last executing test programs: 18.004082091s ago: executing program 1 (id=1337): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000900000056"], 0x18}}], 0x1, 0x44081) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x3}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 17.849439919s ago: executing program 1 (id=1339): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x78, r1}, 0x38) 17.590619242s ago: executing program 1 (id=1343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) close(r0) 17.312074027s ago: executing program 1 (id=1345): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@errors_remount}, {@nodelalloc}]}, 0x1, 0x477, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000540)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) 16.830197412s ago: executing program 1 (id=1347): socket$kcm(0x10, 0x2, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r1], 0x0) 14.18417733s ago: executing program 1 (id=1367): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x200, @remote, 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) 14.010507419s ago: executing program 32 (id=1367): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x200, @remote, 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) 5.250579947s ago: executing program 4 (id=1418): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) sendto$packet(r0, 0x0, 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe1, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 4.639826709s ago: executing program 4 (id=1422): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8090, &(0x7f00000003c0)=ANY=[], 0x3a, 0x304, &(0x7f0000000080)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000083512100040000102030109021f00010118100409040001010103200609058e0b"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) 4.109501356s ago: executing program 5 (id=1430): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000000)={0xdf, 0x8f3856d54e7ed9c5, 0x40, 0x100, 0x0, 0x8f, 0x8001, 0x1, 0x9, 0x2, 0x1544ba0d, 0x9, 0xb, 0x1000}) 2.375418347s ago: executing program 2 (id=1438): set_mempolicy(0x2002, &(0x7f0000000000)=0x401, 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000008c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 2.259611573s ago: executing program 2 (id=1440): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r1, r0}}, 0x18) 2.232250074s ago: executing program 4 (id=1441): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 2.144765348s ago: executing program 2 (id=1443): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800044, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x365, &(0x7f0000000440)="$eJzs3U9r1EwcB/DvJPv3aemTp+1DxZtVwVPZ1oMigiK9+QY8SLF2t1AaK7QVVBRXD55EvAmCR2+eRd+CXsQ3oKceiie9lCKNzC+TTXY7ye72T9rS7we63SYzyW9mMpOZ6jYgomPr2vT3d+fX9JcqAnABXAIcABWgAOB/jFXuLa0urPqNetaBXMmhvxTCnGpbmrmlhi2rzic5DE//VMBgchvtjyAIgh9dU/3KJRY6OCrs+9s4QNn0TtlfyT2yHWn2kKCcTyiHSKKF1QY27C1ORETHibn/O+YuMWjm744DnDXz8KN0/48kVxBtd7sN4NG/+cdzaMj9/z6GpMX1OkDp+pEaUfF6T5Zwug6daJVoO5b1mgji6i4hvLLaGkBZVpVtMzKJxanOL/iNiaYc4BmuGIlko/JaR1QQkRZtKfw2blmbZsgqe7YBKUNRl6GYEv9I32f8tI7X9tPNfCl1j0l9Vl/VjPLwBnUMmY2FQOnKkeweUDWbozpd8Bu19CNKKT0pZa2tlHHv+09OcjJqgY/v41JW0+q1AlfHYqOPojrn7yYC4FVKLcjm4fZBwbTOZHrpJNeINddU6+dNa67RzlzV+aLfmJi762f+KmXPWOf36qW6ocbxEx8w3Wp/3dSuHupTemZnL1eSMqyFWmZ5CpIypR3byMV2p6+eSdj8E4T6yuXhBW7jIoZWHjxcnPX9xnJub/RoYd0VdZUcwnB7SBNeiOZy1Fv090QaVPSbIoA9C2wrCALrroK9xvp7U4pCTYu5KEW98LZVZBlmza9Sdnd2NMM6TOy6mp44Hjal7EafJ5XsT1q59N2in+y/w7PrdremUXGEy6X97TLRqWZ9/0Sr4VyUe+op1R2c9PrjxVl/R6MRHTErz0+ZMQdjN9cvH3Q4lD8971Lh+i+xXqnJqKNfvIzVSNdZR+KIkykroGF5/SdebSigiXrmRHAgfQU3EL3xG1NZa67T54AziY26hA6iUj7tPKxn4sRh/FfJsi2salYONY1vuJWY/xMRERERERERERERERERERERERER0ZEQ/6d/b5cfJ9gyn0OyfxIjtnYM//AGEREREREREREREREREREREREREREREdHuJJ7/C7jyxJjSnj//N/rD3r0+/9ft4fm/qusjPomoi78BAAD//4wjXtY=") write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1.907358341s ago: executing program 2 (id=1445): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.72135673s ago: executing program 5 (id=1446): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x2000) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r1, 0x0}]) 1.516007431s ago: executing program 4 (id=1447): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) close(r0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.505743092s ago: executing program 5 (id=1448): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000080)={0x0, 0x0, 0x0, @lost_msgs}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x0, 0x0, 0x0, @raw}) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) 1.374119878s ago: executing program 4 (id=1450): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfff, 0x0, 0xfc, 0x7fff0020}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r2, 0x81f6}, &(0x7f0000000280)=0x8) 1.313655082s ago: executing program 4 (id=1451): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f00000059c0)=ANY=[@ANYRES8=0x0], 0x5, 0x5505, &(0x7f0000005b40)="$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") syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xe1c00, 0x0, 0x4, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.273224724s ago: executing program 3 (id=1452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000280)='H', 0x1, 0x40801, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/5, 0x5, 0x10701, 0x0, 0x0) 1.183973819s ago: executing program 3 (id=1453): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 1.064135655s ago: executing program 0 (id=1454): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.062720665s ago: executing program 3 (id=1455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 991.027599ms ago: executing program 0 (id=1456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 929.059132ms ago: executing program 3 (id=1457): recvmsg$unix(0xffffffffffffffff, 0x0, 0x102) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0a000000040000000200000002"], 0x50) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)=0x1, 0x12) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r0}, 0x38) 852.017246ms ago: executing program 0 (id=1458): r0 = socket(0xa, 0x3, 0xff) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmsg$sock(r1, &(0x7f0000000140)={&(0x7f00000010c0)=@in6={0xa, 0x4e20, 0x4, @mcast2, 0x7}, 0xa1, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffec7d}}], 0x18}, 0x24000080) 727.839642ms ago: executing program 0 (id=1459): r0 = syz_mount_image$udf(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x800401, &(0x7f0000000d80)=ANY=[], 0x47, 0xc15, &(0x7f0000001940)="$eJzs3V1sZOdZB/DnnWPHY6e0TtNuWmjKSEXtymWj/equq0WVt3ENlbabql5X5Koef+x2FO94ZXvppkBlQAWJm4rcIG6QRYlA6gVXhEtcGqRWCAlVvSgXSJZoo1xw4YtKCFBqdM68Y493vVk3G39s8vtFzv/MmeeM34/xmWNpX58AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI++7nLp8+ko24FAHCYrk5+6fQ5n/8A8K5yze//AAAAAAAAAAAAAABw3KUo4kSkGHplM01XjzvqV1rt23emxif2PmwwRYpaFFV9+VU/c/bc+U9duDjazTc//u324Xhu8trlxrOLN28tzS8vz881ptqt2cW5+X2/wsMef7eRagAaN1+4PXf9+nLj7DPndj19Z/i1gcdPDF+6eOrCaLd2anxiYrKnpq//LX/3e9xvhcdjUUQzUrwx/HpqRkQtHn4sHvDeOWiDVSdGqk5MjU9UHVloNdsr5ZOplqtqEY2eg8a6Y3QIc/FQxiJWy+aXDR4puzd5q7nUnFmYb3yxubTSWmkttlOt09qyP42oxWiKWIuIjYF7X64/ivhopHjp9GaaiYiiOw6frBYGP7g9tQPo4z6U7Wz0R6zVHoE5O8YGooirkeJnr56M2XLM8ld8POILZb4S8XKZn4lI5RvjfMRP93gf8WjqiyL+NVIsps00V50PuueVK19ufL59fbGntnteeeQ/Hw7TMT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25Hij57+nWpdcVTr0t93afQ9z/9m75rxpx7wOmXtMxGxWtvfmtz+vHQ41cr/DqBj7Es9ivhGXv/3B0fdGAAAAAAAAAAAAAAAAAAAgHe1Ip6PFF85dTKtRe89xVvtG41rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzjsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KhbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIZyLF+vP16vFaLeJaRPx8a2ur+vqfra2tiM1y+2EddV8BAAAAAAAAAAAAAAAAAADg2EpFfCxSPPm/m6kREXeGXxt4/MTwpYunLowWUUQqS3rrn5u8drnx7OLNW0vzy8vzc42pdmt2cW5+v9+ufqXVvn1nanziQDrzQIMH3P7B+rOLt15cat346sqezw/VL88sryw1Z/d+OgajFjHdu2ekavDU+ETV6IVWs10dmmr3aWAtYmy/nQEAAAAAAAAAAAAAAAAAAODYGEpFfC5S/OQ/zqfuuvG+zpr/X+o8KrZrX/69nb8FsHBXdvX+/YD9bKf9NnSkWnjfmBqfmJjs2d3Xf29p2aaUingqUnzipQ9V6+FTDO25Nr6se29Zd/N8rhv+lbJudVdVfWRqfKJxdbF96vLCwuJsc6U5szDfmLzVnN33Hw4AAAAAAAAAAAAAAAAAAACANzGUivhRpPivv/231L3vfF7/39d51LP+/zeqJfSVetqd26q1/e+t1vZ3tt93aXToo0/fb/9BrP8v25RSEd+MFOd+9KHqfvrd9f/Td9WWdX8SKV5/+iO5rvZYWdfsdqfzitdbC/Ony9q/jBS/+ka3NqraG7n2yZ3aM2XtYKT4883dtV/NtR/YqT1b1p6MFN/7z71rP7hTe66s/Umk+Ie/aXRrh8ra3821J3Zqn5ldXJh70LCW8/+dSPHXV38rdft83/nv+fsPq3fltnvm/M233675H+7Zt5rn9Y/z/DcfMP8XIsV36h/JdZ2xn8nPP1H9f2f+PxEp/v1fdtdez7Xv36k9s99uHbVy/r8dKb77Fz/e7nOe/zyyOzPUO/+/3Lc7t98lRzT/T/TsG87tmv0Fx+LdaPnFr7/QXFiYX7Jhw4aN7Y2jPjNxGMrP/z+NFP93okjd65j8+f+ezqOd67///sbO5/+lu3LbEX3+v79n36V81dLfF1FfuXmr/6mI+vKLXz/Vutm8MX9jvn32zOlPf/rCmdNnLvQ/1r2429na99i9E5Tz/4NI8cO/++H27zG7r//2vv4fuiu3HdH8P9nbp13XNfseinelcv7/KlI88dkfb/+++WbX/93f/09+bHdu//wd0fx/oGffcG5X6xccCwAAAAAAAAAAgEfJUCrizyLFb//hr6fuGqL9/Pu/ubty2xH9+68TPfvmDmldw74HGQDgGCmv/z4YKf5x6/vba7l3X//Fr3Vre6//7uc43P8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAedSmK+P1IMfTKZlofKB931K+02rfvTI1P7H3YYIoUtSiq+vKrfubsufOfunBxtJtXBg6zGx+O5yavXW48u3jz1tL88vL8XGOq3ZpdnJvf9ys87PF3G6kGsHHzhdtz168vN84+c27X03eGXxt4/MTwpYunLox2a6fGJyYme2r6+t/yd79Hus/+x6KI70eKN4ZfT98diKjFw4/FA947B22w6sRI1Ymp8YmqIwutZnulfDLVclUtotFz0Fh3jA5hLh7KWMRq2fyywSNl9yZvNZeaMwvzjS82l1ZaK63Fdqp1Wlv2pxG1GE0RaxGxscePZH8U8c1I8dLpzfRPAxFFdxw+eXXyS6fPPbg9tQPo4z6U7Wz0R6zVHoE5O8YGooi/jxQ/e/VkfG8goi86X/HxiC+U+UrEy2V+JiKVb4zzET891FM7B6kvijgfKRbTZnp1oDwfdM8rV77c+Hz7+mJPbfe88sh/PhymY35uqkcRP6jO+Jvpn/1cAwAAAAAAAAAAAAAAABwjRaxFiq+cOpmq9cHba4pb7RuNa82Zhc6yvu7av+6a6a2tra1G6uRYzumcqznXcq7n3MgZtXx8zrGc0zlXc67lXM+5kTOKfHzOsZzTOVdzruVcz7mRM/ry8TnHck7nXM25lnM950bOOCZr9wAAAAAAAAAAAAAAAAAAgHeWWhTVXdy/9bXNtDXQub/0dHRy3f1A3/H+PwAA//8YNXNU") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f00000034c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="37b57cfa7d012134000205004f49a0f95b88671b8e9149556e5ff3c7012f7856b6557bae1d1d61efea623114a0b4b52f68387d2040dd08c4aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822d1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bf316fbfbd808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e83be04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859021e651c1d481f2288249ae7b385a9c40929cae3fa5a6f142cd057ebdbc000000e34db2d14a6458499de0819d89f570a72fee0dd8cf744e0daf8f31b1d8edda87296ca7632e1e6e23", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 727.437562ms ago: executing program 3 (id=1460): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@random="b32a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) 641.332277ms ago: executing program 3 (id=1461): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083", 0x9d}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffe", 0x32}], 0x2}}], 0x1, 0x20000044) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a008d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) recvmsg(0xffffffffffffffff, 0x0, 0x0) 621.552408ms ago: executing program 2 (id=1462): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20004000) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) 593.794919ms ago: executing program 5 (id=1463): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x3, 0x9, &(0x7f0000000000)="f48145147d0f48eb20", 0x9, 0xb, 0x15c2, 0x5508, 0xc336, 0x1, 0xb, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, 0x0) 485.928425ms ago: executing program 2 (id=1464): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="737f", 0x2}], 0x1) 446.331557ms ago: executing program 5 (id=1465): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 340.587373ms ago: executing program 0 (id=1466): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xdffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 208.19365ms ago: executing program 5 (id=1467): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0xc10) writev(r0, 0x0, 0x0) 0s ago: executing program 0 (id=1468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000004c0)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x2d, 0x8003, 0x65, 0x0, 0x1, 0x2, 0x0, @remote, @local}, {0x14, 0x7, 0x0, @rand_addr=0x64010102, "121c78ace5f640b3c04d94f791874c6c6c5d6eb0"}}}, 0xfdef) kernel console output (not intermixed with test programs): 85] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.868796][ T6647] block nbd2: NBD_DISCONNECT [ 165.886491][ T6647] block nbd2: Send disconnect failed -32 [ 165.905916][ T6645] block nbd2: Disconnected due to user request. [ 165.931516][ T6645] block nbd2: shutting down sockets [ 166.100334][ T4285] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.272479][ T6652] loop4: detected capacity change from 0 to 512 [ 166.324222][ T6652] EXT4-fs (loop4): inline encryption not supported [ 166.376587][ T6652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.397512][ T4285] usb 2-1: Using ep0 maxpacket: 16 [ 166.427953][ T6652] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 166.456761][ T6652] System zones: 1-12 [ 166.503567][ T6652] EXT4-fs (loop4): 1 truncate cleaned up [ 166.519489][ T6657] syz.2.803 (6657): attempted to duplicate a private mapping with mremap. This is not supported. [ 166.537437][ T4285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 199, changing to 11 [ 166.554375][ T6652] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,inlinecrypt,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 166.572724][ T4285] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 8467, setting to 1024 [ 166.620611][ T6639] loop3: detected capacity change from 0 to 131072 [ 166.624518][ T4285] usb 2-1: config 0 interface 0 has no altsetting 0 [ 166.662801][ T6639] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 166.666582][ T4285] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 166.669788][ T6639] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 166.688890][ T4285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.718490][ T4285] usb 2-1: config 0 descriptor?? [ 166.727886][ T6639] F2FS-fs (loop3): invalid crc value [ 166.769313][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.800308][ T6639] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.847662][ T4457] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.858373][ T6639] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 166.865465][ T6639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 166.896055][ T6666] loop4: detected capacity change from 0 to 2048 [ 166.947616][ T4457] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.961289][ T6666] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000002d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 166.964604][ T4457] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.004582][ T26] audit: type=1800 audit(1777289953.081:20): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.804" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 167.059895][ T6670] loop2: detected capacity change from 0 to 256 [ 167.088087][ T6670] exfat: Deprecated parameter 'utf8' [ 167.150338][ T6670] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 167.228505][ T4285] hid (null): nested delimiters [ 167.233764][ T4285] hid (null): unknown global tag 0x24 [ 167.260540][ T4285] hid (null): report_id 14061 is invalid [ 167.268513][ T4457] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 167.283446][ T4285] hid (null): report_id 0 is invalid [ 167.294110][ T4457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.297382][ T4285] hid (null): report_id 0 is invalid [ 167.317000][ T4457] usb 1-1: Product: syz [ 167.318523][ T4285] hid (null): report_id 3563899904 is invalid [ 167.334442][ T4457] usb 1-1: Manufacturer: syz [ 167.337499][ T4285] hid (null): bogus close delimiter [ 167.359341][ T4285] hid (null): bogus close delimiter [ 167.364668][ T4285] hid (null): unknown global tag 0xa0 [ 167.367001][ T4457] usb 1-1: SerialNumber: syz [ 167.392297][ T4285] hid (null): global environment stack overflow [ 167.408284][ T4285] hid (null): invalid report_size -1234934214 [ 167.422893][ T4285] hid (null): global environment stack overflow [ 167.441285][ T4285] hid (null): unknown global tag 0xd [ 167.449802][ T4285] hid (null): unknown global tag 0xc [ 167.455168][ T4285] hid (null): unknown global tag 0xc [ 167.477411][ T4285] hid (null): unknown global tag 0xd [ 167.528133][ T4285] usb 2-1: USB disconnect, device number 7 [ 167.558729][ T4210] hfsplus: b-tree write err: -5, ino 25 [ 167.574556][ T4210] hfsplus: b-tree write err: -5, ino 4 [ 167.615836][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.622509][ T4210] hfsplus: b-tree write err: -5, ino 2 [ 167.661736][ T4210] hfsplus: b-tree write err: -5, ino 25 [ 167.684641][ T4210] hfsplus: b-tree write err: -5, ino 4 [ 167.826400][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.082199][ T6691] input: syz1 as /devices/virtual/input/input12 [ 168.445660][ T4457] usb 1-1: USB disconnect, device number 12 [ 168.655921][ T6715] sctp: [Deprecated]: syz.2.825 (pid 6715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.655921][ T6715] Use struct sctp_sack_info instead [ 168.705157][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.722876][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.742342][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.781485][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.791184][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.819211][ T6723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.184137][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 169.352609][ T6750] set_capacity_and_notify: 1 callbacks suppressed [ 169.352626][ T6750] loop4: detected capacity change from 0 to 128 [ 169.709842][ T6761] input: syz0 as /devices/virtual/input/input13 [ 169.766044][ T6760] loop2: detected capacity change from 0 to 4096 [ 169.842909][ T6760] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.230255][ T6784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.855'. [ 170.270460][ T6782] device syzkaller1 entered promiscuous mode [ 170.375866][ T6792] loop2: detected capacity change from 0 to 128 [ 170.467490][ T6798] loop4: detected capacity change from 0 to 512 [ 170.528390][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.543773][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.554322][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.580910][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.608763][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.650502][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.710195][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.720311][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.731153][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.754147][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.774202][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.785301][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.797770][ T4457] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.874082][ T6808] block nbd0: shutting down sockets [ 170.887701][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.923224][ T5858] net_ratelimit: 5 callbacks suppressed [ 170.923245][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.947907][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 170.986581][ T6811] device syzkaller1 entered promiscuous mode [ 171.002889][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.067172][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.077723][ T4457] usb 2-1: Using ep0 maxpacket: 8 [ 171.084109][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.134262][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.172472][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.185546][ T6813] loop0: detected capacity change from 0 to 1024 [ 171.197889][ T4457] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 171.224109][ T4457] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.311656][ T4457] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.332913][ T6813] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 171.367575][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.394172][ T6813] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.427090][ T4457] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.542220][ T4457] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.564944][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.579391][ T6806] loop3: detected capacity change from 0 to 131072 [ 171.597112][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.606705][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.615563][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.624774][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.634677][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.636162][ T4457] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.643696][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.653824][ T6813] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 171.672835][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.687243][ T4457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.703771][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.734362][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.743137][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.779781][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.788892][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.799619][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.809559][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.818503][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.829497][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.838817][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.847904][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.856758][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.877947][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.913471][ T6806] XFS (loop3): Mounting V5 Filesystem [ 171.938809][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.948109][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.956673][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.966882][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.976384][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.986554][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.995851][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 171.997662][ T4457] usb 2-1: usb_control_msg returned -32 [ 172.011329][ T4457] usbtmc 2-1:16.0: can't read capabilities [ 172.031347][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.061061][ T6831] loop4: detected capacity change from 0 to 128 [ 172.089170][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.098642][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.118084][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.126811][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.151762][ T6806] XFS (loop3): Starting recovery (logdev: internal) [ 172.178476][ T6806] XFS (loop3): Ending recovery (logdev: internal) [ 172.182450][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.207822][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.216607][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.217150][ T6833] loop0: detected capacity change from 0 to 4096 [ 172.225683][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.268641][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.278523][ T6831] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.289463][ T6831] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 172.313710][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.328398][ T6833] ntfs3: Unknown parameter 'nocase' [ 172.347773][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.373506][ T4195] XFS (loop3): Unmounting Filesystem [ 172.377937][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.387736][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.399101][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.408504][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.418122][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.426904][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.436257][ T6835] usbtmc 2-1:16.0: control status returned 0 [ 172.476507][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.508045][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.579735][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.639043][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.650718][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.651662][ T1111] usb 2-1: USB disconnect, device number 8 [ 172.688272][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.720337][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.765370][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.788485][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.797163][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.836631][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.853766][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.863611][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.892510][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.935170][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.944527][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.965032][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.973896][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 172.989606][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 173.002688][ T6792] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 550) [ 173.016634][ T26] audit: type=1800 audit(1777289959.101:21): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.860" name="file2" dev="loop2" ino=1048614 res=0 errno=0 [ 173.153720][ T6845] loop2: detected capacity change from 0 to 64 [ 173.265426][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.881'. [ 173.305063][ T6849] loop1: detected capacity change from 0 to 512 [ 173.372984][ T6849] EXT4-fs (loop1): inline encryption not supported [ 173.413181][ T6849] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.456034][ T6849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 173.578536][ T6849] System zones: 1-12 [ 173.639054][ T6849] EXT4-fs (loop1): 1 truncate cleaned up [ 173.677266][ T6849] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,inlinecrypt,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 173.725486][ T6833] XFS (loop0): Mounting V5 Filesystem [ 173.731648][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.740249][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.878305][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.888024][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.022748][ T6833] XFS (loop0): Ending clean mount [ 174.201391][ T4194] XFS (loop0): Unmounting Filesystem [ 174.275958][ T6883] netlink: 'syz.4.891': attribute type 3 has an invalid length. [ 174.284457][ T6883] netlink: 'syz.4.891': attribute type 7 has an invalid length. [ 174.293097][ T6883] netlink: 198628 bytes leftover after parsing attributes in process `syz.4.891'. [ 174.309349][ T6884] block nbd3: shutting down sockets [ 174.433290][ T6886] set_capacity_and_notify: 1 callbacks suppressed [ 174.433309][ T6886] loop3: detected capacity change from 0 to 256 [ 174.516519][ T6886] FAT-fs (loop3): Directory bread(block 64) failed [ 174.535182][ T6886] FAT-fs (loop3): Directory bread(block 65) failed [ 174.545627][ T6886] FAT-fs (loop3): Directory bread(block 66) failed [ 174.553071][ T6886] FAT-fs (loop3): Directory bread(block 67) failed [ 174.566654][ T6886] FAT-fs (loop3): Directory bread(block 68) failed [ 174.574102][ T6886] FAT-fs (loop3): Directory bread(block 69) failed [ 174.607956][ T6886] FAT-fs (loop3): Directory bread(block 70) failed [ 174.614654][ T6886] FAT-fs (loop3): Directory bread(block 71) failed [ 174.634110][ T6886] FAT-fs (loop3): Directory bread(block 72) failed [ 174.663245][ T6886] FAT-fs (loop3): Directory bread(block 73) failed [ 175.261710][ T6888] loop4: detected capacity change from 0 to 32768 [ 175.453548][ T6888] XFS (loop4): Mounting V5 Filesystem [ 175.542398][ T6888] XFS (loop4): Ending clean mount [ 175.580045][ T4269] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.640202][ T4183] XFS (loop4): Unmounting Filesystem [ 175.656731][ T6899] loop1: detected capacity change from 0 to 32768 [ 175.826430][ T6899] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 175.837488][ T4269] usb 4-1: Using ep0 maxpacket: 32 [ 175.919555][ T4184] (syz-executor,4184,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 175.931136][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 176.017702][ T4269] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 176.032689][ T4269] usb 4-1: config 0 has no interface number 0 [ 176.077659][ T1108] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 176.117550][ T7] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 176.220212][ T6931] block nbd4: shutting down sockets [ 176.243498][ T4269] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 176.266583][ T4269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.281676][ T4269] usb 4-1: Product: syz [ 176.286105][ T4269] usb 4-1: Manufacturer: syz [ 176.292885][ T4269] usb 4-1: SerialNumber: syz [ 176.327907][ T4269] usb 4-1: config 0 descriptor?? [ 176.357954][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 176.378716][ T4269] smsc95xx v2.0.0 [ 176.453175][ T6930] loop1: detected capacity change from 0 to 40427 [ 176.471737][ T6930] F2FS-fs (loop1): invalid crc value [ 176.477591][ T1108] usb 1-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 176.477996][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.488240][ T1108] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.501252][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 176.522559][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.544727][ T6930] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.571633][ T7] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 176.591005][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.598295][ T6930] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.601179][ T7] usb 3-1: config 0 descriptor?? [ 176.640145][ T6926] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 176.681953][ T4184] attempt to access beyond end of device [ 176.681953][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 176.701987][ T1108] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.713667][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.726483][ T1108] usb 1-1: Product: syz [ 176.731048][ T1108] usb 1-1: Manufacturer: syz [ 176.735672][ T1108] usb 1-1: SerialNumber: syz [ 176.842386][ T4644] net_ratelimit: 6 callbacks suppressed [ 176.842406][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.856823][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.077645][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.089544][ T1108] usb 1-1: 0:2 : does not exist [ 177.099811][ T7] petalynx 0003:18B1:0037.000B: ignoring exceeding usage max [ 177.131136][ T7] petalynx 0003:18B1:0037.000B: usage index exceeded [ 177.142985][ T7] petalynx 0003:18B1:0037.000B: item 0 4 2 0 parsing failed [ 177.152661][ T7] petalynx 0003:18B1:0037.000B: parse failed [ 177.162778][ T1108] usb 1-1: USB disconnect, device number 13 [ 177.173691][ T7] petalynx: probe of 0003:18B1:0037.000B failed with error -22 [ 177.205389][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.382138][ T4285] usb 3-1: USB disconnect, device number 5 [ 177.444924][ T6952] block nbd1: shutting down sockets [ 177.453432][ T6952] block nbd1: NBD_DISCONNECT [ 177.458258][ T6952] block nbd1: Send disconnect failed -32 [ 177.479713][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.500633][ T4269] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 177.526088][ T4269] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 177.578673][ T4269] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 177.593648][ T4269] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 177.618096][ T4269] usb 4-1: USB disconnect, device number 9 [ 177.830275][ T6962] loop0: detected capacity change from 0 to 2048 [ 177.884455][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.892863][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.978730][ T6962] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.995548][ T6956] loop1: detected capacity change from 0 to 32768 [ 178.023413][ T6969] loop2: detected capacity change from 0 to 512 [ 178.032912][ T6962] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.051767][ T6962] EXT4-fs (loop0): shut down requested (0) [ 178.121765][ T6969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 178.158052][ T6969] System zones: 1-12 [ 178.163252][ T6956] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.176422][ T6971] loop3: detected capacity change from 0 to 4096 [ 178.206146][ T6969] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.922: corrupted in-inode xattr [ 178.275903][ T6969] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.922: couldn't read orphan inode 15 (err -117) [ 178.304535][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 178.336584][ T6971] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 178.355792][ T6969] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 178.508412][ T6971] ntfs3: loop3: failed to convert "076c" to cp932 [ 178.966644][ T6988] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 179.076235][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.085945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.387691][ T6980] loop0: detected capacity change from 0 to 131072 [ 179.408917][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.417426][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.428168][ T6980] XFS: ikeep mount option is deprecated. [ 179.467873][ T6978] loop4: detected capacity change from 0 to 32768 [ 179.642088][ T6980] XFS (loop0): Mounting V5 Filesystem [ 179.752464][ T6989] loop1: detected capacity change from 0 to 32768 [ 179.772299][ T6980] XFS (loop0): Starting recovery (logdev: internal) [ 179.781307][ T6989] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.931 (6989) [ 179.809147][ T7006] loop3: detected capacity change from 0 to 16 [ 179.826147][ T6980] XFS (loop0): Ending recovery (logdev: internal) [ 179.923580][ T6989] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 179.941729][ T4194] XFS (loop0): Unmounting Filesystem [ 179.947258][ T6989] BTRFS info (device loop1): using free space tree [ 179.969848][ T6989] BTRFS info (device loop1): has skinny extents [ 180.304913][ T6989] BTRFS info (device loop1): enabling ssd optimizations [ 181.409975][ T7046] loop1: detected capacity change from 0 to 128 [ 181.494439][ T7046] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.532671][ T7046] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.885981][ T7060] loop0: detected capacity change from 0 to 2048 [ 181.969361][ T7060] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 181.996348][ T7060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.105014][ T7039] loop2: detected capacity change from 0 to 40427 [ 182.175163][ T7039] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 182.185475][ T7039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.200713][ T7039] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 182.232654][ T7039] F2FS-fs (loop2): invalid crc value [ 182.249324][ T7039] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 182.386652][ T7039] F2FS-fs (loop2): Start checkpoint disabled! [ 182.401699][ T7039] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.419870][ T7039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 182.526533][ T4269] net_ratelimit: 6 callbacks suppressed [ 182.526553][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.541080][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.625339][ T7039] attempt to access beyond end of device [ 182.625339][ T7039] loop2: rw=2049, want=45104, limit=40427 [ 182.706917][ T4254] attempt to access beyond end of device [ 182.706917][ T4254] loop2: rw=1, want=45112, limit=40427 [ 182.754976][ T4254] attempt to access beyond end of device [ 182.754976][ T4254] loop2: rw=2049, want=45120, limit=40427 [ 183.089116][ T7070] loop4: detected capacity change from 0 to 32768 [ 183.137209][ T7088] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 183.157567][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.237434][ T4269] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.243536][ T7070] XFS (loop4): Mounting V5 Filesystem [ 183.317968][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.339326][ T7070] XFS (loop4): Ending clean mount [ 183.483197][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.492032][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.543483][ T4183] XFS (loop4): Unmounting Filesystem [ 183.591662][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.607911][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.677570][ T4269] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.803216][ T4269] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 184.027918][ T4269] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 184.043475][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.077010][ T4269] usb 1-1: Product: syz [ 184.103395][ T4269] usb 1-1: Manufacturer: syz [ 184.117356][ T4269] usb 1-1: SerialNumber: syz [ 184.410337][ T4269] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 184.598603][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.626769][ T4269] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 184.646797][ T4269] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 184.680764][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.001372][ T7128] loop4: detected capacity change from 0 to 40427 [ 185.039797][ T7128] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 185.057831][ T4269] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 185.065226][ T7128] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 185.075026][ T4269] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 185.103569][ T7128] F2FS-fs (loop4): invalid crc value [ 185.156089][ T7128] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.248726][ T7128] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 185.266299][ T7128] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.277552][ T4269] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 185.341728][ T4269] usb 1-1: USB disconnect, device number 14 [ 185.588321][ T4734] udevd[4734]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.238116][ T7139] loop3: detected capacity change from 0 to 32768 [ 186.251301][ T7137] loop1: detected capacity change from 0 to 32768 [ 186.355622][ T7137] JBD2: Ignoring recovery information on journal [ 186.363788][ T7139] XFS (loop3): Mounting V5 Filesystem [ 186.495597][ T7139] XFS (loop3): Ending clean mount [ 186.501975][ T7137] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 186.591161][ T7144] loop0: detected capacity change from 0 to 32768 [ 186.753425][ T7137] (syz.1.975,7137,1):ocfs2_remove_inode_range:1797 ERROR: status = -22 [ 186.809254][ T7137] (syz.1.975,7137,0):__ocfs2_change_file_space:2048 ERROR: status = -22 [ 186.858167][ T4195] XFS (loop3): Unmounting Filesystem [ 186.953095][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 187.351154][ T7176] loop4: detected capacity change from 0 to 256 [ 187.429231][ T7176] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 187.826220][ T4269] net_ratelimit: 53 callbacks suppressed [ 187.826239][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.840670][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.886491][ T7198] loop3: detected capacity change from 0 to 256 [ 187.930695][ T7205] loop1: detected capacity change from 0 to 256 [ 188.004684][ T7198] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 188.030779][ T7205] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 188.847668][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.848351][ T7202] loop0: detected capacity change from 0 to 131072 [ 188.875062][ T7215] loop2: detected capacity change from 0 to 4096 [ 188.914170][ T7202] F2FS-fs (loop0): Test dummy encryption mode enabled [ 188.928337][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.929762][ T7218] loop4: detected capacity change from 0 to 4096 [ 188.951746][ T7202] F2FS-fs (loop0): invalid crc value [ 188.970673][ T7202] F2FS-fs (loop0): Found nat_bits in checkpoint [ 189.030549][ T7218] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 189.051472][ T7202] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 189.108708][ T7225] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.111706][ T7218] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 189.141787][ T7224] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 189.206131][ T7218] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 189.227492][ T7224] hpfs: filesystem error: improperly stopped [ 189.247475][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.265662][ T7224] hpfs: You really don't want any checks? You are crazy... [ 189.265699][ T7218] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 189.311353][ T7224] hpfs: hpfs_map_sector(): read error [ 189.324580][ T7202] fscrypt (loop0, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 189.343326][ T7227] fscrypt (loop0, inode 11): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 189.407931][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.422776][ T7224] hpfs: code page support is disabled [ 189.438197][ T7218] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 189.505059][ T7224] hpfs: hpfs_map_4sectors(): unaligned read [ 189.524717][ T7224] hpfs: hpfs_map_4sectors(): unaligned read [ 189.576934][ T7218] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 189.595134][ T7224] hpfs: filesystem error: unable to find root dir [ 189.639629][ T7218] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 189.727470][ T7218] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 189.808099][ T7218] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 189.887794][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.926268][ T7218] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 189.974834][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.986536][ T7218] ntfs: volume version 3.1. [ 190.113390][ T7246] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff8a, chksum : 0xa6267692, utbl_chksum : 0xe619d30d) [ 190.288958][ T7248] set_capacity_and_notify: 2 callbacks suppressed [ 190.288976][ T7248] loop1: detected capacity change from 0 to 4096 [ 190.473803][ T7255] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.592123][ T7252] loop3: detected capacity change from 0 to 4096 [ 190.642999][ T7258] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 190.690049][ T7252] ntfs: volume version 3.1. [ 190.718635][ T7262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.741701][ T7262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.961961][ T7265] device syzkaller1 entered promiscuous mode [ 191.150153][ T7245] loop2: detected capacity change from 0 to 40427 [ 191.219838][ T7274] loop0: detected capacity change from 0 to 1024 [ 191.238421][ T7276] netlink: 'syz.3.1022': attribute type 3 has an invalid length. [ 191.247189][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 191.284177][ T7274] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.290757][ T7245] F2FS-fs (loop2): invalid crc value [ 191.317633][ T4644] Bluetooth: hci3: command 0x0406 tx timeout [ 191.317662][ T4457] Bluetooth: hci2: command 0x0406 tx timeout [ 191.331618][ T4644] Bluetooth: hci1: command 0x0406 tx timeout [ 191.356334][ T7245] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 191.453965][ T7274] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 191.482914][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.611050][ T7245] F2FS-fs (loop2): Start checkpoint disabled! [ 191.663345][ T7245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 191.716996][ T7290] loop4: detected capacity change from 0 to 4096 [ 191.846183][ T7295] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.061970][ T7245] attempt to access beyond end of device [ 192.061970][ T7245] loop2: rw=10241, want=45104, limit=40427 [ 192.160746][ T7245] attempt to access beyond end of device [ 192.160746][ T7245] loop2: rw=2049, want=45104, limit=40427 [ 192.160764][ T7290] syz.4.1026 (7290) used greatest stack depth: 20472 bytes left [ 192.183652][ T7306] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 192.394377][ T7313] loop3: detected capacity change from 0 to 512 [ 192.414768][ T9] attempt to access beyond end of device [ 192.414768][ T9] loop2: rw=2049, want=45112, limit=40427 [ 192.517141][ T7313] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 192.577607][ T7313] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.824974][ T7313] EXT4-fs (loop3): re-mounted. Opts: grpquota,nogrpid,quota,. Quota mode: writeback. [ 193.043237][ T7335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1047'. [ 193.078275][ T4457] net_ratelimit: 10 callbacks suppressed [ 193.078296][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.092978][ T7338] device syzkaller1 entered promiscuous mode [ 193.098055][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.105046][ T7339] loop3: detected capacity change from 0 to 512 [ 193.134724][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.166920][ T7339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.214413][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.223463][ T4640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.253419][ T7339] EXT4-fs (loop3): 1 orphan inode deleted [ 193.279447][ T7339] EXT4-fs (loop3): 1 truncate cleaned up [ 193.285162][ T7339] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,errors=remount-ro,quota,. Quota mode: writeback. [ 194.054801][ T7361] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1057'. [ 194.173123][ T7363] loop0: detected capacity change from 0 to 64 [ 194.252000][ T7346] loop2: detected capacity change from 0 to 131072 [ 194.287781][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.296559][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.319977][ T7346] F2FS-fs (loop2): Test dummy encryption mode enabled [ 194.328935][ T4457] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 194.365297][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.367577][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378679][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.380006][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.420707][ T4640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.449570][ T7346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.499367][ T7346] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 194.564667][ T7346] syz.2.1050 (pid 7346) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 194.625070][ T5285] attempt to access beyond end of device [ 194.625070][ T5285] loop0: rw=1, want=268435470, limit=64 [ 194.670115][ T5285] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 194.737599][ T4457] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.817803][ T4457] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 194.827081][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 194.843683][ T4457] usb 2-1: config 8 has no interface number 0 [ 194.852845][ T7378] loop0: detected capacity change from 0 to 256 [ 194.873541][ T4457] usb 2-1: config 8 interface 206 has no altsetting 0 [ 195.009899][ T7378] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 195.147674][ T4457] usb 2-1: string descriptor 0 read error: -22 [ 195.153980][ T4457] usb 2-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 195.207516][ T4457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.261150][ T4457] go7007: probe of 2-1:8.206 failed with error -12 [ 195.436029][ T7367] set_capacity_and_notify: 1 callbacks suppressed [ 195.436048][ T7367] loop4: detected capacity change from 0 to 32768 [ 195.502530][ T4640] usb 2-1: USB disconnect, device number 9 [ 195.615437][ T7367] XFS (loop4): Mounting V5 Filesystem [ 195.815250][ T7367] XFS (loop4): Ending clean mount [ 195.918249][ T4183] XFS (loop4): Unmounting Filesystem [ 196.280694][ T7397] loop0: detected capacity change from 0 to 32768 [ 196.317097][ T7409] IPv6: Can't replace route, no match found [ 196.441970][ T7397] [ 196.441970][ T7397] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.441970][ T7397] [ 196.499551][ T7397] ERROR: (device loop0): diWrite: ixpxd invalid [ 196.499551][ T7397] [ 196.539780][ T7397] ERROR: (device loop0): txCommit: [ 196.539780][ T7397] [ 196.624517][ T7413] loop1: detected capacity change from 0 to 256 [ 196.646435][ T4248] ERROR: (device loop0): diWrite: ixpxd invalid [ 196.646435][ T4248] [ 196.668693][ T4248] ERROR: (device loop0): txCommit: [ 196.668693][ T4248] [ 196.682356][ T4248] jfs_write_inode: jfs_commit_inode failed! [ 196.708600][ T4194] [ 196.708600][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.708600][ T4194] [ 196.718826][ T7413] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff8a, chksum : 0xa6267692, utbl_chksum : 0xe619d30d) [ 196.758417][ T4194] [ 196.758417][ T4194] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 196.758417][ T4194] [ 196.810718][ T7403] loop3: detected capacity change from 0 to 32768 [ 196.967956][ T7405] loop2: detected capacity change from 0 to 32768 [ 197.001998][ T7403] XFS (loop3): Mounting V5 Filesystem [ 197.121039][ T7403] XFS (loop3): Ending clean mount [ 197.127976][ T7405] XFS (loop2): Mounting V5 Filesystem [ 197.174461][ T4195] XFS (loop3): Unmounting Filesystem [ 197.347750][ T7445] loop0: detected capacity change from 0 to 128 [ 197.386281][ T7405] XFS (loop2): Ending clean mount [ 197.448917][ T7405] XFS (loop2): Quotacheck needed: Please wait. [ 197.607093][ T7405] XFS (loop2): Quotacheck: Done. [ 197.752365][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1081'. [ 197.764709][ T7452] loop4: detected capacity change from 0 to 256 [ 197.776126][ T4190] XFS (loop2): Unmounting Filesystem [ 197.847608][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1081'. [ 197.896445][ T7452] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 198.109040][ T7455] loop0: detected capacity change from 0 to 4096 [ 198.142018][ T7455] __ntfs_warning: 29 callbacks suppressed [ 198.142037][ T7455] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 198.154553][ T7452] exFAT-fs (loop4): error, invalid size(size(11) > aligned(9223372036854777344) [ 198.154553][ T7452] [ 198.187851][ T7455] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 198.201308][ T4269] net_ratelimit: 12 callbacks suppressed [ 198.201328][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.226396][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.237856][ T7452] exFAT-fs (loop4): Filesystem has been set read-only [ 198.240627][ T7455] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 198.277742][ T7455] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 198.296794][ T7455] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 198.348404][ T7455] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 198.374258][ T7455] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 198.410262][ T7447] loop1: detected capacity change from 0 to 32768 [ 198.427275][ T7455] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 198.433524][ T4285] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 198.451279][ T7455] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 198.451478][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.488462][ T7447] (syz.1.1083,7447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.495783][ T4640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.510625][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.536146][ T7447] (syz.1.1083,7447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.536362][ T7455] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 198.597841][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.617111][ T7455] ntfs: volume version 3.1. [ 198.636998][ T7460] loop2: detected capacity change from 0 to 4096 [ 198.660876][ T7447] (syz.1.1083,7447,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 198.675777][ T7447] (syz.1.1083,7447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 198.696913][ T7447] JBD2: Ignoring recovery information on journal [ 198.768482][ T4285] usb 4-1: Using ep0 maxpacket: 8 [ 198.775671][ T7447] (syz.1.1083,7447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 198.797918][ T7447] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 198.823354][ T7447] (syz.1.1083,7447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 198.827835][ T7463] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.857046][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.877443][ T7447] (syz.1.1083,7447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 198.934523][ T4285] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 198.978705][ T4285] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.990090][ T7460] syz.2.1087 (7460) used greatest stack depth: 20400 bytes left [ 199.019464][ T4285] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.046023][ T4285] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.103643][ T4285] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.132675][ T4285] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.143122][ T4285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.186921][ T7447] (syz.1.1083,7447,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 199.263628][ T7447] (syz.1.1083,7447,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 199.299267][ T7447] (syz.1.1083,7447,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 199.317728][ T7447] (syz.1.1083,7447,1):ocfs2_quota_read:201 ERROR: status = -5 [ 199.335704][ T7447] (syz.1.1083,7447,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 199.445540][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 199.487600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.522053][ T4285] usb 4-1: usb_control_msg returned -32 [ 199.531443][ T4285] usbtmc 4-1:16.0: can't read capabilities [ 199.564379][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.622956][ T4285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.660933][ T4183] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 199.697528][ T4183] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 199.889840][ T7470] XFS (loop0): Mounting V5 Filesystem [ 199.937486][ T7487] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 199.963630][ T7482] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,init_itable,bsdgroups,,errors=continue. Quota mode: writeback. [ 200.134794][ T7470] XFS (loop0): Ending clean mount [ 200.320521][ T4194] XFS (loop0): Unmounting Filesystem [ 200.637633][ T7497] set_capacity_and_notify: 3 callbacks suppressed [ 200.637652][ T7497] loop4: detected capacity change from 0 to 32768 [ 200.787790][ T7506] loop1: detected capacity change from 0 to 4096 [ 200.822147][ T7497] XFS (loop4): Mounting V5 Filesystem [ 200.976278][ T7500] loop2: detected capacity change from 0 to 32768 [ 201.004326][ T7517] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.055089][ T7500] XFS (loop2): Mounting V5 Filesystem [ 201.087422][ T2303] usb 4-1: USB disconnect, device number 10 [ 201.102178][ T7497] XFS (loop4): Ending clean mount [ 201.206580][ T7497] XFS (loop4): User initiated shutdown received. [ 201.228383][ T7497] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 201.244416][ T7500] XFS (loop2): Ending clean mount [ 201.317846][ T7497] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 201.358524][ T4183] XFS (loop4): Unmounting Filesystem [ 201.683342][ T4190] XFS (loop2): Unmounting Filesystem [ 201.877705][ T2303] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.060058][ T7557] device syzkaller1 entered promiscuous mode [ 202.117469][ T2303] usb 4-1: Using ep0 maxpacket: 16 [ 202.247529][ T2303] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.256598][ T2303] usb 4-1: config 0 has no interface number 0 [ 202.427664][ T2303] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 202.454516][ T2303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.472938][ T2303] usb 4-1: Product: syz [ 202.475985][ T7567] loop0: detected capacity change from 0 to 4096 [ 202.484216][ T2303] usb 4-1: Manufacturer: syz [ 202.507361][ T2303] usb 4-1: SerialNumber: syz [ 202.545441][ T2303] usb 4-1: config 0 descriptor?? [ 202.596487][ T7579] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.609525][ T2303] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 202.740807][ T7578] loop2: detected capacity change from 0 to 8192 [ 202.778100][ T7578] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 202.811460][ T7578] REISERFS (device loop2): using ordered data mode [ 202.847404][ T7578] reiserfs: using flush barriers [ 202.913542][ T7578] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.987771][ T7578] REISERFS (device loop2): checking transaction log (loop2) [ 203.233031][ T7578] REISERFS (device loop2): Using tea hash to sort names [ 203.271059][ T7578] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 203.297650][ T7575] loop4: detected capacity change from 0 to 32768 [ 203.308275][ T7578] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 203.334971][ T7578] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 203.364855][ T7578] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 4) not found (pos 2) [ 203.411658][ T7578] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 203.440997][ T7575] XFS (loop4): Mounting V5 Filesystem [ 203.552240][ T7575] XFS (loop4): Ending clean mount [ 203.554103][ T7603] loop1: detected capacity change from 0 to 1024 [ 203.667607][ T2303] gspca_spca1528: reg_w err -71 [ 203.672612][ T2303] spca1528: probe of 4-1:0.1 failed with error -71 [ 203.705982][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 203.705999][ T26] audit: type=1800 audit(1777289989.781:25): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1133" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 203.738529][ T2303] usb 4-1: USB disconnect, device number 11 [ 203.770669][ T301] hfsplus: b-tree write err: -5, ino 25 [ 203.776487][ T301] hfsplus: b-tree write err: -5, ino 4 [ 203.823481][ T301] hfsplus: b-tree write err: -5, ino 2 [ 203.846475][ T4644] net_ratelimit: 13 callbacks suppressed [ 203.846495][ T4644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.852578][ T301] hfsplus: b-tree write err: -5, ino 26 [ 203.879027][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.909179][ T4183] XFS (loop4): Unmounting Filesystem [ 203.967970][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.995582][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.066185][ T301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.289281][ T7624] loop3: detected capacity change from 0 to 512 [ 204.356179][ T7624] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 204.377537][ T4640] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 204.416052][ T7624] System zones: 0-2, 18-18, 34-35 [ 204.506103][ T7624] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.557949][ T7630] device syzkaller1 entered promiscuous mode [ 204.563156][ T7624] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.565588][ T7635] loop4: detected capacity change from 0 to 128 [ 204.604199][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.637907][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.663354][ T4640] usb 3-1: Using ep0 maxpacket: 16 [ 204.688978][ T2303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.700277][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.709368][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.774877][ T7635] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 204.807657][ T4640] usb 3-1: config 0 has no interfaces? [ 204.817618][ T7635] FAT-fs (loop4): Filesystem has been set read-only [ 204.848472][ T7635] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 204.997698][ T4640] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 205.006806][ T4640] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.042122][ T4640] usb 3-1: Product: syz [ 205.054294][ T4640] usb 3-1: Manufacturer: syz [ 205.080713][ T4640] usb 3-1: SerialNumber: syz [ 205.114275][ T4640] usb 3-1: config 0 descriptor?? [ 205.486976][ T7661] capability: warning: `syz.0.1154' uses 32-bit capabilities (legacy support in use) [ 205.559161][ T4644] usb 3-1: USB disconnect, device number 6 [ 205.871323][ T7671] netlink: 'syz.3.1158': attribute type 4 has an invalid length. [ 205.900873][ T7673] netlink: 'syz.1.1159': attribute type 4 has an invalid length. [ 205.917621][ T7671] netlink: 'syz.3.1158': attribute type 7 has an invalid length. [ 205.940511][ T7671] netlink: 198628 bytes leftover after parsing attributes in process `syz.3.1158'. [ 205.972299][ T7674] netlink: 'syz.1.1159': attribute type 17 has an invalid length. [ 206.025624][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 206.078039][ T4189] block nbd4: Receive control failed (result -32) [ 206.089043][ T7653] block nbd4: shutting down sockets [ 206.636828][ T7687] loop4: detected capacity change from 0 to 4096 [ 206.782049][ T7687] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 206.807728][ T7687] EXT4-fs (loop4): Test dummy encryption mode enabled [ 206.869983][ T7687] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nombcache,user_xattr,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 206.905007][ T7687] EXT4-fs (loop4): shut down requested (1) [ 206.968446][ T7687] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.1165: directory missing '..' [ 207.287983][ T4269] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 207.568997][ T4269] usb 2-1: Using ep0 maxpacket: 16 [ 207.685983][ T7689] loop2: detected capacity change from 0 to 40427 [ 207.733810][ T4269] usb 2-1: config 0 has no interfaces? [ 207.761936][ T7720] loop0: detected capacity change from 0 to 256 [ 207.793233][ T7689] F2FS-fs (loop2): invalid crc value [ 207.889970][ T7689] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.891397][ T7720] FAT-fs (loop0): Directory bread(block 64) failed [ 207.903432][ T4269] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 207.921468][ T4269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.945583][ T4269] usb 2-1: Product: syz [ 207.955611][ T7720] FAT-fs (loop0): Directory bread(block 65) failed [ 207.969957][ T4269] usb 2-1: Manufacturer: syz [ 207.983363][ T4269] usb 2-1: SerialNumber: syz [ 207.993894][ T7720] FAT-fs (loop0): Directory bread(block 66) failed [ 208.024680][ T4269] usb 2-1: config 0 descriptor?? [ 208.038716][ T7720] FAT-fs (loop0): Directory bread(block 67) failed [ 208.063369][ T7720] FAT-fs (loop0): Directory bread(block 68) failed [ 208.076973][ T7689] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 208.081339][ T7720] FAT-fs (loop0): Directory bread(block 69) failed [ 208.130846][ T7720] FAT-fs (loop0): Directory bread(block 70) failed [ 208.157045][ T7720] FAT-fs (loop0): Directory bread(block 71) failed [ 208.193146][ T7720] FAT-fs (loop0): Directory bread(block 72) failed [ 208.200220][ T7720] FAT-fs (loop0): Directory bread(block 73) failed [ 