncate cleaned up [ 2755.990599][ T5321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2756.085914][ T5327] syzkaller0: entered promiscuous mode [ 2756.221923][ T2247] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2756.583624][ T5342] loop3: detected capacity change from 0 to 512 [ 2756.653842][ T5342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2756.687016][ T5342] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2756.817808][ T5352] loop2: detected capacity change from 0 to 128 [ 2756.922401][ T28] audit: type=1800 audit(1775270320.701:152): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8162" name="file2" dev="loop2" ino=1048640 res=0 errno=0 [ 2756.975583][ T1664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2757.332096][ T5364] loop2: detected capacity change from 0 to 2048 [ 2757.389750][ T5364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2757.441737][ T5364] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2757.653011][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2758.621916][ T5407] syzkaller0: entered promiscuous mode [ 2758.940118][ T4637] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2759.017834][ T5421] loop2: detected capacity change from 0 to 128 [ 2759.054305][ T28] audit: type=1800 audit(1775270322.841:153): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8187" name="file2" dev="loop2" ino=1048642 res=0 errno=0 [ 2759.222306][ T28] audit: type=1326 audit(1775270323.011:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.2.8189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2759.251200][ T28] audit: type=1326 audit(1775270323.031:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.2.8189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2759.310388][ T28] audit: type=1326 audit(1775270323.041:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.2.8189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2759.404951][ T5429] loop0: detected capacity change from 0 to 512 [ 2759.424155][ T28] audit: type=1326 audit(1775270323.061:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.2.8189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2759.447447][ T28] audit: type=1326 audit(1775270323.061:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.2.8189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4220b9c819 code=0x7ffc0000 [ 2759.500633][ T5429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2759.530462][ T5429] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2759.691705][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2759.731800][ T5444] syzkaller0: entered promiscuous mode [ 2760.111953][ T5455] loop1: detected capacity change from 0 to 128 [ 2760.192244][ T28] audit: type=1800 audit(1775270323.981:159): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8197" name="file2" dev="loop1" ino=1048644 res=0 errno=0 [ 2760.454833][ T5468] loop0: detected capacity change from 0 to 512 [ 2760.505946][ T5468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2760.551134][ T5468] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2760.752285][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2760.763747][ T5476] syzkaller0: entered promiscuous mode [ 2760.909345][ T5485] loop0: detected capacity change from 0 to 1024 [ 2761.013181][ T5485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2761.064108][ T5492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8209'. [ 2761.110071][ T5485] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2761.214678][ T5485] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.8207: lblock 0 mapped to illegal pblock 0 (length 1) [ 2761.280536][ T5485] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 2761.310484][ T5485] EXT4-fs (loop0): This should not happen!! Data will be lost [ 2761.310484][ T5485] [ 2761.333800][ T5496] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #15: comm syz.0.8207: lblock 0 mapped to illegal pblock 0 (length 1) [ 2761.437574][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2761.763645][ T5509] loop1: detected capacity change from 0 to 512 [ 2761.892098][ T5509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2761.931363][ T5509] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2761.972767][ T5524] loop0: detected capacity change from 0 to 1024 [ 2762.043955][ T5524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2762.106397][ T2247] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2762.143766][ T28] audit: type=1800 audit(1775270325.931:160): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8219" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 2762.224814][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2762.375474][ T5529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8220'. [ 2762.412037][ T5529] netlink: 288 bytes leftover after parsing attributes in process `syz.1.8220'. [ 2763.218735][ T5548] loop0: detected capacity change from 0 to 512 [ 2763.284252][ T5549] syzkaller0: entered promiscuous mode [ 2763.305039][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2763.328177][ T5556] loop3: detected capacity change from 0 to 1024 [ 2763.337566][ T5548] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2763.442395][ T5556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2763.472382][ T1350] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2763.514622][ T28] audit: type=1800 audit(1775270327.301:161): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8229" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 2763.675093][ T1664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2763.742404][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8231'. [ 2763.771115][ T5568] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8231'. [ 2763.960359][ T5579] autofs4:pid:5579:autofs_fill_super: called with bogus options [ 2764.133825][ T5586] loop2: detected capacity change from 0 to 512 [ 2764.176578][ T5586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2764.281382][ T5586] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2764.426555][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8244'. [ 2764.448116][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8243'. [ 2764.478598][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8244'. [ 2764.499177][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2764.521263][ T5598] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8244'. [ 2764.563004][ T5595] syzkaller0: entered promiscuous mode [ 2764.856976][ T5606] loop1: detected capacity change from 0 to 2048 [ 2764.908891][ T5606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2765.042501][ T28] audit: type=1800 audit(1775270328.821:162): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8247" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 2765.085405][ T5621] loop0: detected capacity change from 0 to 512 [ 2765.100481][ T5615] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 2765.163528][ T5621] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.8254: inode has both inline data and extents flags [ 2765.178992][ T5626] loop2: detected capacity change from 0 to 512 [ 2765.198694][ T5606] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 2765.205603][ T5627] loop3: detected capacity change from 0 to 512 [ 2765.258714][ T5621] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.8254: couldn't read orphan inode 15 (err -117) [ 2765.269221][ T5606] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2765.269221][ T5606] [ 2765.282179][ T5606] EXT4-fs (loop1): Total free blocks count 0 [ 2765.289294][ T5622] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 2765.289439][ T5606] EXT4-fs (loop1): Free/Dirty block details [ 2765.309635][ T5606] EXT4-fs (loop1): free_blocks=66060288 [ 2765.319129][ T5626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2765.324655][ T5606] EXT4-fs (loop1): dirty_blocks=256 [ 2765.333190][ T5627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2765.337581][ T5606] EXT4-fs (loop1): Block reservation details [ 2765.359240][ T5606] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 2765.361601][ T5621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2765.377283][ T5626] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2765.399096][ T5627] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2765.489392][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2765.723088][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8255'. [ 2765.733197][ T1664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2765.733285][ T5632] loop0: detected capacity change from 512 to 64 [ 2765.801833][ T5621] syz.0.8254: attempt to access beyond end of device [ 2765.801833][ T5621] loop0: rw=14337, sector=84, nr_sectors = 2 limit=64 [ 2765.802451][ T5634] syz.0.8254: attempt to access beyond end of device [ 2765.802451][ T5634] loop0: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 2765.890284][ T5621] Buffer I/O error on dev loop0, logical block 42, lost sync page write [ 2765.898906][ T5621] EXT4-fs error (device loop0): ext4_splice_branch:472: inode #18: block 42: comm syz.0.8254: IO error syncing itable block [ 2765.983697][ T5621] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.8254: Error while async write back metadata [ 2766.039521][ T5621] syz.0.8254: attempt to access beyond end of device [ 2766.039521][ T5621] loop0: rw=2051, sector=302, nr_sectors = 2 limit=64 [ 2766.055957][ T5634] Buffer I/O error on dev loop0, logical block 36, lost sync page write [ 2766.104751][ T5634] EXT4-fs error (device loop0): ext4_handle_dirty_dirblock:440: inode #2: block 36: comm syz.0.8254: IO error syncing itable block [ 2766.110345][ T5621] EXT4-fs (loop0): discard request in group:0 block:150 count:1 failed with -5 [ 2766.154750][ T5621] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.8254: Error while async write back metadata [ 2766.204236][ T5634] EXT4-fs error (device loop0) in add_dirent_to_buf:2220: IO failure [ 2766.228105][ T5621] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 18: block 151:freeing already freed block (bit 150); block bitmap corrupt. [ 2766.247680][ T5621] EXT4-fs (loop0): pa ffff88807a2fecb0: logic 32, phys. 97, len 96 [ 2766.255755][ T5621] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5393: group 0, free 74, pa_free 73 [ 2766.268889][ T5621] syz.0.8254: attempt to access beyond end of device [ 2766.268889][ T5621] loop0: rw=14337, sector=84, nr_sectors = 2 limit=64 [ 2766.269048][ T5621] Buffer I/O error on dev loop0, logical block 42, lost sync page write [ 2766.269075][ T5621] EXT4-fs error (device loop0): ext4_free_data:985: inode #18: block 42: comm syz.0.8254: IO error syncing itable block [ 2766.272820][ T5634] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.8254: Error while async write back metadata [ 2766.277079][ T5621] syz.0.8254: attempt to access beyond end of device [ 2766.277079][ T5621] loop0: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 2766.277154][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 255) [ 2766.277481][ T5621] Buffer I/O error on device loop0, logical block 255 [ 2766.277682][ T5621] syz.0.8254: attempt to access beyond end of device [ 2766.277682][ T5621] loop0: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 2766.277709][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 253) [ 2766.277738][ T5621] Buffer I/O error on device loop0, logical block 253 [ 2766.277750][ T5621] Buffer I/O error on device loop0, logical block 254 [ 2766.277895][ T5621] syz.0.8254: attempt to access beyond end of device [ 2766.277895][ T5621] loop0: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 2766.277921][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 37) [ 2766.277948][ T5621] Buffer I/O error on device loop0, logical block 37 [ 2766.277975][ T5621] Buffer I/O error on device loop0, logical block 38 [ 2766.277987][ T5621] Buffer I/O error on device loop0, logical block 39 [ 2766.277999][ T5621] Buffer I/O error on device loop0, logical block 40 [ 2766.278106][ T5621] syz.0.8254: attempt to access beyond end of device [ 2766.278106][ T5621] loop0: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 2766.278132][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 249) [ 2766.278157][ T5621] Buffer I/O error on device loop0, logical block 249 [ 2766.278187][ T5621] Buffer I/O error on device loop0, logical block 250 [ 2766.278200][ T5621] Buffer I/O error on device loop0, logical block 251 [ 2766.278293][ T5621] syz.0.8254: attempt to access beyond end of device [ 2766.278293][ T5621] loop0: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 2766.278317][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 41) [ 2766.278432][ T5621] syz.0.8254: attempt to access beyond end of device [ 2766.278432][ T5621] loop0: rw=2049, sector=86, nr_sectors = 8 limit=64 [ 2766.278455][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 43) [ 2766.278620][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 209) [ 2766.278639][ T5651] loop2: detected capacity change from 0 to 512 [ 