last executing test programs: 9m52.768317484s ago: executing program 32 (id=6910): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) 7m38.489577246s ago: executing program 33 (id=8935): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffffc02, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000008c0)={0x1, @pix={0x0, 0x0, 0x34324142}}) 2m41.107802331s ago: executing program 2 (id=13660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 2m40.818583682s ago: executing program 2 (id=13665): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m40.564254924s ago: executing program 2 (id=13668): r0 = memfd_create(&(0x7f0000000c40)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xf8\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfd\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cL\x8aC\x81\x16tZ\xff\x9b\x066U\x8f-\x9c\xa3B\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00x}Y\xa3T\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa8\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xab\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01|&\"a\xd1\x91\xb9\xb1\xa9\x11\x91\x86\x92\xd8\xd5\x02~\x9b\x83\xc70\xd1)y\xd2V\x97\xfe\xcf\xffj\x1ey\x89E\x97\xa9\xef\xectKAL\\\xb8\t\xf8\x1b\xc5y@\xc0', 0x6) fcntl$setstatus(r0, 0x4, 0x40000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 2m40.310223441s ago: executing program 2 (id=13673): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m39.550611074s ago: executing program 2 (id=13686): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000540)=""/3, 0x3, 0x4, 0x4, 0xffff0001, 0xb3, 0xac}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x3}], 0x2) 2m38.871024889s ago: executing program 2 (id=13695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) 2m38.267851317s ago: executing program 34 (id=13695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) 1m41.549376435s ago: executing program 4 (id=14391): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) dup(r0) 1m41.243980519s ago: executing program 4 (id=14398): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000880)=ANY=[], 0xfe37, 0x0) 1m40.717784518s ago: executing program 4 (id=14406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000580)={r0, &(0x7f00000004c0), &(0x7f0000000500)=""/38}, 0x20) 1m40.429692503s ago: executing program 4 (id=14410): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m39.947245833s ago: executing program 8 (id=14419): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000003c0)={0x84, @remote, 0x4c24, 0x1, 'none\x00', 0x0, 0x110001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @multicast1, 0x1ffc, 0x1, 'dh\x00', 0x9, 0x821}, 0x2c) 1m39.827232813s ago: executing program 4 (id=14421): pipe2(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x6, 0x2, 0x81}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6001}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) 1m39.820523312s ago: executing program 8 (id=14422): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067fbc4580000540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1m39.5720931s ago: executing program 8 (id=14426): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}}, 0x0) 1m38.819250665s ago: executing program 8 (id=14434): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m38.819111508s ago: executing program 4 (id=14435): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01}, 0x14}}, 0x0) 1m38.216057996s ago: executing program 35 (id=14435): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01}, 0x14}}, 0x0) 1m38.159003517s ago: executing program 8 (id=14441): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$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") r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m37.631197229s ago: executing program 8 (id=14447): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040)=0xa, 0x4) 1m37.197440343s ago: executing program 36 (id=14447): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040)=0xa, 0x4) 34.664719896s ago: executing program 5 (id=15143): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 34.428101704s ago: executing program 5 (id=15146): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0) 34.154144303s ago: executing program 5 (id=15149): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x4, 0x1, 0x40}}, 0x28) 33.912757298s ago: executing program 5 (id=15154): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x2014000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 33.118806722s ago: executing program 5 (id=15161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 32.236627249s ago: executing program 5 (id=15171): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) connect$llc(r0, &(0x7f00000003c0)={0x1a, 0x20, 0x80, 0x5, 0x7, 0x3}, 0x10) 31.689061788s ago: executing program 37 (id=15171): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) connect$llc(r0, &(0x7f00000003c0)={0x1a, 0x20, 0x80, 0x5, 0x7, 0x3}, 0x10) 8.109100726s ago: executing program 0 (id=15377): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 4.595499548s ago: executing program 0 (id=15414): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), &(0x7f0000048000)=0x1, 0x0) 3.794984245s ago: executing program 3 (id=15425): unshare(0x8000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) 3.462157606s ago: executing program 3 (id=15430): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b01fb03010902240001fe00c0000904eb02027f9c1f00090506022000020002090582"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 3.320192485s ago: executing program 0 (id=15432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 3.014218138s ago: executing program 0 (id=15437): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x10002, 0x6, 0x0, 0x9}) 2.728041582s ago: executing program 0 (id=15439): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000001f00)={'custom0\x00'}) 2.07688961s ago: executing program 7 (id=15447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.944123048s ago: executing program 6 (id=15449): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) 1.850206134s ago: executing program 0 (id=15450): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@main, @local=@item_4={0x3, 0x2, 0x9, "58e9036e"}]}}, 0x0}, 0x0) 1.84943372s ago: executing program 1 (id=15451): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) getresgid(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)) 1.75501739s ago: executing program 6 (id=15452): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 1.655151674s ago: executing program 9 (id=15453): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0xffffffffffffffff) 1.654840044s ago: executing program 7 (id=15454): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000600)="853ea23307ca3ce96a4a6e6310e7510000000000000000000000318bbd294bd04cd719c9ff5bb997c05235fae522f45683c3f3ddd56e838e23a81b421b98c65919b005ba2c014e4754ee9f8fabc9dc10bc743d7178e8234b540d4e0b", 0x5c}, {&(0x7f00000007c0)="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", 0x101}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 1.545675408s ago: executing program 1 (id=15455): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="b2b0b6080bc288", 0x7}, {&(0x7f0000000340)="54d9b721a0000000000000d82d", 0xd}], 0x2}}], 0x1, 0x0) 1.478107612s ago: executing program 6 (id=15456): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x7}}]}, 0x38}}, 0x0) 1.408730502s ago: executing program 7 (id=15457): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.405011881s ago: executing program 9 (id=15458): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0)=0x24, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.255049696s ago: executing program 1 (id=15459): r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 1.14769386s ago: executing program 9 (id=15460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x1f) 1.089663937s ago: executing program 3 (id=15461): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)={0x14, r1, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) 1.067510984s ago: executing program 1 (id=15462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2502000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x4004824}, 0x4000) 980.297465ms ago: executing program 6 (id=15463): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000940)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0x0, 0x0, 0x0, 0x5, 0x60000, 0x1, 0x7fe, 0x6, 0x0, [{0x4d3d0000, 0x1, 0x35}]}) 958.760867ms ago: executing program 3 (id=15464): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 866.782564ms ago: executing program 9 (id=15465): creat(&(0x7f0000010280)='./file0\x00', 0x182) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 820.671327ms ago: executing program 7 (id=15466): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = memfd_secret(0x0) futimesat(r0, 0x0, 0x0) 764.147275ms ago: executing program 1 (id=15467): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 711.359384ms ago: executing program 3 (id=15468): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0xfffffffe, 0x1, 0x7, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x0, 0x20001e58, 0x7, 0x63e, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) 666.370532ms ago: executing program 6 (id=15469): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0x7}}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200081d4}, 0x8840) 628.388725ms ago: executing program 9 (id=15470): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002000000000000", @ANYRES32=0x1, @ANYBLOB="fcff"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 588.894761ms ago: executing program 7 (id=15471): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 216.567966ms ago: executing program 9 (id=15472): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000180)={[{}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nobarrier}, {@part={'part', 0x3d, 0x5}}, {@part}, {@gid}, {@uid}, {@nls={'nls', 0x3d, 'koi8-ru'}}]}, 0x1, 0x6f8, &(0x7f0000002440)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) 193.053677ms ago: executing program 6 (id=15473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) setsockopt$inet6_buf(r0, 0x29, 0x2c, 0x0, 0x0) 186.630555ms ago: executing program 3 (id=15474): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000040)={0x20, 0x15, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 39.564091ms ago: executing program 7 (id=15475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 0s ago: executing program 1 (id=15476): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000380), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x2000000, 0x0) kernel console output (not intermixed with test programs): ystem [ 1153.261176][ T5929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.303066][T19088] loop0: detected capacity change from 0 to 512 [ 1153.310397][T19088] EXT4-fs: Ignoring removed orlov option [ 1153.359772][T19088] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1153.427988][T19088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1153.479576][T19088] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.14484: corrupted in-inode xattr: e_value size too large [ 1153.534867][T19088] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1153.540085][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1153.555696][ C0] EXT4-fs (loop0): initial error at time 1901: ext4_iget_extra_inode:5025: inode 15 [ 1153.565123][ C0] EXT4-fs (loop0): last error at time 1901: ext4_iget_extra_inode:5025: inode 15 [ 1153.617592][T19088] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.14484: couldn't read orphan inode 15 (err -117) [ 1153.654429][T19088] loop0: lost filesystem error report for type 5 error -117 [ 1153.654783][T21404] Bluetooth: hci4: command tx timeout [ 1153.682551][T19088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1153.755458][T19124] overlayfs: workdir and upperdir must be separate subtrees [ 1153.916025][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.422652][T18762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.452252][T19203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14496'. [ 1154.464116][T18762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.484941][T18762] bridge_slave_0: entered allmulticast mode [ 1154.514905][T18762] bridge_slave_0: entered promiscuous mode [ 1154.547570][T18762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.578077][T18762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.612350][T18762] bridge_slave_1: entered allmulticast mode [ 1154.635303][T18762] bridge_slave_1: entered promiscuous mode [ 1154.731974][T21404] Bluetooth: hci3: command tx timeout [ 1154.782498][T18817] chnl_net:caif_netlink_parms(): no params data found [ 1154.857868][T18762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.001759][T18762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.044755][T19262] input: syz1 as /devices/virtual/input/input91 [ 1155.074043][T19257] loop6: detected capacity change from 0 to 4096 [ 1155.089063][T19257] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1155.106391][T19257] ntfs3(loop6): ino=3, mi_enum_attr [ 1155.160256][T19257] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1155.167260][T19257] ntfs3(loop6): Failed to load $Extend (-22). [ 1155.206087][T19257] ntfs3(loop6): Failed to initialize $Extend. [ 1155.499384][T18762] team0: Port device team_slave_0 added [ 1155.548808][T18762] team0: Port device team_slave_1 added [ 1155.645387][ T8501] Bluetooth: hci4: command tx timeout [ 1155.706285][T19348] loop6: detected capacity change from 0 to 512 [ 1155.862901][T18762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.878140][T18762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.916401][T18762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.970655][T19382] bridge0: port 3(macvtap1) entered blocking state [ 1155.977632][T19382] bridge0: port 3(macvtap1) entered disabled state [ 1155.991258][T19382] macvtap1: entered allmulticast mode [ 1155.996655][T19382] bridge0: entered allmulticast mode [ 1156.005214][T19382] macvtap1: left allmulticast mode [ 1156.011383][T19382] bridge0: left allmulticast mode [ 1156.106041][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1156.139271][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.166788][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1156.174811][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.190487][ T12] veth1_macvtap: left promiscuous mode [ 1156.204837][ T12] veth0_macvtap: left allmulticast mode [ 1156.210499][ T12] veth0_macvtap: left promiscuous mode [ 1156.216395][ T12] veth1_vlan: left promiscuous mode [ 1156.221691][ T12] veth0_vlan: left promiscuous mode [ 1156.417116][ T12] pimreg (unregistering): left allmulticast mode [ 1156.676304][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1156.700440][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1156.701246][ T8501] Bluetooth: hci6: command 0x1003 tx timeout [ 1156.713781][T21404] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1156.714216][ T8501] Bluetooth: hci3: command tx timeout [ 1156.965417][T18762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.973069][T18762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1156.999981][T18762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.021274][T18817] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.032814][T18817] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.041240][T18817] bridge_slave_0: entered allmulticast mode [ 1157.050894][T18817] bridge_slave_0: entered promiscuous mode [ 1157.064158][T19411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14519'. [ 1157.227397][T18817] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.234804][T18817] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.241989][T18817] bridge_slave_1: entered allmulticast mode [ 1157.290944][T18817] bridge_slave_1: entered promiscuous mode [ 1157.362142][T18762] hsr_slave_0: entered promiscuous mode [ 1157.370350][T18762] hsr_slave_1: entered promiscuous mode [ 1157.397775][T18762] debugfs: 'hsr0' already exists in 'hsr' [ 1157.408750][T18762] Cannot create hsr debugfs directory [ 1157.445129][ T2158] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1157.517829][T18817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.584994][T18817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.619426][T21404] Bluetooth: hci4: command tx timeout [ 1157.624896][ T2158] usb 4-1: Using ep0 maxpacket: 8 [ 1157.632141][ T2158] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1157.655114][ T2158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1157.675802][ T2158] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1157.709977][ T2158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.764371][ T2158] usb 4-1: config 0 descriptor?? [ 1157.950646][T18817] team0: Port device team_slave_0 added [ 1158.087787][T18817] team0: Port device team_slave_1 added [ 1158.171992][ T12] IPVS: stop unused estimator thread 0... [ 1158.221750][ T2158] sony 0003:054C:024B.0014: hiddev0,hidraw0: USB HID v0.09 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 1158.253344][ T2158] sony 0003:054C:024B.0014: failed to claim input [ 1158.404087][ T2158] usb 4-1: USB disconnect, device number 2 [ 