last executing test programs: 41.933049034s ago: executing program 3 (id=329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) 40.91895984s ago: executing program 3 (id=337): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1818e58, &(0x7f00000001c0)={[{@data_ordered}, {@nodiscard}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000240)='environ\x00') syz_fuse_handle_req(r2, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 38.746854024s ago: executing program 3 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4a301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x4) 33.801917131s ago: executing program 3 (id=352): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c726f6469722c646973636172642c666c7573682c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c00302c646d61736b3d30303030303030303030020030303030303030303430302c747a3d5554432c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e6e742c005d5ade3ff504f971741e438451c207c9df6029e7ab8d7c8ceec2da2d8699a0e0f5cd3aeb6f151caa4d33bbdf057e"], 0x0, 0x274, &(0x7f0000000a00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 33.422221208s ago: executing program 3 (id=354): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b000100746172676574000024000280100001"], 0xa0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 32.748903898s ago: executing program 3 (id=358): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xed) ioctl$UI_DEV_CREATE(r0, 0x5501) 32.307602405s ago: executing program 32 (id=358): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xed) ioctl$UI_DEV_CREATE(r0, 0x5501) 24.707422073s ago: executing program 4 (id=388): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x4) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xd3b0, r0, 0x0, 0x0, 0x4, 0x0, 0x0, r0}]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x102000, 0x1}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x2000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 24.379516478s ago: executing program 4 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 23.800848718s ago: executing program 4 (id=392): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xa0020, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9361, 0x0) 23.530903242s ago: executing program 4 (id=393): syz_mount_image$vfat(&(0x7f0000000940), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000340)={[{@shortname_winnt}, {@rodir}, {@fat=@umask={'umask', 0x3d, 0xc743}}, {@shortname_win95}, {@fat=@nfs_stale_rw}, {@shortname_winnt}, {@numtail}, {@fat=@showexec}, {@fat=@nfs}, {@uni_xlateno}, {@rodir}, {@utf8}]}, 0x0, 0x27c, &(0x7f0000000540)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) read$FUSE(r0, &(0x7f00000018c0)={0x2020}, 0x2108) 23.160824178s ago: executing program 4 (id=395): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 22.560856358s ago: executing program 4 (id=398): r0 = io_uring_setup(0x1379, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = eventfd2(0x0, 0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000380)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) close_range(r0, 0xffffffffffffffff, 0x0) 21.977761356s ago: executing program 33 (id=398): r0 = io_uring_setup(0x1379, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = eventfd2(0x0, 0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000380)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) close_range(r0, 0xffffffffffffffff, 0x0) 8.93099027s ago: executing program 1 (id=444): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000006200)='./file1\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.362795829s ago: executing program 1 (id=446): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x82901) syz_io_uring_setup(0x231, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0xffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.648899137s ago: executing program 6 (id=451): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) getdents64(r1, &(0x7f0000000240)=""/125, 0x7d) 6.37105817s ago: executing program 6 (id=452): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7d, 0xfffffffe, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xeffb, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5.470578125s ago: executing program 0 (id=459): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r1 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x7079, 0x800, 0x7, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.184905069s ago: executing program 2 (id=460): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @broadcast}}}}) 4.995374652s ago: executing program 6 (id=461): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000005c0)=0x3ff, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.840752995s ago: executing program 2 (id=462): r0 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r0, 0xb}) r1 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) 4.839752675s ago: executing program 1 (id=472): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x82901) syz_io_uring_setup(0x231, &(0x7f0000000300)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0xffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.585469359s ago: executing program 2 (id=463): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x1, 0x48800) shutdown(r0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.421281717s ago: executing program 0 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r1, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) 3.421015247s ago: executing program 2 (id=467): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0xe, 0x200, 0x4, 0x7, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000080)=0x6) 3.354696688s ago: executing program 6 (id=468): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c80001"], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(0x0, 0x0, 0x140) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) getpgid(0x0) 3.128770491s ago: executing program 6 (id=470): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 3.127924681s ago: executing program 2 (id=481): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0xf, 0x1, 'D'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x20, 0x0, 0x2, 'X+'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.381854653s ago: executing program 5 (id=473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xfcffffffffffffff, &(0x7f0000000140)="cc"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) 2.215430986s ago: executing program 5 (id=474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x8, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.017485829s ago: executing program 5 (id=475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0x8000000, 0x2000, &(0x7f0000010000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0xc8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) 1.730647783s ago: executing program 0 (id=476): syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.715938583s ago: executing program 5 (id=477): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file1\x00', 0x80400, 0xe4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x102) pread64(r1, &(0x7f00000006c0)=""/128, 0x80, 0x7) socket$netlink(0x10, 0x3, 0x0) 1.590791766s ago: executing program 1 (id=478): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x2062, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r0, &(0x7f0000000480)=""/240, 0xffb3) 1.482929907s ago: executing program 0 (id=479): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x23, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.29267333s ago: executing program 1 (id=480): bpf$PROG_LOAD(0x5, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x40, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.221073341s ago: executing program 0 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1265, 0x3, 0xa00}, {0xf, 0xffffffc0, 0x296, 0x7}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x54}, "cc"}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.107214053s ago: executing program 1 (id=483): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}, {@inode32}]}) 776.823008ms ago: executing program 0 (id=484): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x3af001) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x40, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 673.4057ms ago: executing program 5 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101442, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 249.089586ms ago: executing program 2 (id=486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1c6, &(0x7f0000001280)="$eJzs3TGL02AYB/Cn8bz2nG4TRCHg4nSon+BEThADgtJBJ4XT5U4Eb4ku7cfwA/oBpFMXidSkjY0ItZhEe7/f0if9522fl9K0S5++uvnu7PT9xdsv1z/HaDSI5DiOYz6Iw0hiaRoAwC6ZF0V8LUp99wIAdGODz/9vHbcEALTs+YuXTx5k2cmzNImI2TQf5+PytswfPc5O7qY/HNarZnk+vrLK76XN7w6L/Gpcq/L75fp0Pd+PO7fLfJE9fJo18mGctrt1AAAAAAAAAAAAAAAAAAAAAADoza1ozuaJtfk+R0fpUjX/56DKy6Of5gM15vfsxY296rAeD1RM2t4QAAAAAAAAAAAAAAAAAAAA/IcuPn46e31+/uZDXQwjYv2ePykG1QNvubzrIol/og3FXy3S30WTbl/uLd8F+xHRVmPzoig2Orm+Rgz7ujgBAAAAAAAAAAAAAAAAAMAlU//o99ds1EdDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCD+v//tygmEbHByasnO+h1qwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyw7wEAAP//6S009g==") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") removexattr(0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 8.41609ms ago: executing program 5 (id=487): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}}}, 0x24}}, 0x0) 0s ago: executing program 6 (id=488): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x200, {{0x2, 0x4e21, @loopback}}}, 0x88) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) kernel console output (not intermixed with test programs): ses deprecated v2 capabilities in a way that may be insecure [ 87.565119][ T4445] loop1: detected capacity change from 0 to 512 [ 87.647733][ T4445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.657021][ T4445] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.680472][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.780585][ T27] audit: type=1800 audit(1753261384.604:2): pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 87.858518][ T4416] BTRFS info (device loop3): enabling ssd optimizations [ 87.918434][ T4433] loop4: detected capacity change from 0 to 32768 [ 87.930887][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.945358][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.955735][ T4433] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.10 (4433) [ 87.969923][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.985332][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.996000][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.064412][ T14] usb 3-1: config 0 descriptor?? [ 88.137374][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 88.407063][ T4423] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4423) [ 88.447854][ T4271] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 88.502153][ T14] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 88.574734][ T14] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 89.019061][ T14] usb 3-1: USB disconnect, device number 2 [ 89.825710][ T4508] device pim6reg1 entered promiscuous mode [ 90.793227][ T4504] loop1: detected capacity change from 0 to 40427 [ 90.853522][ T4504] F2FS-fs (loop1): invalid crc value [ 90.861575][ T4512] loop2: detected capacity change from 0 to 32768 [ 90.935701][ T4504] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.975122][ T4512] XFS (loop2): Mounting V5 Filesystem [ 91.004233][ T4504] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.184255][ T4512] XFS (loop2): Ending clean mount [ 91.225963][ T4512] XFS (loop2): Quotacheck needed: Please wait. [ 91.376686][ T4512] XFS (loop2): Quotacheck: Done. [ 91.380203][ T4480] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.487592][ T4275] syz-executor: attempt to access beyond end of device [ 91.487592][ T4275] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 91.531323][ T4270] XFS (loop2): Unmounting Filesystem [ 91.610332][ T4480] usb 1-1: Using ep0 maxpacket: 8 [ 91.621151][ T4480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.650880][ T4480] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 91.670136][ T4480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.692374][ T4480] usb 1-1: config 0 descriptor?? [ 91.920851][ T4480] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 91.964928][ T4560] loop3: detected capacity change from 0 to 128 [ 92.077169][ T4560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.136888][ T4560] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.308270][ T4560] process 'syz.3.41' launched './file0' with NULL argv: empty string added [ 92.392591][ T4480] usb 1-1: USB disconnect, device number 2 [ 92.394725][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 92.518016][ T4575] loop3: detected capacity change from 0 to 128 [ 92.585638][ T4575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.648209][ T4575] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.551121][ T4575] fscrypt: Error allocating hmac(sha512): -2 [ 93.686804][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 93.860419][ T4340] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.052338][ T4340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.090415][ T4340] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 94.099890][ T4340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.125078][ T4340] usb 1-1: config 0 descriptor?? [ 94.144273][ T4340] pwc: Askey VC010 type 2 USB webcam detected. [ 94.219773][ T4609] loop4: detected capacity change from 0 to 1024 [ 94.474721][ T9] hfsplus: b-tree write err: -5, ino 4 [ 94.542039][ T4340] pwc: recv_control_msg error -32 req 02 val 2b00 [ 94.555052][ T4340] pwc: recv_control_msg error -32 req 02 val 2700 [ 94.569078][ T4340] pwc: recv_control_msg error -32 req 02 val 2c00 [ 94.585501][ T4614] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET) [ 94.778892][ T4618] loop4: detected capacity change from 0 to 1024 [ 94.786990][ T4340] pwc: recv_control_msg error -71 req 04 val 1300 [ 94.801255][ T4340] pwc: recv_control_msg error -71 req 04 val 1400 [ 94.817873][ T4618] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.826413][ T4340] pwc: recv_control_msg error -71 req 02 val 2000 [ 94.861118][ T4618] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 94.879460][ T4340] pwc: recv_control_msg error -71 req 02 val 2100 [ 94.889004][ T4618] JBD2: no valid journal superblock found [ 94.909080][ T4340] pwc: recv_control_msg error -71 req 04 val 1500 [ 94.916948][ T4618] EXT4-fs (loop4): error loading journal [ 94.917495][ T4340] pwc: recv_control_msg error -71 req 02 val 2500 [ 94.939458][ T4340] pwc: recv_control_msg error -71 req 02 val 2400 [ 94.951935][ T4340] pwc: recv_control_msg error -71 req 02 val 2600 [ 94.960802][ T4340] pwc: recv_control_msg error -71 req 02 val 2900 [ 94.968045][ T4340] pwc: recv_control_msg error -71 req 02 val 2800 [ 94.982345][ T4340] pwc: recv_control_msg error -71 req 04 val 1100 [ 95.001583][ T4340] pwc: recv_control_msg error -71 req 04 val 1200 [ 95.024305][ T4340] pwc: Registered as video103. [ 95.033610][ T4340] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 95.089376][ T27] audit: type=1326 audit(1753261391.914:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72018e9a9 code=0x7ffc0000 [ 95.142575][ T4340] usb 1-1: USB disconnect, device number 3 [ 95.164322][ T27] audit: type=1326 audit(1753261391.994:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 95.370142][ T27] audit: type=1326 audit(1753261391.994:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 95.381200][ T4632] loop2: detected capacity change from 0 to 47 [ 95.404941][ T4630] loop4: detected capacity change from 0 to 64 [ 95.573402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.775698][ T27] audit: type=1326 audit(1753261391.994:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 95.800475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.809217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.852381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.890784][ T4340] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.103967][ T27] audit: type=1326 audit(1753261391.994:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 96.133126][ T4340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.196544][ T27] audit: type=1326 audit(1753261391.994:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 96.218878][ T27] audit: type=1326 audit(1753261391.994:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 96.232185][ T4340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.241186][ T27] audit: type=1326 audit(1753261391.994:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 96.274666][ T27] audit: type=1326 audit(1753261391.994:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 96.297035][ T27] audit: type=1326 audit(1753261391.994:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.2.