2766.334104][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 65) [ 2766.334398][ T5621] EXT4-fs warning (device loop0): ext4_end_bio:357: I/O error 10 writing to inode 18 starting block 129) [ 2766.385108][ T5651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2766.385233][ T5651] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2766.504209][ T2611] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2766.517553][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2766.566165][ T5657] loop1: detected capacity change from 0 to 128 [ 2766.991604][ T5660] __nla_validate_parse: 3 callbacks suppressed [ 2766.991624][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8266'. [ 2767.006762][ T5662] netlink: 268 bytes leftover after parsing attributes in process `syz.1.8264'. [ 2767.035539][ T5660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8266'. [ 2767.055172][ T5660] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8266'. [ 2767.218200][T13789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.312530][T13789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.442829][T13789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.483104][ T5657] netlink: 'syz.1.8264': attribute type 10 has an invalid length. [ 2767.606702][T13789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.046214][ T5675] loop2: detected capacity change from 0 to 512 [ 2768.074679][ T5677] loop3: detected capacity change from 0 to 512 [ 2768.219045][ T5675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2768.273380][ T5675] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2768.279561][ T5677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2768.360158][ T5677] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2768.387943][ T1352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2768.401605][ T1352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2768.438239][ T1352] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2768.489783][ T1352] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2768.505044][ T1352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2768.515274][ T1352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2768.561761][ T1983] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2768.594247][ T5688] 9pnet_fd: Insufficient options for proto=fd [ 2768.624545][ T1664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2768.851237][ T5695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8278'. [ 2768.870330][ T5695] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8278'. [ 2769.067723][ T5701] loop1: detected capacity change from 0 to 512 [ 2769.186886][ T5701] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 2769.200602][ T5701] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2769.262356][ T5701] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 2769.339114][ T5701] ------------[ cut here ]------------ [ 2769.345881][ T5701] EA inode 11 i_nlink=2 [ 2769.388894][ T5701] WARNING: CPU: 0 PID: 5701 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 2769.403826][ T5701] Modules linked in: [ 2769.408320][ T5701] CPU: 0 PID: 5701 Comm: syz.1.8280 Not tainted syzkaller #0 [ 2769.416283][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2769.426797][ T5701] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 2769.433357][ T5713] loop2: detected capacity change from 0 to 512 [ 2769.434039][ T5701] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d5 98 ff 49 8b 37 48 c7 c7 a0 d6 de 8a 89 da e8 94 51 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 6e 7d 3f 08 [ 2769.461682][ T5701] RSP: 0018:ffffc900053172e0 EFLAGS: 00010246 [ 2769.467810][ T5701] RAX: 7aad79146a382a00 RBX: 0000000000000002 RCX: 0000000000080000 [ 2769.476073][ T5701] RDX: ffffc9000c8c1000 RSI: 000000000003a91e RDI: 000000000003a91f [ 2769.484305][ T5701] RBP: ffffc900053173d0 R08: ffffc90005316ee7 R09: 1ffff92000a62ddc [ 2769.492549][ T5701] R10: dffffc0000000000 R11: fffff52000a62ddd R12: dffffc0000000000 [ 2769.500757][ T5701] R13: ffff8880312bb6a8 R14: ffff8880312bb4b0 R15: ffff8880312bb500 [ 2769.508790][ T5701] FS: 00007f1dbcc596c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2769.518240][ T5701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2769.524922][ T5701] CR2: 00007f38dcd4be9c CR3: 000000007dc7a000 CR4: 00000000003506f0 [ 2769.533023][ T5701] Call Trace: [ 