208.214930][ T7723] attempt to access beyond end of device [ 208.214930][ T7723] loop2: rw=2049, want=45104, limit=40427 [ 208.464526][ T4457] usb 2-1: USB disconnect, device number 10 [ 208.509386][ T7716] loop4: detected capacity change from 0 to 32768 [ 208.692036][ T7716] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 208.692036][ T7716] [ 208.771355][ T7716] ERROR: (device loop4): remounting filesystem as read-only [ 209.169004][ T4269] net_ratelimit: 12 callbacks suppressed [ 209.169023][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.183605][ T4640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.237587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.324210][ T7755] loop2: detected capacity change from 0 to 2048 [ 209.422843][ T7758] loop3: detected capacity change from 0 to 64 [ 209.470866][ T7755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.615448][ T7758] Trying to free block not in datazone [ 209.729179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.732042][ T4210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.745690][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.753839][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.807639][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.858433][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.868343][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.093563][ T7777] input: syz0 as /devices/virtual/input/input14 [ 210.315319][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 210.336724][ T7792] loop1: detected capacity change from 0 to 64 [ 210.346895][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 210.684068][ T7801] device ipvlan2 entered promiscuous mode [ 210.724754][ T7801] team0: Device ipvlan2 failed to register rx_handler [ 211.127260][ T7821] loop4: detected capacity change from 0 to 4096 [ 211.206493][ T7821] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,init_itable,bsdgroups,,errors=continue. Quota mode: writeback. [ 211.242738][ T7833] netlink: 'syz.1.1223': attribute type 10 has an invalid length. [ 211.263680][ T7832] loop3: detected capacity change from 0 to 1024 [ 211.284758][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.321965][ T7833] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 211.367735][ T7834] netlink: 'syz.1.1223': attribute type 10 has an invalid length. [ 211.418304][ T301] hfsplus: request for non-existent node 33554434 in B*Tree [ 211.453367][ T301] hfsplus: request for non-existent node 33554434 in B*Tree [ 211.636513][ T7834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.704968][ T7836] loop4: detected capacity change from 0 to 4096 [ 211.709318][ T7834] team0: Port device bond0 added [ 211.859002][ T7846] loop0: detected capacity change from 0 to 512 [ 211.939694][ T7834] syz.1.1223 (7834) used greatest stack depth: 19600 bytes left [ 211.973136][ T7846] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 211.993563][ T7846] System zones: 0-2, 18-18, 34-35 [ 212.024308][ T7846] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.092852][ T4183] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 212.118471][ T4183] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 212.137589][ T7846] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.300382][ T7860] loop3: detected capacity change from 0 to 256 [ 212.399603][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1236'. [ 212.621848][ T7858] loop1: detected capacity change from 0 to 8192 [ 212.816448][ T7858] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 212.855607][ T7872] loop0: detected capacity change from 0 to 8192 [ 212.883651][ T7858] REISERFS (device loop1): using ordered data mode [ 212.955326][ T7858] reiserfs: using flush barriers [ 212.965618][ T7872] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 213.004377][ T7858] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.075859][ T7872] REISERFS (device loop0): using ordered data mode [ 213.117900][ T7858] REISERFS (device loop1): checking transaction log (loop1) [ 213.146666][ T7872] reiserfs: using flush barriers [ 213.147150][ T7858] REISERFS (device loop1): Using r5 hash to sort names [ 213.195182][ T7858] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 213.200372][ T7872] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.305062][ T7872] REISERFS (device loop0): checking transaction log (loop0) [ 213.334613][ T7872] REISERFS (device loop0): Using r5 hash to sort names [ 213.374344][ T7872] REISERFS (device loop0): using 3.5.x disk format [ 213.421226][ T7872] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 213.726096][ T7873] loop4: detected capacity change from 0 to 32768 [ 213.866211][ T7873] find_entry called with index >= next_index [ 213.904000][ T7873] find_entry called with index >= next_index [ 213.932672][ T7873] find_entry called with index >= next_index [ 213.983787][ T7873] find_entry called with index >= next_index [ 214.007407][ T7873] find_entry called with index >= next_index [ 214.033999][ T7873] add_index: next_index = 0. Resetting! [ 214.054324][ T7873] find_entry called with index >= next_index [ 214.081097][ T7873] find_entry called with index >= next_index [ 214.117653][ T7873] find_entry called with index >= next_index [ 214.156475][ T26] audit: type=1800 audit(1777290000.231:26): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1241" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 214.185701][ T7873] find_entry called with index >= next_index [ 214.217569][ T4457] net_ratelimit: 14 callbacks suppressed [ 214.217591][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.252055][ T7873] find_entry called with index >= next_index [ 214.277844][ T7873] find_entry called with index >= next_index [ 214.336647][ T7877] loop3: detected capacity change from 0 to 32768 [ 214.357830][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.366249][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.404590][ T7877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1242 (7877) [ 214.475530][ T7877] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 214.496415][ T7877] BTRFS info (device loop3): using free space tree [ 214.521243][ T7877] BTRFS info (device loop3): has skinny extents [ 214.838604][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.847937][ T4467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.020596][ T7877] BTRFS info (device loop3): enabling ssd optimizations [ 215.093654][ T7880] loop0: detected capacity change from 0 to 40427 [ 215.126819][ T7882] loop1: detected capacity change from 0 to 32768 [ 215.139445][ T7880] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 215.187032][ T7880] F2FS-fs (loop0): invalid crc value [ 215.271315][ T7880] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.368823][ T7917] device hsr0 entered promiscuous mode [ 215.395203][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1245'. [ 215.404921][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.414590][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.423242][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.467466][ T7917] device hsr_slave_0 left promiscuous mode [ 215.480787][ T5285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.490084][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.556202][ T7880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 215.677139][ T7920] loop2: detected capacity change from 0 to 512 [ 215.923457][ T7917] device hsr_slave_1 left promiscuous mode [ 215.936293][ T4194] attempt to access beyond end of device [ 215.936293][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 215.962181][ T7920] EXT4-fs (loop2): 1 truncate cleaned up [ 215.977378][ T7920] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 216.026802][ T7917] device hsr0 left promiscuous mode [ 216.183881][ T26] audit: type=1804 audit(1777290002.261:27): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1252" name="/newroot/240/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 216.715172][ T7931] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 216.763992][ T7931] ntfs3: loop4: Failed to load $Extend. [ 216.848800][ T7931] ntfs3: loop4: ino=1b, "file0" directory corrupted [ 217.419325][ T7959] set_capacity_and_notify: 2 callbacks suppressed [ 217.419343][ T7959] loop3: detected capacity change from 0 to 64 [ 217.605577][ T7961] loop0: detected capacity change from 0 to 764 [ 217.625357][ T7959] attempt to access beyond end of device [ 217.625357][ T7959] loop3: rw=0, want=1026, limit=64 [ 217.691685][ T7959] Buffer I/O error on dev loop3, logical block 512, async page read [ 217.742074][ T7959] attempt to access beyond end of device [ 217.742074][ T7959] loop3: rw=0, want=113154, limit=64 [ 217.777413][ T7959] Buffer I/O error on dev loop3, logical block 56576, async page read [ 218.303332][ T7944] loop2: detected capacity change from 0 to 32768 [ 218.482486][ T7944] XFS (loop2): Mounting V5 Filesystem [ 218.549264][ T7944] XFS (loop2): Ending clean mount [ 218.561999][ T7944] XFS (loop2): Quotacheck needed: Please wait. [ 218.643751][ T7944] XFS (loop2): Quotacheck: Done. [ 219.034344][ T7975] loop1: detected capacity change from 0 to 131072 [ 219.074164][ T4190] XFS (loop2): Unmounting Filesystem [ 219.078076][ T7975] XFS: ikeep mount option is deprecated. [ 219.107405][ T1111] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 219.309973][ T7975] XFS (loop1): Mounting V5 Filesystem [ 219.367557][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 219.387322][ T8003] net_ratelimit: 21 callbacks suppressed [ 219.387341][ T8003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.401519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.496406][ T7975] XFS (loop1): Starting recovery (logdev: internal) [ 219.510431][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.546613][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.564209][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.587599][ T8007] TCP: TCP_TX_DELAY enabled [ 219.603654][ T1111] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 219.613489][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.616132][ T4638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.637115][ T1111] usb 4-1: config 0 descriptor?? [ 219.672701][ T7975] XFS (loop1): Ending recovery (logdev: internal) [ 219.689960][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.819913][ T4184] XFS (loop1): Unmounting Filesystem [ 220.052843][ T4638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.054423][ T8013] loop2: detected capacity change from 0 to 128 [ 220.121631][ T8013] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.134830][ T1111] elecom 0003:056E:010C.000C: unknown main item tag 0x0 [ 220.167873][ T8013] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.203754][ T1111] elecom 0003:056E:010C.000C: unknown main item tag 0x0 [ 220.246334][ T1111] elecom 0003:056E:010C.000C: item fetching failed at offset 2/41 [ 220.281700][ T8013] EXT4-fs (loop2): shut down requested (0) [ 220.305505][ T1111] elecom: probe of 0003:056E:010C.000C failed with error -22 [ 220.365447][ T1111] usb 4-1: USB disconnect, device number 12 [ 220.397437][ T4637] kernel write not supported for file /input/mouse0 (pid: 4637 comm: kworker/1:13) [ 220.496172][ T8018] netlink: 'syz.2.1286': attribute type 11 has an invalid length. [ 220.561092][ T8020] loop0: detected capacity change from 0 to 128 [ 220.598463][ T4254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.606671][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.615544][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.654574][ T8020] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 220.686648][ T4638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.722063][ T8020] hpfs: filesystem error: improperly stopped [ 220.738644][ T8020] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 220.756950][ T8020] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 220.777454][ T4638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.810283][ T8020] hpfs: You really don't want any checks? You are crazy... [ 220.847450][ T8020] hpfs: hpfs_map_sector(): read error [ 220.852977][ T8020] hpfs: code page support is disabled [ 220.879041][ T8020] hpfs: hpfs_map_4sectors(): unaligned read [ 220.885040][ T8020] hpfs: hpfs_map_4sectors(): unaligned read [ 220.932915][ T8020] hpfs: filesystem error: unable to find root dir [ 221.091011][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 221.153845][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1292'. [ 221.193401][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 221.225917][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1292'. [ 221.792681][ T8022] loop2: detected capacity change from 0 to 32768 [ 221.923092][ T8022] add_index: next_index = 0. Resetting! [ 221.941057][ T1111] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 221.961792][ T8022] non-latin1 character 0x3ff found in JFS file name [ 221.981644][ T8022] mount with iocharset=utf8 to access [ 222.164091][ T8064] loop3: detected capacity change from 0 to 4096 [ 222.188688][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 222.201106][ T8064] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 222.207547][ T4637] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 222.308802][ T1111] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 222.319527][ T1111] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.374329][ T1111] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.419661][ T1111] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.455817][ T1111] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.506910][ T1111] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.525359][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.637578][ T4637] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.657556][ T4637] usb 5-1: config 0 has no interfaces? [ 222.829907][ T4637] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 222.849995][ T4637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.858605][ T1111] usb 2-1: usb_control_msg returned -32 [ 222.864228][ T1111] usbtmc 2-1:16.0: can't read capabilities [ 222.878197][ T4637] usb 5-1: Product: syz [ 222.892618][ T4637] usb 5-1: Manufacturer: syz [ 222.916680][ T4637] usb 5-1: SerialNumber: syz [ 222.933684][ T4637] usb 5-1: config 0 descriptor?? [ 223.104835][ T8084] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1315'. [ 223.222478][ T4638] usb 5-1: USB disconnect, device number 10 [ 223.231093][ T8087] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 223.264121][ T4230] usb 2-1: USB disconnect, device number 11 [ 223.484975][ T4638] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 223.497216][ T4638] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 223.537442][ T4637] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 223.754494][ T8105] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 223.817480][ T4637] usb 4-1: Using ep0 maxpacket: 8 [ 223.832926][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.864081][ T8105] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 223.893446][ T8107] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 223.968186][ T4637] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 223.980761][ T4637] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 223.993988][ T8107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.994818][ T4637] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 224.004209][ T8110] loop1: detected capacity change from 0 to 8192 [ 224.016175][ T4637] usb 4-1: config 250 has no interface number 0 [ 224.025030][ T8107] team0: Port device bond0 added [ 224.048074][ T4637] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 224.066274][ T4637] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 