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe72012ab89 code=0x7ffc0000 [ 96.447381][ T4340] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 96.463427][ T4635] orangefs_mount: mount request failed with -4 [ 96.475555][ T4340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.671675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.680823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.690072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.698400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.706699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.715008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 97.160895][ T4340] usb 2-1: config 0 descriptor?? [ 97.617073][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 97.670965][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 97.703214][ C1] Unknown status report in ack skb [ 97.718088][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 97.761359][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 97.789358][ T4340] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 97.847717][ T4340] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 98.010829][ T4657] loop2: detected capacity change from 0 to 4096 [ 98.067744][ T4657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.214464][ T4657] fs-verity: sha256 using implementation "sha256-avx2" [ 98.261931][ T4657] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.72: Failed to acquire dquot type 0 [ 98.346049][ T4340] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 98.372363][ T4340] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 98.387455][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 98.392435][ T4340] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 98.446102][ T4340] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 98.472828][ T4340] playstation: probe of 0003:054C:0DF2.0002 failed with error -71 [ 98.533491][ T4340] usb 2-1: USB disconnect, device number 2 [ 98.577877][ T4645] loop4: detected capacity change from 0 to 65536 [ 98.714236][ T4645] XFS (loop4): Mounting V5 Filesystem [ 98.779482][ T4645] XFS (loop4): Ending clean mount [ 98.827889][ T4645] XFS (loop4): Quotacheck needed: Please wait. [ 98.869867][ T4663] fido_id[4663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 99.007506][ T4645] XFS (loop4): Quotacheck: Done. [ 99.236174][ T4679] device bridge1 entered promiscuous mode [ 99.386795][ T4272] XFS (loop4): Unmounting Filesystem [ 99.597940][ T4684] loop0: detected capacity change from 0 to 1024 [ 99.922194][ T4684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.032987][ T4684] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.410596][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 100.668851][ T4695] loop0: detected capacity change from 0 to 2048 [ 100.745105][ T4695] loop0: p1 < > p3 [ 100.764267][ T4695] loop0: p3 size 134217728 extends beyond EOD, truncated [ 101.028269][ T4686] loop1: detected capacity change from 0 to 32768 [ 101.059670][ T4686] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.78 (4686) [ 101.089255][ T4686] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.106521][ T4686] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 101.117012][ T4686] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 101.142539][ T4686] BTRFS info (device loop1): use zstd compression, level 3 [ 101.150179][ T4686] BTRFS info (device loop1): using free space tree [ 101.180354][ T4480] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.293782][ T4713] loop0: detected capacity change from 0 to 4096 [ 101.318234][ T4686] BTRFS info (device loop1): enabling ssd optimizations [ 101.371980][ T4480] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.391695][ T4480] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.431595][ T4480] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.467087][ T4480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 101.487818][ T4480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 101.564610][ T4480] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.581011][ T4275] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 101.617501][ T4480] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.648851][ T4480] usb 5-1: Product: syz [ 101.678462][ T4480] usb 5-1: Manufacturer: syz [ 101.734175][ T4480] cdc_wdm 5-1:1.0: skipping garbage [ 101.748050][ T4480] cdc_wdm 5-1:1.0: skipping garbage [ 101.774782][ T4480] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 101.787407][ T4480] cdc_wdm 5-1:1.0: Unknown control protocol [ 102.030173][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 102.037086][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 102.037390][ T14] usb 5-1: USB disconnect, device number 2 [ 102.043199][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 103.237881][ T4752] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 103.455587][ T4757] loop0: detected capacity change from 0 to 16 [ 103.482920][ T4757] erofs: (device loop0): mounted with root inode @ nid 36. [ 103.509945][ T4743] syz.0.90: attempt to access beyond end of device [ 103.509945][ T4743] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 104.220212][ T4384] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.440904][ T4384] usb 4-1: Using ep0 maxpacket: 16 [ 104.469433][ T4384] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.613286][ T4384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.760407][ T4384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 104.829345][ T4384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.845568][ T4384] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.869890][ T4384] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 104.888527][ T4384] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 104.897338][ T4384] usb 4-1: Manufacturer: syz [ 104.910719][ T4384] usb 4-1: config 0 descriptor?? [ 105.217349][ T4776] input: syz1 as /devices/virtual/input/input7 [ 105.281806][ T4384] rc_core: IR keymap rc-hauppauge not found [ 105.288123][ T4384] Registered IR keymap rc-empty [ 105.300257][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.340328][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.383156][ T4384] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 105.408332][ T4384] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 105.449036][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.473298][ T126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.490249][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.530262][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.540668][ T4769] loop4: detected capacity change from 0 to 32768 [ 105.570208][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.618832][ T4769] XFS (loop4): Mounting V5 Filesystem [ 105.624760][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.660204][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.682093][ T126] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.704286][ T126] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.724905][ T126] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.737223][ T4769] XFS (loop4): Ending clean mount [ 105.742562][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.751272][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.753203][ T4775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 105.790619][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.829487][ T4769] XFS (loop4): Quotacheck needed: Please wait. [ 105.835954][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.875847][ T4384] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 105.895887][ T4769] XFS (loop4): Quotacheck: Done. [ 105.935399][ T4384] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 105.969701][ T4384] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 105.994872][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 105.994896][ T27] audit: type=1800 audit(1753261402.824:51): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.99" name="bus" dev="loop4" ino=4427 res=0 errno=0 [ 106.041148][ T4332] usb 2-1: USB disconnect, device number 3 [ 106.057691][ T4384] usb 4-1: USB disconnect, device number 2 [ 106.091850][ T4790] XFS (loop4): User initiated shutdown received. [ 106.128389][ T4790] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 106.171738][ T4790] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 106.186747][ T4778] loop0: detected capacity change from 0 to 32768 [ 106.277396][ T4778] XFS (loop0): Mounting V5 Filesystem [ 106.333729][ T4272] XFS (loop4): Unmounting Filesystem [ 106.361700][ T4778] XFS (loop0): Ending clean mount [ 106.449655][ T4801] loop3: detected capacity change from 0 to 1024 [ 106.509866][ T4801] EXT4-fs: Ignoring removed orlov option [ 106.535136][ T4801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.566816][ T4266] XFS (loop0): Unmounting Filesystem [ 106.676623][ T4801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.907223][ T4801] syz.3.104 (4801) used greatest stack depth: 20560 bytes left [ 106.933354][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 108.091937][ T4821] orangefs_mount: mount request failed with -4 [ 109.340855][ T4840] netlink: 'syz.1.116': attribute type 10 has an invalid length. [ 109.372652][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.390780][ T4840] device bridge_slave_1 left promiscuous mode [ 109.398816][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.414618][ T4840] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 109.460789][ C0] Illegal XDP return value 16128 on prog (id 7) dev bridge_slave_1, expect packet loss! [ 109.720826][ T4849] loop1: detected capacity change from 0 to 512 [ 109.781842][ T4849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.852886][ T4849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.928696][ T4849] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.630965][ T4856] loop3: detected capacity change from 0 to 128 [ 110.760412][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 110.865708][ T27] audit: type=1800 audit(1753261407.694:52): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.121" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 110.955634][ T4842] loop4: detected capacity change from 0 to 32768 [ 110.964480][ T4863] syz.3.121: attempt to access beyond end of device [ 110.964480][ T4863] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 110.989702][ T4863] syz.3.121: attempt to access beyond end of device [ 110.989702][ T4863] loop3: rw=2049, sector=361, nr_sectors = 16 limit=128 [ 111.042170][ T4863] syz.3.121: attempt to access beyond end of device [ 111.042170][ T4863] loop3: rw=2049, sector=393, nr_sectors = 48 limit=128 [ 111.074963][ T4863] syz.3.121: attempt to access beyond end of device [ 111.074963][ T4863] loop3: rw=2049, sector=449, nr_sectors = 8 limit=128 [ 111.117273][ T4863] syz.3.121: attempt to access beyond end of device [ 111.117273][ T4863] loop3: rw=2049, sector=465, nr_sectors = 8 limit=128 [ 111.168949][ T4842] XFS (loop4): Mounting V5 Filesystem [ 111.438568][ T4842] XFS (loop4): Ending clean mount [ 111.455621][ T4863] syz.3.121: attempt to access beyond end of device [ 111.455621][ T4863] loop3: rw=2049, sector=481, nr_sectors = 8 limit=128 [ 111.836089][ T4873] orangefs_mount: mount request failed with -4 [ 111.915505][ T4863] syz.3.121: attempt to access beyond end of device [ 111.915505][ T4863] loop3: rw=2049, sector=497, nr_sectors = 32 limit=128 [ 111.933002][ T4272] XFS (loop4): Unmounting Filesystem [ 112.060494][ T33] kworker/u4:2: attempt to access beyond end of device [ 112.060494][ T33] loop3: rw=1, sector=337, nr_sectors = 24 limit=128 [ 112.131131][ T33] kworker/u4:2: attempt to access beyond end of device [ 112.131131][ T33] loop3: rw=1, sector=377, nr_sectors = 16 limit=128 [ 112.161356][ T33] kworker/u4:2: attempt to access beyond end of device [ 112.161356][ T33] loop3: rw=1, sector=441, nr_sectors = 8 limit=128 [ 112.322906][ T4277] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.520330][ T4277] usb 2-1: Using ep0 maxpacket: 16 [ 112.532524][ T4277] usb 2-1: config 0 has no interfaces? [ 112.549638][ T4277] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 112.682842][ T4277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.718693][ T4277] usb 2-1: config 0 descriptor?? [ 112.775910][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 112.800230][ T4890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 112.828787][ T4890] netlink: 'syz.4.129': attribute type 18 has an invalid length. [ 112.867281][ T4890] Zero length message leads to an empty skb [ 112.930841][ T4882] loop2: detected capacity change from 0 to 32768 [ 113.005504][ T4277] usb 2-1: USB disconnect, device number 4 [ 113.039173][ T4882] XFS (loop2): Mounting V5 Filesystem [ 113.775694][ T4882] XFS (loop2): Ending clean mount [ 113.815157][ T4882] XFS (loop2): Quotacheck needed: Please wait. [ 113.894287][ T4882] XFS (loop2): Quotacheck: Done. [ 114.420029][ C0] sched: RT throttling activated [ 114.756327][ T4270] XFS (loop2): Unmounting Filesystem [ 115.096813][ T4905] loop4: detected capacity change from 0 to 262144 [ 115.163261][ T4905] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.178434][ T4894] loop3: detected capacity change from 0 to 40427 [ 115.215512][ T4894] F2FS-fs (loop3): invalid crc value [ 115.224826][ T4905] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 115.285953][ T4894] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.552870][ T4894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.623692][ T4956] device syzkaller1 entered promiscuous mode [ 118.405781][ T4960] orangefs_mount: mount request failed with -4 [ 118.550827][ T4935] loop1: detected capacity change from 0 to 32768 [ 118.752500][ T4935] XFS (loop1): Mounting V5 Filesystem [ 118.856499][ T4935] XFS (loop1): Ending clean mount [ 118.977870][ T4975] loop3: detected capacity change from 0 to 4096 [ 119.080448][ T4975] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 119.101626][ T4275] XFS (loop1): Unmounting Filesystem [ 119.140890][ T4975] ntfs3: loop3: Failed to load $Extend. [ 119.264268][ T4728] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.470126][ T4728] usb 1-1: Using ep0 maxpacket: 16 [ 119.665446][ T4728] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.674732][ T4728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.683648][ T4728] usb 1-1: Product: syz [ 119.687867][ T4728] usb 1-1: Manufacturer: syz [ 119.692766][ T4728] usb 1-1: SerialNumber: syz [ 119.704565][ T4728] r8152-cfgselector 1-1: config 0 descriptor?? [ 120.525536][ T4992] bridge0: port 3(syz_tun) entered blocking state [ 120.542206][ T4992] bridge0: port 3(syz_tun) entered disabled state [ 120.562771][ T4992] device syz_tun entered promiscuous mode [ 120.570851][ T4992] bridge0: port 3(syz_tun) entered blocking state [ 120.577779][ T4992] bridge0: port 3(syz_tun) entered forwarding state [ 120.601831][ T4994] netlink: 'syz.2.153': attribute type 10 has an invalid length. [ 120.617478][ T4994] bridge0: port 3(syz_tun) entered disabled state [ 120.624251][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.633354][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.659863][ T4997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.687440][ T4994] bridge0: port 3(syz_tun) entered blocking state [ 120.692310][ T4997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.694116][ T4994] bridge0: port 3(syz_tun) entered forwarding state [ 120.710077][ T4994] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.717260][ T4994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.724767][ T4994] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.731996][ T4994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.741005][ T4728] r8152-cfgselector 1-1: Unknown version 0x0000 [ 120.747747][ T4728] r8152-cfgselector 1-1: bad CDC descriptors [ 120.772000][ T4728] r8152-cfgselector 1-1: Unknown version 0x0000 [ 120.787283][ T4728] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 121.524356][ T5000] orangefs_mount: mount request failed with -4 [ 121.616366][ T4994] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 122.751441][ T5014] orangefs_mount: mount request failed with -4 [ 122.845246][ T5021] loop4: detected capacity change from 0 to 256 [ 122.857640][ T5021] exfat: Bad value for 'uid' [ 122.877766][ T5021] devpts: called with bogus options [ 124.203751][ T5003] loop2: detected capacity change from 0 to 32768 [ 125.054956][ T5003] (syz.2.157,5003,1):ocfs2_initialize_super:2286 ERROR: status = -12 [ 125.071640][ T5003] (syz.2.157,5003,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 125.201100][ T5047] loop1: detected capacity change from 0 to 512 [ 125.243639][ T5047] EXT4-fs: Ignoring removed nobh option [ 125.474426][ T5047] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.169: iget: bad i_size value: 38620345925642 [ 125.641315][ T5047] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.169: couldn't read orphan inode 15 (err -117) [ 125.785483][ T5047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 126.017485][ T5047] EXT4-fs (loop1): shut down requested (2) [ 126.053832][ T5047] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 126.172758][ T5053] orangefs_mount: mount request failed with -4 [ 126.234980][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 126.246390][ T5052] loop2: detected capacity change from 0 to 8192 [ 126.357503][ T5059] loop8: detected capacity change from 0 to 7 [ 126.408811][ T5059] Dev loop8: unable to read RDB block 7 [ 126.424361][ T5059] loop8: unable to read partition table [ 126.439039][ T5059] loop8: partition table beyond EOD, truncated [ 126.447419][ T5059] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 126.447419][ T5059] ) failed (rc=-5) [ 126.510340][ T4277] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.654307][ T5062] loop0: detected capacity change from 0 to 4096 [ 126.709048][ T4277] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 126.731540][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.781264][ T4277] usb 5-1: config 0 descriptor?? [ 126.793186][ T4277] gspca_main: spca508-2.14.0 probing 8086:0110 [ 127.003490][ T4277] gspca_spca508: reg_read err -32 [ 127.009231][ T4277] gspca_spca508: reg_read err -32 [ 127.163367][ T5075] loop2: detected capacity change from 0 to 1024 [ 127.176351][ T5075] EXT4-fs: Ignoring removed oldalloc option [ 127.185625][ T5075] EXT4-fs: Ignoring removed bh option [ 127.197367][ T5062] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.207870][ T5062] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.214860][ T5075] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.232585][ T5062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.252518][ T4277] gspca_spca508: reg_read err -71 [ 127.258096][ T4277] gspca_spca508: reg_read err -71 [ 127.285162][ T5075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.303748][ T4277] gspca_spca508: reg write: error -71 [ 127.334101][ T4277] spca508: probe of 5-1:0.0 failed with error -71 [ 127.393450][ T4277] usb 5-1: USB disconnect, device number 3 [ 127.456243][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 127.536519][ T5062] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 127.637483][ T5087] loop3: detected capacity change from 0 to 512 [ 127.655738][ T5090] loop2: detected capacity change from 0 to 64 [ 127.709526][ T5087] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.743255][ T5062] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 127.750712][ T5087] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.790572][ T5062] overlayfs: upper fs does not support tmpfile. [ 127.830357][ T5062] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 127.895056][ T5087] EXT4-fs (loop3): 1 truncate cleaned up [ 127.980109][ T5087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.126333][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 128.211204][ T5102] binder: 5101:5102 ioctl 40046205 0 returned -22 [ 129.052043][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 129.349175][ T5117] loop1: detected capacity change from 0 to 2048 [ 129.359019][ T5117] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.412458][ T5117] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.188801][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 130.302344][ T5133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.189'. [ 130.328815][ T5133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.189'. [ 130.344141][ T5133] netlink: 38 bytes leftover after parsing attributes in process `syz.1.189'. [ 130.390129][ T4384] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.582695][ T4384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.600428][ T4384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.615474][ T4384] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 130.626175][ T4384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.643620][ T4384] usb 4-1: config 0 descriptor?? [ 130.747917][ T5136] loop1: detected capacity change from 0 to 32768 [ 130.795294][ T5136] XFS (loop1): Mounting V5 Filesystem [ 130.867396][ T5136] XFS (loop1): Ending clean mount [ 130.878632][ T5136] XFS (loop1): Quotacheck needed: Please wait. [ 130.923873][ T5136] XFS (loop1): Quotacheck: Done. [ 130.974091][ T27] audit: type=1804 audit(1753261427.804:53): pid=5136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.191" name="/newroot/35/file0/file1" dev="loop1" ino=9286 res=1 errno=0 [ 131.035695][ T4275] XFS (loop1): Unmounting Filesystem [ 131.089894][ T4384] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 131.270454][ T4384] hid-led: probe of 0003:0FC5:B080.0003 failed with error -71 [ 131.300561][ T4384] usb 4-1: USB disconnect, device number 3 [ 131.436379][ T5148] loop4: detected capacity change from 0 to 64 [ 131.499222][ T27] audit: type=1800 audit(1753261428.324:54): pid=5148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.194" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 131.533989][ T5148] hfs: keylen 1794 too large [ 131.553103][ T5148] hfs: keylen 1794 too large [ 131.591815][ T5148] hfs: keylen 1794 too large [ 131.605723][ T5147] hfs: keylen 1794 too large [ 131.620141][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.661036][ T4361] hfs: keylen 1794 too large [ 131.822698][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.840176][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.860573][ T126] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.910420][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.918648][ T126] usb 3-1: SerialNumber: syz [ 132.623092][ T126] usb 3-1: 0:2 : does not exist [ 132.657424][ T126] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 132.760186][ T4277] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 132.811991][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.819745][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.874076][ T126] usb 3-1: 5:0: failed to get current value for ch 14 (-22) [ 133.101444][ T126] usb 3-1: USB disconnect, device number 3 [ 133.432547][ T4423] udevd[4423]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.552609][ T5161] loop4: detected capacity change from 0 to 64 [ 134.564222][ T5157] Bluetooth: MGMT ver 1.22 [ 134.590949][ T5157] Bluetooth: hci0: service_discovery: too big uuid_count value 5215 [ 134.769222][ T5165] loop6: detected capacity change from 0 to 7 [ 134.789116][ T4423] Dev loop6: unable to read RDB block 7 [ 134.800316][ T4423] loop6: AHDI p1 p2 [ 134.806161][ T4423] loop6: partition table partially beyond EOD, truncated [ 134.824361][ T4423] loop6: p1 start 926365495 is beyond EOD, truncated [ 134.844968][ T5165] Dev loop6: unable to read RDB block 7 [ 134.863319][ T5165] loop6: AHDI p1 p2 [ 134.867636][ T5165] loop6: partition table partially beyond EOD, truncated [ 134.886504][ T5165] loop6: p1 start 926365495 is beyond EOD, truncated [ 136.227296][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'. [ 136.429963][ T5163] loop0: detected capacity change from 0 to 32768 [ 136.524697][ T5163] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.200 (5163) [ 136.719075][ T5163] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 136.913914][ T5163] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 136.978486][ T5163] BTRFS info (device loop0): using free space tree [ 137.008219][ T5170] orangefs_mount: mount request failed with -4 [ 137.185220][ T5184] loop3: detected capacity change from 0 to 2048 [ 137.214277][ T5163] BTRFS info (device loop0): enabling ssd optimizations [ 137.349553][ T5184] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 137.436270][ T27] audit: type=1804 audit(1753261434.264:55): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.200" name="/newroot/37/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 137.666758][ T5207] netlink: 'syz.1.210': attribute type 10 has an invalid length. [ 137.692903][ T14] kernel write not supported for file /comedi4 (pid: 14 comm: kworker/0:1) [ 137.732707][ T5207] device syz_tun entered promiscuous mode [ 137.806238][ T5207] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 137.822000][ T4266] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.873561][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.214'. [ 138.001897][ T5215] loop2: detected capacity change from 0 to 7 [ 138.013412][ T5215] Dev loop2: unable to read RDB block 7 [ 138.019189][ T5215] loop2: unable to read partition table [ 138.039309][ T5215] loop2: partition table beyond EOD, truncated [ 138.097913][ T5215] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.199710][ T5228] orangefs_mount: mount request failed with -4 [ 140.291783][ T5265] loop4: detected capacity change from 0 to 512 [ 140.558122][ T5265] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.063026][ T5265] EXT4-fs (loop4): 1 truncate cleaned up [ 141.080513][ T5265] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 141.184533][ T27] audit: type=1804 audit(1753261438.014:56): pid=5265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.230" name="/newroot/53/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 142.070424][ T126] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.248259][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 142.315204][ T126] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 142.360164][ T5278] orangefs_mount: mount request failed with -4 [ 142.369923][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.408055][ T126] usb 1-1: Product: syz [ 142.431717][ T126] usb 1-1: Manufacturer: syz [ 142.466220][ T126] usb 1-1: SerialNumber: syz [ 142.506184][ T126] usb 1-1: config 0 descriptor?? [ 142.569569][ T5281] input: syz0 as /devices/virtual/input/input8 [ 142.603220][ T5283] loop2: detected capacity change from 0 to 512 [ 142.621764][ T5283] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.629867][ T5283] EXT4-fs: Ignoring removed i_version option [ 142.657295][ T5283] ext2: Unknown parameter 'subj_user' [ 143.296685][ T5293] loop3: detected capacity change from 0 to 256 [ 143.344688][ T5293] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff00000000000000000000" or missing value [ 143.558194][ T126] usb 1-1: non-Atmel transceiver xxxx0008 [ 143.587446][ T4384] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.705639][ T5299] loop1: detected capacity change from 0 to 1024 [ 143.758628][ T126] usb 1-1: Firmware version (0.0) predates our first public release. [ 143.768150][ T126] usb 1-1: Please update to version 0.2 or newer [ 143.773779][ T5299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 143.797228][ T4384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.800313][ T126] usb 1-1: atusb_probe: initialization failed, error = -19 [ 143.827382][ T126] usb 1-1: USB disconnect, device number 5 [ 143.844798][ T5286] loop4: detected capacity change from 0 to 40427 [ 143.855671][ T4384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.869554][ T5299] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.917848][ T5286] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 143.934646][ T4384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.970323][ T5286] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.002955][ T5299] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 144.012503][ T5298] loop3: detected capacity change from 0 to 8192 [ 144.034818][ T4384] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.050734][ T5286] F2FS-fs (loop4): invalid crc value [ 144.062177][ T4384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.089026][ T5286] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.103601][ T4384] usb 3-1: config 0 descriptor?? [ 