2769.536343][ T5701] [ 2769.539332][ T5701] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 2769.547086][ T5701] ? __ext4_journal_ensure_credits+0x30/0x450 [ 2769.553604][ T5701] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 2769.559635][ T5701] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 2769.565484][ T5701] ? __ext4_journal_ensure_credits+0x450/0x450 [ 2769.571830][ T5701] ext4_xattr_delete_inode+0xb3e/0xd10 [ 2769.577367][ T5701] ? up_write+0x1c3/0x410 [ 2769.581874][ T5701] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 2769.588029][ T5713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2769.588177][ T5701] ext4_evict_inode+0xaaf/0xea0 [ 2769.606091][ T5701] ? _raw_spin_unlock+0x28/0x40 [ 2769.611222][ T5701] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 2769.611372][ T5713] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2769.617154][ T5701] ? do_raw_spin_unlock+0x121/0x230 [ 2769.617192][ T5701] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 2769.639228][ T5701] evict+0x4ca/0x8d0 [ 2769.644784][ T5701] ? proc_nr_inodes+0x230/0x230 [ 2769.649711][ T5701] ? do_raw_spin_unlock+0x121/0x230 [ 2769.655710][ T5701] ? _raw_spin_unlock+0x28/0x40 [ 2769.660842][ T5701] ? iput+0x706/0x920 [ 2769.664913][ T5701] ext4_orphan_cleanup+0xbec/0x1420 [ 2769.670315][ T5701] ? ext4_orphan_del+0xbf0/0xbf0 [ 2769.675313][ T5701] ? ext4_register_li_request+0x183/0x940 [ 2769.681139][ T5701] ? errseq_check_and_advance+0x66/0x120 [ 2769.686898][ T5701] ext4_fill_super+0x5ed0/0x6790 [ 2769.692006][ T5701] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 2769.698309][ T5701] ? __might_sleep+0xe0/0xe0 [ 2769.703047][ T5701] ? read_lock_is_recursive+0x20/0x20 [ 2769.708467][ T5701] ? snprintf+0xe9/0x140 [ 2769.712896][ T5701] ? down_read_killable+0x340/0x340 [ 2769.718166][ T5701] ? setup_bdev_super+0x56b/0x660 [ 2769.723332][ T5701] get_tree_bdev+0x3f3/0x520 [ 2769.727995][ T5701] ? vfs_parse_fs_string+0x170/0x170 [ 2769.733537][ T5701] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2769.739869][ T5701] ? setup_bdev_super+0x660/0x660 [ 2769.745262][ T5701] ? apparmor_capable+0x137/0x1a0 [ 2769.751937][ T5701] ? bpf_lsm_capable+0x9/0x10 [ 2769.756822][ T5701] ? security_capable+0x89/0xb0 [ 2769.762061][ T5701] vfs_get_tree+0x8c/0x280 [ 2769.766635][ T5701] do_new_mount+0x24b/0xa40 [ 2769.771299][ T5701] __se_sys_mount+0x2e7/0x3d0 [ 2769.776251][ T5701] ? __x64_sys_mount+0xc0/0xc0 [ 2769.781173][ T5701] ? lockdep_hardirqs_on+0x98/0x150 [ 2769.786603][ T5701] ? __x64_sys_mount+0x20/0xc0 [ 2769.792033][ T5701] do_syscall_64+0x55/0xa0 [ 2769.796507][ T5701] ? clear_bhb_loop+0x40/0x90 [ 2769.801423][ T5701] ? clear_bhb_loop+0x40/0x90 [ 2769.806180][ T5701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2769.812329][ T5701] RIP: 0033:0x7f1dbbd9da8a [ 2769.816796][ T5701] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2769.836736][ T5701] RSP: 002b:00007f1dbcc58e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2769.846044][ T5701] RAX: ffffffffffffffda RBX: 00007f1dbcc58ee0 RCX: 00007f1dbbd9da8a [ 2769.855786][ T5701] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f1dbcc58ea0 [ 2769.864406][ T5701] RBP: 00002000000009c0 R08: 00007f1dbcc58ee0 R09: 0000000000800718 [ 2769.872632][ T5701] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 2769.880879][ T5701] R13: 00007f1dbcc58ea0 R14: 000000000000048d R15: 0000200000000200 [ 2769.889136][ T5701] [ 2769.892642][ T5701] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2769.900182][ T5701] CPU: 0 PID: 5701 Comm: syz.1.8280 Not tainted syzkaller #0 [ 2769.907605][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2769.917888][ T5701] Call Trace: [ 2769.921209][ T5701] [ 2769.924173][ T5701] dump_stack_lvl+0x18c/0x250 [ 2769.929168][ T5701] ? show_regs_print_info+0x20/0x20 [ 2769.934430][ T5701] ? load_image+0x400/0x400 [ 2769.939070][ T5701] panic+0x2dc/0x730 [ 2769.943051][ T5701] ? bpf_jit_dump+0xd0/0xd0 [ 2769.947617][ T5701] __warn+0x2e0/0x470 [ 2769.951729][ T5701] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 2769.957847][ T5701] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 2769.963870][ T5701] report_bug+0x2be/0x4f0 [ 2769.968450][ T5701] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 2769.974566][ T5701] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 2769.980688][ T5701] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 2769.986733][ T5701] handle_bug+0xcf/0x120 [ 2769.991068][ T5701] exc_invalid_op+0x1a/0x50 [ 2769.995615][ T5701] asm_exc_invalid_op+0x1a/0x20 [ 2770.000592][ T5701] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 2770.008107][ T5701] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d5 98 ff 49 8b 37 48 c7 c7 a0 d6 de 8a 89 da e8 94 51 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 6e 7d 3f 08 [ 2770.027760][ T5701] RSP: 0018:ffffc900053172e0 EFLAGS: 00010246 [ 2770.033860][ T5701] RAX: 7aad79146a382a00 RBX: 0000000000000002 RCX: 0000000000080000 [ 2770.041928][ T5701] RDX: ffffc9000c8c1000 RSI: 000000000003a91e RDI: 000000000003a91f [ 2770.049913][ T5701] RBP: ffffc900053173d0 R08: ffffc90005316ee7 R09: 1ffff92000a62ddc [ 2770.057907][ T5701] R10: dffffc0000000000 R11: fffff52000a62ddd R12: dffffc0000000000 [ 2770.066236][ T5701] R13: ffff8880312bb6a8 R14: ffff8880312bb4b0 R15: ffff8880312bb500 [ 2770.074330][ T5701] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 2770.080311][ T5701] ? __ext4_journal_ensure_credits+0x30/0x450 [ 2770.086728][ T5701] ext4_xattr_inode_dec_ref_all+0x9a6/0x1040 [ 2770.092768][ T5701] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 2770.098527][ T5701] ? __ext4_journal_ensure_credits+0x450/0x450 [ 2770.104810][ T5701] ext4_xattr_delete_inode+0xb3e/0xd10 [ 2770.110595][ T5701] ? up_write+0x1c3/0x410 [ 2770.115091][ T5701] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 2770.121195][ T5701] ext4_evict_inode+0xaaf/0xea0 [ 2770.126067][ T5701] ? _raw_spin_unlock+0x28/0x40 [ 2770.130947][ T5701] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 2770.136864][ T5701] ? do_raw_spin_unlock+0x121/0x230 [ 2770.142165][ T5701] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 2770.148072][ T5701] evict+0x4ca/0x8d0 [ 2770.152254][ T5701] ? proc_nr_inodes+0x230/0x230 [ 2770.157292][ T5701] ? do_raw_spin_unlock+0x121/0x230 [ 2770.162686][ T5701] ? _raw_spin_unlock+0x28/0x40 [ 2770.167576][ T5701] ? iput+0x706/0x920 [ 2770.171609][ T5701] ext4_orphan_cleanup+0xbec/0x1420 [ 2770.176865][ T5701] ? ext4_orphan_del+0xbf0/0xbf0 [ 2770.181825][ T5701] ? ext4_register_li_request+0x183/0x940 [ 2770.187569][ T5701] ? errseq_check_and_advance+0x66/0x120 [ 2770.193223][ T5701] ext4_fill_super+0x5ed0/0x6790 [ 2770.198257][ T5701] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 2770.204722][ T5701] ? __might_sleep+0xe0/0xe0 [ 2770.209338][ T5701] ? read_lock_is_recursive+0x20/0x20 [ 2770.214727][ T5701] ? snprintf+0xe9/0x140 [ 2770.218999][ T5701] ? down_read_killable+0x340/0x340 [ 2770.224212][ T5701] ? setup_bdev_super+0x56b/0x660 [ 2770.229421][ T5701] get_tree_bdev+0x3f3/0x520 [ 2770.234111][ T5701] ? vfs_parse_fs_string+0x170/0x170 [ 2770.239446][ T5701] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 2770.245823][ T5701] ? setup_bdev_super+0x660/0x660 [ 2770.250885][ T5701] ? apparmor_capable+0x137/0x1a0 [ 2770.256022][ T5701] ? bpf_lsm_capable+0x9/0x10 [ 2770.260930][ T5701] ? security_capable+0x89/0xb0 [ 2770.265803][ T5701] vfs_get_tree+0x8c/0x280 [ 2770.270247][ T5701] do_new_mount+0x24b/0xa40 [ 2770.274858][ T5701] __se_sys_mount+0x2e7/0x3d0 [ 2770.279556][ T5701] ? __x64_sys_mount+0xc0/0xc0 [ 2770.284335][ T5701] ? lockdep_hardirqs_on+0x98/0x150 [ 2770.289556][ T5701] ? __x64_sys_mount+0x20/0xc0 [ 2770.294337][ T5701] do_syscall_64+0x55/0xa0 [ 2770.298855][ T5701] ? clear_bhb_loop+0x40/0x90 [ 2770.303578][ T5701] ? clear_bhb_loop+0x40/0x90 [ 2770.308450][ T5701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2770.314453][ T5701] RIP: 0033:0x7f1dbbd9da8a [ 2770.318882][ T5701] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2770.338849][ T5701] RSP: 002b:00007f1dbcc58e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2770.347280][ T5701] RAX: ffffffffffffffda RBX: 00007f1dbcc58ee0 RCX: 00007f1dbbd9da8a [ 2770.355266][ T5701] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f1dbcc58ea0 [ 2770.363249][ T5701] RBP: 00002000000009c0 R08: 00007f1dbcc58ee0 R09: 0000000000800718 [ 2770.371425][ T5701] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 2770.379603][ T5701] R13: 00007f1dbcc58ea0 R14: 000000000000048d R15: 0000200000000200 [ 2770.387636][ T5701] [ 2770.391199][ T5701] Kernel Offset: disabled [ 2770.395641][ T5701] Rebooting in 86400 seconds..