1158.441890][T19598] fido_id[19598]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1158.504203][T18817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.529290][T18817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.569823][T18817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.723739][T18817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.739172][T18817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.743350][T19650] loop7: detected capacity change from 0 to 512 [ 1158.766998][T18817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.808429][T19650] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1158.836817][T19650] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 1159.303819][T18817] hsr_slave_0: entered promiscuous mode [ 1159.312409][T18817] hsr_slave_1: entered promiscuous mode [ 1159.318972][T18817] debugfs: 'hsr0' already exists in 'hsr' [ 1159.327438][T18817] Cannot create hsr debugfs directory [ 1159.341544][T19713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14549'. [ 1159.643890][ T2158] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1159.814976][T19756] loop3: detected capacity change from 0 to 164 [ 1159.815629][ T2158] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1159.838350][T19756] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 1160.446704][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14562'. [ 1160.483975][T18762] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1160.557531][T18762] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1160.593931][T19842] loop3: detected capacity change from 0 to 128 [ 1160.697288][T18762] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1160.919780][T18762] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1161.084942][T21404] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 1161.178183][T19889] loop7: detected capacity change from 0 to 1024 [ 1161.239768][T19889] hfsplus: bad catalog folder entry [ 1161.353513][ T12] bridge_slave_1: left allmulticast mode [ 1161.378271][ T12] bridge_slave_1: left promiscuous mode [ 1161.406944][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.423193][ T12] bridge_slave_0: left allmulticast mode [ 1161.441688][ T12] bridge_slave_0: left promiscuous mode [ 1161.464894][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.559490][T19918] hub 9-0:1.0: USB hub found [ 1161.615494][T19918] hub 9-0:1.0: 1 port detected [ 1162.208770][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.302102][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.328461][ T12] bond0 (unregistering): Released all slaves [ 1162.564746][T19958] mkiss: ax0: crc mode is auto. [ 1162.735721][T19947] loop0: detected capacity change from 0 to 32768 [ 1162.823895][T14931] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1162.992497][T14931] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1163.014316][T14931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.022326][T14931] usb 4-1: Product: syz [ 1163.063568][T14931] usb 4-1: Manufacturer: syz [ 1163.069606][T14931] usb 4-1: SerialNumber: syz [ 1163.141128][T14931] usb 4-1: config 0 descriptor?? [ 1163.167613][T20019] Bluetooth: MGMT ver 1.23 [ 1163.184083][T14931] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1163.229459][T14931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1163.239901][T14931] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1163.281098][T14931] usb 4-1: media controller created [ 1163.337497][T14931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.468979][T20038] loop0: detected capacity change from 0 to 1024 [ 1163.478155][ T12] hsr_slave_0: left promiscuous mode [ 1163.512509][ T12] hsr_slave_1: left promiscuous mode [ 1163.529330][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.559232][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.620026][T14931] DVB: Unable to find symbol mt352_attach() [ 1163.736760][T14931] DVB: Unable to find symbol nxt6000_attach() [ 1163.745173][T14931] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1163.774819][T14931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input92 [ 1163.863619][T14931] dvb-usb: schedule remote query interval to 1000 msecs. [ 1163.903183][T14931] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1163.903908][T20063] loop7: detected capacity change from 0 to 256 [ 1163.920349][T14931] dvb-usb: bulk message failed: -22 (7/0) [ 1163.926381][T14931] dvb-usb: bulk message failed: -22 (7/0) [ 1163.958463][T20063] exfat: Deprecated parameter 'namecase' [ 1163.995787][T14931] usb 4-1: USB disconnect, device number 3 [ 1164.059641][T20063] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1164.180692][ T5990] IPVS: starting estimator thread 0... [ 1164.290227][T14931] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1164.318818][T20081] IPVS: using max 25 ests per chain, 60000 per kthread [ 1164.519553][T20104] loop0: detected capacity change from 0 to 512 [ 1164.534129][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1164.580958][T20104] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1164.617364][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1164.618970][T20104] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 1164.702984][T20104] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.14615: inode #15: comm syz.0.14615: iget: illegal inode # [ 1164.761869][T20104] loop0: lost filesystem error report for type 5 error -117 [ 1164.763733][T20104] EXT4-fs (loop0): Remounting filesystem read-only [ 1164.771108][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1164.771131][ C0] EXT4-fs (loop0): initial error at time 1913: ext4_orphan_get:1391 [ 1164.771159][ C0] EXT4-fs (loop0): last error at time 1913: ext4_orphan_get:1391 [ 1164.839946][T20104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.016706][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.365531][T18762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.398415][T20147] netlink: 48 bytes leftover after parsing attributes in process `syz.7.14623'. [ 1165.559989][T20162] loop6: detected capacity change from 0 to 512 [ 1165.572064][T18762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.601375][T18817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1165.682872][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.690021][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.711330][T20162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1165.727469][T14931] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1165.740886][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.748096][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.760547][T18817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1165.806063][T18817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1165.876257][T18817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1165.914812][T20162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1165.941801][T14931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1165.959683][T14931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.006275][T20162] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1166.017746][T14931] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1166.031518][T14931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.066310][T14931] usb 4-1: config 0 descriptor?? [ 1166.202520][ T12] IPVS: stop unused estimator thread 0... [ 1166.206574][T21403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1166.229644][T20191] loop7: detected capacity change from 0 to 2048 [ 1166.277130][T20191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1166.348270][T20197] netlink: 'syz.0.14631': attribute type 3 has an invalid length. [ 1166.478411][T18817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.538899][T14931] lenovo 0003:17EF:6047.0015: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 1166.571793][T18817] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.664733][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.671912][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.732273][ T2158] usb 4-1: USB disconnect, device number 4 [ 1166.782306][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.789502][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.906447][T20215] fido_id[20215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1167.116148][T18817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1167.217811][T18762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.288776][T20247] loop0: detected capacity change from 0 to 512 [ 1167.348775][T20247] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1167.398098][T20247] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 1167.425773][T20247] System zones: 1-12 [ 1167.445671][T20247] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.14638: corrupted in-inode xattr: e_value size too large [ 1167.475378][T20247] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1167.479282][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1167.494856][ C1] EXT4-fs (loop0): initial error at time 1916: ext4_iget_extra_inode:5025: inode 15 [ 1167.504306][ C1] EXT4-fs (loop0): last error at time 1916: ext4_iget_extra_inode:5025: inode 15 [ 1167.523589][T20247] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.14638: couldn't read orphan inode 15 (err -117) [ 1167.540036][T20247] loop0: lost filesystem error report for type 5 error -117 [ 1167.564777][T20247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.663986][T20268] sch_fq: defrate 8 ignored. [ 1167.867514][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.885335][T20277] loop6: detected capacity change from 0 to 64 [ 1167.944510][T18817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.981647][ T30] audit: type=1800 audit(1916.680:2816): pid=20277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.14643" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 1168.108851][T20279] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1168.355413][ T5990] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1168.363229][T20308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14648'. [ 1168.577535][T20318] loop6: detected capacity change from 0 to 128 [ 1168.584250][ T5990] usb 8-1: Using ep0 maxpacket: 32 [ 1168.622139][ T5990] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1168.630274][ T5990] usb 8-1: config 0 has no interface number 0 [ 1168.648052][T18762] veth0_vlan: entered promiscuous mode [ 1168.687340][T20318] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1168.709298][ T5990] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1168.715989][T18762] veth1_vlan: entered promiscuous mode [ 1168.718943][ T5990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.732122][ T5990] usb 8-1: Product: syz [ 1168.737514][ T5990] usb 8-1: Manufacturer: syz [ 1168.742113][ T5990] usb 8-1: SerialNumber: syz [ 1168.778959][ T5990] usb 8-1: config 0 descriptor?? [ 1168.796193][ T5990] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1168.924063][T21403] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1168.969154][T18762] veth0_macvtap: entered promiscuous mode [ 1169.012650][ T5990] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1169.026109][T18762] veth1_macvtap: entered promiscuous mode [ 1169.091644][ T5990] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1169.105035][T18762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.227290][T18762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.287972][T20357] tipc: Started in network mode [ 1169.292876][T20357] tipc: Node identity 2d0000000000000000e7, cluster identity 4711 [ 1169.345447][ T2987] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.369809][ T2987] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.398630][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1169.407424][ T5990] usb 8-1: USB disconnect, device number 21 [ 1169.431209][ T2987] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.465048][ T5990] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1169.501841][ T5990] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1169.516407][ T2987] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.544125][ T5990] quatech2 8-1:0.51: device disconnected [ 1169.752845][T20384] loop3: detected capacity change from 0 to 64 [ 1169.766404][T18817] veth0_vlan: entered promiscuous mode [ 1169.818629][ T30] audit: type=1800 audit(1918.612:2817): pid=20384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14660" name="file3" dev="loop3" ino=22 res=0 errno=0 [ 1169.964481][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.008814][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.024025][T18817] veth1_vlan: entered promiscuous mode [ 1170.205696][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.269118][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.297642][T18817] veth0_macvtap: entered promiscuous mode [ 1170.343373][T18817] veth1_macvtap: entered promiscuous mode [ 1170.468564][T18817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.495798][T18817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.578548][ T3601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.623053][ T3601] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.646126][ T3601] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.682281][T20434] loop0: detected capacity change from 0 to 512 [ 1170.712841][T20434] EXT4-fs: Ignoring removed oldalloc option [ 1170.727610][ T3601] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.781432][T20434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1170.857506][T20434] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1170.903866][T20434] EXT4-fs (loop0): 1 truncate cleaned up [ 1170.956746][T20434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1171.065093][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1171.117592][ T1019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.157491][ T1019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.302712][T21622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.349019][T21622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.808219][ T30] audit: type=1326 audit(1920.702:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.6.14685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6ad9bf79 code=0x7ffc0000 [ 1171.935724][ T30] audit: type=1326 audit(1920.702:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.6.14685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6ad9bf79 code=0x7ffc0000 [ 1172.038539][ T30] audit: type=1326 audit(1920.702:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.6.14685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6ad9bf79 code=0x7ffc0000 [ 1172.091195][T20519] tmpfs: Cannot enable quota on remount [ 1172.124611][T20520] loop6: detected capacity change from 0 to 128 [ 1172.134915][ T30] audit: type=1326 audit(1920.702:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.6.14685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6ad9bf79 code=0x7ffc0000 [ 1172.252015][T20520] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1172.273538][ T30] audit: type=1326 audit(1920.744:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.6.14685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9a6ad9bf79 code=0x7ffc0000 [ 1172.297098][ T30] audit: type=1326 audit(1920.744:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.6.14685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6ad9bf79 code=0x7ffc0000 [ 1172.320821][ T30] audit: type=1326 audit(1920.744:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.6.14685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6ad9bf79 code=0x7ffc0000 [ 1172.343860][ T30] audit: type=1326 audit(1920.744:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20502 comm="syz.6.14685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6ad9bf79 code=0x7ffc0000 [ 1172.574345][T20540] loop3: detected capacity change from 0 to 64 [ 1172.589486][T21403] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1173.002510][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14704'. [ 1173.115456][ T2158] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1173.256429][T20593] loop5: detected capacity change from 0 to 256 [ 1173.347689][ T2158] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1173.378591][ T2158] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1173.453666][ T2158] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1173.498595][ T2158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.553875][ T2158] usb 7-1: Product: syz [ 1173.558087][ T2158] usb 7-1: Manufacturer: syz [ 1173.598257][ T2158] usb 7-1: SerialNumber: syz [ 1173.669085][ T2158] usb 7-1: config 0 descriptor?? [ 1173.707097][T20559] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1173.714358][T20559] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1173.806223][T20614] loop3: detected capacity change from 0 to 512 [ 1173.834811][T20623] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14716'. [ 1173.873150][T20614] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1173.913737][T20623] netlink: 'syz.7.14716': attribute type 1 has an invalid length. [ 1173.970573][T20623] netlink: 'syz.7.14716': attribute type 2 has an invalid length. [ 1173.979960][T20559] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1173.987303][T20614] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 1174.039069][T20559] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1174.065834][T20614] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.14714: Corrupt directory, running e2fsck is recommended [ 1174.222408][T20636] netlink: 'syz.9.14718': attribute type 