144.111084][ T5298] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.126770][ T5299] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 144.147498][ T5298] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 144.171725][ T5298] REISERFS (device loop3): using ordered data mode [ 144.180314][ T5298] reiserfs: using flush barriers [ 144.210111][ T5298] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.227022][ T5299] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.227022][ T5299] [ 144.250438][ T5299] EXT4-fs (loop1): Total free blocks count 0 [ 144.268411][ T5299] EXT4-fs (loop1): Free/Dirty block details [ 144.288844][ T5299] EXT4-fs (loop1): free_blocks=4293918720 [ 144.298942][ T5299] EXT4-fs (loop1): dirty_blocks=64 [ 144.316007][ T5299] EXT4-fs (loop1): Block reservation details [ 144.333845][ T5286] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.344125][ T5298] REISERFS (device loop3): checking transaction log (loop3) [ 144.347966][ T5286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.359835][ T5299] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 144.426040][ T5298] REISERFS (device loop3): Using r5 hash to sort names [ 144.433852][ T5286] bio_check_eod: 33 callbacks suppressed [ 144.433870][ T5286] syz.4.236: attempt to access beyond end of device [ 144.433870][ T5286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.516375][ T5298] reiserfs: enabling write barrier flush mode [ 144.534312][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 144.547001][ T4384] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 144.601860][ T5298] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 144.682810][ T4384] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 145.434245][ T4482] usb 3-1: USB disconnect, device number 4 [ 146.014016][ T5323] orangefs_mount: mount request failed with -4 [ 147.170587][ T5336] loop4: detected capacity change from 0 to 256 [ 147.192336][ T5336] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 147.237020][ T5339] loop3: detected capacity change from 0 to 8 [ 147.254614][ T5336] exFAT-fs (loop4): hint_cluster is invalid (17) [ 147.310127][ T4384] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.500153][ T4384] usb 3-1: Using ep0 maxpacket: 8 [ 147.509717][ T4384] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 147.566517][ T4384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.600100][ T4384] usb 3-1: Product: syz [ 147.604349][ T4384] usb 3-1: Manufacturer: syz [ 147.608985][ T4384] usb 3-1: SerialNumber: syz [ 147.623475][ T5346] loop3: detected capacity change from 0 to 128 [ 147.640974][ T4384] usb 3-1: config 0 descriptor?? [ 147.698614][ T5346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.756082][ T5346] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.857895][ T4384] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 147.994415][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 148.347351][ T5350] loop4: detected capacity change from 0 to 32768 [ 148.407132][ T5350] XFS (loop4): Mounting V5 Filesystem [ 148.487409][ T5350] XFS (loop4): Ending clean mount [ 148.586629][ T5354] loop0: detected capacity change from 0 to 32768 [ 148.619205][ T5354] XFS: ikeep mount option is deprecated. [ 148.630243][ T4482] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.695245][ T5354] XFS (loop0): Mounting V5 Filesystem [ 148.744109][ T4272] XFS (loop4): Unmounting Filesystem [ 148.825624][ T5354] XFS (loop0): Ending clean mount [ 148.833275][ T4482] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 148.854073][ T4482] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.868364][ T4384] gspca_sunplus: reg_w_riv err -71 [ 148.869654][ T5354] XFS (loop0): Quotacheck needed: Please wait. [ 148.878992][ T4384] sunplus: probe of 3-1:0.0 failed with error -71 [ 148.900756][ T4384] usb 3-1: USB disconnect, device number 5 [ 148.910620][ T4482] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.927261][ T4482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.041479][ T4482] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 149.134324][ T5354] XFS (loop0): Quotacheck: Done. [ 149.256205][ T4379] udevd[4379]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.269615][ T4384] usb 4-1: USB disconnect, device number 5 [ 149.353380][ T5377] loop2: detected capacity change from 0 to 7 [ 149.368486][ T4800] Dev loop2: unable to read RDB block 7 [ 149.375873][ T4800] loop2: unable to read partition table [ 149.392727][ T4800] loop2: partition table beyond EOD, truncated [ 149.405116][ T5377] Dev loop2: unable to read RDB block 7 [ 149.440729][ T5377] loop2: unable to read partition table [ 149.451351][ T5377] loop2: partition table beyond EOD, truncated [ 149.457617][ T5377] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.677594][ T4266] XFS (loop0): Unmounting Filesystem [ 149.893416][ T5381] loop4: detected capacity change from 0 to 8192 [ 149.927111][ T5385] loop1: detected capacity change from 0 to 256 [ 149.954936][ T5387] loop3: detected capacity change from 0 to 128 [ 149.983797][ T5381] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.997825][ T5387] EXT4-fs: Ignoring removed nobh option [ 150.028083][ T5387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 150.037454][ T5381] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 150.118704][ T5387] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.131395][ T5381] REISERFS (device loop4): using ordered data mode [ 150.137964][ T5381] reiserfs: using flush barriers [ 150.202997][ T5381] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.221570][ T27] audit: type=1800 audit(1753261447.054:57): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 150.317102][ T5381] REISERFS (device loop4): checking transaction log (loop4) [ 150.362711][ T5381] REISERFS (device loop4): Using r5 hash to sort names [ 150.402108][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 150.416103][ T5381] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 150.567983][ T5379] loop2: detected capacity change from 0 to 40427 [ 150.619906][ T5379] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 150.660256][ T5379] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 150.668872][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 150.697967][ T5397] netlink: 'syz.0.266': attribute type 30 has an invalid length. [ 150.724001][ T5379] F2FS-fs (loop2): invalid crc value [ 150.784645][ T5379] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.795056][ T5397] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.804853][ T5397] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.813729][ T5397] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.822524][ T5397] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.925187][ T5379] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 150.940157][ T5379] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 150.950581][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 150.971146][ T5397] netlink: 'syz.0.266': attribute type 30 has an invalid length. [ 151.351441][ T33] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 151.401452][ T33] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 151.458539][ T5393] loop1: detected capacity change from 0 to 32768 [ 151.606184][ T27] audit: type=1800 audit(1753261448.434:58): pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.269" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 152.472013][ T5412] loop0: detected capacity change from 0 to 32768 [ 152.694258][ T5412] XFS (loop0): Mounting V5 Filesystem [ 152.891502][ T5412] XFS (loop0): Ending clean mount [ 152.946102][ T5412] XFS (loop0): Quotacheck needed: Please wait. [ 153.008219][ T4384] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.039889][ T5412] XFS (loop0): Quotacheck: Done. [ 153.139280][ T5426] loop4: detected capacity change from 0 to 40427 [ 153.173840][ T5426] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 153.201655][ T5426] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 153.220359][ T4384] usb 3-1: Using ep0 maxpacket: 16 [ 153.240676][ T5426] F2FS-fs (loop4): invalid crc value [ 153.248135][ T4266] XFS (loop0): Unmounting Filesystem [ 153.265289][ T4384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.291135][ T4384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.346440][ T4384] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 153.347718][ T5426] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.393630][ T4384] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 153.441013][ T4384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.488498][ T5443] loop1: detected capacity change from 0 to 1024 [ 153.514699][ T4384] usb 3-1: config 0 descriptor?? [ 153.529966][ T5426] F2FS-fs (loop4): Start checkpoint disabled! [ 153.609132][ T5426] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 153.622365][ T5443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 153.755892][ T5443] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.284: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 153.842591][ T5426] syz.4.281: attempt to access beyond end of device [ 153.842591][ T5426] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 153.874068][ T5443] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 153.895543][ T5447] loop0: detected capacity change from 0 to 1024 [ 153.930757][ T5443] EXT4-fs warning (device loop1): ext4_rename_delete:3778: inode #2: comm syz.1.284: Deleting old file: nlink 4, error=-117 [ 153.975686][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 153.991340][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.008942][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.024702][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.034220][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.047194][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.062405][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.089574][ T5424] loop3: detected capacity change from 0 to 65536 [ 154.091200][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.119423][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.134905][ T4384] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 154.148889][ T4384] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 154.168514][ T4361] hfsplus: b-tree write err: -5, ino 4 [ 154.170182][ T4737] kworker/u4:10: attempt to access beyond end of device [ 154.170182][ T4737] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 154.183396][ T4384] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 154.192130][ T4737] kworker/u4:10: attempt to access beyond end of device [ 154.192130][ T4737] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 154.217160][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 154.282761][ T4384] microsoft 0003:045E:07DA.0005: no inputs found [ 154.309662][ T4384] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 154.429294][ T4384] usb 3-1: USB disconnect, device number 6 [ 154.494431][ T5424] XFS (loop3): Mounting V5 Filesystem [ 154.631167][ T5424] XFS (loop3): Ending clean mount [ 154.671105][ T5463] fido_id[5463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 154.829196][ T5424] syz.3.280 (5424) used greatest stack depth: 20544 bytes left [ 154.850408][ T4271] XFS (loop3): Unmounting Filesystem [ 155.014618][ T5467] loop2: detected capacity change from 0 to 1024 [ 155.148958][ T5467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.180145][ T5467] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.428785][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 155.549457][ T5458] loop1: detected capacity change from 0 to 32768 [ 155.558986][ T5461] loop0: detected capacity change from 0 to 32768 [ 155.659498][ T5458] XFS (loop1): Mounting V5 Filesystem [ 155.688495][ T5461] XFS (loop0): Mounting V5 Filesystem [ 155.780155][ T5458] XFS (loop1): Ending clean mount [ 155.872836][ T5461] XFS (loop0): Ending clean mount [ 155.899418][ T5476] loop2: detected capacity change from 0 to 32768 [ 155.921388][ T5461] XFS (loop0): Quotacheck needed: Please wait. [ 155.995379][ T5472] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 156.079750][ T5472] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 156.121552][ T5461] XFS (loop0): Quotacheck: Done. [ 156.125626][ T5476] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 156.143257][ T27] audit: type=1800 audit(1753261452.974:59): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 156.226107][ T27] audit: type=1800 audit(1753261453.014:60): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.290" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 156.371821][ T5497] loop3: detected capacity change from 0 to 2048 [ 156.440869][ T4266] XFS (loop0): Unmounting Filesystem [ 156.454575][ T4275] XFS (loop1): Unmounting Filesystem [ 156.549591][ T5497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.649210][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 157.398343][ T5505] loop2: detected capacity change from 0 to 64 [ 157.430149][ T5505] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 157.631516][ T5507] loop3: detected capacity change from 0 to 256 [ 157.759443][ T5507] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 157.888988][ T5507] exFAT-fs (loop3): hint_cluster is invalid (17) [ 157.944807][ T27] audit: type=1800 audit(1753261454.774:61): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.298" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 157.966895][ T5507] exFAT-fs (loop3): error, broken FAT chain. [ 158.001065][ T5507] exFAT-fs (loop3): Filesystem has been set read-only [ 158.015828][ T5507] exFAT-fs (loop3): error, failed to bmap (inode : ffff888055788e60 iblock : 8, err : -5) [ 158.960278][ T4384] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.118102][ T5518] orangefs_mount: mount request failed with -4 [ 159.170362][ T4384] usb 4-1: Using ep0 maxpacket: 8 [ 159.186863][ T4384] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 159.210819][ T4384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.219032][ T4384] usb 4-1: Product: syz [ 159.232246][ T4384] usb 4-1: Manufacturer: syz [ 159.239040][ T4384] usb 4-1: SerialNumber: syz [ 159.254763][ T4384] usb 4-1: config 0 descriptor?? [ 159.275392][ T4384] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 159.313302][ T5527] loop2: detected capacity change from 0 to 128 [ 159.346065][ T5511] loop1: detected capacity change from 0 to 32768 [ 159.398167][ T5527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.419013][ T5511] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 159.419013][ T5511] [ 159.460899][ T5527] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 159.676693][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 160.036370][ T5541] input: syz1 as /devices/virtual/input/input10 [ 160.546486][ T4384] gspca_sonixj: reg_w1 err -71 [ 160.607839][ T5531] loop0: detected capacity change from 0 to 32768 [ 160.620221][ T4384] sonixj: probe of 4-1:0.0 failed with error -71 [ 160.636914][ T4384] usb 4-1: USB disconnect, device number 6 [ 160.707940][ T5531] XFS (loop0): Mounting V5 Filesystem [ 160.841389][ T5531] XFS (loop0): Ending clean mount [ 160.872409][ T27] audit: type=1800 audit(1753261457.704:62): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.304" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 160.997096][ T5549] loop4: detected capacity change from 0 to 32768 [ 161.148986][ T5549] XFS (loop4): Mounting V5 Filesystem [ 161.325298][ T5531] syz.0.304 (5531) used greatest stack depth: 19680 bytes left [ 161.362625][ T5552] loop1: detected capacity change from 0 to 32768 [ 161.375259][ T4266] XFS (loop0): Unmounting Filesystem [ 161.429020][ T5549] XFS (loop4): Ending clean mount [ 161.443320][ T5549] XFS (loop4): Quotacheck needed: Please wait. [ 161.467118][ T5552] XFS (loop1): Mounting V5 Filesystem [ 161.626561][ T5552] XFS (loop1): Ending clean mount [ 161.671714][ T5552] XFS (loop1): Quotacheck needed: Please wait. [ 161.685215][ T5549] XFS (loop4): Quotacheck: Done. [ 161.811793][ T5552] XFS (loop1): Quotacheck: Done. [ 161.897596][ T4272] XFS (loop4): Unmounting Filesystem [ 162.154364][ T4275] XFS (loop1): Unmounting Filesystem [ 163.559732][ T5606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.321'. [ 163.590910][ T5606] netlink: 2 bytes leftover after parsing attributes in process `syz.1.321'. [ 163.795340][ T5596] loop3: detected capacity change from 0 to 40427 [ 163.823725][ T5596] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 163.835449][ T5596] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.859849][ T5596] F2FS-fs (loop3): invalid crc value [ 163.897269][ T5596] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.995075][ T5596] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.012924][ T5596] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.040270][ T4484] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 164.135767][ T27] audit: type=1800 audit(1753261460.964:63): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.322" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 164.251925][ T4484] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.269750][ T4484] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.321537][ T4484] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.355420][ T4484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.374809][ T4484] usb 5-1: Product: syz [ 164.379046][ T4484] usb 5-1: Manufacturer: syz [ 164.395090][ T4484] usb 5-1: SerialNumber: syz [ 164.418124][ T5610] loop1: detected capacity change from 0 to 32768 [ 164.439598][ T4367] kworker/u4:7: attempt to access beyond end of device [ 164.439598][ T4367] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 164.440690][ T5610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.326 (5610) [ 164.507859][ T4284] Bluetooth: hci0: link tx timeout [ 164.514476][ T4284] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 164.553848][ T5610] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.600746][ T5610] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 164.619801][ T5610] BTRFS info (device loop1): using free space tree [ 164.626451][ T4484] usb 5-1: 0:2 : does not exist [ 164.644078][ T4484] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 164.695782][ T4484] usb 5-1: USB disconnect, device number 4 [ 164.918611][ T5610] BTRFS info (device loop1): enabling ssd optimizations [ 164.970998][ T4423] udevd[4423]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.180489][ T5646] 9pnet_fd: p9_fd_create_unix (5646): problem connecting socket: ./file0: -111 [ 165.334687][ T4275] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.202356][ T5651] orangefs_mount: mount request failed with -4 [ 166.560101][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 166.604284][ T5659] orangefs_mount: mount request failed with -4 [ 166.739807][ T5663] loop3: detected capacity change from 0 to 1024 [ 166.967314][ T5663] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.337: Invalid block bitmap block 0 in block_group 0 [ 167.029094][ T5663] Quota error (device loop3): write_blk: dquota write failed [ 167.043656][ T5663] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 167.063738][ T5663] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.337: Failed to acquire dquot type 0 [ 167.097158][ T5663] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.337: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.169039][ T5663] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.337: Invalid inode bitmap blk 0 in block_group 0 [ 167.189840][ T5016] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 167.232500][ T5016] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:13: Failed to release dquot type 0 [ 167.275708][ T5663] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 167.303918][ T5663] EXT4-fs (loop3): 1 orphan inode deleted [ 167.308781][ T5678] loop1: detected capacity change from 0 to 256 [ 167.316248][ T5663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.348654][ T5678] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 167.520798][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 167.563745][ T5661] loop0: detected capacity change from 0 to 32768 [ 167.594301][ T4484] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.697240][ T5661] XFS (loop0): Mounting V5 Filesystem [ 167.800253][ T4484] usb 3-1: Using ep0 maxpacket: 32 [ 167.808533][ T4484] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 167.869300][ T4484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.907104][ T5668] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.936307][ T4484] usb 3-1: config 0 descriptor?? [ 167.951493][ T5661] XFS (loop0): Ending clean mount [ 167.963815][ T4484] gspca_main: sunplus-2.14.0 probing 041e:400b [ 167.968926][ T5661] XFS (loop0): Quotacheck needed: Please wait. [ 168.548198][ T5661] XFS (loop0): Quotacheck: Done. [ 168.586458][ T27] audit: type=1800 audit(1753261465.414:64): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.335" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 168.634266][ T5668] usb 5-1: Using ep0 maxpacket: 8 [ 168.647620][ T5668] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 168.660192][ T27] audit: type=1804 audit(1753261465.474:65): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.335" name="/newroot/64/file0/file2" dev="loop0" ino=9287 res=1 errno=0 [ 168.681606][ T5668] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.701836][ T27] audit: type=1800 audit(1753261465.494:66): pid=5661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.335" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 168.723773][ T5668] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.743066][ T5668] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.763143][ T5668] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.776372][ T5668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.813738][ T4266] XFS (loop0): Unmounting Filesystem [ 169.013646][ T5668] usb 5-1: GET_CAPABILITIES returned 0 [ 169.019233][ T5668] usbtmc 5-1:16.0: can't read capabilities [ 169.298774][ T4482] usb 5-1: USB disconnect, device number 5 [ 169.480564][ T4484] gspca_sunplus: reg_w_riv err -71 [ 169.487168][ T4484] sunplus: probe of 3-1:0.0 failed with error -71 [ 169.498366][ T4484] usb 3-1: USB disconnect, device number 7 [ 170.580180][ T4332] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.808074][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.839630][ T4332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.855550][ T4332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.880272][ T4332] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.889499][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.899823][ T4332] usb 3-1: config 0 descriptor?? [ 171.320943][ T4332] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 171.366947][ T4332] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 171.406636][ T4332] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.634247][ T5725] loop3: detected capacity change from 0 to 128 [ 173.412205][ T5737] bridge0: port 4(erspan0) entered blocking state [ 173.419472][ T5737] bridge0: port 4(erspan0) entered disabled state [ 173.429107][ T5737] device erspan0 entered promiscuous mode [ 173.441797][ T5737] bridge0: port 4(erspan0) entered blocking state [ 173.448365][ T5737] bridge0: port 4(erspan0) entered forwarding state [ 173.508355][ T5740] device erspan0 left promiscuous mode [ 173.520572][ T4332] usb 3-1: USB disconnect, device number 8 [ 173.559410][ T5740] bridge0: port 4(erspan0) entered disabled state [ 173.717481][ T4367] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.898455][ T4367] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.042027][ T4367] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.554405][ T4367] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.344022][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.357838][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.368193][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.381864][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.389704][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 175.397507][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.538141][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 176.627578][ T27] audit: type=1326 audit(1753261473.454:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 176.689622][ T27] audit: type=1326 audit(1753261473.454:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 176.780706][ T27] audit: type=1326 audit(1753261473.454:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 176.835577][ T27] audit: type=1326 audit(1753261473.454:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 176.967648][ T27] audit: type=1326 audit(1753261473.454:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 177.006369][ T27] audit: type=1326 audit(1753261473.454:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 177.035389][ T5799] input: syz1 as /devices/virtual/input/input11 [ 177.077494][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.099430][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.144910][ T5763] device bridge_slave_0 entered promiscuous mode [ 177.161207][ T27] audit: type=1326 audit(1753261473.524:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 177.185702][ T27] audit: type=1326 audit(1753261473.524:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5784 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 177.223264][ T27] audit: type=1326 audit(1753261473.534:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f9ddc1265 code=0x7ffc0000 [ 177.268794][ T27] audit: type=1326 audit(1753261473.704:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1f9dd8e9a9 code=0x7ffc0000 [ 177.305386][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.325105][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.350680][ T5763] device bridge_slave_1 entered promiscuous mode [ 177.376730][ T5806] loop1: detected capacity change from 0 to 512 [ 177.450785][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 177.541633][ T5806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 177.560308][ T5806] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.582829][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.585532][ T5806] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.376: corrupted inode contents [ 177.609001][ T5806] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz.1.376: mark_inode_dirty error [ 177.621945][ T5806] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #2: comm syz.1.376: corrupted inode contents [ 177.647127][ T5806] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.376: mark_inode_dirty error [ 177.674571][ T5810] EXT4-fs (loop1): shut down requested (2) [ 177.704702][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.736754][ T5812] loop4: detected capacity change from 0 to 4096 [ 177.771824][ T4367] device hsr_slave_0 left promiscuous mode [ 177.798959][ T4367] device hsr_slave_1 left promiscuous mode [ 177.871972][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 177.877574][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.894452][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.907432][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.925661][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.964149][ T4367] device bridge_slave_1 left promiscuous mode [ 178.001891][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.020207][ T4482] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.090904][ T4367] device bridge_slave_0 left promiscuous mode [ 178.097269][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.212039][ T4482] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.235732][ T5821] loop1: detected capacity change from 0 to 4096 [ 178.248483][ T4482] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 178.282670][ T4367] device veth1_macvtap left promiscuous mode [ 178.298102][ T4482] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.303189][ T4367] device veth0_macvtap left promiscuous mode [ 178.325311][ T4367] device veth1_vlan left promiscuous mode [ 178.341524][ T4482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.350054][ T4367] device veth0_vlan left promiscuous mode [ 178.372890][ T4482] usb 1-1: Product: syz [ 178.377143][ T4482] usb 1-1: Manufacturer: syz [ 178.396920][ T4482] usb 1-1: SerialNumber: syz [ 178.445377][ T5826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.635206][ T5814] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.055812][ T5832] loop1: detected capacity change from 0 to 512 [ 179.170574][ T5832] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.179727][ T5832] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.263415][ T5814] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.502577][ T4482] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 179.508382][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 179.515946][ T4482] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 179.524136][ T4482] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 179.540184][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 179.837893][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 179.859764][ T4482] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 179.876708][ T4482] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 179.956220][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 180.461010][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.667075][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.278576][ T4367] bond0 (unregistering): Released all slaves [ 181.420178][ T4482] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 181.446454][ T4482] usb 1-1: USB disconnect, device number 6 [ 181.475935][ T4482] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 181.507751][ T5763] team0: Port device team_slave_0 added [ 181.593802][ T5763] team0: Port device team_slave_1 added [ 181.608298][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 181.748986][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.766703][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.884646][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.937502][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.956611][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.030431][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.151484][ T5763] device hsr_slave_0 entered promiscuous mode [ 182.190386][ T5763] device hsr_slave_1 entered promiscuous mode [ 182.210174][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.217857][ T5763] Cannot create hsr debugfs directory [ 182.447199][ T5860] loop0: detected capacity change from 0 to 32768 [ 182.505349][ T5860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.389 (5860) [ 182.603523][ T5860] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.652745][ T5860] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 182.685651][ T5860] BTRFS info (device loop0): setting nodatacow, compression disabled [ 182.711217][ T5860] BTRFS info (device loop0): max_inline at 0 [ 182.751002][ T5860] BTRFS info (device loop0): enabling disk space caching [ 182.810330][ T5860] BTRFS info (device loop0): turning off barriers [ 182.821266][ T5860] BTRFS info (device loop0): turning on flush-on-commit [ 182.828298][ T5860] BTRFS info (device loop0): doing ref verification [ 182.841092][ T5860] BTRFS info (device loop0): force clearing of disk cache [ 182.848334][ T5860] BTRFS info (device loop0): enabling ssd optimizations [ 182.895140][ T5860] BTRFS info (device loop0): max_inline at 4096 [ 182.898638][ T5879] loop4: detected capacity change from 0 to 128 [ 182.918583][ T5763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.926148][ T5860] BTRFS info (device loop0): disk space caching is enabled [ 182.978373][ T5763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.998942][ T5763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.037209][ T5763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 183.263130][ T5904] loop1: detected capacity change from 0 to 1024 [ 183.275798][ T5860] BTRFS info (device loop0): rebuilding free space tree [ 183.342396][ T5904] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 183.370166][ T5904] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 183.445354][ T5860] BTRFS info (device loop0): disabling free space tree [ 183.470676][ T5860] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.514065][ T5860] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.553745][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.597418][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.670418][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.680428][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 183.745837][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.782043][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.816367][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 183.816383][ T27] audit: type=1800 audit(1753261480.644:81): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 183.858115][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.890482][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.897777][ T5016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.991678][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.011175][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.041891][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.071101][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.078274][ T5016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.100116][ T5668] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 184.113234][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.151227][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.263552][ T4367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.306684][ T5668] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.333285][ T5668] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.356199][ T5668] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.376392][ T4266] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.386850][ T5668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 184.418470][ T5668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 184.465129][ T5668] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.483813][ T5668] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.494048][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.520342][ T5668] usb 3-1: Product: syz [ 184.523009][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.524818][ T5668] usb 3-1: Manufacturer: syz [ 184.570764][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.578686][ T5668] cdc_wdm 3-1:1.0: skipping garbage [ 184.598941][ T5668] cdc_wdm 3-1:1.0: skipping garbage [ 184.600430][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.612496][ T5908] loop1: detected capacity change from 0 to 32768 [ 184.639387][ T5668] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 184.654028][ T5668] cdc_wdm 3-1:1.0: Unknown control protocol [ 184.954247][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.965290][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.984270][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.009738][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.017822][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 185.030619][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.091256][ T5908] XFS (loop1): Mounting V5 Filesystem [ 185.123421][ T4367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.153233][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.161714][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.172150][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.194595][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.209629][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.280481][ T4367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.294879][ T5908] XFS (loop1): Ending clean mount [ 185.307942][ T5908] XFS (loop1): Quotacheck needed: Please wait. [ 185.323710][ T5763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.418649][ T4367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.429001][ T5908] XFS (loop1): Quotacheck: Done. [ 185.459777][ T5666] usb 3-1: USB disconnect, device number 9 [ 185.501056][ T5936] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 185.509832][ T5936] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 185.518173][ T5936] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.402'. [ 185.759099][ T4275] XFS (loop1): Unmounting Filesystem [ 186.107325][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 186.461648][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.469228][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.501252][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.706768][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.731490][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.757175][ T5918] device bridge_slave_0 entered promiscuous mode [ 186.881887][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.889115][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.921673][ T5918] device bridge_slave_1 entered promiscuous mode [ 187.120699][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 187.573281][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.804435][ T5973] orangefs_mount: mount request failed with -4 [ 187.822854][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.124687][ T5979] bridge0: port 2(erspan0) entered blocking state [ 188.138611][ T5979] bridge0: port 2(erspan0) entered disabled state [ 188.147004][ T5979] device erspan0 entered promiscuous mode [ 188.166001][ T5979] bridge0: port 2(erspan0) entered blocking state [ 188.170110][ T4332] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.173002][ T5979] bridge0: port 2(erspan0) entered forwarding state [ 188.185351][ T5968] loop2: detected capacity change from 0 to 32768 [ 188.199896][ T5968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.407 (5968) [ 188.228435][ T5968] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.237345][ T5980] device erspan0 left promiscuous mode [ 188.257288][ T5968] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 188.276300][ T5968] BTRFS info (device loop2): setting nodatacow, compression disabled [ 188.276805][ T5980] bridge0: port 2(erspan0) entered disabled state [ 188.293841][ T5968] BTRFS info (device loop2): max_inline at 0 [ 188.307045][ T5968] BTRFS info (device loop2): enabling disk space caching [ 188.323856][ T5968] BTRFS info (device loop2): turning off barriers [ 188.338625][ T5968] BTRFS info (device loop2): turning on flush-on-commit [ 188.356169][ T5968] BTRFS info (device loop2): doing ref verification [ 188.372568][ T4332] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.387222][ T4332] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.400113][ T5968] BTRFS info (device loop2): force clearing of disk cache [ 188.407376][ T4332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.417364][ T5968] BTRFS info (device loop2): enabling ssd optimizations [ 188.425877][ T4332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 188.444817][ T5968] BTRFS info (device loop2): max_inline at 4096 [ 188.456226][ T4332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 188.475657][ T5968] BTRFS info (device loop2): disk space caching is enabled [ 188.487442][ T4332] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.506203][ T5918] team0: Port device team_slave_0 added [ 188.512577][ T4332] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.522491][ T4332] usb 1-1: Product: syz [ 188.527536][ T4332] usb 1-1: Manufacturer: syz [ 188.541245][ T5918] team0: Port device team_slave_1 added [ 188.575073][ T5977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.602197][ T4332] cdc_wdm 1-1:1.0: skipping garbage [ 188.613226][ T4332] cdc_wdm 1-1:1.0: skipping garbage [ 188.657046][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.658460][ T4332] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 188.666494][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.725560][ T4332] cdc_wdm 1-1:1.0: Unknown control protocol [ 188.840462][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.844951][ T5968] BTRFS info (device loop2): rebuilding free space tree [ 188.853536][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 188.861153][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 188.867840][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 188.869600][ T5968] BTRFS info (device loop2): disabling free space tree [ 188.874473][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 188.874996][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 188.894194][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 188.900830][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.902866][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 188.933897][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 188.939956][ T5925] usb 1-1: USB disconnect, device number 7 [ 188.945825][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 188.958644][ T5968] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.965979][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.984309][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.000113][ T5968] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.006024][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.043589][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.066323][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.095274][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.107902][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.126644][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.183548][ T4367] device hsr_slave_0 left promiscuous mode [ 189.195769][ T4367] device hsr_slave_1 left promiscuous mode [ 189.202096][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 189.211410][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.218973][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.226912][ T4367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.234714][ T4367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.243216][ T4367] device bridge_slave_1 left promiscuous mode [ 189.249614][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.258548][ T4367] device bridge_slave_0 left promiscuous mode [ 189.265071][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.303395][ T4367] device veth1_macvtap left promiscuous mode [ 189.309615][ T4367] device veth0_macvtap left promiscuous mode [ 189.315880][ T4367] device veth1_vlan left promiscuous mode [ 189.331619][ T4367] device veth0_vlan left promiscuous mode [ 189.518659][ T4270] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.964103][ T6012] loop2: detected capacity change from 0 to 512 [ 190.037473][ T6012] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 190.068493][ T6012] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.180884][ T6012] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.411: corrupted inode contents [ 190.193446][ T6012] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #2: comm syz.2.411: mark_inode_dirty error [ 190.210691][ T6012] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #2: comm syz.2.411: corrupted inode contents [ 190.222971][ T6012] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.411: mark_inode_dirty error [ 190.239949][ T27] audit: type=1800 audit(1753261487.074:82): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.411" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 190.277781][ T6012] EXT4-fs (loop2): shut down requested (2) [ 190.315850][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 190.697439][ T4367] team0 (unregistering): Port device team_slave_1 removed [ 190.750733][ T4367] team0 (unregistering): Port device team_slave_0 removed [ 190.801350][ T4367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.855182][ T4367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.281444][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 191.448423][ T4367] bond0 (unregistering): Released all slaves [ 191.549604][ T5763] device veth0_vlan entered promiscuous mode [ 191.667568][ T5918] device hsr_slave_0 entered promiscuous mode [ 191.738472][ T5918] device hsr_slave_1 entered promiscuous mode [ 191.753086][ T5763] device veth1_vlan entered promiscuous mode [ 191.791309][ T6029] loop0: detected capacity change from 0 to 1024 [ 191.839672][ T6029] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 191.898896][ T6029] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 191.906002][ T6033] loop2: detected capacity change from 0 to 256 [ 191.938849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.955562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.984607][ T6033] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 192.112593][ T5763] device veth0_macvtap entered promiscuous mode [ 192.202198][ T5763] device veth1_macvtap entered promiscuous mode [ 192.385707][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.417130][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.439318][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.451107][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.470319][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.490048][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.502000][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.544765][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.582597][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.617243][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.641309][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.697340][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.733926][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.752690][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.772339][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.790192][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.826033][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.847849][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.877308][ T5763] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.898906][ T5763] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.917939][ T5763] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.934354][ T5763] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.953122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.988413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.213476][ T5918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.234289][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.236957][ T5918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.248149][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.288701][ T5918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 193.339762][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.354620][ T5918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 193.361611][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 193.397067][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.405021][ T6045] loop2: detected capacity change from 0 to 32768 [ 193.411290][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 193.421987][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.466070][ T6045] XFS (loop2): Mounting V5 Filesystem [ 193.474700][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.647848][ T6045] XFS (loop2): Ending clean mount [ 193.691280][ T6045] XFS (loop2): Quotacheck needed: Please wait. [ 193.808235][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.836597][ T6045] XFS (loop2): Quotacheck: Done. [ 193.881707][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.889798][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.928172][ T6081] loop0: detected capacity change from 0 to 256 [ 193.942429][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.982900][ T6081] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 193.998257][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.031073][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.080448][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.087603][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.158189][ T4270] XFS (loop2): Unmounting Filesystem [ 194.200254][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.208535][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.249430][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.260798][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.260912][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.312114][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.319344][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.348411][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.414768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.460722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.470122][ T4332] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.493942][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.554904][ T5918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.567542][ T6092] loop1: detected capacity change from 0 to 1024 [ 194.577190][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.593238][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.602372][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.613801][ T6092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.623167][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.631704][ T6092] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.644004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.662033][ T4332] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.680163][ T4332] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 194.699619][ T6092] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 194.700237][ T4332] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 194.724140][ T4332] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 194.732551][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.735677][ T4332] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 194.772066][ T4332] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 194.784282][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.790347][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 194.810032][ T4332] usb 6-1: Product: syz [ 194.814348][ T4332] usb 6-1: Manufacturer: syz [ 194.841880][ T6092] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 194.856802][ T4332] cdc_wdm 6-1:1.0: skipping garbage [ 194.863518][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.871015][ T4332] cdc_wdm 6-1:1.0: skipping garbage [ 194.882016][ T4332] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 194.887989][ T4332] cdc_wdm 6-1:1.0: Unknown control protocol [ 194.910248][ T6092] EXT4-fs (loop1): This should not happen!! Data will be lost [ 194.910248][ T6092] [ 194.913186][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.956702][ T6092] EXT4-fs (loop1): Total free blocks count 0 [ 194.957629][ T6098] loop2: detected capacity change from 0 to 164 [ 194.990199][ T6092] EXT4-fs (loop1): Free/Dirty block details [ 195.022042][ T6092] EXT4-fs (loop1): free_blocks=4293918720 [ 195.059502][ T6092] EXT4-fs (loop1): dirty_blocks=48 [ 195.083638][ T6098] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.100152][ T6092] EXT4-fs (loop1): Block reservation details [ 195.106501][ T6092] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 195.125938][ T6098] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.139915][ T6095] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 195.169521][ T6098] rock: directory entry would overflow storage [ 195.176524][ T6098] rock: sig=0x4f50, size=4, remaining=3 [ 195.198997][ T6098] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 195.242378][ T33] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 4: comm kworker/u4:2: lblock 36 mapped to illegal pblock 4 (length 12) [ 195.467167][ T6103] netlink: 'syz.2.438': attribute type 2 has an invalid length. [ 195.491363][ T6103] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 195.566698][ T6106] netlink: 'syz.2.438': attribute type 2 has an invalid length. [ 195.595250][ T6106] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 195.767383][ T4332] usb 6-1: USB disconnect, device number 2 [ 195.834619][ T6099] loop0: detected capacity change from 0 to 32768 [ 195.880506][ T6099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.436 (6099) [ 195.927387][ T6099] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.939706][ T6099] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 195.959172][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.967500][ T6099] BTRFS info (device loop0): setting nodatacow, compression disabled [ 195.975840][ T5332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.991554][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.999295][ T6099] BTRFS info (device loop0): max_inline at 0 [ 196.015503][ T6099] BTRFS info (device loop0): enabling disk space caching [ 196.024793][ T6099] BTRFS info (device loop0): turning off barriers [ 196.036289][ T6099] BTRFS info (device loop0): turning on flush-on-commit [ 196.044802][ T6099] BTRFS info (device loop0): doing ref verification [ 196.056373][ T6099] BTRFS info (device loop0): force clearing of disk cache [ 196.065322][ T6099] BTRFS info (device loop0): enabling ssd optimizations [ 196.079945][ T6099] BTRFS info (device loop0): max_inline at 4096 [ 196.098604][ T6099] BTRFS info (device loop0): disk space caching is enabled [ 196.262180][ T6099] BTRFS info (device loop0): rebuilding free space tree [ 196.297487][ T6099] BTRFS info (device loop0): disabling free space tree [ 196.306283][ T6099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.324228][ T6099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 196.524329][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.439'. [ 196.626531][ T4266] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.699773][ T6145] loop1: detected capacity change from 0 to 1024 [ 196.791317][ T6145] EXT4-fs: Ignoring removed orlov option [ 196.847770][ T6145] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.917593][ T6147] binder: 6146:6147 ioctl c0306201 200000000240 returned -14 [ 196.966124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.003719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.119368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.143605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.161194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.184040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.211394][ T5918] device veth0_vlan entered promiscuous mode [ 197.232090][ T5918] device veth1_vlan entered promiscuous mode [ 197.278447][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.314876][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.341453][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 197.348515][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.388466][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.418096][ T5918] device veth0_macvtap entered promiscuous mode [ 197.471487][ T5918] device veth1_macvtap entered promiscuous mode [ 197.517307][ T6159] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.532039][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.546109][ T6152] loop5: detected capacity change from 0 to 32768 [ 197.561284][ T6163] loop1: detected capacity change from 0 to 256 [ 197.574864][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.610710][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.624756][ T6163] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 197.629758][ T6164] loop0: detected capacity change from 0 to 2048 [ 197.648253][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.658425][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.669076][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.679495][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.691114][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.706820][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.711281][ T6164] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 197.722168][ T6164] UDF-fs: Scanning with blocksize 512 failed [ 197.733733][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.744256][ T6164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.776860][ T6152] XFS (loop5): Mounting V5 Filesystem [ 197.779003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.834436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.844776][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.856519][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.897601][ T6152] XFS (loop5): Ending clean mount [ 197.905017][ T6152] XFS (loop5): Quotacheck needed: Please wait. [ 197.914698][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.924768][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.936522][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.947859][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.958639][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.978909][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.027729][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.045698][ T6152] XFS (loop5): Quotacheck: Done. [ 198.104727][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.137767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.191351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.243530][ T5918] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.280040][ T5918] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.288821][ T5918] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.365877][ T5918] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.450249][ T5920] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.514856][ T5763] XFS (loop5): Unmounting Filesystem [ 198.680566][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 198.699453][ T5920] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 198.760399][ T5670] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 198.824178][ T5920] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 198.859482][ T4737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.947442][ T4737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.006879][ T5670] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.035467][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 199.053812][ T5670] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 199.123505][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.151233][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.161762][ T5670] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.173739][ T5920] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.186257][ T5670] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 199.189322][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.199205][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.209226][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.231854][ T5670] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 199.233953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.251298][ T5920] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 199.261799][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.272355][ T5670] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.296466][ T5920] usb 3-1: config 0 descriptor?? [ 199.302062][ T5670] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.310804][ T5670] usb 1-1: Product: syz [ 199.316876][ T5670] usb 1-1: Manufacturer: syz [ 199.407700][ T5670] cdc_wdm 1-1:1.0: skipping garbage [ 199.413449][ T5670] cdc_wdm 1-1:1.0: skipping garbage [ 199.422830][ T5670] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 199.429049][ T5670] cdc_wdm 1-1:1.0: Unknown control protocol [ 199.531789][ T5920] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 199.771906][ T5920] usb 3-1: USB disconnect, device number 10 [ 199.798655][ T5920] usblp1: removed [ 200.229873][ T5924] usb 1-1: USB disconnect, device number 8 [ 200.376941][ T6190] loop6: detected capacity change from 0 to 32768 [ 200.388622][ T6190] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.452 (6190) [ 200.479638][ T6190] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.514432][ T6190] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 200.538956][ T6190] BTRFS info (device loop6): setting nodatacow, compression disabled [ 200.559115][ T6190] BTRFS info (device loop6): max_inline at 0 [ 200.572833][ T6190] BTRFS info (device loop6): enabling disk space caching [ 200.580460][ T6190] BTRFS info (device loop6): turning off barriers [ 200.592355][ T6190] BTRFS info (device loop6): turning on flush-on-commit [ 200.599405][ T6190] BTRFS info (device loop6): doing ref verification [ 200.610477][ T6190] BTRFS info (device loop6): force clearing of disk cache [ 200.617950][ T6190] BTRFS info (device loop6): enabling ssd optimizations [ 200.625467][ T6190] BTRFS info (device loop6): max_inline at 4096 [ 200.632709][ T6190] BTRFS info (device loop6): disk space caching is enabled [ 200.853752][ T5670] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 200.869196][ T6190] BTRFS info (device loop6): rebuilding free space tree [ 200.880906][ T5670] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.979281][ T6190] BTRFS info (device loop6): disabling free space tree [ 201.020226][ T6190] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.029961][ T6190] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.319089][ T5918] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.441271][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 201.447394][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 201.459669][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 202.761053][ T6246] loop5: detected capacity change from 0 to 164 [ 202.793810][ T6246] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 202.836598][ T6246] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 202.870804][ T6246] rock: directory entry would overflow storage [ 202.882867][ T6246] rock: sig=0x4f50, size=4, remaining=3 [ 202.907578][ T6246] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 203.210094][ T4071] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 203.390377][ T4071] usb 1-1: Using ep0 maxpacket: 32 [ 203.402677][ T4071] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 203.411431][ T26] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 203.419952][ T4071] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 203.428681][ T4071] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 203.437742][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.445682][ T4071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.456492][ T4071] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.466229][ T4071] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.480134][ T4071] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 203.489221][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.499732][ T4071] usb 1-1: config 0 descriptor?? [ 203.620347][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 203.628743][ T26] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.638417][ T22] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 203.655911][ T26] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 203.666328][ T22] usb 3-1: config 0 has no interface number 0 [ 203.676206][ T26] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.687019][ T22] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.697667][ T26] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 203.711317][ T26] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 203.722948][ T4071] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 203.735651][ T22] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 203.746316][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.754644][ T22] usb 3-1: Product: syz [ 203.758957][ T22] usb 3-1: Manufacturer: syz [ 203.763943][ T22] usb 3-1: SerialNumber: syz [ 203.770044][ T26] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.779143][ T26] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.788492][ T26] usb 7-1: Product: syz [ 203.792874][ T26] usb 7-1: Manufacturer: syz [ 203.798699][ T22] usb 3-1: config 0 descriptor?? [ 203.821145][ T26] cdc_wdm 7-1:1.0: skipping garbage [ 203.826439][ T26] cdc_wdm 7-1:1.0: skipping garbage [ 203.834052][ T22] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 203.850345][ T26] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 203.856312][ T26] cdc_wdm 7-1:1.0: Unknown control protocol [ 203.862346][ T22] em28xx 3-1:0.132: Video interface 132 found: [ 203.943043][ T4317] usb 1-1: USB disconnect, device number 9 [ 203.961258][ T4317] usblp0: removed [ 204.009962][ T6264] binder: 6263:6264 ioctl c0306201 200000000240 returned -14 [ 204.220938][ T22] em28xx 3-1:0.132: chip ID is em2884 [ 205.021582][ T6285] tipc: Started in network mode [ 205.026660][ T6285] tipc: Node identity ac14140f, cluster identity 4711 [ 205.045505][ T6285] tipc: New replicast peer: 255.255.255.255 [ 205.067576][ T6285] tipc: Enabled bearer , priority 10 [ 205.076972][ T22] em28xx 3-1:0.132: failed to read eeprom (err=-110) [ 205.084354][ T22] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 205.340186][ T22] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 205.348117][ T22] em28xx 3-1:0.132: analog set to bulk mode. [ 205.388476][ T22] usb 3-1: USB disconnect, device number 11 [ 205.395328][ T22] em28xx 3-1:0.132: Disconnecting em28xx [ 205.405182][ T4071] em28xx 3-1:0.132: Registering V4L2 extension [ 205.722389][ T6294] loop0: detected capacity change from 0 to 8192 [ 205.760791][ T6294] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.807393][ T6294] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 205.818237][ T6294] REISERFS (device loop0): using ordered data mode [ 205.825373][ T6294] reiserfs: using flush barriers [ 205.835828][ T6294] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.857298][ T6294] REISERFS (device loop0): checking transaction log (loop0) [ 205.969467][ T6294] REISERFS (device loop0): Using tea hash to sort names [ 205.989548][ T6294] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 206.083583][ T5665] tipc: Node number set to 2886997007 [ 206.120773][ T6294] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=5, free_space=65528 rdkey [ 206.165626][ T4071] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 206.175982][ T6294] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 534. Fsck? [ 206.193839][ T4071] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 206.215555][ T6294] REISERFS (device loop0): Remounting filesystem read-only [ 206.225008][ T5665] usb 7-1: USB disconnect, device number 2 [ 206.246770][ T4071] em28xx 3-1:0.132: No AC97 audio processor [ 206.260257][ T6294] REISERFS error (device loop0): vs-13080 reiserfs_new_directory: i/o failure occurred creating new directory [ 206.305534][ T6294] [ 206.307938][ T6294] ====================================================== [ 206.314779][ T4071] usb 3-1: Decoder not found [ 206.314962][ T6294] WARNING: possible circular locking dependency detected [ 206.314980][ T6294] 6.1.146-syzkaller #0 Not tainted [ 206.331780][ T6294] ------------------------------------------------------ [ 206.338826][ T6294] syz.0.484/6294 is trying to acquire lock: [ 206.339923][ T4071] em28xx 3-1:0.132: failed to create media graph [ 206.344730][ T6294] ffff8880557782e0 (&type->i_mutex_dir_key#8/3){+.+.}-{3:3}, at: open_xa_dir+0x11e/0x6f0 [ 206.344802][ T6294] [ 206.344802][ T6294] but task is already holding lock: [ 206.344809][ T6294] ffff8880779e5090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 206.344864][ T6294] [ 206.344864][ T6294] which lock already depends on the new lock. [ 206.344864][ T6294] [ 206.344870][ T6294] [ 206.344870][ T6294] the existing dependency chain (in reverse order) is: [ 206.344876][ T6294] [ 206.344876][ T6294] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 206.344903][ T6294] __mutex_lock+0x120/0xaf0 [ 206.344925][ T6294] reiserfs_write_lock+0x75/0xd0 [ 206.344951][ T6294] reiserfs_mkdir+0x30c/0x970 [ 206.344974][ T6294] open_xa_dir+0x316/0x6f0 [ 206.344999][ T6294] xattr_lookup+0x22/0x2a0 [ 206.345022][ T6294] reiserfs_xattr_set_handle+0xf3/0xca0 [ 206.345048][ T6294] reiserfs_xattr_set+0x435/0x550 [ 206.345073][ T6294] __vfs_setxattr+0x3e0/0x420 [ 206.345096][ T6294] __vfs_setxattr_noperm+0x129/0x5e0 [ 206.345120][ T6294] vfs_setxattr+0x168/0x2f0 [ 206.345142][ T6294] setxattr+0x2b2/0x2d0 [ 206.345166][ T6294] path_setxattr+0x142/0x280 [ 206.345192][ T6294] __x64_sys_lsetxattr+0xb4/0xd0 [ 206.345216][ T6294] do_syscall_64+0x4c/0xa0 [ 206.345235][ T6294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.345266][ T6294] [ 206.345266][ T6294] -> #0 (&type->i_mutex_dir_key#8/3){+.+.}-{3:3}: [ 206.345305][ T6294] __lock_acquire+0x2cf8/0x7c50 [ 206.345331][ T6294] lock_acquire+0x1b4/0x490 [ 206.345355][ T6294] down_write_nested+0x39/0x60 [ 206.345378][ T6294] open_xa_dir+0x11e/0x6f0 [ 206.345402][ T6294] reiserfs_for_each_xattr+0x174/0x7b0 [ 206.370068][ T4071] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 206.378488][ T6294] reiserfs_delete_xattrs+0x1c/0x80 [ 206.378525][ T6294] reiserfs_evict_inode+0x221/0x490 [ 206.422964][ T4071] em28xx 3-1:0.132: Remote control support is not available for this card. [ 206.426053][ T6294] evict+0x485/0x870 [ 206.440141][ T22] em28xx 3-1:0.132: Closing input extension [ 206.442604][ T6294] reiserfs_new_inode+0x5c8/0x1860 [ 206.442636][ T6294] reiserfs_mkdir+0x557/0x970 [ 206.452208][ T22] em28xx 3-1:0.132: Freeing device [ 206.453629][ T6294] vfs_mkdir+0x387/0x570 [ 206.529134][ T6306] sch_tbf: burst 88 is lower than device hsr_slave_0 mtu (1514) ! [ 206.532957][ T6294] do_mkdirat+0x1d0/0x430 [ 206.532983][ T6294] __x64_sys_mkdirat+0x85/0x90 [ 206.533000][ T6294] do_syscall_64+0x4c/0xa0 [ 206.533019][ T6294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.608193][ T6294] [ 206.608193][ T6294] other info that might help us debug this: [ 206.608193][ T6294] [ 206.618449][ T6294] Possible unsafe locking scenario: [ 206.618449][ T6294] [ 206.625924][ T6294] CPU0 CPU1 [ 206.631314][ T6294] ---- ---- [ 206.636709][ T6294] lock(&sbi->lock); [ 206.640729][ T6294] lock(&type->i_mutex_dir_key#8/3); [ 206.648673][ T6294] lock(&sbi->lock); [ 206.655218][ T6294] lock(&type->i_mutex_dir_key#8/3); [ 206.660650][ T6294] [ 206.660650][ T6294] *** DEADLOCK *** [ 206.660650][ T6294] [ 206.668830][ T6294] 3 locks held by syz.0.484/6294: [ 206.673881][ T6294] #0: ffff888075688460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 206.683190][ T6294] #1: ffff888055779020 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 206.693881][ T6294] #2: ffff8880779e5090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5c/0xd0 [ 206.703961][ T6294] [ 206.703961][ T6294] stack backtrace: [ 206.709900][ T6294] CPU: 0 PID: 6294 Comm: syz.0.484 Not tainted 6.1.146-syzkaller #0 [ 206.717913][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.728021][ T6294] Call Trace: [ 206.731329][ T6294] [ 206.734287][ T6294] dump_stack_lvl+0x168/0x22e [ 206.739004][ T6294] ? load_image+0x3b0/0x3b0 [ 206.743552][ T6294] ? show_regs_print_info+0x12/0x12 [ 206.748788][ T6294] ? print_circular_bug+0x12b/0x1a0 [ 206.754044][ T6294] check_noncircular+0x274/0x310 [ 206.759030][ T6294] ? add_chain_block+0x940/0x940 [ 206.764101][ T6294] ? lockdep_lock+0xdc/0x1e0 [ 206.768734][ T6294] ? _find_first_zero_bit+0xcf/0x100 [ 206.774072][ T6294] __lock_acquire+0x2cf8/0x7c50 [ 206.778983][ T6294] ? verify_lock_unused+0x140/0x140 [ 206.784229][ T6294] ? is_bpf_text_address+0x22/0x2a0 [ 206.789483][ T6294] ? kernel_text_address+0x9c/0xd0 [ 206.794642][ T6294] ? __kernel_text_address+0x9/0x30 [ 206.799890][ T6294] ? unwind_get_return_address+0x49/0x80 [ 206.805558][ T6294] ? stack_trace_save+0xe0/0xe0 [ 206.810464][ T6294] ? arch_stack_walk+0xf2/0x140 [ 206.815364][ T6294] lock_acquire+0x1b4/0x490 [ 206.819911][ T6294] ? open_xa_dir+0x11e/0x6f0 [ 206.824556][ T6294] ? __might_sleep+0xd0/0xd0 [ 206.829193][ T6294] ? read_lock_is_recursive+0x10/0x10 [ 206.834618][ T6294] down_write_nested+0x39/0x60 [ 206.839431][ T6294] ? open_xa_dir+0x11e/0x6f0 [ 206.844069][ T6294] open_xa_dir+0x11e/0x6f0 [ 206.848527][ T6294] ? verify_lock_unused+0x140/0x140 [ 206.853773][ T6294] ? listxattr_filler+0x3f0/0x3f0 [ 206.858843][ T6294] ? truncate_inode_pages_range+0x34d/0xff0 [ 206.864840][ T6294] reiserfs_for_each_xattr+0x174/0x7b0 [ 206.870348][ T6294] ? mapping_evict_folio+0x520/0x520 [ 206.875689][ T6294] ? reiserfs_for_each_xattr+0x7b0/0x7b0 [ 206.881377][ T6294] ? reiserfs_delete_xattrs+0x80/0x80 [ 206.882260][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 206.886779][ T6294] ? reiserfs_xattr_init+0x720/0x720 [ 206.886818][ T6294] ? dquot_initialize+0x20/0x20 [ 206.904644][ T6294] ? __rwlock_init+0x140/0x140 [ 206.909474][ T6294] reiserfs_delete_xattrs+0x1c/0x80 [ 206.914720][ T6294] reiserfs_evict_inode+0x221/0x490 [ 206.919985][ T6294] ? entry_points_to_object+0x7d0/0x7d0 [ 206.925575][ T6294] ? do_raw_spin_lock+0x11d/0x280 [ 206.930658][ T6294] ? do_raw_spin_unlock+0x11d/0x230 [ 206.935938][ T6294] ? entry_points_to_object+0x7d0/0x7d0 [ 206.941539][ T6294] evict+0x485/0x870 [ 206.945478][ T6294] ? __lock_acquire+0x7c50/0x7c50 [ 206.950555][ T6294] ? proc_nr_inodes+0x2f0/0x2f0 [ 206.955447][ T6294] ? do_raw_spin_unlock+0x11d/0x230 [ 206.960711][ T6294] ? _raw_spin_unlock+0x24/0x40 [ 206.965608][ T6294] ? iput+0x768/0x980 [ 206.969730][ T6294] reiserfs_new_inode+0x5c8/0x1860 [ 206.974901][ T6294] ? reiserfs_write_inode+0x2a0/0x2a0 [ 206.980320][ T6294] ? do_journal_begin_r+0xdec/0x1040 [ 206.985676][ T6294] ? security_old_inode_init_security+0xf8/0x140 [ 206.992052][ T6294] ? journal_begin+0x1f1/0x350 [ 206.996855][ T6294] reiserfs_mkdir+0x557/0x970 [ 207.001585][ T6294] ? reiserfs_symlink+0x770/0x770 [ 207.006655][ T6294] ? from_kgid+0x159/0x680 [ 207.011303][ T6294] ? apparmor_path_mkdir+0x1a3/0x220 [ 207.016642][ T6294] ? open_xa_dir+0x6f0/0x6f0 [ 207.021293][ T6294] ? inode_permission+0xef/0x480 [ 207.026282][ T6294] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 207.031351][ T6294] ? security_inode_mkdir+0xb3/0x100 [ 207.036685][ T6294] vfs_mkdir+0x387/0x570 [ 207.040974][ T6294] do_mkdirat+0x1d0/0x430 [ 207.045341][ T6294] ? vfs_mkdir+0x570/0x570 [ 207.049797][ T6294] __x64_sys_mkdirat+0x85/0x90 [ 207.054598][ T6294] do_syscall_64+0x4c/0xa0 [ 207.059055][ T6294] ? clear_bhb_loop+0x60/0xb0 [ 207.064122][ T6294] ? clear_bhb_loop+0x60/0xb0 [ 207.068839][ T6294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.074788][ T6294] RIP: 0033:0x7f1f9dd8d217 [ 207.079256][ T6294] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.098909][ T6294] RSP: 002b:00007f1f9ec01e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 207.107374][ T6294] RAX: ffffffffffffffda RBX: 00007f1f9ec01ef0 RCX: 00007f1f9dd8d217 [ 207.115394][ T6294] RDX: 00000000000001ff RSI: 00002000000016c0 RDI: 00000000ffffff9c [ 207.123496][ T6294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.131509][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000016c0 [ 207.139523][ T6294] R13: 00007f1f9ec01eb0 R14: 0000000000000000 R15: 0000000000000000 [ 207.147538][ T6294] [ 207.370277][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 207.377286][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.387556][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.394571][ T22] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 207.403958][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.834385][ T22] usb 3-1: config 0 descriptor?? [ 208.249037][ T6304] loop2: detected capacity change from 0 to 256 [ 208.292313][ T22] logitech 0003:046D:C50C.0008: unexpected long global item [ 208.299951][ T22] logitech 0003:046D:C50C.0008: parse failed [ 208.320644][ T22] logitech: probe of 0003:046D:C50C.0008 failed with error -22 [ 208.504207][ T5924] usb 3-1: USB disconnect, device number 12