224.093510][ T4637] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.104667][ T4637] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 224.115918][ T4637] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 224.130602][ T4637] usb 4-1: config 250 interface 228 has no altsetting 0 [ 224.295424][ T4637] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 224.329030][ T4637] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 224.365884][ T4637] usb 4-1: Product: syz [ 224.398176][ T4637] usb 4-1: SerialNumber: syz [ 224.402300][ T8122] loop2: detected capacity change from 0 to 256 [ 224.437780][ T4230] net_ratelimit: 30 callbacks suppressed [ 224.437800][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.452208][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.469224][ T4637] hub 4-1:250.228: bad descriptor, ignoring hub [ 224.515738][ T4637] hub: probe of 4-1:250.228 failed with error -5 [ 224.529969][ T8122] FAT-fs (loop2): Directory bread(block 64) failed [ 224.552971][ T8122] FAT-fs (loop2): Directory bread(block 65) failed [ 224.604229][ T8122] FAT-fs (loop2): Directory bread(block 66) failed [ 224.633452][ T8122] FAT-fs (loop2): Directory bread(block 67) failed [ 224.651792][ T8122] FAT-fs (loop2): Directory bread(block 68) failed [ 224.686606][ T8122] FAT-fs (loop2): Directory bread(block 69) failed [ 224.699338][ T4637] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 224.721451][ T8122] FAT-fs (loop2): Directory bread(block 70) failed [ 224.738161][ T8122] FAT-fs (loop2): Directory bread(block 71) failed [ 224.757739][ T8122] FAT-fs (loop2): Directory bread(block 72) failed [ 224.776331][ T8122] FAT-fs (loop2): Directory bread(block 73) failed [ 224.847489][ T4638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.951339][ T8114] loop4: detected capacity change from 0 to 32768 [ 225.075864][ T8114] XFS (loop4): Mounting V5 Filesystem [ 225.084938][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.157643][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.190837][ T4638] usb 4-1: USB disconnect, device number 13 [ 225.204337][ T4638] usblp0: removed [ 225.237701][ T4633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.242388][ T8114] XFS (loop4): Ending clean mount [ 225.246473][ T4635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.360043][ T4636] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 225.447083][ T4183] XFS (loop4): Unmounting Filesystem [ 225.488671][ T8158] loop1: detected capacity change from 0 to 512 [ 225.537525][ T8158] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.608894][ T8158] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1345: inode has both inline data and extents flags [ 225.629253][ T8158] EXT4-fs (loop1): Remounting filesystem read-only [ 225.636100][ T8158] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1345: couldn't read orphan inode 15 (err -117) [ 225.648673][ T4636] usb 1-1: Using ep0 maxpacket: 16 [ 225.661678][ T8158] EXT4-fs (loop1): Remounting filesystem read-only [ 225.669093][ T8158] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,. Quota mode: none. [ 225.748050][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.754339][ T8153] loop2: detected capacity change from 0 to 32768 [ 225.799001][ T4636] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.802995][ T8158] overlayfs: failed to create directory ./bus/work (errno: 117); mounting read-only [ 225.827401][ T8153] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1342 (8153) [ 225.829897][ T4636] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.878241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.887711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.930695][ T8153] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 225.947419][ T8160] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 225.968361][ T8153] BTRFS info (device loop2): using free space tree [ 225.975078][ T8153] BTRFS info (device loop2): has skinny extents [ 226.007098][ T8160] EXT4-fs (loop1): Remounting filesystem read-only [ 226.035115][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /268/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 226.047166][ T8165] sp0: Synchronizing with TNC [ 226.078378][ T4636] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.088193][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.099287][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /268/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 226.128242][ T4636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.146621][ T4636] usb 1-1: Product: syz [ 226.151503][ T4636] usb 1-1: Manufacturer: syz [ 226.156137][ T4636] usb 1-1: SerialNumber: syz [ 226.161645][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.185092][ T4184] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 226.213209][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.225244][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /268/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 226.298453][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.309139][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /268/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 226.333401][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.340881][ T4184] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 226.367257][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.370973][ T8184] loop4: detected capacity change from 0 to 512 [ 226.378066][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 16: comm syz-executor: path /268/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=13056, size=1024 fake=0 [ 226.410043][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.471507][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /268/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 226.498184][ T4636] usb 1-1: 0:2 : does not exist [ 226.521564][ T8184] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 226.550638][ T8153] BTRFS info (device loop2): enabling ssd optimizations [ 226.566440][ T4636] usb 1-1: USB disconnect, device number 15 [ 226.588292][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.590797][ T8192] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1350'. [ 226.595144][ T4184] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 16: comm syz-executor: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=13056, size=1024 fake=0 [ 226.640545][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 226.685630][ T8184] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=./file1,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 226.717124][ T8184] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.904471][ T4302] udevd[4302]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.021854][ T8200] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 227.037425][ T4230] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.100535][ T8200] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 227.157165][ T8200] overlayfs: failed to resolve './file1/file0': -2 [ 227.297398][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 227.427871][ T4230] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 227.447229][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.465162][ C1] sd 0:0:1:0: tag#1870 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 227.475191][ C1] sd 0:0:1:0: tag#1870 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 227.505998][ T4230] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 227.874236][ T8228] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1365'. [ 228.520116][ T8226] loop4: detected capacity change from 0 to 131072 [ 228.547936][ T8226] XFS: ikeep mount option is deprecated. [ 228.610895][ T4230] gspca_nw80x: reg_w err -71 [ 228.618997][ T4230] nw80x: probe of 4-1:3.0 failed with error -71 [ 228.668029][ T4230] usb 4-1: USB disconnect, device number 14 [ 228.726161][ T8226] XFS (loop4): Mounting V5 Filesystem [ 228.823717][ T8226] XFS (loop4): Starting recovery (logdev: internal) [ 228.862844][ T8226] XFS (loop4): Ending recovery (logdev: internal) [ 229.039998][ T4183] XFS (loop4): Unmounting Filesystem [ 229.559316][ C1] net_ratelimit: 16 callbacks suppressed [ 229.559337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.573502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.581896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.198449][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.204752][ T8253] loop2: detected capacity change from 0 to 131072 [ 230.215438][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.224374][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.233427][ T4638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.263683][ T8253] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 230.269674][ T8261] chnl_net:caif_netlink_parms(): no params data found [ 230.272212][ T8253] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 230.288343][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.296847][ T8253] F2FS-fs (loop2): invalid crc value [ 230.338818][ T8253] F2FS-fs (loop2): Found nat_bits in checkpoint [ 230.414890][ T8253] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 230.422136][ T8253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 230.433258][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.442712][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.452985][ T8261] device bridge_slave_0 entered promiscuous mode [ 230.462193][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.470225][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.478887][ T8261] device bridge_slave_1 entered promiscuous mode [ 230.510996][ T8261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.523472][ T8261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.564322][ T8254] loop0: detected capacity change from 0 to 32768 [ 230.569303][ T8261] team0: Port device team_slave_0 added [ 230.580039][ T8261] team0: Port device team_slave_1 added [ 230.605328][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.613165][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.642108][ T8261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.658081][ T8254] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1374 (8254) [ 230.711447][ T8261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.725860][ T8254] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 230.734078][ T8261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.812384][ T8254] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 230.840813][ T8261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.868818][ T8254] BTRFS info (device loop0): use zstd compression, level 3 [ 230.879905][ T8254] BTRFS info (device loop0): using free space tree [ 230.886457][ T8254] BTRFS info (device loop0): has skinny extents [ 230.996007][ T8261] device hsr_slave_0 entered promiscuous mode [ 231.003712][ T8261] device hsr_slave_1 entered promiscuous mode [ 231.087566][ T4636] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 231.117760][ T8254] BTRFS info (device loop0): enabling ssd optimizations [ 231.237749][ T4465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.245951][ T4465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.398224][ T8261] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.470132][ T8261] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.497563][ T4636] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 231.508197][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.544884][ T4636] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.574236][ T4636] usb 4-1: config 1 has no interface number 0 [ 231.594140][ T4636] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.624774][ T4636] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 231.656249][ T4636] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 231.677670][ T4636] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 48, using maximum allowed: 30 [ 231.704218][ T4636] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 231.720822][ T4633] Bluetooth: hci0: command 0x0409 tx timeout [ 231.849890][ T8261] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.897765][ T4636] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.903065][ T8261] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.915872][ T4636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.933591][ T4636] usb 4-1: Product: syz [ 231.958984][ T4636] usb 4-1: Manufacturer: syz [ 231.963837][ T4636] usb 4-1: SerialNumber: syz [ 232.027645][ T8280] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 232.132655][ T8312] tmpfs: Unknown parameter 'mp' [ 232.149742][ T8312] sch_fq: defrate 1024 ignored. [ 232.208805][ T8261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.246603][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.256838][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.280948][ T8261] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.300773][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.319407][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.328685][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.335775][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.345138][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.362628][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.372270][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.382313][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.389585][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.409336][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.420788][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.424121][ T4457] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 232.436146][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.449383][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.471239][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.480013][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.490835][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.501283][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.510129][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.519638][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.528584][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.538855][ T8261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.547587][ T5135] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.646126][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.654318][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.667460][ T4457] usb 3-1: Using ep0 maxpacket: 16 [ 232.674432][ T8261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.737835][ T4636] cdc_ncm 4-1:1.1: bind() failure [ 232.749080][ T4636] usb 4-1: USB disconnect, device number 15 [ 232.787695][ T4457] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 232.796310][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 232.801980][ T4457] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 232.811104][ T4457] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 232.820977][ T4457] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 232.830153][ T4457] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 232.840605][ T4457] usb 3-1: config 0 has no interface number 0 [ 232.846834][ T4457] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 232.858867][ T4457] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 232.869438][ T4457] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 232.880330][ T4457] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.894178][ T4457] usb 3-1: config 0 interface 125 has no altsetting 0 [ 232.903875][ T4457] usb 3-1: config 0 interface 125 has no altsetting 2 [ 232.910274][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.918460][ T5135] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 