2 has an invalid length. [ 1174.238304][T20614] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1174.296828][T20614] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.14714: corrupted in-inode xattr: invalid ea_ino [ 1174.316528][T20559] loop6: detected capacity change from 0 to 2048 [ 1174.342701][T20614] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1174.343727][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1174.359302][ C1] EXT4-fs (loop3): initial error at time 1923: ext4_iget_extra_inode:5025: inode 15 [ 1174.368724][ C1] EXT4-fs (loop3): last error at time 1923: ext4_iget_extra_inode:5025: inode 15 [ 1174.380066][T20614] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.14714: couldn't read orphan inode 15 (err -117) [ 1174.407896][T20614] loop3: lost filesystem error report for type 5 error -117 [ 1174.411960][T20559] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1174.416123][T20614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1174.468392][ T2158] Error reading MAC address [ 1174.512822][ T2158] usb 7-1: USB disconnect, device number 23 [ 1174.611897][T20659] netlink: 124 bytes leftover after parsing attributes in process `syz.9.14722'. [ 1174.635536][T20614] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1174.693367][T20614] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 1174.730241][T20614] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.14714: Corrupt directory, running e2fsck is recommended [ 1174.775390][T20665] can0: slcan on ptm0. [ 1174.783581][T20667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14723'. [ 1175.001338][T20664] can0 (unregistered): slcan off ptm0. [ 1175.184533][T20692] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1175.216326][ T5929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.321461][T20696] loop9: detected capacity change from 0 to 64 [ 1175.799909][T20731] loop3: detected capacity change from 0 to 1024 [ 1175.867401][T20731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1175.953781][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14739'. [ 1175.976701][T20737] loop6: detected capacity change from 0 to 256 [ 1175.998031][T20731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.030732][T20738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14739'. [ 1176.157557][T20737] FAT-fs (loop6): Directory bread(block 64) failed [ 1176.185080][T20731] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1176.194031][T20737] FAT-fs (loop6): Directory bread(block 65) failed [ 1176.248308][T20737] FAT-fs (loop6): Directory bread(block 66) failed [ 1176.254850][T20737] FAT-fs (loop6): Directory bread(block 67) failed [ 1176.350378][T20737] FAT-fs (loop6): Directory bread(block 68) failed [ 1176.376935][T20737] FAT-fs (loop6): Directory bread(block 69) failed [ 1176.393568][T20737] FAT-fs (loop6): Directory bread(block 70) failed [ 1176.399266][ T5929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.400102][T20737] FAT-fs (loop6): Directory bread(block 71) failed [ 1176.411094][T20756] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1176.515197][T20737] FAT-fs (loop6): Directory bread(block 72) failed [ 1176.521764][T20737] FAT-fs (loop6): Directory bread(block 73) failed [ 1176.974199][T20721] loop7: detected capacity change from 0 to 32768 [ 1177.009622][T20721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.14735 (20721) [ 1177.114552][T20721] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1177.149382][T20721] BTRFS info (device loop7): using crc32c checksum algorithm [ 1177.333702][T14931] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1177.478180][T14931] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 1177.486237][T20721] BTRFS info (device loop7): enabling ssd optimizations [ 1177.486788][T14931] usb 7-1: config 0 has no interface number 0 [ 1177.512795][T14931] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1177.530080][T20721] BTRFS info (device loop7): turning on flush-on-commit [ 1177.547873][T14931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.569526][T14931] usb 7-1: Product: syz [ 1177.587563][T14931] usb 7-1: Manufacturer: syz [ 1177.590385][T20721] BTRFS info (device loop7): enabling free space tree [ 1177.595911][T14931] usb 7-1: SerialNumber: syz [ 1177.609761][T20721] BTRFS info (device loop7): enabling auto defrag [ 1177.616233][T20721] BTRFS info (device loop7): use lzo compression, level 1 [ 1177.635317][T14931] usb 7-1: config 0 descriptor?? [ 1177.675146][T20721] BTRFS info (device loop7): max_inline set to 4096 [ 1177.893745][T14931] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 1177.921535][T14931] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 1177.972269][T14931] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 1177.997713][T27686] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1178.008272][T14931] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 1178.043464][T20845] loop9: detected capacity change from 0 to 1024 [ 1178.059226][T14931] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1178.077954][T20845] EXT4-fs: Ignoring removed bh option [ 1178.140697][T20845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.270314][T14931] usb 7-1: USB disconnect, device number 24 [ 1178.325406][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1178.325437][ T30] audit: type=1800 audit(1927.550:2839): pid=20845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.14760" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1178.408111][T14931] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1178.426385][T20872] loop3: detected capacity change from 0 to 128 [ 1178.429868][T14931] keyspan 7-1:0.133: device disconnected [ 1178.498930][T18762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.762920][T17640] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1178.951885][T17640] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1178.960203][T17640] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1179.052106][T17640] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.097535][T17640] usb 1-1: config 220 has no interface number 2 [ 1179.103884][T17640] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1179.140948][T17640] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1179.180623][T17640] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1179.187532][T17640] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1179.216690][T17640] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1179.264352][T17640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.297855][T17640] usb 1-1: Product: syz [ 1179.302106][T17640] usb 1-1: Manufacturer: syz [ 1179.309611][T17640] usb 1-1: SerialNumber: syz [ 1179.355740][ T2158] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1179.393900][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14773'. [ 1179.442268][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14773'. [ 1179.468716][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14774'. [ 1179.485467][T20932] netlink: 'syz.5.14773': attribute type 14 has an invalid length. [ 1179.522768][T20932] netlink: 'syz.5.14773': attribute type 12 has an invalid length. [ 1179.535408][ T2158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.559042][ T2158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.575532][T17640] usb 1-1: selecting invalid altsetting 0 [ 1179.599809][ T2158] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1179.603648][T17640] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1179.626595][ T2158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.670382][T17640] uvcvideo 1-1:220.0: No valid video chain found. [ 1179.681235][ T2158] usb 7-1: config 0 descriptor?? [ 1179.761398][T17640] usb 1-1: selecting invalid altsetting 0 [ 1179.767182][T17640] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1179.810081][T20956] loop7: detected capacity change from 0 to 64 [ 1179.849823][T17640] usb 1-1: USB disconnect, device number 127 [ 1180.121708][ T2158] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1180.154174][ T2158] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1180.194290][ T2158] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1180.232388][ T2158] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1180.261731][ T2158] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1180.283298][ T2158] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1180.332802][ T2158] hid-picolcd 0003:04D8:C002.0016: unknown main item tag 0x0 [ 1180.420216][ T2158] hid-picolcd 0003:04D8:C002.0016: No report with id 0x11 found [ 1180.546722][T20913] loop9: detected capacity change from 0 to 32768 [ 1180.564561][ T2158] usb 7-1: USB disconnect, device number 25 [ 1180.673864][ T30] audit: type=1326 audit(1930.008:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21006 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79db9bf79 code=0x7ffc0000 [ 1180.716819][T20913] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1180.742517][ T30] audit: type=1326 audit(1930.019:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21006 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc79db9bf79 code=0x7ffc0000 [ 1180.773032][ T30] audit: type=1326 audit(1930.019:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21006 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79db9bf79 code=0x7ffc0000 [ 1180.796628][ T30] audit: type=1326 audit(1930.019:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21006 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79db9bf79 code=0x7ffc0000 [ 1180.829117][ T30] audit: type=1326 audit(1930.019:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21006 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fc79db9bf79 code=0x7ffc0000 [ 1180.855324][ T30] audit: type=1326 audit(1930.019:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21006 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79db9bf79 code=0x7ffc0000 [ 1180.878614][ T30] audit: type=1326 audit(1930.019:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21006 comm="syz.7.14786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79db9bf79 code=0x7ffc0000 [ 1180.951423][T17640] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 1180.971404][T21031] loop3: detected capacity change from 0 to 1024 [ 1181.030652][T20913] XFS (loop9): Ending clean mount [ 1181.072978][T20913] XFS (loop9): Quotacheck needed: Please wait. [ 1181.135655][T17640] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.185691][T17640] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1181.232598][T20913] XFS (loop9): Quotacheck: Done. [ 1181.242166][T17640] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1181.251453][T17640] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.263326][T17640] usb 6-1: config 0 descriptor?? [ 1181.278179][ T36] hfsplus: b-tree write err: -5, ino 25 [ 1181.283977][ T36] hfsplus: b-tree write err: -5, ino 4 [ 1181.340227][T21044] loop6: detected capacity change from 0 to 2364 [ 1181.366329][ T36] hfsplus: b-tree write err: -5, ino 2 [ 1181.519984][T18762] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1181.646523][ T2158] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1181.692294][T17640] cypress 0003:04B4:0001.0017: bogus close delimiter [ 1181.726767][T17640] cypress 0003:04B4:0001.0017: item 0 1 2 10 parsing failed [ 1181.792764][T17640] cypress 0003:04B4:0001.0017: parse failed [ 1181.798770][T17640] cypress 0003:04B4:0001.0017: probe with driver cypress failed with error -22 [ 1181.863476][ T2158] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1181.898081][T17640] usb 6-1: USB disconnect, device number 102 [ 1181.923156][ T2158] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1181.971682][ T2158] usb 8-1: Product: syz [ 1182.001133][ T2158] usb 8-1: Manufacturer: syz [ 1182.005763][ T2158] usb 8-1: SerialNumber: syz [ 1182.078204][ T2158] usb 8-1: config 0 descriptor?? [ 1182.396203][ T2158] usb 8-1: USB disconnect, device number 22 [ 1182.476355][T21121] loop0: detected capacity change from 0 to 256 [ 1182.704788][T21134] netlink: 116 bytes leftover after parsing attributes in process `syz.5.14806'. [ 1182.830628][T21145] loop6: detected capacity change from 0 to 256 [ 1182.869226][T21145] exfat: Deprecated parameter 'utf8' [ 1182.920766][T21145] exfat: Deprecated parameter 'utf8' [ 1182.946864][T21153] loop3: detected capacity change from 0 to 256 [ 1182.970251][T21145] exfat: Deprecated parameter 'utf8' [ 1182.987899][T21149] loop0: detected capacity change from 0 to 2048 [ 1183.038609][T21145] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1183.067410][T21153] exfat: Deprecated parameter 'utf8' [ 1183.105134][T21167] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1183.123067][T21153] exfat: Deprecated parameter 'namecase' [ 1183.160349][T21153] exfat: Deprecated parameter 'namecase' [ 1183.170140][T21145] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 1183.189175][T21153] exfat: Deprecated parameter 'utf8' [ 1183.201229][T21172] exfat: Deprecated parameter 'utf8' [ 1183.223225][T21153] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x151dac50) [ 1183.235306][T21145] exFAT-fs (loop6): Filesystem has been set read-only [ 1183.264328][T21172] exfat: Deprecated parameter 'utf8' [ 1183.284938][T21153] exFAT-fs (loop3): invalid boot region [ 1183.297770][T21172] exfat: Deprecated parameter 'utf8' [ 1183.315669][T21153] exFAT-fs (loop3): failed to recognize exfat type [ 1183.379639][ T2158] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1183.543191][ T2158] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.570157][ T2158] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1183.587192][ T2158] usb 8-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1183.646235][ T2158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.655739][ T5990] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1183.713513][ T2158] usb 8-1: config 0 descriptor?? [ 1183.829568][ T5990] usb 1-1: Using ep0 maxpacket: 16 [ 1183.858953][ T5990] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.881861][ T5990] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1183.889881][ T5990] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1183.922839][T17640] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1183.951796][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.973495][ T5990] usb 1-1: config 0 descriptor?? [ 1184.096615][T17640] usb 7-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.122086][T17640] usb 7-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.142260][T17640] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1184.148907][T17640] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1184.170702][ T2158] hid-retrode 0003:0403:97C1.0018: unknown main item tag 0x0 [ 1184.213776][ T2158] hid-retrode 0003:0403:97C1.0018: unknown main item tag 0x0 [ 1184.213793][T17640] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.245744][ T2158] hid-retrode 0003:0403:97C1.0018: unknown main item tag 0x0 [ 1184.271941][T17640] usb 7-1: config 0 descriptor?? [ 1184.313573][ T2158] hid-retrode 0003:0403:97C1.0018: hidraw0: USB HID v0.01 Device [HID 0403:97c1] on usb-dummy_hcd.7-1/input0 [ 1184.368224][ T2158] usb 8-1: USB disconnect, device number 23 [ 1184.388775][ T5990] hid (null): bogus close delimiter [ 1184.399505][ T5990] nzxt-smart2 0003:1E71:2009.0019: bogus close delimiter [ 1184.459353][ T5990] nzxt-smart2 0003:1E71:2009.0019: item 0 4 2 10 parsing failed [ 1184.512429][ T5990] nzxt-smart2 0003:1E71:2009.0019: probe with driver nzxt-smart2 failed with error -22 [ 1184.590194][T21250] loop5: detected capacity change from 0 to 1024 [ 1184.614732][ T5990] usb 1-1: USB disconnect, device number 2 [ 1184.631213][T21250] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1184.642216][T21231] fido_id[21231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1184.689429][T17640] mcp2200 0003:04D8:00DF.001A: USB HID v0.08 Device [HID 04d8:00df] on usb-dummy_hcd.6-1/input0 [ 1184.739336][T21250] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.14824: lblock 2 mapped to illegal pblock 2 (length 1) [ 1184.785212][T21197] loop3: detected capacity change from 0 to 32768 [ 1184.863143][T21250] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1184.873888][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1184.889437][ C1] EXT4-fs (loop5): initial error at time 1934: ext4_map_blocks:776: inode 3: block 2 [ 1184.898991][ C1] EXT4-fs (loop5): last error at time 1934: ext4_map_blocks:776: inode 3: block 2 [ 1184.908851][T21250] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1184.930346][T21250] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.14824: lblock 0 mapped to illegal pblock 48 (length 1) [ 1184.952606][T21250] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1184.962071][T21250] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1184.992119][ T5990] usb 7-1: USB disconnect, device number 26 [ 1185.066928][T21250] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.14824: Failed to acquire dquot type 0 [ 1185.112989][T21250] loop5: lost filesystem error report for type 5 error -117 [ 1185.118127][T21250] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1185.194200][T21250] loop5: lost filesystem error report for type 5 error -117 [ 1185.208605][T21250] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.14824: mark_inode_dirty error [ 1185.319991][T21218] loop9: detected capacity change from 0 to 32768 [ 1185.321202][T21250] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1185.359796][T21250] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1185.383194][T21218] [ 1185.383194][T21218] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1185.383194][T21218] [ 1185.459508][T21250] EXT4-fs (loop5): 1 orphan inode deleted [ 1185.488015][T21250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.512377][ T1019] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1185.593706][ T1019] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1185.647031][ T1019] EXT4-fs error (device loop5): ext4_release_dquot:7039: comm kworker/u8:7: Failed to release dquot type 0 [ 1185.733751][T18762] [ 1185.733751][T18762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1185.733751][T18762] [ 1185.798909][T18762] [ 1185.798909][T18762] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1185.798909][T18762] [ 1185.818146][T21315] loop7: detected capacity change from 0 to 64 [ 1185.850156][T18817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.864902][ T36] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1185.923284][ T36] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1185.923548][ T36] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 1185.981110][ T36] EXT4-fs error (device loop5): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 0 [ 1186.055138][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14834'. [ 1186.062058][ T36] loop5: lost filesystem error report for type 5 error -117 [ 1186.078059][T18817] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1186.098995][T21324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14834'. [ 1186.141303][T18817] loop5: lost filesystem error report for type 5 error -117 [ 1186.141606][T18817] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1186.189144][T18817] loop5: lost filesystem error report for type 5 error -117 [ 1186.189464][T18817] EXT4-fs error (device loop5): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 1186.274102][T18817] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1186.512290][T21347] netlink: 'syz.9.14837': attribute type 5 has an invalid length. [ 1187.145465][T21362] loop9: detected capacity change from 0 to 4096 [ 1187.156782][T21317] loop6: detected capacity change from 0 to 32768 [ 1187.205898][T21362] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1187.223201][T21317] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.14830 (21317) [ 1187.307843][T21317] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1187.349605][T21317] BTRFS info (device loop6): using sha256 checksum algorithm [ 1187.377207][T21362] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1187.404780][T21362] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 1187.580831][T21317] BTRFS info (device loop6): enabling ssd optimizations [ 1187.632346][T21423] loop3: detected capacity change from 0 to 2048 [ 1187.641119][T21317] BTRFS info (device loop6): turning on async discard [ 1187.657232][T21317] BTRFS info (device loop6): enabling free space tree [ 1187.684293][T21423] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1187.706458][ T1019] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1187.758834][T18762] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1187.797040][T18762] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1187.834818][T21423] bio_check_eod: 44 callbacks suppressed [ 1187.834845][T21423] syz.3.14851: attempt to access beyond end of device [ 1187.834845][T21423] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 1187.864225][T21433] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1187.883338][T18762] ntfs3(loop9): ino=3, ntfs_set_state failed, -22. [ 1187.916675][ T1019] ntfs3(loop9): ino=3, ntfs3_write_inode failed, -22. [ 1188.019754][T21403] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1188.020212][T21423] syz.3.14851: attempt to access beyond end of device [ 1188.020212][T21423] loop3: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 1188.131149][T21423] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 1188.149706][T21445] loop5: detected capacity change from 0 to 512 [ 1188.214239][T21445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1188.557692][T18817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.117964][T21491] loop0: detected capacity change from 0 to 512 [ 1189.157259][T21489] loop9: detected capacity change from 0 to 128 [ 1189.238993][T21489] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1189.353664][T21491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.375839][T21489] hpfs: filesystem error: improperly stopped [ 1189.387463][T21489] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1189.405447][T21489] hpfs: You really don't want any checks? You are crazy... [ 1189.439735][T21489] hpfs: Code page index out of array [ 1189.445632][T21489] hpfs: code page support is disabled [ 1189.456265][T21489] hpfs: hpfs_map_4sectors(): unaligned read [ 1189.491992][T21489] hpfs: hpfs_map_4sectors(): unaligned read [ 1189.543167][T21491] EXT4-fs: Ignoring sb option on remount [ 1189.545930][T21489] hpfs: filesystem error: unable to find root dir [ 1189.559134][T21491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1189.643417][T21491] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1189.702766][T21489] hpfs: hpfs_map_4sectors(): unaligned read [ 1189.794723][T21520] loop5: detected capacity change from 0 to 2048 [ 1189.809200][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.901736][T21526] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1190.006178][T21520] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 1190.079763][T21520] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1190.137317][T21520] Remounting filesystem read-only [ 1190.174461][T21520] NILFS (loop5): error -5 truncating bmap (ino=16) [ 1190.296785][T21544] loop3: detected capacity change from 0 to 2048 [ 1190.366291][T18817] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1190.391437][T21544] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1190.467485][ T6160] udevd[6160]: incorrect nilfs2 checksum on /dev/loop3 [ 1190.502935][T21563] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1190.554175][T21564] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1190.560728][T21564] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1190.606053][T21564] vhci_hcd vhci_hcd.0: Device attached [ 1190.646661][T21565] vhci_hcd: connection closed [ 1190.651220][T21622] vhci_hcd vhci_hcd.9: stop threads [ 1190.663111][T21622] vhci_hcd vhci_hcd.9: release socket [ 1190.671341][T21622] vhci_hcd vhci_hcd.9: disconnect device [ 1190.794309][T21571] loop5: detected capacity change from 0 to 4096 [ 1190.924449][T21571] ntfs3(loop5): ino=19, mi_enum_attr [ 1190.934347][T21571] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1190.948408][T21589] netlink: 256 bytes leftover after parsing attributes in process `syz.3.14884'. [ 1190.970104][T21589] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14884'. [ 1190.997992][T21577] loop6: detected capacity change from 0 to 4096 [ 1191.190405][T21599] loop3: detected capacity change from 0 to 64 [ 1191.427003][T21611] loop9: detected capacity change from 0 to 64 [ 1191.810069][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14895'. [ 1192.017409][ T30] audit: type=1326 audit(1941.929:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.0.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58db9bf79 code=0x7ffc0000 [ 1192.106866][T21606] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1192.152866][ T30] audit: type=1326 audit(1941.929:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.0.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58db9bf79 code=0x7ffc0000 [ 1192.182476][T21650] loop3: detected capacity change from 0 to 1024 [ 1192.219769][T21650] EXT4-fs: Ignoring removed bh option [ 1192.229078][ T30] audit: type=1326 audit(1941.971:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.0.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fc58db9bf79 code=0x7ffc0000 [ 1192.307051][T21650] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 1192.323631][ T30] audit: type=1326 audit(1941.971:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.0.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58db9bf79 code=0x7ffc0000 [ 1192.412819][T21655] loop6: detected capacity change from 0 to 4096 [ 1192.434409][ T30] audit: type=1326 audit(1941.971:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21637 comm="syz.0.14897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58db9bf79 code=0x7ffc0000 [ 1192.462532][T21650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1192.601897][T21681] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1192.780094][ T5929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.099243][T21703] loop5: detected capacity change from 0 to 1024 [ 1193.165074][ T6030] kernel read not supported for file /vga_arbiter (pid: 6030 comm: kworker/1:4) [ 1193.476255][T21728] tipc: Started in network mode [ 1193.481177][T21728] tipc: Node identity 9a7261f7563, cluster identity 4711 [ 1193.526290][T21728] tipc: Enabled bearer , priority 10 [ 1193.749852][T17640] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1193.947032][T17640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.981890][T17640] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 1193.995716][T21752] loop5: detected capacity change from 0 to 4096 [ 1194.013272][T17640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.100954][T21752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1194.124379][T21767] loop6: detected capacity change from 0 to 64 [ 1194.132969][T17640] usb 1-1: config 0 descriptor?? [ 1194.348908][T21784] use of bytesused == 0 is deprecated and will be removed in the future, [ 1194.402919][T18817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.447562][T21784] use the actual size instead. [ 1194.683015][T21804] loop5: detected capacity change from 0 to 64 [ 1194.697979][T17640] hid_parser_main: 2 callbacks suppressed [ 1194.698001][T17640] wacom 0003:056A:00E6.001B: unknown main item tag 0x0 [ 1194.718488][ T5990] tipc: Node number set to 3426902519 [ 1194.746187][T17640] wacom 0003:056A:00E6.001B: unknown main item tag 0x0 [ 1194.822531][T17640] wacom 0003:056A:00E6.001B: hidraw0: USB HID v0.00 Device [HID 056a:00e6] on usb-dummy_hcd.0-1/input0 [ 1194.885878][T21811] hfsplus: bad catalog entry type [ 1194.900839][T17640] usb 1-1: USB disconnect, device number 3 [ 1195.013754][ T3601] hfsplus: b-tree write err: -5, ino 25 [ 1195.037420][ T3601] hfsplus: b-tree write err: -5, ino 4 [ 1195.042964][ T3601] hfsplus: b-tree write err: -5, ino 2 [ 1195.350784][T21851] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 1195.365028][T21841] fido_id[21841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1196.136357][T21896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14951'. [ 1196.363222][T21906] set_capacity_and_notify: 2 callbacks suppressed [ 1196.363244][T21906] loop5: detected capacity change from 0 to 128 [ 1196.479608][T21906] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1196.494145][T21916] loop3: detected capacity change from 0 to 64 [ 1196.688573][T21928] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1196.866026][T21941] loop3: detected capacity change from 0 to 128 [ 1196.974637][T21941] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1197.131817][T21954] loop7: detected capacity change from 0 to 1024 [ 1197.138963][T21955] loop9: detected capacity change from 0 to 512 [ 1197.199973][T21955] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.14965: iget: bad extra_isize 50264 (inode size 256) [ 1197.206922][ T5929] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1197.240057][T21955] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1197.248311][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1197.263939][ C0] EXT4-fs (loop9): initial error at time 1946: ext4_orphan_get:1391: inode 15 [ 1197.272846][ C0] EXT4-fs (loop9): last error at time 1946: ext4_orphan_get:1391: inode 15 [ 1197.280511][T21955] EXT4-fs (loop9): Remounting filesystem read-only [ 1197.299844][T21959] [U]  [ 1197.352631][T21955] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1197.420926][ T1019] hfsplus: b-tree write err: -5, ino 25 [ 1197.443314][ T1019] hfsplus: b-tree write err: -5, ino 4 [ 1197.449895][ T1019] hfsplus: b-tree write err: -5, ino 2 [ 1197.516543][ T1019] hfsplus: b-tree write err: -5, ino 17 [ 1197.693266][T18762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1197.798307][T21996] loop0: detected capacity change from 0 to 1024 [ 1197.858940][T21996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1197.933450][T21996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1197.966956][T14115] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1197.979949][T21996] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 1198.039698][T21996] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 1198.144064][T22013] loop5: detected capacity change from 0 to 1764 [ 1198.150632][T14115] usb 7-1: Using ep0 maxpacket: 32 [ 1198.171325][T14115] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 1198.204529][T14115] usb 7-1: config 0 has no interface number 0 [ 1198.250730][T14115] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1198.274281][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.292200][T14115] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1198.322936][T14115] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1198.338927][T22013] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1198.375121][T14115] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.407741][T22027] loop9: detected capacity change from 0 to 256 [ 1198.447339][T22027] exfat: Deprecated parameter 'utf8' [ 1198.456652][T14115] usb 7-1: Product: syz [ 1198.475710][T22027] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x3e6496f2, utbl_chksum : 0xe619d30d) [ 1198.477744][T14115] usb 7-1: Manufacturer: syz [ 1198.575478][T14115] usb 7-1: SerialNumber: syz [ 1198.629905][T14115] usb 7-1: config 0 descriptor?? [ 1198.637948][T21989] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1198.664849][T21989] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1198.725280][T14115] usb-storage 7-1:0.20: USB Mass Storage device detected [ 1198.760530][T14115] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1198.939709][T14115] scsi host1: usb-storage 7-1:0.20 [ 1199.108890][ T2158] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1199.231439][T17640] usb 7-1: USB disconnect, device number 27 [ 1199.354531][ T2158] usb 8-1: Using ep0 maxpacket: 16 [ 1199.390544][ T2158] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.424536][ T2158] usb 8-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 1199.435321][T22095] loop9: detected capacity change from 0 to 1024 [ 1199.438544][T22101] tipc: Started in network mode [ 1199.461642][ T2158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.471738][T22095] EXT4-fs: Ignoring removed bh option [ 1199.480933][T22101] tipc: Node identity 010000000000000001, cluster identity 4711 [ 1199.516684][ T2158] usb 8-1: config 0 descriptor?? [ 1199.543034][T22095] EXT4-fs: inline encryption not supported [ 1199.572548][T22095] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1199.628223][T22095] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 1199.680957][T22095] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 2: comm syz.9.14992: lblock 2 mapped to illegal pblock 2 (length 1) [ 1199.724340][T22035] loop0: detected capacity change from 0 to 32768 [ 1199.762534][T22095] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1199.771303][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1199.771885][T22095] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1199.780407][ C1] EXT4-fs (loop9): initial error at time 1949: ext4_map_blocks:776: inode 3: block 2 [ 1199.804396][ C1] EXT4-fs (loop9): last error at time 1949: ext4_map_blocks:776: inode 3: block 2 [ 1199.837123][T22095] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 48: comm syz.9.14992: lblock 0 mapped to illegal pblock 48 (length 1) [ 1199.851855][T22095] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1199.882245][T22035] jfs_lookup: dtSearch returned -5 [ 1199.910453][T22095] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1199.938672][T22095] EXT4-fs error (device loop9): ext4_acquire_dquot:7003: comm syz.9.14992: Failed to acquire dquot type 0 [ 1199.998747][T22095] loop9: lost filesystem error report for type 5 error -117 [ 1200.045046][T22095] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1200.055482][ T2158] maltron 0003:058F:9410.001C: unknown main item tag 0x0 [ 1200.081855][ T2158] maltron 0003:058F:9410.001C: unknown main item tag 0x0 [ 1200.082581][T17640] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1200.108963][T22095] loop9: lost filesystem error report for type 5 error -117 [ 1200.109393][T22095] EXT4-fs error (device loop9): ext4_evict_inode:255: inode #11: comm syz.9.14992: mark_inode_dirty error [ 1200.129009][ T2158] maltron 0003:058F:9410.001C: unknown main item tag 0x0 [ 1200.161654][ T2158] maltron 0003:058F:9410.001C: unknown main item tag 0x0 [ 1200.177632][T22095] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1200.177959][T22095] EXT4-fs warning (device loop9): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1200.213820][ T2158] maltron 0003:058F:9410.001C: unknown main item tag 0x0 [ 1200.251766][ T2158] maltron 0003:058F:9410.001C: hidraw0: USB HID v0.02 Device [HID 058f:9410] on usb-dummy_hcd.7-1/input0 [ 1200.267229][T22095] EXT4-fs (loop9): 1 orphan inode deleted [ 1200.284647][ T3601] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1200.288166][T22095] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.312423][T17640] usb 6-1: Using ep0 maxpacket: 32 [ 1200.333812][ T2158] usb 8-1: USB disconnect, device number 24 [ 1200.365211][T17640] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1200.407410][T17640] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1200.416437][ T3601] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1200.459494][ T3601] EXT4-fs error (device loop9): ext4_release_dquot:7039: comm kworker/u8:11: Failed to release dquot type 0 [ 1200.488067][T17640] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1200.547349][T17640] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1200.589312][T22137] fido_id[22137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1200.606423][T17640] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1200.653167][T17640] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1200.730326][T18762] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.743759][T17640] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1200.777153][T18762] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1200.787021][T17640] usb 6-1: Product: syz [ 1200.804416][T17640] usb 6-1: Manufacturer: syz [ 1200.839119][T17640] usb 6-1: SerialNumber: syz [ 1200.840365][T18762] loop9: lost filesystem error report for type 5 error -117 [ 1200.859457][T18762] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1200.866912][T17640] usb 6-1: config 0 descriptor?? [ 1200.896831][T17640] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1200.923476][T18762] loop9: lost filesystem error report for type 5 error -117 [ 1200.925615][T18762] EXT4-fs error (device loop9): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 1200.960129][T17640] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1201.016852][T18762] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1201.033520][T22170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15004'. [ 1201.115980][T22170] ip6gre3: entered promiscuous mode [ 1201.154682][T22170] ip6gre3: entered allmulticast mode [ 1201.208313][T14931] usb 6-1: USB disconnect, device number 103 [ 1201.235125][T14931] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1201.454005][T22212] autofs: Bad value for 'fd' [ 1201.509425][T22211] hfsplus: b-tree write err: -5, ino 2 [ 1201.605061][ T3601] hfsplus: b-tree write err: -5, ino 25 [ 1201.621097][ T3601] hfsplus: b-tree write err: -5, ino 4 [ 1201.640945][ T3601] hfsplus: b-tree write err: -5, ino 2 [ 1201.676269][ T3601] hfsplus: b-tree write err: -5, ino 26 [ 1201.807184][ T2987] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1201.850360][ T2158] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1201.874241][ T2987] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1201.892524][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15016'. [ 1201.985340][T22242] veth1_macvtap: left allmulticast mode [ 1201.990931][T22242] veth1_macvtap: left promiscuous mode [ 1202.108484][T22242] macsec0 (unregistering): left allmulticast mode [ 1202.262091][T22272] set_capacity_and_notify: 3 callbacks suppressed [ 1202.262124][T22272] loop5: detected capacity change from 0 to 64 [ 1202.368761][T22258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15023'. [ 1202.647268][ T6030] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1202.687749][T22294] loop5: detected capacity change from 0 to 64 [ 1202.886759][T22286] loop3: detected capacity change from 0 to 4096 [ 1202.989658][T14115] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1203.075611][T22319] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1203.176461][T22321] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15035'. [ 1203.219721][T22326] loop7: detected capacity change from 0 to 512 [ 1203.278872][T22326] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.15038: iget: bad i_size value: 38620345925642 [ 1203.313597][T22326] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1203.314344][T22326] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.15038: couldn't read orphan inode 15 (err -117) [ 1203.323778][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1203.323801][ C1] EXT4-fs (loop7): initial error at time 1952: ext4_orphan_get:1391: inode 15 [ 1203.323840][ C1] EXT4-fs (loop7): last error at time 1952: ext4_orphan_get:1391: inode 15 [ 1203.417137][T22326] loop7: lost filesystem error report for type 5 error -117 [ 1203.419603][T22326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.460746][ T1019] ntfs3(loop3): ino=5, mi_enum_attr [ 1203.827205][T27686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.032181][T22371] loop3: detected capacity change from 0 to 1024 [ 1204.146023][T22371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.424808][ T5929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.466826][T22392] loop5: detected capacity change from 0 to 2048 [ 1204.477983][T22399] netlink: 488 bytes leftover after parsing attributes in process `syz.9.15057'. [ 1204.478308][T22392] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1204.549384][T22401] loop6: detected capacity change from 0 to 1024 [ 1204.565241][T22399] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.15057'. [ 1204.567251][T22392] syz.5.15053: attempt to access beyond end of device [ 1204.567251][T22392] loop5: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 1204.600700][T22407] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1204.637770][T22401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1204.702208][T22401] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1204.751853][T22401] System zones: 0-1, 3-36 [ 1204.850844][T22392] NILFS (loop5): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 1204.875840][T22401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.919351][T22392] NILFS error (device loop5): nilfs_bmap_last_key: broken bmap (inode number=16) [ 1204.986696][T22392] Remounting filesystem read-only [ 1205.010850][T22392] NILFS (loop5): error -5 truncating bmap (ino=16) [ 1205.030511][T22401] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1205.175759][T22439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15064'. [ 1205.187130][T22439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15064'. [ 1205.209799][T21403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.221242][T18817] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1205.384481][ T6030] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1205.558476][ T6030] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1205.576427][ T6030] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.598743][ T6030] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1205.618755][ T6030] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1205.637532][ T6030] usb 10-1: Manufacturer: syz [ 1205.663300][ T6030] usb 10-1: config 0 descriptor?? [ 1205.823225][ T6030] rc_core: IR keymap rc-hauppauge not found [ 1205.829169][ T6030] Registered IR keymap rc-empty [ 1205.884577][ T6030] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1205.955826][T22472] loop7: detected capacity change from 0 to 2048 [ 1205.969845][ T6030] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input96 [ 1205.999382][T22472] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=27485, location=27485 [ 1206.049137][T22472] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 100: 0x6a != 0x00 [ 1206.090310][T22472] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1206.170137][ T30] audit: type=1800 audit(1955.170:2852): pid=22472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.15070" name="file2" dev="loop7" ino=1347 res=0 errno=0 [ 1206.470337][T22496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15074'. [ 1206.495965][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1206.553535][ T2158] usb 10-1: USB disconnect, device number 2 [ 1206.739726][T22453] loop5: detected capacity change from 0 to 32768 [ 1206.785913][T22519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.841726][T22453] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1206.983865][T22453] XFS (loop5): Ending clean mount [ 1207.002801][T22453] XFS (loop5): Quotacheck needed: Please wait. [ 1207.272507][T22453] XFS (loop5): Quotacheck: Done. [ 1207.528825][T18817] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1207.681759][T22574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15087'. [ 1207.997543][T22595] loop6: detected capacity change from 0 to 1024 [ 1208.035843][ T2158] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1208.134477][T22595] hfsplus: size 47, res 47, name_len 12 [ 1208.181518][T22602] loop9: detected capacity change from 0 to 256 [ 1208.220175][T22604] loop0: detected capacity change from 0 to 128 [ 1208.248398][ T2158] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1208.257022][T22602] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1208.293268][ T2158] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1208.313531][ T1019] hfsplus: b-tree write err: -5, ino 8 [ 1208.326128][ T2158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.389898][ T2158] usb 8-1: config 0 descriptor?? [ 1208.408602][T22583] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1208.696985][T22556] loop3: detected capacity change from 0 to 32768 [ 1208.707370][T22628] loop6: detected capacity change from 0 to 64 [ 1208.773983][T22556] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1208.795317][T22635] netlink: 'syz.0.15101': attribute type 1 has an invalid length. [ 1208.834460][T22556] XFS (loop3): Ending clean mount [ 1208.862653][ T30] audit: type=1800 audit(1957.696:2853): pid=22628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.15100" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 1208.868938][T22556] XFS (loop3): Quotacheck needed: Please wait. [ 1208.893133][ T2158] elan 0003:04F3:0755.001D: unknown main item tag 0x0 [ 1208.952277][ T2158] elan 0003:04F3:0755.001D: item fetching failed at offset 3/5 [ 1209.008860][ T2158] elan 0003:04F3:0755.001D: Hid Parse failed [ 1209.014971][ T2158] elan 0003:04F3:0755.001D: probe with driver elan failed with error -22 [ 1209.042615][T22556] XFS (loop3): Quotacheck: Done. [ 1209.104571][ T2158] usb 8-1: USB disconnect, device number 25 [ 1209.358983][T22677] loop0: detected capacity change from 0 to 512 [ 1209.502446][T22677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.540744][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15109'. [ 1209.559705][ T5929] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1209.645494][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.242541][T22670] loop6: detected capacity change from 0 to 32768 [ 1210.270902][T22721] loop5: detected capacity change from 0 to 64 [ 1210.355066][ T30] audit: type=1800 audit(1959.080:2854): pid=22670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15105" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 1211.059161][T22786] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1211.468964][T22802] loop0: detected capacity change from 0 to 512 [ 1211.518646][T22802] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1211.566692][T22802] UDF-fs: Scanning with blocksize 512 failed [ 1211.598060][T22802] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1211.612224][T22802] UDF-fs: Scanning with blocksize 1024 failed [ 1211.667951][T22802] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1211.702143][T22802] UDF-fs: Scanning with blocksize 2048 failed [ 1211.723807][T17641] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1211.733325][T22802] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1211.773010][T22802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1211.880002][T22823] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15141'. [ 1211.903868][T17641] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.925310][T17641] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1211.946397][T22829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15141'. [ 1211.958724][T17641] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1211.968647][T17641] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1211.996493][T17641] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1212.012422][T17641] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1212.030744][T17641] usb 8-1: Manufacturer: syz [ 1212.042505][T17641] usb 8-1: config 0 descriptor?? [ 1212.120008][T22837] loop6: detected capacity change from 0 to 1024 [ 1212.483315][ T3601] hfsplus: b-tree write err: -5, ino 25 [ 1212.502102][ T3601] hfsplus: b-tree write err: -5, ino 4 [ 1212.527135][T17641] rc_core: IR keymap rc-hauppauge not found [ 1212.539001][ T3601] hfsplus: b-tree write err: -5, ino 2 [ 1212.544220][T22862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15150'. [ 1212.552337][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15151'. [ 1212.564177][ T3601] hfsplus: b-tree write err: -5, ino 17 [ 1212.574064][T17641] Registered IR keymap rc-empty [ 1212.600743][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1212.628260][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1212.687329][T17641] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1212.729363][T17641] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input97 [ 1212.782589][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1212.809105][T22873] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1212.819941][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1212.849256][T22873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1212.864046][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1212.912097][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1212.932855][T22873] overlayfs: upper fs needs to support d_type. [ 1212.949022][T22873] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1212.974719][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1212.992920][T22873] overlayfs: failed to set xattr on upper [ 1213.012388][T22874] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 1213.028001][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1213.049202][T22873] overlayfs: ...falling back to redirect_dir=nofollow. [ 1213.070469][T22873] overlayfs: ...falling back to index=off. [ 1213.077544][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1213.098791][T22873] overlayfs: ...falling back to uuid=null. [ 1213.125529][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1213.156150][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1213.172964][T22874] ntfs3(loop9): ino=1a, mi_enum_attr [ 1213.209568][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1213.216967][T22874] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1213.263366][T17641] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1213.268734][T22874] ntfs3(loop9): ino=1a, mi_enum_attr [ 1213.310310][T22874] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 1213.328625][T17641] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1213.334964][T22907] EXT4-fs: inline encryption not supported [ 1213.390796][T22907] EXT4-fs: Ignoring removed nobh option [ 1213.395961][T17641] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1213.410439][T18817] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 1213.431449][T22907] EXT4-fs: Ignoring removed bh option [ 1213.463440][T18817] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 1213.480481][T17641] usb 8-1: USB disconnect, device number 26 [ 1213.526056][T22907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.662262][T22907] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 1213.895906][T22874] ntfs3: Cannot use different iocharset when remounting! [ 1213.899121][T22941] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1214.058924][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.552188][ T161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.742375][ T161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.030608][ T161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.206254][T22998] set_capacity_and_notify: 3 callbacks suppressed [ 1215.206277][T22998] loop9: detected capacity change from 0 to 1764 [ 1215.279349][ T8501] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1215.292047][ T8501] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1215.313161][ T8501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1215.337681][ T8501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1215.358817][ T8501] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1215.632573][ T161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.757749][T23030] tipc: Invalid UDP bearer configuration [ 1215.757805][T23030] tipc: Enabling of bearer rejected, failed to enable media [ 1215.916303][T23007] wg0 speed is unknown, defaulting to 1000 [ 1216.074657][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1216.227962][T23072] loop0: detected capacity change from 0 to 1024 [ 1216.305453][T23072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1216.369911][ T30] audit: type=1800 audit(1964.702:2855): pid=23072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15191" name="file1" dev="loop0" ino=839 res=0 errno=0 [ 1216.464604][T23098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15193'. [ 1216.507541][ T161] bridge_slave_1: left allmulticast mode [ 1216.526238][ T161] bridge_slave_1: left promiscuous mode [ 1216.535082][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.556707][T23110] loop7: detected capacity change from 0 to 512 [ 1216.591917][ T161] bridge_slave_0: left allmulticast mode [ 1216.604218][ T161] bridge_slave_0: left promiscuous mode [ 1216.604619][T23110] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.15195: corrupted in-inode xattr: e_name out of bounds [ 1216.619956][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.641035][T23110] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1216.642023][T23110] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.15195: couldn't read orphan inode 15 (err -117) [ 1216.663108][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1216.663131][ C0] EXT4-fs (loop7): initial error at time 1964: ext4_iget_extra_inode:5025: inode 15 [ 1216.663176][ C0] EXT4-fs (loop7): last error at time 1964: ext4_iget_extra_inode:5025: inode 15 [ 1216.790851][T23110] loop7: lost filesystem error report for type 5 error -117 [ 1216.793492][T23110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.036559][T23110] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 1217.226795][T27686] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.557410][T23154] loop3: detected capacity change from 0 to 512 [ 1217.615234][ T8501] Bluetooth: hci4: command tx timeout [ 1217.679239][T23154] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1217.750315][T23104] loop9: detected capacity change from 0 to 32768 [ 1217.757815][T23154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1217.821335][T23154] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.15205: corrupted inode contents [ 1217.976163][T23154] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1217.988094][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1218.003714][ C1] EXT4-fs (loop3): initial error at time 1966: ext4_do_update_inode:5569: inode 16 [ 1218.013071][ C1] EXT4-fs (loop3): last error at time 1966: ext4_do_update_inode:5569: inode 16 [ 1218.013770][T23154] EXT4-fs (loop3): Remounting filesystem read-only [ 1218.078622][T23154] EXT4-fs (loop3): 1 truncate cleaned up [ 1218.131521][ T3601] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1218.143302][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.165945][T23141] loop6: detected capacity change from 0 to 32768 [ 1218.187541][ T3601] Quota error (device loop3): write_blk: dquota write failed [ 1218.205251][ T3601] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 1218.233923][ T3601] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1218.247534][ T3601] Quota error (device loop3): write_blk: dquota write failed [ 1218.254918][ T3601] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 1218.290774][ T3601] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 1218.321208][ T3601] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1218.331358][ T3601] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1218.344776][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.405471][ T161] bond0 (unregistering): Released all slaves [ 1218.491339][T23154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1218.678081][T23150] loop0: detected capacity change from 0 to 32768 [ 1218.697605][ T161] tipc: Left network mode [ 1218.832329][ T5929] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.261730][T23007] chnl_net:caif_netlink_parms(): no params data found [ 1219.721538][T23007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.776853][T23007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.834537][T23007] bridge_slave_0: entered allmulticast mode [ 1219.840048][ T8501] Bluetooth: hci4: command tx timeout [ 1219.881650][T23007] bridge_slave_0: entered promiscuous mode [ 1219.938439][T23007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.976712][T23007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.006635][T23007] bridge_slave_1: entered allmulticast mode [ 1220.048901][T23007] bridge_slave_1: entered promiscuous mode [ 1220.264912][T23007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.367578][T23007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.477310][T23341] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1220.743620][T23354] vlan2: entered promiscuous mode [ 1220.759312][T23354] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1220.822322][T23007] team0: Port device team_slave_0 added [ 1220.868501][T23007] team0: Port device team_slave_1 added [ 1221.086059][ T161] hsr_slave_0: left promiscuous mode [ 1221.136614][ T161] hsr_slave_1: left promiscuous mode [ 1221.149404][T23381] loop3: detected capacity change from 0 to 4096 [ 1221.159145][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.191975][T23306] loop6: detected capacity change from 0 to 40427 [ 1221.199200][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.231007][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.239344][T23306] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1221.258597][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.270693][T23306] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1221.400690][T23381] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1221.453779][ T161] veth1_macvtap: left promiscuous mode [ 1221.459304][ T161] veth0_macvtap: left promiscuous mode [ 1221.496102][ T161] veth1_vlan: left promiscuous mode [ 1221.512320][ T161] veth0_vlan: left promiscuous mode [ 1221.643028][T23346] loop9: detected capacity change from 0 to 32768 [ 1221.704530][T23306] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1221.794749][T23346] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1221.809841][T23306] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1221.829194][T23306] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1221.839030][T23414] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15227'. [ 1221.886587][T23414] netlink: 'syz.3.15227': attribute type 6 has an invalid length. [ 1221.953908][T23384] loop0: detected capacity change from 0 to 32768 [ 1221.966759][T23384] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15224 (23384) [ 1221.978910][T23414] netlink: 'syz.3.15227': attribute type 5 has an invalid length. [ 1221.994302][T23346] XFS (loop9): Ending clean mount [ 1222.046206][T23414] netlink: 'syz.3.15227': attribute type 4 has an invalid length. [ 1222.062669][T23346] XFS (loop9): Quotacheck needed: Please wait. [ 1222.065098][ T8501] Bluetooth: hci4: command tx timeout [ 1222.104436][T23384] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1222.154328][T23384] BTRFS info (device loop0): using sha256 checksum algorithm [ 1222.270972][T23346] XFS (loop9): Quotacheck: Done. [ 1222.311193][T23384] BTRFS info (device loop0): rebuilding free space tree [ 1222.413500][T23384] BTRFS info (device loop0): disabling free space tree [ 1222.455846][T23384] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1222.512150][T23384] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1222.573584][T23384] BTRFS info (device loop0): setting nodatasum [ 1222.593689][T23384] BTRFS info (device loop0): setting nodatacow [ 1222.649788][T23384] BTRFS info (device loop0): turning off barriers [ 1222.679698][T23384] BTRFS info (device loop0): force clearing of disk cache [ 1222.697684][T18762] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1223.069404][ T5913] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1223.096853][T23400] loop7: detected capacity change from 0 to 32768 [ 1223.132646][ T161] team0 (unregistering): Port device team_slave_1 removed [ 1223.209890][ T161] team0 (unregistering): Port device team_slave_0 removed [ 1223.228449][T23400] [ 1223.228449][T23400] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1223.228449][T23400] [ 1223.299966][T23400] ERROR: (device loop7): dbDiscardAG: -EIO [ 1223.299966][T23400] [ 1223.515967][T27686] [ 1223.515967][T27686] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1223.515967][T27686] [ 1223.576140][T27686] [ 1223.576140][T27686] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1223.576140][T27686] [ 1224.192057][T23007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.239276][T23007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.286063][ T8501] Bluetooth: hci4: command tx timeout [ 1224.417142][T23007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.468754][T23470] netlink: 'syz.3.15233': attribute type 298 has an invalid length. [ 1224.545315][T23007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.574349][T23007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.693578][T23007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1224.855165][T23518] loop9: detected capacity change from 0 to 8192 [ 1224.939034][ T8501] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 1225.013131][T23007] hsr_slave_0: entered promiscuous mode [ 1225.019872][T23007] hsr_slave_1: entered promiscuous mode [ 1225.072740][T23007] debugfs: 'hsr0' already exists in 'hsr' [ 1225.096567][T23007] Cannot create hsr debugfs directory [ 1225.236424][T16450] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1225.343640][T23594] loop6: detected capacity change from 0 to 64 [ 1225.389956][T23594] MINIX-fs: bad superblock [ 1225.486091][T16450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1225.529940][T16450] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.610535][T16450] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1225.681154][T16450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.737410][T16450] usb 1-1: config 0 descriptor?? [ 1226.249824][T16450] ryos 0003:1E7D:3138.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 1226.440032][T23704] loop7: detected capacity change from 0 to 256 [ 1226.462549][ T5990] usb 1-1: USB disconnect, device number 4 [ 1226.532291][T23702] fido_id[23702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1226.840488][T14931] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1227.023472][T14931] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1227.058874][T14931] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1227.094279][T23746] loop7: detected capacity change from 0 to 4096 [ 1227.097134][T14931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.132933][T23746] NILFS (loop7): mounting unchecked fs [ 1227.169493][T23746] NILFS (loop7): invalid segment: Sequence number mismatch [ 1227.185529][T14931] usb 7-1: config 0 descriptor?? [ 1227.194765][T23746] NILFS (loop7): trying rollback from an earlier position [ 1227.220381][T23723] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1227.249556][T23746] NILFS (loop7): recovery complete [ 1227.289068][T23763] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1227.314440][T23754] loop0: detected capacity change from 0 to 1024 [ 1227.359620][T23765] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15271'. [ 1227.701896][T14931] bigben 0003:146B:0902.001F: unexpected rdesc, please submit for review [ 1227.737339][T23780] openvswitch: netlink: Message has 572 unknown bytes. [ 1227.770253][T14931] bigben 0003:146B:0902.001F: hidraw0: USB HID v1.01 Device [HID 146b:0902] on usb-dummy_hcd.6-1/input0 [ 1227.782615][T23780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1227.832735][T14931] bigben 0003:146B:0902.001F: missing HID_OUTPUT_REPORT 0 [ 1227.867671][T14931] bigben 0003:146B:0902.001F: no output report found [ 1227.943797][T23007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1227.969556][T23007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1228.000247][T14931] usb 7-1: USB disconnect, device number 28 [ 1228.043520][T23007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1228.066324][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15276'. [ 1228.126521][T23007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1228.127591][T23794] fido_id[23794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1228.143756][T23816] loop0: detected capacity change from 0 to 1024 [ 1228.211671][T23816] EXT4-fs: inline encryption not supported [ 1228.217610][T23816] EXT4-fs: Ignoring removed bh option [ 1228.319482][T23816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1228.502099][T23816] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 1228.641425][T23007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.690260][T23007] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.722529][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.729666][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.772299][ T5913] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.794857][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.802011][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.886562][T23791] loop7: detected capacity change from 0 to 32768 [ 1228.916722][T23759] loop9: detected capacity change from 0 to 32768 [ 1228.921751][T23791] JBD2: Ignoring recovery information on journal [ 1229.036013][T23759] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1229.056318][T23007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1229.076912][T23007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1229.111606][T23791] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1229.181669][T16450] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1229.247446][T23759] XFS (loop9): Ending clean mount [ 1229.255268][T23759] XFS (loop9): Quotacheck needed: Please wait. [ 1229.390978][T27686] ocfs2: Unmounting device (7,7) on (node local) [ 1229.407837][T16450] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1229.439417][T16450] usb 4-1: config 0 has no interface number 0 [ 1229.441770][T23759] XFS (loop9): Quotacheck: Done. [ 1229.460887][T16450] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1229.555380][T16450] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1229.627855][T16450] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1229.660798][T18762] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1229.747386][T16450] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1229.747422][T16450] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1229.747449][T16450] usb 4-1: Product: syz [ 1229.747467][T16450] usb 4-1: SerialNumber: syz [ 1229.757174][T16450] usb 4-1: config 0 descriptor?? [ 1229.775138][T16450] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1229.930034][T16450] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input99 [ 1230.061102][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1230.061373][T14931] usb 4-1: USB disconnect, device number 5 [ 1230.068132][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1230.116019][T23007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.335124][T14931] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1230.364001][T23007] veth0_vlan: entered promiscuous mode [ 1230.414641][T23007] veth1_vlan: entered promiscuous mode [ 1230.514194][T23007] veth0_macvtap: entered promiscuous mode [ 1230.552636][T23007] veth1_macvtap: entered promiscuous mode [ 1230.623544][T23007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.682434][T23007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.788515][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.894504][T23946] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15287'. [ 1230.908997][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.950736][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.017807][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.071235][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.170989][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.213501][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.365575][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.407444][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.420785][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.589491][T21622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.608312][T21622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.869999][T23997] netlink: 'syz.3.15306': attribute type 2 has an invalid length. [ 1232.277764][T24019] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1232.291397][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.318520][T24024] loop6: detected capacity change from 0 to 64 [ 1232.335631][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.353385][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.392745][T24030] loop9: detected capacity change from 0 to 256 [ 1232.398016][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.436942][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.443473][T24030] exfat: Deprecated parameter 'namecase' [ 1232.475153][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.518858][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.555883][T24030] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x3052ce7e, utbl_chksum : 0xe619d30d) [ 1232.568809][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.613069][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.654721][T17641] hid-generic 0005:5B44:0004.0020: unknown main item tag 0x0 [ 1232.692681][T24044] loop3: detected capacity change from 0 to 64 [ 1232.704558][T17641] hid-generic 0005:5B44:0004.0020: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 1232.878082][T24059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1232.981242][ T2158] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1233.098724][T24054] fido_id[24054]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1233.219674][ T2158] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.246634][ T2158] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1233.317428][ T2158] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.398502][ T2158] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1233.429824][ T2158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.522882][ T2158] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1233.552866][ T2158] usb 8-1: invalid MIDI out EP 0 [ 1233.932267][ T2158] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1234.021033][ T2158] usb 8-1: USB disconnect, device number 27 [ 1234.236365][T24157] loop1: detected capacity change from 0 to 256 [ 1234.330566][T24157] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1234.548121][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1234.604706][T24155] loop0: detected capacity change from 0 to 32768 [ 1234.643267][T24155] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1234.652197][T24155] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1234.911886][T24155] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 1ms [ 1234.921489][T16450] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1234.933247][T16450] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1235.106139][T24170] loop1: detected capacity change from 0 to 4096 [ 1235.271060][ T8501] Bluetooth: hci1: Malformed HCI Event [ 1235.321358][T24170] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 1235.394298][T16450] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 431ms [ 1235.443541][T16450] gfs2: fsid=syz:syz.0: jid=0: Done [ 1235.467087][T24155] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1235.799573][T24211] Invalid ELF header magic: != ELF [ 1235.857775][T24209] loop6: detected capacity change from 0 to 2048 [ 1236.013880][T24209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1236.063766][T24209] UDF-fs: incorrect filename length (10) [ 1236.121517][T24155] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1236.472526][T17641] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1236.675353][T17641] usb 2-1: Using ep0 maxpacket: 16 [ 1236.750204][T17641] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1236.757146][T17641] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1236.776308][T17641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.798765][T17641] usb 2-1: config 0 descriptor?? [ 1236.883643][T24260] tipc: New replicast peer: 10.1.1.2 [ 1236.945051][T24260] tipc: Enabled bearer , priority 10 [ 1237.312640][T17641] aureal 0003:0755:2626.0021: hidraw0: USB HID v0.05 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 1237.498081][T16450] usb 2-1: USB disconnect, device number 107 [ 1237.528537][T24246] loop6: detected capacity change from 0 to 32768 [ 1237.608894][T24246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.15354 (24246) [ 1237.618189][T24288] fido_id[24288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1237.651260][ T8501] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 1237.653993][T24313] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1237.712296][T24246] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1237.722413][T24246] BTRFS info (device loop6): using sha256 checksum algorithm [ 1237.949463][T24246] BTRFS info (device loop6): enabling ssd optimizations [ 1238.007888][T24246] BTRFS info (device loop6): turning on async discard [ 1238.050757][T24246] BTRFS info (device loop6): enabling free space tree [ 1238.359496][T21403] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1238.368936][T24357] loop1: detected capacity change from 0 to 256 [ 1238.412575][T24363] loop7: detected capacity change from 0 to 64 [ 1238.501751][T24357] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bb454a, utbl_chksum : 0xe619d30d) [ 1238.824183][ T5990] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1238.985109][T24396] netlink: 'syz.1.15380': attribute type 22 has an invalid length. [ 1239.056850][ T5990] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1239.070402][ T5990] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1239.082289][T24398] netlink: 'syz.1.15380': attribute type 22 has an invalid length. [ 1239.090191][T24398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15380'. [ 1239.134022][ T5990] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1239.173370][ T5990] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1239.219702][ T5990] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1239.285553][T24404] input input100: cannot allocate more than FF_MAX_EFFECTS effects [ 1239.303021][ T5990] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1239.392175][ T5990] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1239.401287][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1239.466538][ T5990] usb 1-1: Product: syz [ 1239.470752][ T5990] usb 1-1: Manufacturer: syz [ 1239.562158][T24368] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1239.587363][ T5990] cdc_wdm 1-1:1.0: skipping garbage [ 1239.613508][ T5990] cdc_wdm 1-1:1.0: skipping garbage [ 1239.693292][ T5990] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1239.699502][ T5990] cdc_wdm 1-1:1.0: Unknown control protocol [ 1239.851125][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.857958][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.865333][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.871926][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.878870][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.885468][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.892353][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.898958][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.905660][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.912253][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.918538][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.925133][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.932098][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.938690][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.945348][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.951952][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.958579][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.965175][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.971467][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1239.978058][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1239.986992][T24441] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1240.223589][T24451] loop7: detected capacity change from 0 to 256 [ 1241.026912][T24481] netlink: 'syz.3.15402': attribute type 178 has an invalid length. [ 1241.441418][T24450] loop6: detected capacity change from 0 to 32768 [ 1241.496649][T24450] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.15394 (24450) [ 1241.541386][T24506] netlink: 'syz.1.15408': attribute type 8 has an invalid length. [ 1241.765611][T24450] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1241.775504][ T5990] usb 1-1: USB disconnect, device number 5 [ 1241.828698][T24450] BTRFS info (device loop6): using xxhash64 checksum algorithm [ 1241.995715][ T8501] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1242.006763][ T8501] Bluetooth: hci1: Injecting HCI hardware error event [ 1242.018333][ T8501] Bluetooth: hci1: hardware error 0x00 [ 1242.054295][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15415'. [ 1242.063465][T24550] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15415'. [ 1242.125773][T24550] netlink: 'syz.9.15415': attribute type 13 has an invalid length. [ 1242.128103][T24450] BTRFS info (device loop6): enabling ssd optimizations [ 1242.134512][T24550] netlink: 'syz.9.15415': attribute type 12 has an invalid length. [ 1242.204664][T24450] BTRFS info (device loop6): turning on async discard [ 1242.266572][T24450] BTRFS info (device loop6): enabling free space tree [ 1242.529941][T21403] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1242.732297][T24585] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15423'. [ 1243.036126][T24601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15427'. [ 1243.403701][T24624] loop1: detected capacity change from 0 to 512 [ 1243.481420][T24624] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1243.493809][T24632] netlink: 'syz.6.15436': attribute type 3 has an invalid length. [ 1243.502243][ T5990] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1243.593298][T24624] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1243.659864][T24624] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1243.666995][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 1243.669767][T24624] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.15433: Failed to acquire dquot type 1 [ 1243.687791][T24624] loop1: lost filesystem error report for type 5 error -5 [ 1243.688343][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1243.701909][ C1] EXT4-fs (loop1): last error at time 1990: ext4_acquire_dquot:7003 [ 1243.716850][T24624] EXT4-fs (loop1): 1 truncate cleaned up [ 1243.723714][ T5990] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 1243.734018][T24624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1243.798486][ T5990] usb 4-1: config 254 has no interface number 0 [ 1243.804817][ T5990] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1243.855910][T24624] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1243.877924][ T5990] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 1243.922022][T24624] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1243.954574][T16450] kernel write not supported for file /amidi2 (pid: 16450 comm: kworker/1:1) [ 1243.955320][ T5990] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 1243.976631][T24656] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15440'. [ 1244.007653][T24624] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.15433: Failed to acquire dquot type 1 [ 1244.051981][ T5990] usb 4-1: config 254 interface 235 has no altsetting 0 [ 1244.075602][ T5990] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1244.116139][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1244.180516][ T5990] usb 4-1: Product: syz [ 1244.189508][ T5990] usb 4-1: Manufacturer: syz [ 1244.211836][ T5990] usb 4-1: SerialNumber: syz [ 1244.218924][ T8501] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1244.237203][T24612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1244.299974][T23007] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1244.475663][T24612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1244.540666][ T5990] usbtest 4-1:254.235: Linux gadget zero [ 1244.575914][ T5990] usbtest 4-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 1244.726554][ T2158] usb 4-1: USB disconnect, device number 6 [ 1244.795877][ T30] audit: type=1326 audit(1991.305:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.1.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99bf79 code=0x7ffc0000 [ 1244.902154][ T30] audit: type=1326 audit(1991.305:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.1.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99bf79 code=0x7ffc0000 [ 1244.930573][T16450] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1245.014363][ T30] audit: type=1326 audit(1991.305:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.1.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f81dd99bf79 code=0x7ffc0000 [ 1245.098110][ T30] audit: type=1326 audit(1991.305:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.1.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99bf79 code=0x7ffc0000 [ 1245.173588][T16450] usb 1-1: Using ep0 maxpacket: 8 [ 1245.198716][ T30] audit: type=1326 audit(1991.305:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.1.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd99bf79 code=0x7ffc0000 [ 1245.203276][T16450] usb 1-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1245.284606][ T30] audit: type=1326 audit(1991.305:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.1.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f81dd99bf79 code=0x7ffc0000 [ 1245.312495][T16450] usb 1-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1245.377073][T16450] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1245.415113][T16450] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1245.444605][T16450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.455847][T16450] usb 1-1: config 0 descriptor?? [ 1245.632642][T24752] ptrace attach of "./syz-executor exec"[5929] was attempted by ""[24752] [ 1245.892100][T24769] loop1: detected capacity change from 0 to 512 [ 1245.921857][T16450] hid_parser_main: 1430 callbacks suppressed [ 1245.921879][T16450] gt683r_led 0003:1770:FF00.0022: unknown main item tag 0x0 [ 1245.954251][T24769] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.15467: invalid indirect mapped block 256 (level 2) [ 1245.999536][T24769] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1246.000365][T24769] EXT4-fs (loop1): 2 truncates cleaned up [ 1246.009571][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1246.009593][ C1] EXT4-fs (loop1): initial error at time 1992: ext4_free_branches:1023: inode 11 [ 1246.009632][ C1] EXT4-fs (loop1): last error at time 1992: ext4_free_branches:1023: inode 11 [ 1246.051000][T16450] gt683r_led 0003:1770:FF00.0022: item fetching failed at offset 1/5 [ 1246.113256][T16450] gt683r_led 0003:1770:FF00.0022: hid parsing failed [ 1246.130104][T16450] gt683r_led 0003:1770:FF00.0022: probe with driver gt683r_led failed with error -22 [ 1246.155572][T24769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.206732][T16450] usb 1-1: USB disconnect, device number 6 [ 1246.493909][ T12] [ 1246.496284][ T12] ====================================================== [ 1246.503298][ T12] WARNING: possible circular locking dependency detected [ 1246.510317][ T12] syzkaller #0 Tainted: G L [ 1246.516296][ T12] ------------------------------------------------------ [ 1246.523316][ T12] kworker/u8:0/12 is trying to acquire lock: [ 1246.529296][ T12] ffff888077bbd720 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1246.539070][ T12] [ 1246.539070][ T12] but task is already holding lock: [ 1246.546433][ T12] ffff888068672b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1246.556463][ T12] [ 1246.556463][ T12] which lock already depends on the new lock. [ 1246.556463][ T12] [ 1246.566856][ T12] [ 1246.566856][ T12] the existing dependency chain (in reverse order) is: [ 1246.575859][ T12] [ 1246.575859][ T12] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1246.584305][ T12] percpu_down_read_internal+0x48/0x1c0 [ 1246.590391][ T12] ext4_writepages+0x205/0x3b0 [ 1246.595685][ T12] do_writepages+0x32e/0x550 [ 1246.600801][ T12] __writeback_single_inode+0x133/0x11a0 [ 1246.606957][ T12] writeback_single_inode+0x4ac/0xdc0 [ 1246.612850][ T12] write_inode_now+0x1c2/0x290 [ 1246.618137][ T12] iput+0x8c1/0xe80 [ 1246.622465][ T12] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1246.628358][ T12] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1246.634771][ T12] __ext4_expand_extra_isize+0x30d/0x400 [ 1246.640921][ T12] __ext4_mark_inode_dirty+0x45c/0x730 [ 1246.646890][ T12] ext4_evict_inode+0x7a1/0xeb0 [ 1246.652249][ T12] evict+0x61e/0xb10 [ 1246.656651][ T12] ext4_orphan_cleanup+0xc38/0x1470 [ 1246.662360][ T12] ext4_fill_super+0x59ff/0x6320 [ 1246.667808][ T12] get_tree_bdev_flags+0x431/0x4f0 [ 1246.673436][ T12] vfs_get_tree+0x92/0x2a0 [ 1246.678361][ T12] do_new_mount+0x341/0xd30 [ 1246.683376][ T12] __se_sys_mount+0x31d/0x420 [ 1246.688568][ T12] do_syscall_64+0x14d/0xf80 [ 1246.693666][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.700069][ T12] [ 1246.700069][ T12] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 1246.707644][ T12] __lock_acquire+0x15a5/0x2cf0 [ 1246.713027][ T12] lock_acquire+0xf0/0x2e0 [ 1246.717962][ T12] down_write+0x96/0x200 [ 1246.722720][ T12] ext4_destroy_inline_data+0x28/0xe0 [ 1246.728604][ T12] ext4_do_writepages+0x51e/0x46e0 [ 1246.734233][ T12] ext4_writepages+0x241/0x3b0 [ 1246.739501][ T12] do_writepages+0x32e/0x550 [ 1246.744604][ T12] __writeback_single_inode+0x133/0x11a0 [ 1246.750745][ T12] writeback_sb_inodes+0x944/0x19a0 [ 1246.756458][ T12] wb_writeback+0x456/0xb70 [ 1246.761475][ T12] wb_workfn+0x414/0xf50 [ 1246.766238][ T12] process_scheduled_works+0xb02/0x1830 [ 1246.772296][ T12] worker_thread+0xa50/0xfc0 [ 1246.777406][ T12] kthread+0x388/0x470 [ 1246.781979][ T12] ret_from_fork+0x51e/0xb90 [ 1246.787082][ T12] ret_from_fork_asm+0x1a/0x30 [ 1246.792364][ T12] [ 1246.792364][ T12] other info that might help us debug this: [ 1246.792364][ T12] [ 1246.802570][ T12] Possible unsafe locking scenario: [ 1246.802570][ T12] [ 1246.809997][ T12] CPU0 CPU1 [ 1246.815339][ T12] ---- ---- [ 1246.820684][ T12] rlock(&sbi->s_writepages_rwsem); [ 1246.825965][ T12] lock(&ei->xattr_sem); [ 1246.832806][ T12] lock(&sbi->s_writepages_rwsem); [ 1246.840691][ T12] lock(&ei->xattr_sem); [ 1246.845010][ T12] [ 1246.845010][ T12] *** DEADLOCK *** [ 1246.845010][ T12] [ 1246.853131][ T12] 3 locks held by kworker/u8:0/12: [ 1246.858221][ T12] #0: ffff88801faa0948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1246.869454][ T12] #1: ffffc90000117c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1246.881902][ T12] #2: ffff888068672b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1246.892353][ T12] [ 1246.892353][ T12] stack backtrace: [ 1246.898230][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.898260][ T12] Tainted: [L]=SOFTLOCKUP [ 1246.898269][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1246.898285][ T12] Workqueue: writeback wb_workfn (flush-7:1) [ 1246.898326][ T12] Call Trace: [ 1246.898336][ T12] [ 1246.898346][ T12] dump_stack_lvl+0xe8/0x150 [ 1246.898378][ T12] print_circular_bug+0x2e1/0x300 [ 1246.898418][ T12] check_noncircular+0x12e/0x150 [ 1246.898455][ T12] __lock_acquire+0x15a5/0x2cf0 [ 1246.898488][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 1246.898520][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.898551][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 1246.898585][ T12] lock_acquire+0xf0/0x2e0 [ 1246.898611][ T12] ? ext4_destroy_inline_data+0x28/0xe0 [ 1246.898638][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.898668][ T12] down_write+0x96/0x200 [ 1246.898695][ T12] ? ext4_destroy_inline_data+0x28/0xe0 [ 1246.898719][ T12] ? __pfx_down_write+0x10/0x10 [ 1246.898746][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.898777][ T12] ext4_destroy_inline_data+0x28/0xe0 [ 1246.898803][ T12] ext4_do_writepages+0x51e/0x46e0 [ 1246.898834][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 1246.898870][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 1246.898901][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.898927][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to send rpc fd=3 want=2848 sent=0 n=-1 (errno 32: Broken pipe) [ 1246.898958][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.898984][ T12] ? unwind_next_frame+0x1aaf/0x23c0 [ 1246.899019][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 1246.899052][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 1246.899085][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899111][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899136][ T12] ? look_up_lock_class+0x57/0x110 [ 1246.899160][ T12] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1246.899190][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899216][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 1246.899246][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899271][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 1246.899299][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899324][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 1246.899356][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899385][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899418][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899447][ T12] ext4_writepages+0x241/0x3b0 [ 1246.899471][ T12] ? __pfx_ext4_writepages+0x10/0x10 [ 1246.899498][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899527][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899552][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.899574][ T12] ? __pfx_ext4_writepages+0x10/0x10 [ 1246.899596][ T12] do_writepages+0x32e/0x550 [ 1246.899627][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899653][ T12] ? reacquire_held_locks+0x104/0x190 [ 1246.899684][ T12] ? writeback_sb_inodes+0x43d/0x19a0 [ 1246.899713][ T12] __writeback_single_inode+0x133/0x11a0 [ 1246.899740][ T12] ? do_raw_spin_unlock+0xf5/0x210 [ 1246.899764][ T12] writeback_sb_inodes+0x944/0x19a0 [ 1246.899792][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 1246.899828][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1246.899853][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1246.899894][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899919][ T12] ? rcu_is_watching+0x15/0xb0 [ 1246.899949][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.899980][ T12] wb_writeback+0x456/0xb70 [ 1246.900006][ T12] ? queue_io+0x231/0x4a0 [ 1246.900035][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 1246.900058][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1246.900088][ T12] wb_workfn+0x414/0xf50 [ 1246.900123][ T12] ? look_up_lock_class+0x57/0x110 [ 1246.900152][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 1246.900187][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.900213][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1246.900235][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1246.900256][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.900285][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.900313][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.900339][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.900367][ T12] ? process_scheduled_works+0xa25/0x1830 [ 1246.900394][ T12] ? process_scheduled_works+0xa25/0x1830 [ 1246.900427][ T12] process_scheduled_works+0xb02/0x1830 [ 1246.900471][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1246.900502][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.900527][ T12] ? assign_work+0x3d5/0x5e0 [ 1246.900557][ T12] worker_thread+0xa50/0xfc0 [ 1246.900595][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.900626][ T12] kthread+0x388/0x470 [ 1246.900647][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1246.900675][ T12] ? __pfx_kthread+0x10/0x10 [ 1246.900695][ T12] ret_from_fork+0x51e/0xb90 [ 1246.900725][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1246.900753][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1246.900778][ T12] ? __switch_to+0xc7d/0x1450 [ 1246.900804][ T12] ? __pfx_kthread+0x10/0x10 [ 1246.900824][ T12] ret_from_fork_asm+0x1a/0x30 [ 1246.900866][ T12] [ 1246.923067][T24807] loop9: detected capacity change from 0 to 1024 [ 1246.996012][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 1247.481969][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1247.515152][ T5990] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1247.611829][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1247.611829][ T12] [ 1247.622960][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 1247.628974][ T12] EXT4-fs (loop1): Free/Dirty block details [ 1247.665494][ T12] EXT4-fs (loop1): free_blocks=0 [ 1247.670516][ T12] EXT4-fs (loop1): dirty_blocks=66 [ 1247.675633][ T12] EXT4-fs (loop1): Block reservation details [ 1247.702697][ T12] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 1247.720077][ T3601] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 1248.400657][T21622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.494849][T21622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.553894][T21622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.652875][T21622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.787945][T21622] team0: left allmulticast mode [ 1248.792841][T21622] C: left allmulticast mode [ 1248.797342][T21622] team_slave_1: left allmulticast mode [ 1248.806415][T21622] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1248.831403][T21622] bridge0: port 3(team0) entered disabled state [ 1248.842303][T21622] bridge_slave_1: left allmulticast mode [ 1248.847944][T21622] bridge_slave_1: left promiscuous mode [ 1248.854204][T21622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.864097][T21622] bridge_slave_0: left allmulticast mode [ 1248.869745][T21622] bridge_slave_0: left promiscuous mode [ 1248.879095][T21622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.895918][T21622] tipc: Resetting bearer [ 1248.983227][T21622] tipc: Disabling bearer [ 1249.390991][T21622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.406304][T21622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.416745][T21622] bond0 (unregistering): Released all slaves [ 1249.426565][T21622] bond1 (unregistering): Released all slaves [ 1249.442144][T21622] bond2 (unregistering): Released all slaves [ 1249.456917][T21622] bond3 (unregistering): Released all slaves [ 1249.478030][ T5990] wg0 speed is unknown, defaulting to 1000 [ 1249.484461][ T5990] syz0: Port: 1 Link DOWN [ 1249.520287][T21622] tipc: Left network mode [ 1249.695584][T21622] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 1249.704611][T21622] team0: Port device wlan1 removed [ 1249.830799][T21622] hsr_slave_0: left promiscuous mode [ 1249.836974][T21622] hsr_slave_1: left promiscuous mode [ 1250.023077][T21622] team_slave_1 (unregistering): left promiscuous mode [ 1250.030940][T21622] team0 (unregistering): Port device team_slave_1 removed [ 1250.042886][T21622] C (unregistering): left promiscuous mode [ 1250.062132][T21622] team0 (unregistering): Port device C removed [ 1250.411868][T21622] IPVS: stop unused estimator thread 0... [ 1250.473551][T21622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.529695][T21622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.612593][T21622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.665001][T21622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.762321][T21622] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.836640][T21622] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.875562][T21622] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.934845][T21622] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.064728][T21622] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.159491][T21622] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.211472][T21622] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.406908][T21622] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.418274][T21622] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.511059][T21622] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.521957][T21622] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.606801][T21622] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.617485][T21622] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.714401][T21622] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.724881][T21622] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.858279][T21622] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.900511][T21622] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.961519][T21622] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.065198][T21622] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.162280][T21622] bridge_slave_1: left allmulticast mode [ 1252.169007][T21622] bridge_slave_1: left promiscuous mode [ 1252.174742][T21622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.184973][T21622] bridge_slave_0: left allmulticast mode [ 1252.190894][T21622] bridge_slave_0: left promiscuous mode [ 1252.197435][T21622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.208068][T21622] bridge_slave_1: left allmulticast mode [ 1252.214530][T21622] bridge_slave_1: left promiscuous mode [ 1252.221623][T21622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.232378][T21622] bridge_slave_0: left allmulticast mode [ 1252.238026][T21622] bridge_slave_0: left promiscuous mode [ 1252.244650][T21622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.255929][T21622] bridge_slave_1: left allmulticast mode [ 1252.261590][T21622] bridge_slave_1: left promiscuous mode [ 1252.268551][T21622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.277396][T21622] bridge_slave_0: left allmulticast mode [ 1252.283050][T21622] bridge_slave_0: left promiscuous mode [ 1252.289566][T21622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.304375][T21622] bridge_slave_1: left allmulticast mode [ 1252.311055][T21622] bridge_slave_1: left promiscuous mode [ 1252.317044][T21622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.325575][T21622] bridge_slave_0: left allmulticast mode [ 1252.334258][T21622] bridge_slave_0: left promiscuous mode [ 1252.340434][T21622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.351585][T21622] bridge_slave_1: left allmulticast mode [ 1252.357268][T21622] bridge_slave_1: left promiscuous mode [ 1252.364041][T21622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.373073][T21622] bridge_slave_0: left allmulticast mode [ 1252.378713][T21622] bridge_slave_0: left promiscuous mode [ 1252.384530][T21622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.584573][T21622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.595342][T21622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.605107][T21622] bond0 (unregistering): Released all slaves [ 1252.738132][T21622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.748465][T21622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.758345][T21622] bond0 (unregistering): Released all slaves [ 1252.827697][T21622] team0: Port device bridge0 removed [ 1252.928650][T21622] bond0 (unregistering): (slave 1²K˜): Releasing backup interface [ 1252.939499][T21622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.949189][T21622] bond0 (unregistering): Released all slaves [ 1253.109801][T21622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.120274][T21622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.130225][T21622] bond0 (unregistering): Released all slaves [ 1253.138464][T21622] bond1 (unregistering): Released all slaves [ 1253.149792][T21622] bond2 (unregistering): Released all slaves [ 1253.159928][T21622] bond3 (unregistering): Released all slaves [ 1253.172254][T21622] bond4 (unregistering): Released all slaves [ 1253.183454][T21622] bond5 (unregistering): Released all slaves [ 1253.192770][T21622] bond6 (unregistering): Released all slaves [ 1253.559114][T21622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.569188][T21622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.578908][T21622] bond0 (unregistering): Released all slaves [ 1253.587142][T21622] bond1 (unregistering): Released all slaves [ 1253.597653][T21622] bond2 (unregistering): Released all slaves [ 1253.734652][T21622] !: left promiscuous mode [ 1253.783529][T21622] : left promiscuous mode [ 1253.838895][T21622] tipc: Disabling bearer [ 1253.849128][T21622] tipc: Disabling bearer [ 1253.854548][T21622] tipc: Left network mode [ 1253.863871][T21622] tipc: Left network mode [ 1254.843559][T21622] hsr_slave_0: left promiscuous mode [ 1254.859089][T21622] hsr_slave_1: left promiscuous mode [ 1254.864934][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.873170][T21622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.880819][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.888429][T21622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.899974][T21622] hsr_slave_0: left promiscuous mode [ 1254.908346][T21622] hsr_slave_1: left promiscuous mode [ 1254.914291][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.921659][T21622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.931908][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.940682][T21622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.956331][T21622] hsr_slave_0: left promiscuous mode [ 1254.962090][T21622] hsr_slave_1: left promiscuous mode [ 1254.968195][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.975562][T21622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.983506][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.992914][T21622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.003813][T21622] hsr_slave_0: left promiscuous mode [ 1255.009592][T21622] hsr_slave_1: left promiscuous mode [ 1255.015652][T21622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.025140][T21622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.033552][T21622] batman_adv: batadv0: Removing interface: macvtap0 [ 1255.043061][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.050423][T21622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.059494][T21622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.067018][T21622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.086738][T21622] veth1_macvtap: left promiscuous mode [ 1255.092322][T21622] veth0_macvtap: left promiscuous mode [ 1255.098077][T21622] veth1_vlan: left promiscuous mode [ 1255.103324][T21622] veth0_vlan: left promiscuous mode [ 1255.109732][T21622] veth1_macvtap: left promiscuous mode [ 1255.115196][T21622] veth0_macvtap: left promiscuous mode [ 1255.120792][T21622] veth1_vlan: left promiscuous mode [ 1255.126013][T21622] veth0_vlan: left promiscuous mode [ 1255.132034][T21622] veth1_macvtap: left promiscuous mode [ 1255.137503][T21622] veth0_macvtap: left promiscuous mode [ 1255.143258][T21622] veth1_vlan: left promiscuous mode [ 1255.150693][T21622] veth1_macvtap: left promiscuous mode [ 1255.156148][T21622] veth0_macvtap: left promiscuous mode [ 1255.161900][T21622] veth1_vlan: left promiscuous mode [ 1255.167129][T21622] veth0_vlan: left promiscuous mode [ 1255.428722][T21622] team0 (unregistering): Port device team_slave_1 removed [ 1255.442167][T21622] team0 (unregistering): Port device team_slave_0 removed [ 1255.592734][T21622] team0 (unregistering): Port device team_slave_1 removed [ 1255.608048][T21622] team0 (unregistering): Port device team_slave_0 removed [ 1255.720063][T21622] team0 (unregistering): Port device 56í removed [ 1255.733737][T21622] team0 (unregistering): Port device team_slave_0 removed [ 1255.885491][T21622] team0 (unregistering): Port device team_slave_1 removed [ 1255.897559][T21622] team0 (unregistering): Port device team_slave_0 removed [ 1255.946767][T21622] batadv0 (unregistering): left allmulticast mode [ 1255.959351][T21622] team0 (unregistering): Port device dummy0 removed [ 1256.044906][T21622] team0 (unregistering): Port device team_slave_1 removed [ 1256.056097][T21622] team0 (unregistering): Port device team_slave_0 removed