232.928316][ T5135] usb 5-1: config 0 has an invalid interface number: 162 but max is 0 [ 232.936028][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.937198][ T5135] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 232.955327][ T5135] usb 5-1: config 0 has no interface number 0 [ 232.962108][ T5135] usb 5-1: config 0 has no interface number 1 [ 232.968362][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.969055][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.981218][ T5135] usb 5-1: config 0 interface 90 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 232.989460][ T8261] device veth0_vlan entered promiscuous mode [ 232.995398][ T5135] usb 5-1: config 0 interface 90 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.008932][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.014777][ T5135] usb 5-1: too many endpoints for config 0 interface 162 altsetting 244: 176, using maximum allowed: 30 [ 233.027539][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.033630][ T5135] usb 5-1: config 0 interface 162 altsetting 244 has 1 endpoint descriptor, different from the interface descriptor's value: 176 [ 233.050633][ T8261] device veth1_vlan entered promiscuous mode [ 233.054716][ T5135] usb 5-1: config 0 interface 90 has no altsetting 0 [ 233.066204][ T5135] usb 5-1: config 0 interface 162 has no altsetting 0 [ 233.073628][ T4457] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 233.083149][ T4457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.091689][ T4457] usb 3-1: Product: syz [ 233.096198][ T4457] usb 3-1: Manufacturer: syz [ 233.100033][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 233.101736][ T4457] usb 3-1: SerialNumber: syz [ 233.117220][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 233.124825][ T4457] usb 3-1: config 0 descriptor?? [ 233.135420][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 233.144464][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.162847][ T4457] usb 3-1: selecting invalid altsetting 2 [ 233.169369][ T8261] device veth0_macvtap entered promiscuous mode [ 233.190258][ T8261] device veth1_macvtap entered promiscuous mode [ 233.231889][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.243845][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.247646][ T5135] usb 5-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=4f.2b [ 233.254094][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.270073][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.292213][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.302369][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.314755][ T5135] usb 5-1: Product: syz [ 233.323889][ T5135] usb 5-1: Manufacturer: syz [ 233.329304][ T5135] usb 5-1: SerialNumber: syz [ 233.331908][ T8337] loop3: detected capacity change from 0 to 64 [ 233.336341][ T5135] usb 5-1: config 0 descriptor?? [ 233.345748][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.356316][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.358620][ T8319] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 233.367315][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.383878][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.394799][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.413451][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.423446][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.433078][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.441912][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.459092][ T8337] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 233.478848][ T8337] hfs: filesystem is marked locked, mounting read-only. [ 233.479032][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.513698][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.536260][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.555013][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.566268][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.576608][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.588446][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.598796][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.609622][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.619679][ T8261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.630357][ T8261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.642110][ T8261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.650052][ T5135] HFC-S_USB: probe of 5-1:0.90 failed with error -5 [ 233.654438][ T8261] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.666295][ T8261] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.675265][ T8261] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.684143][ T8261] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.701396][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.718843][ T5135] HFC-S_USB: probe of 5-1:0.162 failed with error -5 [ 233.719399][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.740607][ T5135] usb 5-1: USB disconnect, device number 11 [ 233.747375][ T4633] Bluetooth: hci0: command 0x041b tx timeout [ 233.864905][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.880427][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.902726][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.915942][ T301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.917398][ T4633] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 233.926488][ T301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.940707][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.050024][ T4457] parport0: fix this legacy no-device port driver! [ 234.127440][ T4230] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 234.251743][ T8349] loop4: detected capacity change from 0 to 128 [ 234.271495][ T4457] usb 3-1: USB disconnect, device number 7 [ 234.275975][ T8349] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 234.303205][ T8349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.361236][ T26] audit: type=1326 audit(1777290020.431:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.402921][ T26] audit: type=1326 audit(1777290020.441:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.431429][ T8354] loop5: detected capacity change from 0 to 128 [ 234.438607][ T26] audit: type=1326 audit(1777290020.441:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.474909][ T26] audit: type=1326 audit(1777290020.441:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.475665][ T8354] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.507767][ T26] audit: type=1326 audit(1777290020.441:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.507810][ T26] audit: type=1326 audit(1777290020.441:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.507933][ T26] audit: type=1326 audit(1777290020.441:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.575848][ T8354] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 234.578225][ T4633] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 234.587842][ T4230] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.595806][ T4633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.612800][ T4633] usb 1-1: Product: syz [ 234.617010][ T4633] usb 1-1: Manufacturer: syz [ 234.621745][ T4633] usb 1-1: SerialNumber: syz [ 234.633547][ T26] audit: type=1326 audit(1777290020.441:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.662455][ T26] audit: type=1326 audit(1777290020.441:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.667458][ T4230] usb 4-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 234.709678][ T4230] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 234.716769][ T26] audit: type=1326 audit(1777290020.441:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.5.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd851bedd9 code=0x7fc00000 [ 234.726372][ T4230] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 234.841382][ T4230] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.868825][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.897706][ T4230] usb 4-1: SerialNumber: syz [ 234.948546][ T4230] cdc_acm 4-1:1.0: skipping garbage [ 234.954963][ T4230] cdc_acm 4-1:1.0: skipping garbage [ 234.960472][ T4230] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 234.969097][ T4230] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 234.976949][ T4230] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 235.147454][ T4638] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.195584][ T4230] usb 4-1: USB disconnect, device number 16 [ 235.408045][ T4637] net_ratelimit: 22 callbacks suppressed [ 235.408063][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.422778][ T4269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.431346][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.533978][ T4457] Process accounting resumed [ 235.577830][ T4638] usb 6-1: config index 0 descriptor too short (expected 8292, got 100) [ 235.588433][ T4638] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.618049][ T8375] Process accounting resumed [ 235.623907][ T4638] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.647617][ T4638] usb 6-1: config 1 has no interface number 0 [ 235.653785][ T4638] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30 [ 235.692772][ T4638] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.734801][ T4638] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 235.757112][ T4638] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 235.777054][ T4638] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.842030][ T4637] Bluetooth: hci0: command 0x040f tx timeout [ 235.958536][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.978196][ T4638] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40 [ 235.991629][ T8389] loop2: detected capacity change from 0 to 1024 [ 235.999974][ T4638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.017618][ T4638] usb 6-1: Product: syz [ 236.038068][ T4638] usb 6-1: Manufacturer: syz [ 236.042719][ T4638] usb 6-1: SerialNumber: syz [ 236.121923][ T8379] loop4: detected capacity change from 0 to 32768 [ 236.197836][ T8379] (syz.4.1404,8379,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.216682][ T8389] hfsplus: xattr searching failed [ 236.237666][ T8379] (syz.4.1404,8379,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 236.287536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.296061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.361421][ T4254] hfsplus: bad catalog file entry [ 236.375519][ T8379] (syz.4.1404,8379,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 236.377387][ T4254] hfsplus: b-tree write err: -5, ino 3 [ 236.412287][ T4457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.425212][ T8395] loop3: detected capacity change from 0 to 4096 [ 236.447678][ T4637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.456356][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.484049][ T8395] EXT4-fs (loop3): Ignoring removed nobh option [ 236.492768][ T4210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.542901][ T8379] JBD2: Ignoring recovery information on journal [ 236.581748][ T8395] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a04ec018, mo2=0003] [ 236.631616][ T8395] System zones: 0-5 [ 236.647627][ T8395] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,delalloc,max_dir_size_kb=0x0000000000000002,quota,errors=continue,debug,nodelalloc,barrier,,errors=continue. Quota mode: writeback. [ 236.666945][ T8381] loop0: detected capacity change from 0 to 40427 [ 236.679005][ T8379] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 236.763316][ T8381] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 236.822398][ T8381] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 236.882100][ T8401] (syz.4.1404,8401,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 236.883634][ T8381] F2FS-fs (loop0): invalid crc value [ 236.988447][ T8401] (syz.4.1404,8401,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 236.990595][ T4638] cdc_ncm 6-1:1.1: bind() failure [ 237.056626][ T8381] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.078717][ T8401] (syz.4.1404,8401,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 237.107597][ T8401] (syz.4.1404,8401,0):ocfs2_quota_read:201 ERROR: status = -5 [ 237.118464][ T8403] (syz.4.1404,8403,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 237.179503][ T8401] (syz.4.1404,8401,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 237.181138][ T8403] (syz.4.1404,8403,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 237.267643][ T4633] rtl8150 1-1:1.0: couldn't reset the device [ 237.274054][ T4633] rtl8150: probe of 1-1:1.0 failed with error -5 [ 237.282874][ T8381] F2FS-fs (loop0): Start checkpoint disabled! [ 237.317618][ T4633] usb 1-1: USB disconnect, device number 16 [ 237.325824][ T8381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 237.341254][ T4636] usb 6-1: USB disconnect, device number 2 [ 237.351116][ T8401] (syz.4.1404,8401,0):ocfs2_mknod:314 ERROR: status = -5 [ 237.397384][ T8403] (syz.4.1404,8403,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 237.408045][ T8401] (syz.4.1404,8401,0):ocfs2_mknod:502 ERROR: status = -5 [ 237.415943][ T8401] (syz.4.1404,8401,0):ocfs2_create:676 ERROR: status = -5 [ 237.424036][ T8408] loop2: detected capacity change from 0 to 8192 [ 237.450534][ T8403] (syz.4.1404,8403,1):ocfs2_quota_read:201 ERROR: status = -5 [ 237.470626][ T8403] (syz.4.1404,8403,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 237.576085][ T4183] ocfs2: Unmounting device (7,4) on (node local) [ 237.626808][ T8408] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 237.695788][ T8408] REISERFS (device loop2): using ordered data mode [ 237.712904][ T8381] attempt to access beyond end of device [ 237.712904][ T8381] loop0: rw=2049, want=45224, limit=40427 [ 237.747499][ T8408] reiserfs: using flush barriers [ 237.767835][ T8412] loop3: detected capacity change from 0 to 32768 [ 237.775065][ T8408] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 237.819086][ T8408] REISERFS (device loop2): checking transaction log (loop2) [ 237.888310][ T4636] Bluetooth: hci0: command 0x0419 tx timeout [ 237.964330][ T8412] XFS (loop3): Mounting V5 Filesystem [ 237.970828][ T5285] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of __write_node_page+0x11b8/0x19f0 [ 238.007625][ T5285] attempt to access beyond end of device [ 238.007625][ T5285] loop0: rw=2049, want=40968, limit=40427 [ 238.195001][ T8427] loop4: detected capacity change from 0 to 128 [ 238.209816][ T8412] XFS (loop3): Ending clean mount [ 238.419402][ T8408] REISERFS (device loop2): Using tea hash to sort names [ 238.426694][ T8408] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 238.543090][ T4195] XFS (loop3): Unmounting Filesystem [ 238.627418][ T4460] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 238.907399][ T4460] usb 5-1: Using ep0 maxpacket: 8 [ 239.057431][ T4635] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 239.097809][ T4460] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.103356][ T8453] loop2: detected capacity change from 0 to 512 [ 239.161442][ T8453] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 239.182793][ T4460] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.202889][ T8453] EXT4-fs (loop2): 1 truncate cleaned up [ 239.227447][ T4460] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 109, changing to 10 [ 239.270000][ T8453] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.308397][ T4460] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 17234, setting to 1024 [ 239.353333][ T4460] usb 5-1: config 1 interface 0 has no altsetting 0 [ 239.367492][ T4635] usb 6-1: Using ep0 maxpacket: 32 [ 239.393517][ T8447] loop0: detected capacity change from 0 to 40427 [ 239.487608][ T8460] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1434'. [ 239.490863][ T8447] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 239.510008][ T8447] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 239.519047][ T4635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.531591][ T4635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.557693][ T4460] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 239.559012][ T4635] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 239.575692][ T4460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.576607][ T4635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.595965][ T8447] F2FS-fs (loop0): Found nat_bits in checkpoint [ 239.605155][ T4460] usb 5-1: Product: syz [ 239.611326][ T4635] usb 6-1: config 0 descriptor?? [ 239.625970][ T4460] usb 5-1: Manufacturer: syz [ 239.636557][ T4460] usb 5-1: SerialNumber: syz [ 239.676794][ T8447] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 239.694230][ T8447] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 239.815218][ T8447] attempt to access beyond end of device [ 239.815218][ T8447] loop0: rw=2049, want=53264, limit=40427 [ 239.875761][ T4194] attempt to access beyond end of device [ 239.875761][ T4194] loop0: rw=2049, want=45104, limit=40427 [ 240.070815][ T4460] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 240.091656][ T4460] usb 5-1: USB disconnect, device number 12 [ 240.158006][ T4635] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 240.339802][ T4302] udevd[4302]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.361608][ T8468] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 240.576066][ T4636] usb 6-1: USB disconnect, device number 3 [ 240.687735][ T4638] net_ratelimit: 22 callbacks suppressed [ 240.687754][ T4638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.747786][ T8482] loop2: detected capacity change from 0 to 64 [ 240.876220][ T8484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.884670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.902140][ T8484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.911088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.929383][ T4636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.937962][ T4633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.373526][ T4460] kernel write not supported for file bpf-prog (pid: 4460 comm: kworker/0:11) [ 241.585145][ T8504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.594000][ T8504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.603077][ T8504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.188002][ T8520] loop0: detected capacity change from 0 to 2048 [ 242.313339][ T4636] hid-generic 0005:15C2:5508.000F: item fetching failed at offset 0/9 [ 242.339743][ T8520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.416540][ T4636] hid-generic: probe of 0005:15C2:5508.000F failed with error -22 [ 242.435272][ T8502] loop4: detected capacity change from 0 to 40427 [ 242.598581][ T8502] F2FS-fs (loop4): invalid crc value [ 242.637548][ T4633] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 242.644956][ T8502] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.657427][ T4460] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 242.676918][ T8539] input: syz0 as /devices/virtual/input/input15 [ 242.798515][ T8502] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.887414][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 242.906506][ T5135] [ 242.908991][ T5135] ====================================================== [ 242.909498][ T4633] usb 4-1: Using ep0 maxpacket: 16 [ 242.916104][ T5135] WARNING: possible circular locking dependency detected [ 242.916115][ T5135] syzkaller #0 Not tainted [ 242.916125][ T5135] ------------------------------------------------------ [ 242.916131][ T5135] kworker/0:20/5135 is trying to acquire lock: [ 242.916142][ T5135] ffff88801abd0c28 [ 242.923252][ T8545] device syzkaller1 entered promiscuous mode [ 242.928679][ T5135] ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 242.965421][ T4254] attempt to access beyond end of device [ 242.965421][ T4254] loop4: rw=2049, want=45104, limit=40427 [ 242.965895][ T5135] [ 242.965895][ T5135] but task is already holding lock: [ 242.965904][ T5135] ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 242.993647][ T5135] [ 242.993647][ T5135] which lock already depends on the new lock. [ 242.993647][ T5135] [ 243.004284][ T5135] [ 243.004284][ T5135] the existing dependency chain (in reverse order) is: [ 243.013506][ T5135] [ 243.013506][ T5135] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 243.021523][ T5135] __mutex_lock_common+0x1e3/0x2400 [ 243.027301][ T5135] mutex_lock_nested+0x17/0x20 [ 243.032612][ T5135] rfkill_register+0x33/0x980 [ 243.037837][ T5135] hci_register_dev+0x452/0x970 [ 243.043220][ T5135] vhci_create_device+0x32c/0x5c0 [ 243.048798][ T5135] vhci_write+0x391/0x450 [ 243.053676][ T5135] vfs_write+0x745/0xd60 [ 243.058532][ T5135] ksys_write+0x152/0x260 [ 243.063841][ T5135] do_syscall_64+0x4c/0xa0 [ 243.068777][ T5135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.075287][ T5135] [ 243.075287][ T5135] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 243.083149][ T5135] __mutex_lock_common+0x1e3/0x2400 [ 243.088891][ T5135] mutex_lock_nested+0x17/0x20 [ 243.094180][ T5135] vhci_send_frame+0x88/0x100 [ 243.099381][ T5135] hci_send_frame+0x1a9/0x2e0 [ 243.104582][ T5135] hci_tx_work+0x9f9/0x1710 [ 243.109721][ T5135] process_one_work+0x85f/0x1010 [ 243.115188][ T5135] worker_thread+0xaa6/0x1290 [ 243.120674][ T5135] kthread+0x436/0x520 [ 243.125271][ T5135] ret_from_fork+0x1f/0x30 [ 243.130219][ T5135] [ 243.130219][ T5135] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 243.139444][ T5135] __flush_work+0x116/0x210 [ 243.144485][ T5135] hci_dev_do_close+0x1e7/0x1030 [ 243.149954][ T5135] hci_dev_close+0xd7/0x180 [ 243.154981][ T5135] sock_do_ioctl+0xfb/0x320 [ 243.160011][ T5135] sock_ioctl+0x4d2/0x710 [ 243.164863][ T5135] __se_sys_ioctl+0xfa/0x170 [ 243.170064][ T5135] do_syscall_64+0x4c/0xa0 [ 243.175090][ T5135] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.181596][ T5135] [ 243.181596][ T5135] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 243.189684][ T5135] __mutex_lock_common+0x1e3/0x2400 [ 243.195410][ T5135] mutex_lock_nested+0x17/0x20 [ 243.200695][ T5135] bg_scan_update+0x44/0x3b0 [ 243.205811][ T5135] process_one_work+0x85f/0x1010 [ 243.211281][ T5135] worker_thread+0xaa6/0x1290 [ 243.216494][ T5135] kthread+0x436/0x520 [ 243.221191][ T5135] ret_from_fork+0x1f/0x30 [ 243.226131][ T5135] [ 243.226131][ T5135] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 243.235978][ T5135] __lock_acquire+0x2c42/0x7d10 [ 243.241358][ T5135] lock_acquire+0x19e/0x400 [ 243.246392][ T5135] __flush_work+0x116/0x210 [ 243.251523][ T5135] __cancel_work_timer+0x3f4/0x560 [ 243.257168][ T5135] hci_request_cancel_all+0xcc/0x300 [ 243.263005][ T5135] hci_dev_do_close+0x4e/0x1030 [ 243.268406][ T5135] hci_rfkill_set_block+0x10a/0x190 [ 243.274192][ T5135] rfkill_set_block+0x1c9/0x3d0 [ 243.279581][ T5135] rfkill_epo+0x75/0x170 [ 243.284452][ T5135] rfkill_op_handler+0x76/0x220 [ 243.289825][ T5135] process_one_work+0x85f/0x1010 [ 243.295285][ T5135] worker_thread+0xaa6/0x1290 [ 243.300483][ T5135] kthread+0x436/0x520 [ 243.305076][ T5135] ret_from_fork+0x1f/0x30 [ 243.310017][ T5135] [ 243.310017][ T5135] other info that might help us debug this: [ 243.310017][ T5135] [ 243.320344][ T5135] Chain exists of: [ 243.320344][ T5135] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 243.320344][ T5135] [ 243.336097][ T5135] Possible unsafe locking scenario: [ 243.336097][ T5135] [ 243.343556][ T5135] CPU0 CPU1 [ 243.348920][ T5135] ---- ---- [ 243.354316][ T5135] lock(rfkill_global_mutex); [ 243.359193][ T5135] lock(&data->open_mutex); [ 243.366303][ T5135] lock(rfkill_global_mutex); [ 243.373591][ T5135] lock((work_completion)(&hdev->bg_scan_update)); [ 243.380195][ T5135] [ 243.380195][ T5135] *** DEADLOCK *** [ 243.380195][ T5135] [ 243.388335][ T5135] 3 locks held by kworker/0:20/5135: [ 243.393902][ T5135] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 243.404264][ T5135] #1: ffffc900035dfd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 243.414631][ T5135] #2: ffffffff8d6c5de8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 243.424113][ T5135] [ 243.424113][ T5135] stack backtrace: [ 243.430007][ T5135] CPU: 0 PID: 5135 Comm: kworker/0:20 Not tainted syzkaller #0 [ 243.437550][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.447604][ T5135] Workqueue: events rfkill_op_handler [ 243.452979][ T5135] Call Trace: [ 243.456262][ T5135] [ 243.459198][ T5135] dump_stack_lvl+0x188/0x250 [ 243.463892][ T5135] ? load_image+0x400/0x400 [ 243.468403][ T5135] ? show_regs_print_info+0x20/0x20 [ 243.473605][ T5135] ? print_circular_bug+0x12b/0x1a0 [ 243.478804][ T5135] check_noncircular+0x296/0x330 [ 243.483771][ T5135] ? look_up_lock_class+0x71/0x110 [ 243.488891][ T5135] ? add_chain_block+0x940/0x940 [ 243.493830][ T5135] ? lockdep_lock+0xf1/0x1f0 [ 243.498425][ T5135] ? __lock_acquire+0x12e8/0x7d10 [ 243.503457][ T5135] ? mark_lock+0x94/0x320 [ 243.507794][ T5135] __lock_acquire+0x2c42/0x7d10 [ 243.512654][ T5135] ? verify_lock_unused+0x140/0x140 [ 243.517860][ T5135] ? deref_stack_reg+0xd0/0x120 [ 243.522716][ T5135] lock_acquire+0x19e/0x400 [ 243.527227][ T5135] ? __flush_work+0xfa/0x210 [ 243.531848][ T5135] ? __lock_acquire+0x7d10/0x7d10 [ 243.536876][ T5135] ? read_lock_is_recursive+0x10/0x10 [ 243.542255][ T5135] ? start_flush_work+0x776/0x820 [ 243.547284][ T5135] __flush_work+0x116/0x210 [ 243.551787][ T5135] ? __flush_work+0xfa/0x210 [ 243.556377][ T5135] ? flush_work+0x20/0x20 [ 243.560704][ T5135] ? try_to_grab_pending+0xfa/0x7f0 [ 243.565905][ T5135] ? mark_lock+0x94/0x320 [ 243.570323][ T5135] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 243.576309][ T5135] ? lock_chain_count+0x20/0x20 [ 243.581158][ T5135] ? mark_lock+0x94/0x320 [ 243.585493][ T5135] ? __cancel_work_timer+0x36a/0x560 [ 243.590779][ T5135] __cancel_work_timer+0x3f4/0x560 [ 243.595892][ T5135] ? cancel_work_sync+0x20/0x20 [ 243.600741][ T5135] ? __cancel_work+0x1f9/0x2e0 [ 243.605520][ T5135] ? lockdep_hardirqs_on+0x94/0x140 [ 243.610721][ T5135] ? __cancel_work+0x27b/0x2e0 [ 243.615491][ T5135] ? cancel_work+0x20/0x20 [ 243.619908][ T5135] hci_request_cancel_all+0xcc/0x300 [ 243.625198][ T5135] hci_dev_do_close+0x4e/0x1030 [ 243.630063][ T5135] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 243.636055][ T5135] ? _raw_spin_unlock+0x40/0x40 [ 243.640915][ T5135] hci_rfkill_set_block+0x10a/0x190 [ 243.646120][ T5135] ? rcu_lock_release+0x20/0x20 [ 243.650976][ T5135] rfkill_set_block+0x1c9/0x3d0 [ 243.655831][ T5135] rfkill_epo+0x75/0x170 [ 243.660176][ T5135] rfkill_op_handler+0x76/0x220 [ 243.665027][ T5135] process_one_work+0x85f/0x1010 [ 243.669974][ T5135] ? worker_detach_from_pool+0x240/0x240 [ 243.675618][ T5135] ? lockdep_hardirqs_off+0x70/0x100 [ 243.681011][ T5135] ? _raw_spin_lock_irq+0xb7/0xf0 [ 243.686037][ T5135] ? _raw_spin_lock_irqsave+0x100/0x100 [ 243.691584][ T5135] ? wq_worker_running+0x97/0x170 [ 243.696611][ T5135] worker_thread+0xaa6/0x1290 [ 243.701296][ T5135] kthread+0x436/0x520 [ 243.705400][ T5135] ? rcu_lock_release+0x20/0x20 [ 243.710252][ T5135] ? kthread_blkcg+0xd0/0xd0 [ 243.714844][ T5135] ret_from_fork+0x1f/0x30 [ 243.719272][ T5135] [ 243.724281][ T4460] usb 3-1: Using ep0 maxpacket: 8 [ 243.787610][ T4633] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.807499][ T4633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.824989][ T4633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.847601][ T4460] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 243.860226][ T4633] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.870310][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 243.878309][ T4633] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.887619][ T4460] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 243.901611][ T4460] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.911811][ T4460] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.924938][ T4460] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.934247][ T4460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.979834][ T4633] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 243.990228][ T4633] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 244.001329][ T4633] usb 4-1: Manufacturer: syz [ 244.015518][ T4633] usb 4-1: config 0 descriptor?? [ 244.039895][ T21] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.137506][ T21] usb 6-1: config 4 interface 0 has no altsetting 0 [ 244.197594][ T4460] usb 3-1: GET_CAPABILITIES returned 0 [ 244.203236][ T4460] usbtmc 3-1:16.0: can't read capabilities [ 244.347547][ T4633] rc_core: IR keymap rc-hauppauge not found [ 244.353750][ T4633] Registered IR keymap rc-empty [ 244.362060][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.397374][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.419938][ T4187] usb 3-1: USB disconnect, device number 8 [ 244.429252][ T21] usb 6-1: string descriptor 0 read error: -22 [ 244.436367][ T21] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 244.445902][ T4633] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 244.466906][ T4633] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 244.480477][ T21] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 244.494586][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.539248][ T21] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 244.547035][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.560940][ T21] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 244.572931][ T21] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 244.581472][ T21] usb 6-1: media controller created [ 244.599943][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.611830][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.637672][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.677543][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.717387][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.764022][ T21] zl10353_read_register: readreg error (reg=127, ret==0) [ 244.771240][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.807536][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.816786][ T21] usb 6-1: USB disconnect, device number 4 [ 244.867502][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.907511][ T4633] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 244.938342][ T4633] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 244.948347][ T4633] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 245.866874][ T5135] usb 4-1: USB disconnect, device number 17 [ 245.957719][ T4635] net_ratelimit: 24 callbacks suppressed [ 245.957733][ T4635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.047669][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.757545][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.997610][ T4635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.077512][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.478313][ T4210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.037864][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.117995][ T4635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.127116][ T4210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.077799][ T4633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.158128][ T144] net_ratelimit: 8 callbacks suppressed [ 251.158148][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.237486][ T4633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.279631][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.837584][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog