last executing test programs: 2m40.566374036s ago: executing program 1 (id=314): ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0xf0f01e, 0xfffffff9}) 2m40.403538253s ago: executing program 1 (id=317): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@orlov}, {@sysvgroups}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x51}}, {@nogrpid}]}, 0xfa, 0x489, &(0x7f0000000840)="$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") r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r1, 0xc0109207, &(0x7f00000001c0)) 2m40.078283838s ago: executing program 1 (id=318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000280)={0x40, 0x8, 0x19, "5ec8dd2d77878bd5a23485006882d0668cbdf72f2321f500b5"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xb7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0xb, 0x2, "1cce"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @local}, &(0x7f0000000940)={0x40, 0x19, 0x2, '>U'}, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) 2m37.340964461s ago: executing program 1 (id=346): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001700)={[{@noload}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x45d, &(0x7f0000001780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2m36.69259435s ago: executing program 1 (id=352): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0x26, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m34.883347422s ago: executing program 1 (id=366): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5582, &(0x7f0000004700)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8241, 0x0) syz_mount_image$fuse(0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file0/file1\x00') 2m34.643565383s ago: executing program 32 (id=366): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES64], 0x2, 0x5582, &(0x7f0000004700)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8241, 0x0) syz_mount_image$fuse(0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='./file0/file1\x00') 58.205242884s ago: executing program 2 (id=1196): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x82) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0xff80) 58.07039049s ago: executing program 2 (id=1198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x759, &(0x7f00000000c0)={[{@usrquota}, {@nobarrier}], [], 0x2c}, 0x0, 0x4f6, &(0x7f00000002c0)="$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") ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) 57.730044845s ago: executing program 2 (id=1204): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x1], 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 57.578597032s ago: executing program 2 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 57.366324401s ago: executing program 2 (id=1212): io_setup(0xc, &(0x7f0000000100)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x9608, 0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x101, 0x0, 0x3}, 0x0) 57.063530295s ago: executing program 2 (id=1216): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 56.803237577s ago: executing program 33 (id=1216): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 36.423332206s ago: executing program 5 (id=1402): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) fsopen(&(0x7f0000000000)='msdos\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$netlink(0x10, 0x3, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 34.866818417s ago: executing program 5 (id=1422): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x9, 0xc, 0x4, 0x81, 0x0, 0x66, 0x5, 0x4, 0x80, 0xb, 0xa5}, {0x7, 0x3, 0x0, 0x3, 0x1c, 0x23, 0xfd, 0x0, 0x2, 0x4, 0x3, 0x2}, {0x200003, 0x2, 0x20, 0x8, 0x40, 0x0, 0x5f, 0x5, 0x0, 0x2, 0x0, 0x3, 0x8}], 0x1fffeff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 34.753910422s ago: executing program 5 (id=1425): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000080)={{@local, 0x917}, @host, 0x0, 0x101, 0x80, 0x80000000, 0x1, 0xffffff66}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xa49, 0x3, 0x69c9, 0x2000000004, 0x0, 0x385a2d2f, 0x4, 0x100008000}) 34.630933897s ago: executing program 5 (id=1427): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x29c5006, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 34.522119022s ago: executing program 5 (id=1430): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.267473918s ago: executing program 5 (id=1439): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) 32.938297634s ago: executing program 34 (id=1439): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) 7.190562815s ago: executing program 7 (id=1750): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x0, 0x100000000, 0x1000045, 0x6, 0x3b9, 0xf, 0xfffffffffffffffd, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.047943832s ago: executing program 7 (id=1752): setfsgid(0xee01) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.946429516s ago: executing program 7 (id=1754): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000003640)="60c82576efc9d0a70afe7d1f701514e8ddaf2ce931aaab50d884297e2a3f44c247d6955258350f25aa7129f8ed1faf90124306079032721b34a53b5e905aedad57b2dd637d53541f7bda2490cd12ec78d7afbe09b867d7d94432b44dbb1368245b34b1a03b7bf7c9ec3fbea5984d19cdb2fc0b6af18c1676b3d07a67cf126657954501dd8f2822a377dd8409bd93a0588e55e4b87b363f162267690da18125520a7c781af27966a7fec54d00f9e06182040e84804ab24482107e5a292a6b7f129a6797938859d859d8ddba9b9c5c5baf375bd34831bd25b9660995e5f7ca0d8959fc23160d09287522000aa5670a78061870b8748f296bb43fe182754e5eb50b28e88103a93d709205931334aedee0746f3947fb2167a443b23d69b4e542c4f00ea288dfabbe879241b2617d5373470a99ebc10bb1ce8b6b0c4283c164d7b28ec1ff1e213a6bcb6524cefd85b0482383b08c4be43bc7c7948e07e555f24c4fade8177a8f13753ab388a4ffc12d3356bd1a7a9ba64bea748974cde0876afdd3155a4e353e306926f1617284579236e5294142f94258f6f7d3b85b0d99ba05842fe199895d15ad0bb994f49de1030c53007b395edd4f5bf170826243b35fdb41f1d09179beb94cf987831a16e57745f6f4199ae57c20367eacbc6b2499192ddc9a47b3d4d6fd40c0b82318fc824fbf179ac1229bac375a4656e27775c82c5975633dd6b8d770e3574ae418332cee033eab656160c112d50e14f72f7f1e5ff8caac5ccde17528290d2dfc06928dd02239f1b2ee528cbd0cd1f67547e51ffc6da7bd8b7360469b9260aacae8520214b78f6081e5c66e495764f8d5c7e404863441834cd6023bae0c6fd2930b26556b06352c5c1400ab39bfc61237b123290171f69e94b0ccf3dc5a0f1ffb9dc6cea71a8de6586156c571a3845a969cd015b17fe43cdc1ea67695ac1673addcecdbaca67e5cde9fa241c4ed874fec484259f46b31ae342dd99a584624deaf4008dc0079a9f3eddbfb6a4bcfc3ad57fe82e6f8de9d8c391a7774a542d9f58a4175e22db9866bf02c6b4f0c3c56e31f8c259e0475112117393d8d269e01441b30776fa98edc7972c257038ab46668c93e425d976d15d913fcf4e81aeb2ee6f1b1ca1c7abaa802072f1512324de2743791ec8a58ddac92eed5055f95e682f4f67fed4d2a7474bf2e44e8ef700747a08b4d5ea060c9c3b74903e870acb9e96a8be9fb92e266a9b1bd93d224a3534f210ffcc00c9830f643cfe5f3ac6ac15108c5982e769d487b8f8955bb7dc168c61c617e5e2aa559a84ee5768390313c09a8299421805dd50394c92803e13e5d41a57a9232de28fb546673592fb5b7fea00ff3eb0a6f8c4b294b28d0d42585cdd098ab90c872d9d48e0342231a2cd371c1241fdc55141ddd08decf335dcf6a9d15915198da2fe8b2e96704798981fd17f6ebd8bd6e29aa57768d5b76178ce8170f83a75fe3d64aea80ac0beb81104f843bea82e024baa38d622e73f879141e9998eb51164be3495755efb5db051253f306068c34143c496f786db589813db9dc3c656b6c481aa7a0d8b296e61c58d3c7522bb9be794ca39f752818a9c4fb46bacee0990a075b8bad12057e9e08fa4db1814c28a28a912ed121a9322171b1b83cb7c650aab82be444060703e99c570f22129105b38073e234ba2a33ace4cce89534de700d98a8b59f594f6bcc63b1eead2fd4b1a1e89de55d28b17b730569757e11d7c116150be182e9bdfcf5c3b08094eccb36715e6f8d67bae66599e98bcf58cc57c1f0f10794011ae4fd75a9f37c8111c36e3e7386d6660ec707a6bb4d6f8467e2341a166295db06aaba341070d30cf6bec4af3be44ff3de6e880656cce0123293e904c61c99411a9b49eb6c1f56f88f222dc7f9789dcfc3451c212b124fa9d62693b2d218b15a918fa7f216a7dbbb215795e2dbf1a8831a4a75ede9a60c3a2f1b6afb1c11b9b87988250c92dfe775a0bf926426821533af193594b03a483025b8dd142ce26eda63107f378107973b30ae463df7e29f5904344becd90c5e57c29dde6354e13ca6eb032e1c1d9086d1ffc0c86ba07a0e5f5016e23df007043dce3fd171ad80cddca0f7966f1f6f2ac687d66fef8db2545c127313b872851846b14e4a959c03c835b6a05ce82a1ac7d801f5ece2714fdc9796e40c0057e751bd268b55a01d9c822bcd8221365c734c0f945bce3e89a3adbe272f7a8e5a953da3a5a14e8c2114b8ddf72191a233293ea137526f3e19e4faa11fe9cea7bad7bd6c89e1bb07f6e12b8736c7bfa5a3292a4595aee301dc7d6f27e8ec05be7fffbfea3fc8b678b926dc292f2536f6fe392b4725b2fc8eb6c09f1be7ec809f21b1797f61f2d6dd4870d96a2365f53ba6042d4e36b2ecf2507552e648189901743be3d4a09c1a8f589e83780b9a1b6744add4b0827b5c58aff880b2cf04adf218634b55b299cacfc72b272065ceb4ea373db88589f6e15c02db51ef85d3190720d8ace28dd781281b72f75a64165daf0f82a82bd8b602cb087e388260e94d41b512b0fcb77103858a27ef35e601b070b245948092d72c3e3e02f9aadc48f5269fd2f25ee75572e34a6b25977c23243e3fda2a2a6fdb12adfcae7c73c45cba7a2e03820af9f8426146ade515851c5e789a3658ce2ff81f2f8ecd48394e3e6e7bf312ae9128c9c9fa63715875d2a221162f520cb5a90377f25d0919ba97b82c8cc3de4b5ddb0eb6c3ab4f01b9b731d7edbe78a908a28eb9d056e53f9db03f87214df6ae0474c965be0a02d0e376ef0bb0a950f6042c367ef68001229dc28187040e51e804ccec77796969b1f93af41040d2ffd9eb1444fdf151dc5ed73a9b6265257f6dde3e670b0e3e71b6b5ff050a9a0eb814dd91d315790bbacbfb8faf0237bc6ed96ac8b61a56ac452523868e066ad23be4b0bc7fdda3ff9987404cc93fa177b68363c06448dabe0cde9aa173b81596ca9879345745ff969fc7380a90db97c45821db78ba70afb0c4e432142144e595f6dc8300e6dbb4b122447bf9921db55febf47f5985993dcb10f815bb7074cbee3f2242ecf608529d113080a44d317bab6df6b157f890990715e611db285a5fb6018083af4b4dcfa7a5f120a286d892c57be433e95d96afb2816d766470e42a4a783b43b358ca413b7929b8cf7cae8aaf683b35cce3ae381c5c2a52c3f977853d3a990db6c97a2d3a088498e6bb9432f24c7e3adeeb2245622b47813d2fd6096953cea4902a595b849058fece99067fd6f28db479ac626e188e32d795aa1747e4901f5ce6250ec94e2df7f42734811fce1d909749874fa4ce27baed0f00b377df2f3c0c59a2c04bb610fb646dbb7bd9ed42ac2651b67f60728dfa2c4f673feb196d83f9917a85782de947441c6162f9f845f293f5036b66dca1582b7daa02cffaf46c875686c3d73fc5bad55eb196149de09d09985eda53bdc3a8ada4c88c7156d597658d6aa58c488389ab6d96a38962390b7a7bf2ac937d8cbb763d01fe73c81e4a142c098d257dfabbbcb4d3ebd73cf809640c7c522db394effc5bf192dddcbc1ee43944d50b413617c10aef863a648998741b6d8c267d3bc13bcabea953aa9c5420c997bc792ba2c8f8c0c45124ff1758426df6e9645d5574cfedd949afcfccf6b9eaf8a2e36f3a2cf5581daf2699cd94ec485d9f7833ff2732e93874531ea709a5dc4779a0812dfff4887166d9f74c0d7a7465b0ffbd6cc6fb6978558a91021f3ef9662f8a1b3e8989dc529efc59f3d74cb0abd132bd520ccdd222cb3535ddf5ae13d2a76bff63e1a4f4bd4b79857e572ceb9f6182e41e5f5c4817c62cde365ad261dd5e70f285fbb33d806051c977b11020fd1956502cb59dccb27b387f3ebc0b6156a65eb5c108b4095ab65e5fbd9da399c54658357510772c299ed9175e3bf65b15cfef3fe41593498d6c3d4ad26d75dcc9dddc212847f2ea654f3d3ce50c47bf683d33cb6e5c64c2a3506fcf8fd03e7e5f476efb98182d68a5ee9b9c3b5b0b9a373725dd870e434b9c64f9180a02c39c9930be40998cefefd0a2ec6132da4bb5c38bd980b7980eee7d6b679f9de2e791ff8ddbccc8af3c245e7bcf2dc5f09ea4cec03590156a949470f72c7c1fb698ea5cd447194d151e34f499838c784fbd72bf751f5fb547340154419952c6743f3562767693b950f0a5a8342aa9c28ab1ceaceb1792df83cd17c3f0b46e8b5cab88e03ed1feecb24b1b7d6b79be4c71428aa576473f9871d1ff2eab737e71d2b10fcdbd83000eed865e0b29b152cb44f32a5d9d861df04a6f28c23d3cbab468d35535688db2e891b95cd6fec313e238fadf8155255fabd3b5898eeeb1764760883a6cfcbac086e59966c016198d19a4fc470b84c469b654cd00537c2b94a6a06888ec65ebbacd846934dd7940b536ef3b0872a571f5585b96df750b0676f9a7f6b841e9091542f363cc97d01503f4bdac7f4d78b87d94c06f0075837be785085e948e321e8a04e4586ede1fc7f873d8a1908c40448145436e3ce31a33502164971b1137a81f87e7306d76a860415c6c5086ae03f8a392aed9620b822b77b73cff167faba88358dbed456d4d82b68ec95612b76b590f87768e9dba79c56c969921ee5bd734994c6644f4ca63e1507320e584b638bce6e1b3e143aa85af2faaf830938be081a57d4c9286efef1c721487c9b1b4a65b13ae9bce39bc27c73ac4f259f8f9d7a65215489f6704c66df03353c1dfe0cbb17cc93beef41c1f75d72bbd3ec28e64ba3a7a2e81f79f2d948acf9dfb7d57dca5cfcf61cdf6a11ac41323accb05e54ec7993c4b46fb2eb347eb8340675ff674b57772a7b5061d069fa5d3323c0cc6bc745196c12815ef1120b74291a395ccb310a698482ff4d2d737d1fb37753bc14b81de0e34333fded07c662b6d1a5ba6ebb760b795d5add8dd48fd2444fe4f138acfc052ced337dedbaff16855e1ced7b43bbeeded6f5d3c99c9a16d26b3b3e7ff84a725a6aa82373d063ebc540be0647b37e9e18068983564b6a7c5b35548fb2ccb7637d2588a78d52e71ba5cc7dc7ea27261284a635676a35da7cfc00faaef85a548c5f9b74ca536e514ac077dfe6f40173ec3e647ce137845dec3e5628e9c64cbc0694f9afa1dce72411b1fe79b601482aa84e9564334dbe849f2a2f331e5e48f8d6088bda4f5642ea64c1e8c4d5a0bae726df1d4d4eae0298f4b0b7ad35bb0353c5d0c0d761c3794b949d07a47918b252aa663c27b921aa5c657aa1990fbb76edd2a027d0d6e138d6ec1373fe7e13240d939a513a84ae546750d22265b44af01fa531b626d7eeee13cbbd0c34cc8cc076381c2ce48bb5ac335f9c6e96f00f63f3fa2465b4e7c03923d790fb740f32b81c9ea94e28e9d6a8e27a3536f1d180d9abed111eede4096a613141539044bf3d05d251035640ca44ce5adba7246882625cb3c158fd1a3f85aec7025d2c71648952dbe539671c56aa37badcef6d9d6a3da63a408da1232f4c9b9ffa86919c6594aad734b92447fccfe1c394cb2727be1b9fff717704532514efcd0bc53a7d840f73e292fc27acbbd9ff298a5178525005dc3bb0c59d99b57d05ce20dea5b9f0d2dfe774c002a95920ebf76879209ac4bc59f59275a61a926a475645328706ca0863d3ef8f91e283226b01a8c3c2436a9cc7d2480a1425c92d1cab675821cd0fa2773a109217f741e94b46ff7dc8a083c1e9d25a9d7bd5adb1106c69d5cb523", 0xfe8}], 0x1, &(0x7f0000001380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000004d80)=""/4102, 0x1006}], 0x1}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004d40)="cf", 0xfdfa}], 0x1, &(0x7f00000000c0)=[@assoc={0x18}], 0x18}, 0x0) 6.86451819s ago: executing program 7 (id=1756): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904005a59e00001020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x75, 0x2, 0xe, 0xc, 0xb2, 0x5, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x40, 0x13}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1c00, 0x1}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0xb, 0x2, "eaf3"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, 0x0, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x80}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.901273639s ago: executing program 6 (id=1783): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208000000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.769388499s ago: executing program 7 (id=1791): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.438413525s ago: executing program 3 (id=1795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.302624431s ago: executing program 3 (id=1796): prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.260810173s ago: executing program 3 (id=1797): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.472195318s ago: executing program 0 (id=1806): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000000)=ANY=[@ANYBLOB='part=0x000000000010ffff,umask=00000000000000001177777,codepage=cp860,iocharset=cp932,\x00'], 0x4, 0x343, &(0x7f0000000280)="$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") getdents(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x6f) 2.318398055s ago: executing program 0 (id=1807): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x101000) fanotify_mark(r1, 0x121, 0x40000000, r0, 0x0) mknod$loop(&(0x7f0000005f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x0) rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') 2.118745244s ago: executing program 0 (id=1808): unshare(0x26020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000240)=0xa00) 2.048252418s ago: executing program 0 (id=1809): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10020a0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x888430, &(0x7f0000000000)=ANY=[], 0x21, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) 1.98979738s ago: executing program 0 (id=1810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f00000002c0)='./file2\x00', 0x2000048, &(0x7f0000000480)={[{@noalign}, {@qnoenforce}, {@dax_always}]}, 0x1, 0xb996, &(0x7f000000c3c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1.735185391s ago: executing program 6 (id=1811): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000140)=[0xe6cb], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.734244011s ago: executing program 3 (id=1812): socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff0000050245", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) 1.53443534s ago: executing program 6 (id=1814): mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) process_vm_writev(r0, &(0x7f0000001100)=[{&(0x7f0000000040)=""/110, 0x6e}], 0x1, &(0x7f0000002680)=[{&(0x7f0000001140)=""/125, 0x7d}], 0x1, 0x0) 1.422637365s ago: executing program 6 (id=1816): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.171218177s ago: executing program 0 (id=1817): syz_usb_connect(0x2, 0x58e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f61f6d10b82225649e110102030109027c050100000000090452000a020a0000052406000105240005000d240f0107000000000403000306241a2b00020724140008080005240103160524150400052415000807240a02b6008108241c68000f0800c20be7"], 0x0) 823.793552ms ago: executing program 6 (id=1820): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10020a0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x888430, &(0x7f0000000000)=ANY=[], 0x21, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) 809.117173ms ago: executing program 4 (id=1821): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xf}, @TCA_FQ_PIE_QUANTUM={0xfffffffffffffe45, 0x7, 0xa}]}}]}, 0x44}}, 0x2000400c) 654.1306ms ago: executing program 7 (id=1822): socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208000000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 653.53329ms ago: executing program 4 (id=1823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) 578.382174ms ago: executing program 6 (id=1824): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904005a59e00001020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x75, 0x2, 0xe, 0xc, 0xb2, 0x5, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000500)={0x40, 0x13}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1c00, 0x1}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0xb, 0x2, "eaf3"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, 0x0, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x80}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 534.930575ms ago: executing program 4 (id=1825): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000140)=[0xe6cb], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 474.499058ms ago: executing program 4 (id=1826): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088010000c800c00"], 0x3c}}, 0x0) 386.474622ms ago: executing program 4 (id=1827): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 381.690273ms ago: executing program 4 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000280)={0x7, 0x6, 0x80007a, 0x5, 0x6, 0xb, 0x1000, 0x9, 0xf811}) 179.588732ms ago: executing program 3 (id=1829): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1830): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) kernel console output (not intermixed with test programs): ocks:635: inode #2: block 18: comm syz.0.1125: lblock 23 mapped to illegal pblock 18 (length 1) [ 215.933333][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 216.029652][ T7672] loop4: detected capacity change from 0 to 256 [ 216.037220][ T7672] exfat: Deprecated parameter 'namecase' [ 216.049287][ T7672] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 216.282551][ T4412] usb 4-1: USB disconnect, device number 17 [ 216.297036][ T4339] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 216.370766][ T7683] loop3: detected capacity change from 0 to 1024 [ 216.378308][ T7683] EXT4-fs: Ignoring removed oldalloc option [ 216.384303][ T7683] EXT4-fs: Ignoring removed bh option [ 216.390368][ T7683] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.411467][ T7683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.421065][ T4388] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 216.457154][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 216.483577][ T4339] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.495155][ T4339] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.510117][ T4339] usb 1-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 216.524289][ T4339] usb 1-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 216.542762][ T4339] usb 1-1: config 1 interface 0 has no altsetting 0 [ 216.553624][ T4339] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.569471][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.581606][ T4339] usb 1-1: Product: syz [ 216.585965][ T4339] usb 1-1: Manufacturer: syz [ 216.593156][ T4339] usb 1-1: SerialNumber: syz [ 216.606910][ T4388] usb 5-1: Using ep0 maxpacket: 8 [ 216.614428][ T4388] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 216.629920][ T4388] usb 5-1: config 2 has no interface number 0 [ 216.636173][ T4388] usb 5-1: config 2 interface 31 has no altsetting 0 [ 216.649856][ T4388] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 216.659538][ T4388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.668629][ T4388] usb 5-1: Product: syz [ 216.673182][ T4388] usb 5-1: Manufacturer: syz [ 216.685249][ T4388] usb 5-1: SerialNumber: syz [ 216.800675][ T7697] loop2: detected capacity change from 0 to 512 [ 216.838566][ T7697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 216.853295][ T7697] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.868932][ T7697] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 18: comm syz.2.1137: lblock 23 mapped to illegal pblock 18 (length 1) [ 216.941136][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 217.045992][ T7695] loop3: detected capacity change from 0 to 32768 [ 217.064660][ T4339] usb 1-1: USB disconnect, device number 22 [ 217.083518][ T7695] XFS (loop3): Mounting V5 Filesystem [ 217.114880][ T7695] XFS (loop3): Ending clean mount [ 217.229475][ T4272] XFS (loop3): Unmounting Filesystem [ 217.263066][ T4388] ch9200: probe of 5-1:2.31 failed with error -22 [ 217.279293][ T4388] usb 5-1: USB disconnect, device number 21 [ 217.434030][ T7709] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.455941][ T7709] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 217.704000][ T7723] tipc: Started in network mode [ 217.711944][ T7723] tipc: Node identity 4, cluster identity 4711 [ 217.720901][ T7723] tipc: Node number set to 4 [ 217.851975][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.861154][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 217.873389][ T7734] loop4: detected capacity change from 0 to 256 [ 217.882142][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.891220][ T7734] exfat: Deprecated parameter 'namecase' [ 217.900284][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.916132][ T7734] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 217.942843][ T7736] loop5: detected capacity change from 0 to 16 [ 217.956634][ T7736] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0x3e7468d6, 0x5438428d expected [ 218.022085][ T7736] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 218.048383][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.056560][ T7736] CIFS mount error: No usable UNC path provided in device string! [ 218.056560][ T7736] [ 218.067663][ T7736] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 218.087445][ T4731] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 218.289039][ T4731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.299304][ T4731] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 218.311706][ T4731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.321785][ T4731] usb 3-1: config 0 descriptor?? [ 218.486943][ T4388] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 218.506944][ T4339] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 218.605877][ T7755] tipc: Started in network mode [ 218.614591][ T7755] tipc: Node identity 4, cluster identity 4711 [ 218.621248][ T7755] tipc: Node number set to 4 [ 218.676849][ T4388] usb 6-1: Using ep0 maxpacket: 8 [ 218.686043][ T4388] usb 6-1: unable to get BOS descriptor or descriptor too short [ 218.696651][ T4339] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.707467][ T4339] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 218.716702][ T4339] usb 1-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 218.728240][ T4388] usb 6-1: config 7 has an invalid interface number: 220 but max is 0 [ 218.736591][ T4731] usbhid 3-1:0.0: can't add hid device: -71 [ 218.737283][ T4388] usb 6-1: config 7 has no interface number 0 [ 218.745311][ T4731] usbhid: probe of 3-1:0.0 failed with error -71 [ 218.749142][ T4339] usb 1-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 218.769261][ T4388] usb 6-1: config 7 interface 220 altsetting 254 endpoint 0xF has invalid wMaxPacketSize 0 [ 218.781476][ T4731] usb 3-1: USB disconnect, device number 23 [ 218.785593][ T4388] usb 6-1: config 7 interface 220 altsetting 254 endpoint 0xA has invalid maxpacket 576, setting to 64 [ 218.799235][ T4339] usb 1-1: config 1 interface 0 has no altsetting 0 [ 218.806155][ T4388] usb 6-1: config 7 interface 220 has no altsetting 0 [ 218.825871][ T4339] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.835325][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.843674][ T4339] usb 1-1: Product: syz [ 218.848196][ T4388] usb 6-1: New USB device found, idVendor=12d1, idProduct=140d, bcdDevice= 0.00 [ 218.854798][ T7759] loop3: detected capacity change from 0 to 512 [ 218.857644][ T4339] usb 1-1: Manufacturer: syz [ 218.868247][ T7759] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 218.871393][ T7759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 218.878489][ T4388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.893106][ T7759] System zones: 1-12 [ 218.895514][ T4388] usb 6-1: Product: syz [ 218.900622][ T7759] EXT4-fs (loop3): orphan cleanup on readonly fs [ 218.910290][ T7759] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1161: invalid indirect mapped block 12 (level 1) [ 218.914160][ T4339] usb 1-1: SerialNumber: syz [ 218.928707][ T7759] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1161: invalid indirect mapped block 2 (level 2) [ 218.934762][ T4388] usb 6-1: Manufacturer: syz [ 218.944081][ T7759] EXT4-fs (loop3): 1 truncate cleaned up [ 218.953085][ T7759] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 218.954486][ T4388] usb 6-1: SerialNumber: syz [ 218.996937][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 219.267083][ T7762] loop3: detected capacity change from 0 to 32768 [ 219.291740][ T4388] usb-storage 6-1:7.220: USB Mass Storage device detected [ 219.305243][ T4339] usb 1-1: USB disconnect, device number 23 [ 219.315124][ T7762] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 219.415428][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 219.445877][ T4388] usb 6-1: USB disconnect, device number 15 [ 219.646992][ T4411] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 219.828651][ T4411] usb 5-1: config 17 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 219.839611][ T4411] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 219.859600][ T4411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.881971][ T7768] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 219.895570][ T4411] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 219.901777][ T7788] loop0: detected capacity change from 0 to 512 [ 219.916613][ T7788] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 219.929781][ T7788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 219.945948][ T7788] System zones: 1-12 [ 219.951388][ T7788] EXT4-fs (loop0): orphan cleanup on readonly fs [ 219.964211][ T7788] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1172: invalid indirect mapped block 12 (level 1) [ 219.984171][ T7788] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1172: invalid indirect mapped block 2 (level 2) [ 219.998208][ T4310] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 220.007144][ T7788] EXT4-fs (loop0): 1 truncate cleaned up [ 220.013125][ T7788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.055990][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 220.085487][ T7795] loop5: detected capacity change from 0 to 128 [ 220.112095][ T4411] usb 5-1: USB disconnect, device number 22 [ 220.211359][ T4310] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 220.227058][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.235685][ T4310] usb 4-1: Product: syz [ 220.246331][ T4310] usb 4-1: Manufacturer: syz [ 220.251327][ T4310] usb 4-1: SerialNumber: syz [ 220.422351][ T7809] loop0: detected capacity change from 0 to 256 [ 220.435428][ T7809] exfat: Deprecated parameter 'namecase' [ 220.453698][ T7809] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 220.697537][ T4310] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 220.710025][ T4731] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 220.757896][ T7823] loop4: detected capacity change from 0 to 512 [ 220.765941][ T7823] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 220.782575][ T7823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 220.790841][ T7823] System zones: 1-12 [ 220.796128][ T7823] EXT4-fs (loop4): orphan cleanup on readonly fs [ 220.808686][ T7823] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1186: invalid indirect mapped block 12 (level 1) [ 220.841097][ T7823] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1186: invalid indirect mapped block 2 (level 2) [ 220.864808][ T7823] EXT4-fs (loop4): 1 truncate cleaned up [ 220.871087][ T7823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 220.940619][ T4731] usb 6-1: config 0 has an invalid interface number: 82 but max is 0 [ 220.960456][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 220.961912][ T4731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.995822][ T4731] usb 6-1: config 0 has no interface number 0 [ 221.010380][ T4731] usb 6-1: config 0 interface 82 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 221.023305][ T4731] usb 6-1: config 0 interface 82 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 221.033904][ T4731] usb 6-1: config 0 interface 82 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 221.065811][ T4731] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 221.093738][ T4731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.120598][ T4731] usb 6-1: Product: syz [ 221.138488][ T4731] usb 6-1: Manufacturer: syz [ 221.143363][ T4731] usb 6-1: SerialNumber: syz [ 221.156322][ T4731] usb 6-1: config 0 descriptor?? [ 221.170466][ T7811] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 221.184954][ T4731] cdc_ether 6-1:0.82: skipping garbage [ 221.196401][ T4731] usb 6-1: bad CDC descriptors [ 221.205751][ T4731] usb 6-1: unsupported MDLM descriptors [ 221.215292][ T4731] cdc_acm 6-1:0.82: skipping garbage [ 221.450281][ T4731] usb 6-1: USB disconnect, device number 16 [ 221.531169][ T7850] loop4: detected capacity change from 0 to 256 [ 221.537730][ T7848] loop0: detected capacity change from 0 to 512 [ 221.552114][ T7850] exfat: Deprecated parameter 'namecase' [ 221.565600][ T7850] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 221.607060][ T7848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 221.617945][ T7848] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.660395][ T26] audit: type=1800 audit(1763609695.969:75): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1193" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 221.728954][ T7859] loop2: detected capacity change from 0 to 512 [ 221.745957][ T7859] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 221.756380][ T4310] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 221.776900][ T4310] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 221.788386][ T4310] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.793215][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 221.805031][ T4310] lan78xx: probe of 4-1:1.0 failed with error -71 [ 221.811915][ T7859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 221.820577][ T7859] System zones: 1-12 [ 221.831004][ T7859] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.840696][ T4310] usb 4-1: USB disconnect, device number 18 [ 221.871137][ T7859] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1198: invalid indirect mapped block 12 (level 1) [ 221.907384][ T7859] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1198: invalid indirect mapped block 2 (level 2) [ 221.937048][ T7859] EXT4-fs (loop2): 1 truncate cleaned up [ 221.947002][ T7859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.975949][ T7868] overlayfs: failed to set xattr on upper [ 221.996868][ T7868] overlayfs: ...falling back to index=off,metacopy=off. [ 222.016983][ T7868] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 222.052333][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 222.435837][ T7887] loop3: detected capacity change from 0 to 4096 [ 222.635878][ T4272] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 222.643889][ T4272] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 222.644810][ T7896] loop0: detected capacity change from 0 to 512 [ 222.661131][ T7896] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 222.676341][ T7896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 222.684614][ T7896] System zones: 1-12 [ 222.689967][ T7896] EXT4-fs (loop0): orphan cleanup on readonly fs [ 222.702287][ T7896] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1214: invalid indirect mapped block 12 (level 1) [ 222.762443][ T7896] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1214: invalid indirect mapped block 2 (level 2) [ 222.778447][ T7896] EXT4-fs (loop0): 1 truncate cleaned up [ 222.811499][ T4310] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 222.824867][ T7896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 222.933752][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 223.038854][ T4310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.051869][ T4310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 223.063263][ T4310] usb 6-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 223.075447][ T4310] usb 6-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 223.089157][ T4310] usb 6-1: config 1 interface 0 has no altsetting 0 [ 223.108940][ T4310] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.126920][ T4310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.145320][ T4310] usb 6-1: Product: syz [ 223.165589][ T4310] usb 6-1: Manufacturer: syz [ 223.174052][ T4310] usb 6-1: SerialNumber: syz [ 223.333528][ T4362] tipc: Left network mode [ 223.387028][ T4731] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 223.430193][ T4310] usb 6-1: USB disconnect, device number 17 [ 223.466855][ T6549] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 223.486397][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.497294][ T4267] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.506599][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.534004][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.541814][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.549373][ T4267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.577009][ T4731] usb 4-1: device descriptor read/64, error -71 [ 223.599409][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1223'. [ 223.734253][ T6549] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 223.748010][ T6549] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.756062][ T6549] usb 1-1: Product: syz [ 223.760754][ T6549] usb 1-1: Manufacturer: syz [ 223.765434][ T6549] usb 1-1: SerialNumber: syz [ 223.789375][ T7919] loop4: detected capacity change from 0 to 64 [ 223.850643][ T4731] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 224.000357][ T7909] chnl_net:caif_netlink_parms(): no params data found [ 224.036344][ T7925] loop4: detected capacity change from 0 to 512 [ 224.047703][ T4731] usb 4-1: device descriptor read/64, error -71 [ 224.061525][ T7925] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 224.094930][ T7925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 224.103244][ T7925] System zones: 1-12 [ 224.122580][ T7925] EXT4-fs (loop4): orphan cleanup on readonly fs [ 224.130167][ T7925] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1227: invalid indirect mapped block 12 (level 1) [ 224.164973][ T7925] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1227: invalid indirect mapped block 2 (level 2) [ 224.178941][ T4731] usb usb4-port1: attempt power cycle [ 224.187771][ T6549] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 224.231341][ T7925] EXT4-fs (loop4): 1 truncate cleaned up [ 224.251089][ T7925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 224.350178][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 224.543944][ T7931] loop5: detected capacity change from 0 to 32768 [ 224.560864][ T7931] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1229 (7931) [ 224.565513][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.581116][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.592576][ T7931] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.605112][ T7909] device bridge_slave_0 entered promiscuous mode [ 224.611981][ T7931] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 224.640582][ T4731] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 224.652378][ T7931] BTRFS info (device loop5): using free space tree [ 224.664679][ T4362] device hsr_slave_0 left promiscuous mode [ 224.672143][ T4362] device hsr_slave_1 left promiscuous mode [ 224.679464][ T4731] usb 4-1: device descriptor read/8, error -71 [ 224.687187][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.695569][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.710976][ T4362] device bridge_slave_1 left promiscuous mode [ 224.722109][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.734871][ T4362] device bridge_slave_0 left promiscuous mode [ 224.744836][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.759952][ T7951] loop4: detected capacity change from 0 to 128 [ 224.780013][ T7951] syz.4.1232: attempt to access beyond end of device [ 224.780013][ T7951] loop4: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 224.847086][ T7931] BTRFS info (device loop5): enabling ssd optimizations [ 224.940511][ T5347] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.981240][ T4731] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 225.034491][ T4731] usb 4-1: device descriptor read/8, error -71 [ 225.157338][ T4731] usb usb4-port1: unable to enumerate USB device [ 225.243356][ T6549] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 225.281300][ T6549] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 225.372354][ T6549] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 225.435251][ T6549] lan78xx: probe of 1-1:1.0 failed with error -71 [ 225.486365][ T6549] usb 1-1: USB disconnect, device number 24 [ 225.611188][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 225.963751][ T7971] loop5: detected capacity change from 0 to 8 [ 225.971126][ T7971] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 226.022902][ T7971] cramfs: Error -3 while decompressing! [ 226.030336][ T7971] cramfs: ffffffff96d761e8(1306)->ffff88804d70a000(4096) [ 226.049695][ T7971] cramfs: bad data blocksize 3221485966 [ 226.061978][ T7971] cramfs: Error -3 while decompressing! [ 226.078599][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 226.088692][ T7971] cramfs: ffffffff96d761e8(1306)->ffff88804d70a000(4096) [ 226.104279][ T26] audit: type=1800 audit(1763609700.409:76): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1238" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 226.124866][ T7973] loop0: detected capacity change from 0 to 512 [ 226.157682][ T7973] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 226.211050][ T7973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 226.234254][ T7973] System zones: 1-12 [ 226.266647][ T7973] EXT4-fs (loop0): orphan cleanup on readonly fs [ 226.309992][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 226.317413][ T7973] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1239: invalid indirect mapped block 12 (level 1) [ 226.363785][ T7973] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1239: invalid indirect mapped block 2 (level 2) [ 226.423741][ T7973] EXT4-fs (loop0): 1 truncate cleaned up [ 226.432619][ T7983] loop3: detected capacity change from 0 to 512 [ 226.432752][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.449564][ T7973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 226.508282][ T7983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 226.567181][ T7983] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.598496][ T7983] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.1243: lblock 23 mapped to illegal pblock 18 (length 1) [ 226.625406][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 226.659337][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.683838][ T7993] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.1243: path /239/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 226.773047][ T7993] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.1243: path /239/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 226.861844][ T7993] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.1243: path /239/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 226.882169][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.935878][ T7993] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.1243: path /239/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 227.021306][ T7993] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.1243: path /239/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 227.092413][ T7993] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.1243: path /239/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 227.112761][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.125862][ T8004] loop5: detected capacity change from 0 to 4096 [ 227.386894][ T6549] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 227.597055][ T6549] usb 1-1: Using ep0 maxpacket: 32 [ 227.612598][ T6549] usb 1-1: no configurations [ 227.656801][ T6549] usb 1-1: can't read configurations, error -22 [ 227.687024][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 227.779101][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 227.927175][ T6549] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 228.095895][ T8058] loop4: detected capacity change from 0 to 512 [ 228.114462][ T8058] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 228.145816][ T8058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 228.153942][ T6549] usb 1-1: Using ep0 maxpacket: 32 [ 228.160055][ T6549] usb 1-1: no configurations [ 228.164693][ T6549] usb 1-1: can't read configurations, error -22 [ 228.171891][ T6549] usb usb1-port1: attempt power cycle [ 228.172371][ T8058] System zones: 1-12 [ 228.204061][ T8058] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.229794][ T8058] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1254: invalid indirect mapped block 12 (level 1) [ 228.250679][ T8058] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1254: invalid indirect mapped block 2 (level 2) [ 228.270973][ T8058] EXT4-fs (loop4): 1 truncate cleaned up [ 228.276912][ T8058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 228.355874][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 228.562386][ T4387] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 228.606584][ T6549] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 228.657096][ T6549] usb 1-1: Using ep0 maxpacket: 32 [ 228.663149][ T6549] usb 1-1: no configurations [ 228.667683][ T4762] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 228.675488][ T6549] usb 1-1: can't read configurations, error -22 [ 228.744362][ T4387] usb 6-1: device descriptor read/64, error -71 [ 228.755518][ T4362] bond0 (unregistering): Released all slaves [ 228.852861][ T6549] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 228.862909][ T4762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.870353][ T8074] loop4: detected capacity change from 0 to 4096 [ 228.873375][ T4762] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 228.887475][ T8074] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 228.888904][ T4762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.906977][ T6549] usb 1-1: Using ep0 maxpacket: 32 [ 228.908169][ T4762] usb 4-1: config 0 descriptor?? [ 228.917389][ T6549] usb 1-1: no configurations [ 228.924771][ T6549] usb 1-1: can't read configurations, error -22 [ 228.931524][ T6549] usb usb1-port1: unable to enumerate USB device [ 228.938108][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.945228][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.954220][ T7909] device bridge_slave_1 entered promiscuous mode [ 228.995697][ T8074] ntfs3: loop4: failed to convert "c46c" to cp936 [ 229.018213][ T4387] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 229.035541][ T7909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.070106][ T7909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.152540][ T7909] team0: Port device team_slave_0 added [ 229.173055][ T7909] team0: Port device team_slave_1 added [ 229.176896][ T8076] loop4: detected capacity change from 0 to 512 [ 229.178833][ T4387] usb 6-1: device descriptor read/64, error -71 [ 229.205013][ T8076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.218764][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.222810][ T8076] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.226054][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.256649][ T8076] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 18: comm syz.4.1260: lblock 23 mapped to illegal pblock 18 (length 1) [ 229.262735][ T7909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.308684][ T7909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.317460][ T4387] usb usb6-port1: attempt power cycle [ 229.322928][ T7909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.322960][ T7909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.328138][ T4762] usbhid 4-1:0.0: can't add hid device: -71 [ 229.375312][ T4762] usbhid: probe of 4-1:0.0 failed with error -71 [ 229.395721][ T4762] usb 4-1: USB disconnect, device number 23 [ 229.406291][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 229.442308][ T7909] device hsr_slave_0 entered promiscuous mode [ 229.466523][ T7909] device hsr_slave_1 entered promiscuous mode [ 229.473992][ T7909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.482002][ T7909] Cannot create hsr debugfs directory [ 229.631051][ T7909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.641608][ T7909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.651646][ T7909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.661014][ T7909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.726986][ T4339] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 229.727946][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.749146][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 229.758996][ T4387] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 229.767017][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 229.780050][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.788149][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.800775][ T7909] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.808391][ T4387] usb 6-1: device descriptor read/8, error -71 [ 229.821224][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.830681][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.839329][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.846523][ T8045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.856632][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.873669][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.883867][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.892695][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.899859][ T8040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.921501][ T4339] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.933439][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.943335][ T4339] usb 5-1: not running at top speed; connect to a high speed hub [ 229.952471][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.962727][ T4339] usb 5-1: config 64 has an invalid interface number: 1 but max is 0 [ 229.975359][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.983432][ T4339] usb 5-1: config 64 has no interface number 0 [ 229.990019][ T4339] usb 5-1: config 64 interface 1 has no altsetting 0 [ 229.998239][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.018083][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.028629][ T4339] usb 5-1: New USB device found, idVendor=07ca, idProduct=c039, bcdDevice=9c.e1 [ 230.036396][ T8089] loop3: detected capacity change from 0 to 4096 [ 230.041090][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.052437][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.060940][ T4339] usb 5-1: Product: syz [ 230.061815][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.065120][ T4339] usb 5-1: Manufacturer: syz [ 230.065139][ T4339] usb 5-1: SerialNumber: syz [ 230.090663][ T4387] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 230.095348][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.109616][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.127611][ T4387] usb 6-1: device descriptor read/8, error -71 [ 230.135357][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.148533][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.257061][ T4387] usb usb6-port1: unable to enumerate USB device [ 230.299128][ T8094] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 230.300884][ T4339] cx231xx 5-1:64.1: New device syz syz @ 12 Mbps (07ca:c039) with 1 interfaces [ 230.316343][ T4339] cx231xx 5-1:64.1: Not found matching IAD interface [ 230.329427][ T4339] usb 5-1: USB disconnect, device number 23 [ 230.444240][ T8098] loop0: detected capacity change from 0 to 512 [ 230.454156][ T8098] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 230.471365][ T8098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 230.482612][ T8098] System zones: 1-12 [ 230.493459][ T8098] EXT4-fs (loop0): orphan cleanup on readonly fs [ 230.502495][ T8098] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1265: invalid indirect mapped block 12 (level 1) [ 230.524172][ T8098] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1265: invalid indirect mapped block 2 (level 2) [ 230.545179][ T8098] EXT4-fs (loop0): 1 truncate cleaned up [ 230.551358][ T8098] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 230.622775][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 230.683391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.691644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.705111][ T7909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.900504][ T8113] loop0: detected capacity change from 0 to 512 [ 230.964663][ T8113] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 230.987222][ T8113] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.044889][ T8113] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 18: comm syz.0.1270: lblock 23 mapped to illegal pblock 18 (length 1) [ 231.152628][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 231.204927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.215228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.226802][ T4332] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 231.263291][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.274385][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.285540][ T7909] device veth0_vlan entered promiscuous mode [ 231.303284][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.321593][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.350250][ T7909] device veth1_vlan entered promiscuous mode [ 231.402373][ T4387] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 231.422722][ T7909] device veth0_macvtap entered promiscuous mode [ 231.433676][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.442325][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 231.464943][ T4332] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 231.475456][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.488795][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.502021][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.510893][ T4332] usb 5-1: Product: syz [ 231.515190][ T4332] usb 5-1: Manufacturer: syz [ 231.521221][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.529196][ T4332] usb 5-1: SerialNumber: syz [ 231.542811][ T7909] device veth1_macvtap entered promiscuous mode [ 231.567044][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.578706][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.589943][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.600898][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.610785][ T4387] usb 4-1: Using ep0 maxpacket: 32 [ 231.619878][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.627736][ T4387] usb 4-1: no configurations [ 231.632389][ T4387] usb 4-1: can't read configurations, error -22 [ 231.646121][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.657172][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.667324][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.679390][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.689516][ T7909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.700649][ T7909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.712394][ T7909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.720244][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.731221][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.740491][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.750190][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.760898][ T8032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.780106][ T7909] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.787025][ T4387] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 231.789375][ T7909] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.805555][ T7909] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.815031][ T7909] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.827058][ T4762] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 231.857085][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 231.914333][ T8040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.924298][ T8040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.953034][ T8040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.960989][ T4332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 231.977678][ T4387] usb 4-1: Using ep0 maxpacket: 32 [ 231.986583][ T8045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.990139][ T4387] usb 4-1: no configurations [ 231.995344][ T8045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.005822][ T4387] usb 4-1: can't read configurations, error -22 [ 232.013558][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.024164][ T4387] usb usb4-port1: attempt power cycle [ 232.030728][ T4762] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.047456][ T4762] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 232.056522][ T4762] usb 6-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 232.069681][ T4762] usb 6-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 232.091665][ T4762] usb 6-1: config 1 interface 0 has no altsetting 0 [ 232.105829][ T4762] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.115350][ T4762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.123752][ T4762] usb 6-1: Product: syz [ 232.128414][ T4762] usb 6-1: Manufacturer: syz [ 232.133059][ T4762] usb 6-1: SerialNumber: syz [ 232.352523][ T4762] usb 6-1: USB disconnect, device number 22 [ 232.461723][ T4387] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 232.495240][ T8149] loop0: detected capacity change from 0 to 512 [ 232.502279][ T4387] usb 4-1: Using ep0 maxpacket: 32 [ 232.510807][ T4387] usb 4-1: no configurations [ 232.515586][ T4387] usb 4-1: can't read configurations, error -22 [ 232.533538][ T8149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.549153][ T8149] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.569805][ T8149] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 18: comm syz.0.1283: lblock 23 mapped to illegal pblock 18 (length 1) [ 232.613558][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 232.676862][ T4387] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 232.717561][ T4387] usb 4-1: Using ep0 maxpacket: 32 [ 232.724313][ T4387] usb 4-1: no configurations [ 232.736889][ T4387] usb 4-1: can't read configurations, error -22 [ 232.757816][ T4387] usb usb4-port1: unable to enumerate USB device [ 232.836931][ T4310] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 232.986616][ T4332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 232.998531][ T4310] usb 7-1: device descriptor read/64, error -71 [ 233.012565][ T4332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 233.022619][ T4332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 233.038602][ T4332] lan78xx: probe of 5-1:1.0 failed with error -71 [ 233.056067][ T4332] usb 5-1: USB disconnect, device number 24 [ 233.276877][ T4310] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 233.323245][ T8177] loop5: detected capacity change from 0 to 512 [ 233.342519][ T8177] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 233.351692][ T8177] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.370525][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 233.393462][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 233.416090][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 233.417286][ T4387] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 233.436396][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.437054][ T4310] usb 7-1: device descriptor read/64, error -71 [ 233.450361][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 233.450967][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 233.451415][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 233.519273][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.529618][ T8177] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 18: comm syz.5.1295: lblock 23 mapped to illegal pblock 18 (length 1) [ 233.554140][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 19: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 233.576984][ T4310] usb usb7-port1: attempt power cycle [ 233.583307][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 20: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 233.605049][ T8177] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 21: comm syz.5.1295: path /165/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 233.630529][ T4387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.640739][ T4387] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 233.649913][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.670352][ T4387] usb 1-1: config 0 descriptor?? [ 234.022680][ T4310] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 234.068405][ T4310] usb 7-1: device descriptor read/8, error -71 [ 234.234727][ T5347] EXT4-fs (loop5): unmounting filesystem. [ 234.285595][ T4387] usbhid 1-1:0.0: can't add hid device: -71 [ 234.297709][ T4387] usbhid: probe of 1-1:0.0 failed with error -71 [ 234.314652][ T4387] usb 1-1: USB disconnect, device number 29 [ 234.351361][ T4310] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 234.415079][ T4310] usb 7-1: device descriptor read/8, error -71 [ 234.537443][ T4310] usb usb7-port1: unable to enumerate USB device [ 234.577192][ T4332] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 234.736882][ T4332] usb 4-1: device descriptor read/64, error -71 [ 234.746956][ T4762] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 234.926857][ T4762] usb 5-1: Using ep0 maxpacket: 16 [ 234.933812][ T4762] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 234.945214][ T4762] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 234.958974][ T4762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.965613][ T4762] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 234.974896][ T4762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.984309][ T4762] usb 5-1: config 0 descriptor?? [ 234.998567][ T4762] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 235.017054][ T4332] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 235.137085][ T126] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 235.161846][ T8213] loop5: detected capacity change from 0 to 512 [ 235.177122][ T4332] usb 4-1: device descriptor read/64, error -71 [ 235.187023][ T8213] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 235.196110][ T8213] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.213838][ T3623] bcm5974 5-1:0.0: could not read from device [ 235.221137][ T4731] usb 5-1: USB disconnect, device number 25 [ 235.221179][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 235.251785][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 235.278908][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 235.300093][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 235.300470][ T4332] usb usb4-port1: attempt power cycle [ 235.320419][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.328485][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 235.353043][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.360867][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 235.361383][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 235.367305][ T126] usb 1-1: no configurations [ 235.386409][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.397363][ T126] usb 1-1: can't read configurations, error -22 [ 235.404471][ T8213] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 18: comm syz.5.1311: lblock 23 mapped to illegal pblock 18 (length 1) [ 235.420670][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 19: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 235.441835][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 20: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 235.463913][ T8213] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 21: comm syz.5.1311: path /171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 235.547008][ T126] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 235.737118][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 235.743618][ T126] usb 1-1: no configurations [ 235.755184][ T126] usb 1-1: can't read configurations, error -22 [ 235.762113][ T126] usb usb1-port1: attempt power cycle [ 235.767277][ T4332] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 235.819346][ T4332] usb 4-1: device descriptor read/8, error -71 [ 236.045216][ T5347] EXT4-fs (loop5): unmounting filesystem. [ 236.111055][ T4332] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 236.157688][ T4332] usb 4-1: device descriptor read/8, error -71 [ 236.176899][ T126] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 236.179661][ T8234] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 236.217611][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 236.223567][ T126] usb 1-1: no configurations [ 236.228500][ T126] usb 1-1: can't read configurations, error -22 [ 236.277100][ T4332] usb usb4-port1: unable to enumerate USB device [ 236.292542][ T8236] loop5: detected capacity change from 0 to 4096 [ 236.376991][ T126] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 236.408243][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 236.414104][ T126] usb 1-1: no configurations [ 236.418866][ T126] usb 1-1: can't read configurations, error -22 [ 236.425266][ T126] usb usb1-port1: unable to enumerate USB device [ 236.978363][ T4332] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 237.166933][ T4332] usb 7-1: Using ep0 maxpacket: 8 [ 237.173780][ T4332] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 237.182053][ T4332] usb 7-1: config 2 has no interface number 0 [ 237.188354][ T4332] usb 7-1: config 2 interface 31 has no altsetting 0 [ 237.197183][ T4332] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 237.210066][ T4332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.218283][ T4332] usb 7-1: Product: syz [ 237.222489][ T4332] usb 7-1: Manufacturer: syz [ 237.227213][ T4332] usb 7-1: SerialNumber: syz [ 237.234544][ T4332] ch9200: probe of 7-1:2.31 failed with error -22 [ 237.447795][ T8265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.475581][ T8263] loop3: detected capacity change from 0 to 4096 [ 237.701252][ T8276] loop4: detected capacity change from 0 to 512 [ 237.722568][ T8276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 237.732221][ T8276] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.761177][ T8276] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.1337: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 237.799003][ T8276] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.1337: directory missing '.' [ 237.878005][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 238.085078][ T8294] loop0: detected capacity change from 0 to 4096 [ 238.226841][ T4310] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 238.279095][ T8298] loop0: detected capacity change from 0 to 4096 [ 238.419401][ T4310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.441507][ T4310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.452116][ T4310] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.467345][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 238.475862][ T4310] usb 5-1: SerialNumber: syz [ 238.695053][ T4310] usb 5-1: invalid UAC_HEADER (v1) [ 238.732102][ T4310] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 238.742401][ T4310] usb 5-1: USB disconnect, device number 26 [ 239.026937][ T4762] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 239.076881][ T4731] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 239.206974][ T4762] usb 1-1: Using ep0 maxpacket: 32 [ 239.223891][ T4762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.234483][ T4762] usb 1-1: config 0 has no interfaces? [ 239.240368][ T4762] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 239.251189][ T4762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.262528][ T4762] usb 1-1: config 0 descriptor?? [ 239.276937][ T4731] usb 6-1: Using ep0 maxpacket: 16 [ 239.290436][ T4731] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.306179][ T4731] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.319195][ T4731] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.334501][ T4731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.342800][ T4731] usb 6-1: Product: syz [ 239.353788][ T4731] usb 6-1: Manufacturer: syz [ 239.359267][ T4731] usb 6-1: SerialNumber: syz [ 239.571705][ T4731] usb 6-1: 0:2 : does not exist [ 239.591731][ T4731] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 239.606589][ T8319] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 239.630919][ T4731] usb 6-1: USB disconnect, device number 23 [ 239.759821][ T4310] usb 7-1: USB disconnect, device number 6 [ 240.616863][ T126] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 240.816916][ T126] usb 6-1: Using ep0 maxpacket: 32 [ 240.824089][ T126] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 240.846136][ T126] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 240.855934][ T126] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 240.865958][ T126] usb 6-1: config 1 has no interface number 0 [ 240.874130][ T126] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.887851][ T126] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 240.901683][ T126] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 240.939216][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.996641][ T126] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 241.202755][ T126] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 241.617056][ T6549] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 241.628265][ T126] usb 6-1: USB disconnect, device number 24 [ 241.638128][ T126] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 241.814567][ T4762] usb 1-1: USB disconnect, device number 34 [ 241.837076][ T6549] usb 4-1: Using ep0 maxpacket: 16 [ 241.855075][ T6549] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.882441][ T6549] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.905909][ T6549] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.926945][ T6549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.950985][ T6549] usb 4-1: Product: syz [ 241.955344][ T6549] usb 4-1: Manufacturer: syz [ 241.969872][ T6549] usb 4-1: SerialNumber: syz [ 242.010172][ T8386] kvm: pic: non byte read [ 242.030726][ T8386] kvm: pic: non byte read [ 242.047288][ T8386] kvm: pic: single mode not supported [ 242.047309][ T8386] kvm: pic: level sensitive irq not supported [ 242.073690][ T8386] kvm: pic: non byte read [ 242.111777][ T8386] kvm: pic: single mode not supported [ 242.111859][ T8386] kvm: pic: non byte read [ 242.127378][ T8386] kvm: pic: non byte read [ 242.132225][ T8386] kvm: pic: non byte read [ 242.156429][ T8386] kvm: pic: single mode not supported [ 242.156448][ T8386] kvm: pic: level sensitive irq not supported [ 242.187063][ T8386] kvm: pic: non byte read [ 242.194058][ T6549] usb 4-1: 0:2 : does not exist [ 242.223766][ T8386] kvm: pic: single mode not supported [ 242.223844][ T8386] kvm: pic: non byte read [ 242.236427][ T8386] kvm: pic: non byte read [ 242.266052][ T6549] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 242.363281][ T6549] usb 4-1: USB disconnect, device number 32 [ 243.298510][ T8428] kvm: pic: non byte read [ 243.303577][ T8428] kvm: pic: single mode not supported [ 243.303594][ T8428] kvm: pic: level sensitive irq not supported [ 243.326073][ T8428] kvm: pic: single mode not supported [ 243.350895][ T8428] kvm: pic: single mode not supported [ 243.356856][ T8428] kvm: pic: level sensitive irq not supported [ 243.363293][ T8428] kvm: pic: single mode not supported [ 243.414962][ T8436] loop0: detected capacity change from 0 to 512 [ 243.429695][ T8436] EXT4-fs: Ignoring removed oldalloc option [ 243.436162][ T8436] EXT4-fs: Ignoring removed bh option [ 243.464284][ T8436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 243.482773][ T8436] System zones: 1-12 [ 243.491633][ T8436] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.1401: corrupted in-inode xattr [ 243.512801][ T8436] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1401: couldn't read orphan inode 15 (err -117) [ 243.534759][ T8436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 243.631685][ T8443] overlayfs: overlapping lowerdir path [ 243.655829][ T8433] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 243.659446][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 243.756873][ T4762] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 243.957054][ T4762] usb 6-1: Using ep0 maxpacket: 16 [ 243.987192][ T4762] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.009484][ T4762] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.036559][ T4762] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.057771][ T4762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.088304][ T4762] usb 6-1: Product: syz [ 244.092853][ T4762] usb 6-1: Manufacturer: syz [ 244.110197][ T4762] usb 6-1: SerialNumber: syz [ 244.144708][ T8460] raw_sendmsg: syz.6.1411 forgot to set AF_INET. Fix it! [ 244.260075][ T8459] loop4: detected capacity change from 0 to 4096 [ 244.338957][ T8468] loop3: detected capacity change from 0 to 512 [ 244.346333][ T4762] usb 6-1: 0:2 : does not exist [ 244.361938][ T4762] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 244.378787][ T8468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.388460][ T8468] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.425780][ T4762] usb 6-1: USB disconnect, device number 25 [ 244.454393][ T8468] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 244.473922][ T8464] kvm: pic: single mode not supported [ 244.473944][ T8464] kvm: pic: level sensitive irq not supported [ 244.489198][ T8464] kvm: pic: single mode not supported [ 244.510170][ T8464] kvm: pic: level sensitive irq not supported [ 244.515969][ T8477] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 244.584008][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 244.730986][ T8482] overlayfs: overlapping lowerdir path [ 244.749053][ T8475] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 244.927035][ T4731] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 245.118801][ T4731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.135631][ T4731] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 245.179129][ T4731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.194534][ T8502] loop4: detected capacity change from 0 to 128 [ 245.199005][ T4731] usb 4-1: config 0 descriptor?? [ 245.270812][ T26] audit: type=1800 audit(1763609719.579:77): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1428" name="file1" dev="loop4" ino=1048649 res=0 errno=0 [ 245.292783][ T4762] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 245.499353][ T4762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.516816][ T4762] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.537406][ T4762] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 245.569174][ T4762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 245.608180][ T4762] usb 1-1: SerialNumber: syz [ 245.644658][ T4362] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.704576][ T8510] loop4: detected capacity change from 0 to 4096 [ 245.819487][ T4362] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.831453][ T4731] usbhid 4-1:0.0: can't add hid device: -71 [ 245.840221][ T4731] usbhid: probe of 4-1:0.0 failed with error -71 [ 245.846646][ T4762] usb 1-1: 0:2 : does not exist [ 245.863001][ T4731] usb 4-1: USB disconnect, device number 33 [ 245.881268][ T4762] usb 1-1: USB disconnect, device number 35 [ 245.914578][ T4277] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 245.921507][ T4277] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 245.978949][ T8511] overlayfs: overlapping lowerdir path [ 245.989041][ T4362] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.019825][ T8508] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 246.100835][ T4362] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.525140][ T8523] loop3: detected capacity change from 0 to 64 [ 246.537137][ T4362] tipc: Left network mode [ 246.599483][ T8523] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 247.091041][ T8534] loop0: detected capacity change from 0 to 4096 [ 247.253708][ T4270] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 247.267039][ T4270] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 247.434047][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.445134][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.454294][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.464035][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.473860][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.494581][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.494815][ T126] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 247.503024][ T8555] loop4: detected capacity change from 0 to 512 [ 247.546953][ T4332] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 247.562737][ T8555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 247.572502][ T8555] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.595768][ T8555] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 247.634851][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 247.637004][ T4310] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 247.741270][ T126] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 247.761934][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.772141][ T4332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.776233][ T126] usb 4-1: Product: syz [ 247.786941][ T4332] usb 7-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 247.787955][ T126] usb 4-1: Manufacturer: syz [ 247.798939][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.811319][ T4332] usb 7-1: config 0 descriptor?? [ 247.814374][ T126] usb 4-1: SerialNumber: syz [ 247.829294][ T4310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.829328][ T4310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 247.829392][ T4310] usb 1-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 247.829433][ T4310] usb 1-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 247.829462][ T4310] usb 1-1: config 1 interface 0 has no altsetting 0 [ 247.832197][ T4310] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.832225][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.832244][ T4310] usb 1-1: Product: syz [ 247.832260][ T4310] usb 1-1: Manufacturer: syz [ 247.832274][ T4310] usb 1-1: SerialNumber: syz [ 248.078057][ T4310] usb 1-1: USB disconnect, device number 36 [ 248.135023][ T4362] device hsr_slave_0 left promiscuous mode [ 248.144585][ T4362] device hsr_slave_1 left promiscuous mode [ 248.168730][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.195494][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.204418][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.216626][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.225107][ T4362] device bridge_slave_1 left promiscuous mode [ 248.232250][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.244896][ T4362] device bridge_slave_0 left promiscuous mode [ 248.254706][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.270517][ T126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 248.318522][ T4362] device veth1_macvtap left promiscuous mode [ 248.325279][ T4362] device veth0_macvtap left promiscuous mode [ 248.333090][ T4362] device veth1_vlan left promiscuous mode [ 248.339347][ T4362] device veth0_vlan left promiscuous mode [ 248.426057][ T4332] usbhid 7-1:0.0: can't add hid device: -71 [ 248.434860][ T4332] usbhid: probe of 7-1:0.0 failed with error -71 [ 248.443131][ T4332] usb 7-1: USB disconnect, device number 7 [ 249.130917][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 249.195393][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 249.248713][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.291224][ T126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 249.303236][ T126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 249.315859][ T126] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.327112][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.327364][ T126] lan78xx: probe of 4-1:1.0 failed with error -71 [ 249.347192][ T126] usb 4-1: USB disconnect, device number 34 [ 249.529301][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 249.932188][ T4362] bond0 (unregistering): Released all slaves [ 250.024000][ T8581] loop3: detected capacity change from 0 to 4096 [ 250.036186][ T8571] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1458'. [ 250.071304][ T8552] chnl_net:caif_netlink_parms(): no params data found [ 250.288792][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.306251][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.315557][ T8552] device bridge_slave_0 entered promiscuous mode [ 250.326238][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.333910][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.343130][ T8552] device bridge_slave_1 entered promiscuous mode [ 250.437398][ T8596] loop6: detected capacity change from 0 to 256 [ 250.450242][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.475180][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.572047][ T8552] team0: Port device team_slave_0 added [ 250.614413][ T8552] team0: Port device team_slave_1 added [ 250.617153][ T4731] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 250.674042][ T8601] loop4: detected capacity change from 0 to 1024 [ 250.708375][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.715379][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.757626][ T8552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.770479][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.777798][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.804902][ T8552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.819153][ T8601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.839366][ T4731] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 250.859222][ T4731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.878402][ T4731] usb 4-1: Product: syz [ 250.882688][ T4731] usb 4-1: Manufacturer: syz [ 250.901921][ T8552] device hsr_slave_0 entered promiscuous mode [ 250.909351][ T8552] device hsr_slave_1 entered promiscuous mode [ 250.914162][ T8601] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 623: comm syz.4.1470: Attempting to read directory block (623) that is past i_size (638464) [ 250.934611][ T8552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.935063][ T4731] usb 4-1: SerialNumber: syz [ 250.942581][ T8552] Cannot create hsr debugfs directory [ 250.972655][ T4731] usb 4-1: config 0 descriptor?? [ 250.995271][ T4731] ch341 4-1:0.0: ch341-uart converter detected [ 251.076272][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 251.236877][ T4332] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 251.248855][ T8614] loop0: detected capacity change from 0 to 4096 [ 251.264836][ T8552] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.286287][ T8552] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.302333][ T8552] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 251.328538][ T8552] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 251.431640][ T4332] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 251.450403][ T8552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.457338][ T4332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.465527][ T4332] usb 7-1: Product: syz [ 251.479798][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.480262][ T4332] usb 7-1: Manufacturer: syz [ 251.492330][ T4332] usb 7-1: SerialNumber: syz [ 251.498095][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.520370][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.534569][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.545169][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.554332][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.561536][ T4362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.586313][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.594792][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.604007][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.612621][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 251.618869][ T4339] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 251.624601][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.633827][ T4362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.643613][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.658355][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.678104][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.710726][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.732379][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.743310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.754253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.769718][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.779423][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.791599][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.801695][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.809960][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 251.815665][ T8552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.818215][ T4339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.833321][ T4339] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.843361][ T4339] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 251.853754][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.863774][ T4339] usb 5-1: config 0 descriptor?? [ 251.932077][ T4332] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 251.952029][ T4332] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 251.963909][ T4332] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 251.981645][ T4332] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 251.995143][ T4332] lan78xx: probe of 7-1:1.0 failed with error -32 [ 252.026940][ T4387] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 252.127692][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.135220][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.152574][ T8552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.210490][ T4731] ch341-uart ttyUSB0: break control not supported, using simulated break [ 252.227395][ T4731] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 252.228958][ T4387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.246565][ T4731] usb 4-1: USB disconnect, device number 35 [ 252.251479][ T4387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.265801][ T4731] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 252.275053][ T4387] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 252.284654][ T4731] ch341 4-1:0.0: device disconnected [ 252.290806][ T4387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.305673][ T4387] usb 1-1: config 0 descriptor?? [ 252.562196][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.572157][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.595809][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.605300][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.614884][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.623321][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.634908][ T8552] device veth0_vlan entered promiscuous mode [ 252.649591][ T8552] device veth1_vlan entered promiscuous mode [ 252.678658][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.687737][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.696000][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.705998][ T8043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.717731][ T8552] device veth0_macvtap entered promiscuous mode [ 252.724088][ T4387] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 252.731911][ T8552] device veth1_macvtap entered promiscuous mode [ 252.737674][ T4387] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 252.759205][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.778578][ T4387] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000A/input/input9 [ 252.778849][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.808281][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.824491][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.833706][ T4387] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 252.859601][ T8552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.871283][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.884222][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.895138][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.900546][ T8647] loop3: detected capacity change from 0 to 512 [ 252.906343][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.921938][ T8552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.935805][ T8552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.944342][ T8647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 252.947310][ T7] usb 1-1: USB disconnect, device number 37 [ 252.962286][ T8552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.962486][ T8647] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.987679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.002275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.010904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.020549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.030884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.034483][ T26] audit: type=1800 audit(1763609727.339:78): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1481" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 253.040721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.072442][ T8552] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.082126][ T8552] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.091262][ T8552] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.100956][ T8552] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.137021][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 253.242749][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.260087][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.294708][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.316051][ T8656] device syzkaller0 entered promiscuous mode [ 253.326203][ T8030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.337511][ T8030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.356254][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.686902][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 253.827112][ T4339] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 253.847828][ T7] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 253.847961][ T4332] usb 7-1: USB disconnect, device number 8 [ 253.915127][ T8672] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 253.927637][ T8672] overlayfs: failed to set xattr on upper [ 253.933680][ T8672] overlayfs: ...falling back to index=off,metacopy=off. [ 253.938224][ T8674] loop6: detected capacity change from 0 to 128 [ 253.954120][ T8674] EXT4-fs (loop6): Test dummy encryption mode enabled [ 253.968465][ T8674] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 253.979916][ T8674] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.020963][ T4339] usb 4-1: Using ep0 maxpacket: 8 [ 254.028833][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.042210][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 254.052284][ T4339] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 254.070964][ T7] usb 1-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 254.082062][ T4339] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 254.093449][ T7] usb 1-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 254.107565][ T4339] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 254.116660][ T4339] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 254.126770][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 254.133487][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.143637][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.153657][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.163283][ T7] usb 1-1: Product: syz [ 254.167756][ T7] usb 1-1: Manufacturer: syz [ 254.172387][ T7] usb 1-1: SerialNumber: syz [ 254.254327][ T7909] EXT4-fs (loop6): unmounting filesystem. [ 254.311675][ T8680] loop6: detected capacity change from 0 to 512 [ 254.339798][ T8680] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 254.350952][ T8680] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.355822][ T4332] usb 5-1: USB disconnect, device number 27 [ 254.378932][ T4387] usb 4-1: USB disconnect, device number 36 [ 254.413923][ T7909] EXT4-fs (loop6): unmounting filesystem. [ 254.415983][ T7] usb 1-1: USB disconnect, device number 38 [ 254.516061][ T8687] device syzkaller0 entered promiscuous mode [ 254.879813][ T8691] loop6: detected capacity change from 0 to 32768 [ 255.046843][ T4731] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 255.170003][ T8700] loop0: detected capacity change from 0 to 512 [ 255.177774][ T8700] EXT4-fs: Ignoring removed oldalloc option [ 255.184238][ T8700] EXT4-fs: Ignoring removed bh option [ 255.216951][ T8700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 255.237003][ T4731] usb 5-1: Using ep0 maxpacket: 16 [ 255.240648][ T8700] System zones: 1-12 [ 255.263039][ T4731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.294907][ T8700] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.1502: corrupted in-inode xattr [ 255.314223][ T4731] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.338287][ T4731] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.354230][ T8700] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1502: couldn't read orphan inode 15 (err -117) [ 255.372804][ T8707] loop6: detected capacity change from 0 to 128 [ 255.381103][ T4731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.381288][ T8707] EXT4-fs (loop6): Test dummy encryption mode enabled [ 255.397148][ T8700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 255.411149][ T4731] usb 5-1: Product: syz [ 255.415377][ T4731] usb 5-1: Manufacturer: syz [ 255.423069][ T4731] usb 5-1: SerialNumber: syz [ 255.435764][ T8707] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 255.445009][ T8707] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 255.464310][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 255.533129][ T8713] loop0: detected capacity change from 0 to 512 [ 255.555137][ T8713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.564466][ T8713] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.613093][ T7909] EXT4-fs (loop6): unmounting filesystem. [ 255.651079][ T4731] usb 5-1: 0:2 : does not exist [ 255.657198][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 255.682050][ T4731] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 255.690883][ T7] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 255.691122][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.704851][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.755523][ T8719] device syzkaller0 entered promiscuous mode [ 255.767003][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 255.777629][ T4731] usb 5-1: USB disconnect, device number 28 [ 255.815395][ T8721] loop6: detected capacity change from 0 to 2048 [ 255.833794][ T8721] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 255.846671][ T8721] UDF-fs: Scanning with blocksize 512 failed [ 255.875025][ T8721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.876911][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 255.894725][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.905413][ T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.927117][ T7] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 255.936215][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.958925][ T7] usb 4-1: config 0 descriptor?? [ 256.018879][ T8725] overlayfs: failed to resolve './file0': -2 [ 256.240880][ T8735] loop4: detected capacity change from 0 to 512 [ 256.259071][ T8735] EXT4-fs: Ignoring removed oldalloc option [ 256.265090][ T8735] EXT4-fs: Ignoring removed bh option [ 256.285205][ T8737] loop6: detected capacity change from 0 to 128 [ 256.293987][ T8737] EXT4-fs (loop6): Test dummy encryption mode enabled [ 256.297638][ T8735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 256.313044][ T8735] System zones: 1-12 [ 256.320665][ T8737] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 256.320946][ T8735] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.1515: corrupted in-inode xattr [ 256.336193][ T8742] loop0: detected capacity change from 0 to 512 [ 256.349684][ T8737] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.351261][ T8735] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1515: couldn't read orphan inode 15 (err -117) [ 256.379096][ T8735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 256.414960][ T8742] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 256.427636][ T8742] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.441188][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 256.478519][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 256.500766][ T7909] EXT4-fs (loop6): unmounting filesystem. [ 256.606057][ T8749] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 256.616696][ T8749] overlayfs: failed to set xattr on upper [ 256.625393][ T8749] overlayfs: ...falling back to index=off,metacopy=off. [ 256.719666][ T8756] loop0: detected capacity change from 0 to 512 [ 256.762608][ T8756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 256.782401][ T8756] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.846563][ T26] audit: type=1800 audit(1763609731.149:79): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1522" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 256.936370][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 257.088276][ T8776] loop0: detected capacity change from 0 to 128 [ 257.096358][ T8776] EXT4-fs (loop0): Test dummy encryption mode enabled [ 257.112997][ T8776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 257.134076][ T8776] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.186817][ T4311] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 257.344052][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 257.387041][ T4311] usb 5-1: Using ep0 maxpacket: 16 [ 257.394445][ T4311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.410778][ T4311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.443477][ T4311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.466105][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.483948][ T4311] usb 5-1: Product: syz [ 257.490319][ T4311] usb 5-1: Manufacturer: syz [ 257.495595][ T4311] usb 5-1: SerialNumber: syz [ 257.514922][ T8798] loop7: detected capacity change from 0 to 512 [ 257.553794][ T8798] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.563183][ T8798] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.632624][ T8552] EXT4-fs (loop7): unmounting filesystem. [ 257.687226][ T4762] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 257.715116][ T4311] usb 5-1: 0:2 : does not exist [ 257.732648][ T4311] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 257.800260][ T4311] usb 5-1: USB disconnect, device number 29 [ 257.891067][ T4762] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.905626][ T4762] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.916450][ T4762] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 257.938213][ T4762] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.947839][ T4762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 257.956001][ T4762] usb 7-1: SerialNumber: syz [ 257.968974][ T8814] loop0: detected capacity change from 0 to 128 [ 257.977140][ T8814] EXT4-fs (loop0): Test dummy encryption mode enabled [ 257.987902][ T8814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 258.001377][ T8814] ext4 filesystem being mounted at /330/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.110520][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 258.169899][ T4762] usb 7-1: 0:2 : does not exist [ 258.182452][ T4762] usb 7-1: USB disconnect, device number 9 [ 258.453348][ T4731] usb 4-1: USB disconnect, device number 37 [ 258.473895][ T8830] loop0: detected capacity change from 0 to 512 [ 258.530151][ T8830] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 258.539498][ T8830] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.550331][ T4311] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 258.623637][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 258.630811][ T8838] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 258.638289][ T8838] overlayfs: failed to set xattr on upper [ 258.644246][ T8838] overlayfs: ...falling back to index=off,metacopy=off. [ 258.739869][ T4311] usb 5-1: Using ep0 maxpacket: 32 [ 258.747426][ T4311] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 258.765379][ T4311] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 258.782078][ T4311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 258.791357][ T4311] usb 5-1: config 1 has no interface number 0 [ 258.803827][ T4311] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.818980][ T4311] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 258.832817][ T4311] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 258.845514][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.871088][ T4311] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 258.985219][ T8850] loop6: detected capacity change from 0 to 512 [ 258.993667][ T8850] EXT4-fs: Ignoring removed oldalloc option [ 258.999903][ T8850] EXT4-fs: Ignoring removed bh option [ 259.007186][ T4731] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 259.009766][ T8850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 259.024141][ T8850] System zones: 1-12 [ 259.030863][ T8850] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2196: inode #15: comm syz.6.1562: corrupted in-inode xattr [ 259.043769][ T8850] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1562: couldn't read orphan inode 15 (err -117) [ 259.057112][ T8850] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 259.069854][ T4311] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 259.101088][ T7909] EXT4-fs (loop6): unmounting filesystem. [ 259.137336][ T126] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 259.196919][ T4731] usb 1-1: Using ep0 maxpacket: 8 [ 259.204264][ T4731] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 259.212701][ T4731] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 259.223825][ T4731] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 259.232988][ T4731] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.242132][ T4731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.282106][ T4731] usb 5-1: USB disconnect, device number 30 [ 259.288931][ T4731] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 259.327104][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 259.333846][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.344629][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.355871][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.365481][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.373595][ T126] usb 4-1: Product: syz [ 259.378210][ T126] usb 4-1: Manufacturer: syz [ 259.382862][ T126] usb 4-1: SerialNumber: syz [ 259.426846][ T5721] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 259.457610][ T4762] usb 1-1: USB disconnect, device number 39 [ 259.592461][ T126] usb 4-1: 0:2 : does not exist [ 259.600452][ T126] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 259.613605][ T5721] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 259.623353][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.632265][ T5721] usb 7-1: Product: syz [ 259.636778][ T5721] usb 7-1: Manufacturer: syz [ 259.641725][ T5721] usb 7-1: SerialNumber: syz [ 259.653260][ T126] usb 4-1: USB disconnect, device number 38 [ 259.660801][ T5721] usb 7-1: config 0 descriptor?? [ 259.668939][ T5721] ch341 7-1:0.0: ch341-uart converter detected [ 260.247936][ T8870] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 260.254945][ T8870] overlayfs: failed to set xattr on upper [ 260.261330][ T8870] overlayfs: ...falling back to index=off,metacopy=off. [ 260.637377][ T8882] overlayfs: failed to resolve './file0/file0': -2 [ 260.866343][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1578'. [ 260.877807][ T5721] ch341-uart ttyUSB0: failed to read break control: -71 [ 260.888530][ T5721] ch341-uart: probe of ttyUSB0 failed with error -71 [ 260.909806][ T5721] usb 7-1: USB disconnect, device number 10 [ 260.924885][ T5721] ch341 7-1:0.0: device disconnected [ 261.676042][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.695069][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.705107][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.162635][ T8937] loop6: detected capacity change from 0 to 512 [ 262.183004][ T8937] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 262.261620][ T9] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 262.364375][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1600'. [ 262.419540][ T8947] loop0: detected capacity change from 0 to 512 [ 262.429570][ T8947] EXT4-fs: Ignoring removed oldalloc option [ 262.435617][ T8947] EXT4-fs: Ignoring removed bh option [ 262.451129][ T8947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 262.459358][ T8947] System zones: 1-12 [ 262.465408][ T8947] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz.0.1602: corrupted in-inode xattr [ 262.480031][ T8947] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1602: couldn't read orphan inode 15 (err -117) [ 262.494612][ T8947] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.588369][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 262.687052][ T4311] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 262.754733][ T8959] kvm: apic: phys broadcast and lowest prio [ 262.882535][ T4311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.905775][ T4311] usb 5-1: not running at top speed; connect to a high speed hub [ 262.912024][ T8969] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 262.924836][ T4311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.945384][ T4311] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 262.948021][ T8969] overlayfs: failed to set xattr on upper [ 262.967030][ T4311] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 262.985224][ T8969] overlayfs: ...falling back to index=off,metacopy=off. [ 262.993436][ T4311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.014712][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.042747][ T4311] usb 5-1: Product: syz [ 263.050535][ T4311] usb 5-1: Manufacturer: syz [ 263.055188][ T4311] usb 5-1: SerialNumber: syz [ 263.295278][ T4311] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 263.315983][ T4311] usb 5-1: USB disconnect, device number 31 [ 263.517146][ T126] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 263.698825][ T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.709187][ T126] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 263.720704][ T126] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.735483][ T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 263.744615][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 263.752811][ T126] usb 1-1: SerialNumber: syz [ 263.761114][ T126] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 263.768270][ T126] usb-storage 1-1:1.0: USB Mass Storage device detected [ 263.776594][ T126] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 264.040417][ T8997] tipc: Started in network mode [ 264.045368][ T8997] tipc: Node identity 7f000001, cluster identity 4711 [ 264.055237][ T8997] tipc: Enabled bearer , priority 10 [ 264.775535][ T9039] netlink: 'syz.6.1633': attribute type 7 has an invalid length. [ 264.783902][ T9039] netlink: 'syz.6.1633': attribute type 8 has an invalid length. [ 264.797749][ T9039] netlink: 'syz.6.1633': attribute type 13 has an invalid length. [ 265.166823][ T4311] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 265.223516][ T9046] loop7: detected capacity change from 0 to 32768 [ 265.233613][ T126] tipc: Node number set to 2130706433 [ 265.256584][ T9046] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 265.313708][ T26] audit: type=1804 audit(1763609739.619:80): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1637" name="/newroot/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop7" ino=17058 res=1 errno=0 [ 265.388444][ T4311] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.402180][ T4311] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.408054][ T8552] ocfs2: Unmounting device (7,7) on (node local) [ 265.425109][ T4311] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.435045][ T4311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 265.443275][ T4311] usb 7-1: SerialNumber: syz [ 265.662595][ T4311] usb 7-1: 0:2 : does not exist [ 265.672477][ T4311] usb 7-1: unit 5 not found! [ 265.698234][ T4311] usb 7-1: USB disconnect, device number 11 [ 265.830375][ T9065] device syzkaller0 entered promiscuous mode [ 266.353509][ T5721] usb 1-1: USB disconnect, device number 40 [ 266.666851][ T4731] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 266.779656][ T9102] device syzkaller0 entered promiscuous mode [ 266.856990][ T4731] usb 5-1: Using ep0 maxpacket: 16 [ 266.864793][ T4731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.881988][ T4731] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.907579][ T4731] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.922978][ T4731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.933617][ T4731] usb 5-1: Product: syz [ 266.943070][ T4731] usb 5-1: Manufacturer: syz [ 266.948053][ T4731] usb 5-1: SerialNumber: syz [ 267.162121][ T4731] usb 5-1: 0:2 : does not exist [ 267.176200][ T4731] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 267.211354][ T4731] usb 5-1: USB disconnect, device number 32 [ 267.518638][ T4735] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 267.571962][ T9135] device syzkaller0 entered promiscuous mode [ 267.723964][ T4735] usb 4-1: Using ep0 maxpacket: 32 [ 267.731774][ T4735] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.767409][ T4735] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 267.776530][ T4735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.798561][ T4735] usb 4-1: config 0 descriptor?? [ 268.184831][ T9164] loop7: detected capacity change from 0 to 256 [ 268.391542][ T9173] device syzkaller0 entered promiscuous mode [ 268.625473][ T9180] loop0: detected capacity change from 0 to 128 [ 268.641460][ T9182] loop4: detected capacity change from 0 to 64 [ 268.642675][ T9180] EXT4-fs (loop0): Test dummy encryption mode enabled [ 268.660002][ T9180] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 268.672046][ T9180] ext4 filesystem being mounted at /358/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.735302][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 269.126684][ T9204] device syzkaller0 entered promiscuous mode [ 269.383786][ T9215] loop0: detected capacity change from 0 to 128 [ 269.393293][ T9215] EXT4-fs (loop0): Test dummy encryption mode enabled [ 269.403988][ T9215] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 269.418274][ T9215] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.466451][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 269.986858][ T4762] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 270.122535][ T9235] loop4: detected capacity change from 0 to 64 [ 270.169138][ T4762] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.184974][ T4762] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.196607][ T4762] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 270.213583][ T4762] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 270.233656][ T4762] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.243480][ T4762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 270.260865][ T4762] usb 7-1: SerialNumber: syz [ 270.283068][ T5721] usb 4-1: USB disconnect, device number 39 [ 270.477480][ T9246] loop3: detected capacity change from 0 to 128 [ 270.478550][ T4762] usb 7-1: 0:2 : does not exist [ 270.489601][ T9246] EXT4-fs (loop3): Test dummy encryption mode enabled [ 270.501020][ T9246] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 270.502843][ T4762] usb 7-1: unit 5 not found! [ 270.517674][ T9246] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.597297][ T4762] usb 7-1: USB disconnect, device number 12 [ 270.628990][ T9253] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 270.636267][ T9253] overlayfs: failed to set xattr on upper [ 270.642198][ T9253] overlayfs: ...falling back to index=off,metacopy=off. [ 270.655871][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 271.126891][ T4735] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 271.283583][ T9282] loop6: detected capacity change from 0 to 128 [ 271.291916][ T9282] EXT4-fs (loop6): Test dummy encryption mode enabled [ 271.320247][ T9282] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 271.322403][ T4735] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.335367][ T9282] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.350294][ T4735] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 271.367801][ T4735] usb 5-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 271.387711][ T4735] usb 5-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 271.418839][ T4735] usb 5-1: config 1 interface 0 has no altsetting 0 [ 271.430627][ T7909] EXT4-fs (loop6): unmounting filesystem. [ 271.470790][ T4735] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.482458][ T4735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.496622][ T4735] usb 5-1: Product: syz [ 271.504652][ T4735] usb 5-1: Manufacturer: syz [ 271.510257][ T4735] usb 5-1: SerialNumber: syz [ 271.568640][ T9291] loop7: detected capacity change from 0 to 512 [ 271.577159][ T9291] EXT4-fs: Ignoring removed nobh option [ 271.587033][ T4731] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 271.635871][ T9291] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.648302][ T9291] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 271.659412][ T9291] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1736: Corrupt directory, running e2fsck is recommended [ 271.694222][ T9291] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 271.707000][ T9291] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2196: inode #15: comm syz.7.1736: corrupted in-inode xattr [ 271.726444][ T9291] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1736: couldn't read orphan inode 15 (err -117) [ 271.739430][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 271.747221][ T9291] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 271.759976][ T4735] usb 5-1: USB disconnect, device number 33 [ 271.779697][ T9291] EXT4-fs warning (device loop7): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 271.792152][ T9291] EXT4-fs warning (device loop7): dx_probe:881: Enable large directory feature to access it [ 271.802858][ T9291] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1736: Corrupt directory, running e2fsck is recommended [ 271.819365][ T4731] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 271.833506][ T9291] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.1736: path /32/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 271.853460][ T4731] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 271.868176][ T4731] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 271.878028][ T9291] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 4: comm syz.7.1736: path /32/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 271.897966][ T4731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 271.906140][ T4731] usb 4-1: SerialNumber: syz [ 271.922071][ T4731] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 271.929660][ T4731] usb-storage 4-1:1.0: USB Mass Storage device detected [ 271.953675][ T4731] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 272.228530][ T9320] loop6: detected capacity change from 0 to 128 [ 272.236387][ T9320] EXT4-fs (loop6): Test dummy encryption mode enabled [ 272.248044][ T9320] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 272.257846][ T9320] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.319072][ T7909] EXT4-fs (loop6): unmounting filesystem. [ 272.468154][ T8552] EXT4-fs (loop7): unmounting filesystem. [ 273.516853][ T5721] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 273.696937][ T5721] usb 7-1: Using ep0 maxpacket: 16 [ 273.704505][ T5721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.715307][ T5721] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.726874][ T5721] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.736126][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.744407][ T5721] usb 7-1: Product: syz [ 273.749102][ T5721] usb 7-1: Manufacturer: syz [ 273.753741][ T5721] usb 7-1: SerialNumber: syz [ 273.971354][ T5721] usb 7-1: 0:2 : does not exist [ 273.981195][ T5721] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 273.997030][ T5721] usb 7-1: USB disconnect, device number 13 [ 274.348599][ T4735] usb 4-1: USB disconnect, device number 40 [ 274.797188][ T9406] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 274.832774][ T4731] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 274.896579][ T9408] loop3: detected capacity change from 0 to 64 [ 275.045926][ T4731] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 275.062958][ T4731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.071541][ T4731] usb 1-1: Product: syz [ 275.075877][ T4731] usb 1-1: Manufacturer: syz [ 275.090829][ T4731] usb 1-1: SerialNumber: syz [ 275.101141][ T4731] usb 1-1: config 0 descriptor?? [ 275.112092][ T4731] ch341 1-1:0.0: ch341-uart converter detected [ 275.266844][ T4332] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 275.470213][ T4332] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.481536][ T4332] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 275.493740][ T4332] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 275.503731][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 275.511839][ T4332] usb 7-1: SerialNumber: syz [ 275.521219][ T4332] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 275.528423][ T4332] usb-storage 7-1:1.0: USB Mass Storage device detected [ 275.537494][ T4332] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 275.566891][ T4735] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 275.766941][ T4735] usb 5-1: Using ep0 maxpacket: 16 [ 275.782468][ T4735] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.792767][ T4735] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.805499][ T4735] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.814711][ T4735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.822783][ T4735] usb 5-1: Product: syz [ 275.827062][ T4735] usb 5-1: Manufacturer: syz [ 275.831723][ T4735] usb 5-1: SerialNumber: syz [ 276.045840][ T4735] usb 5-1: 0:2 : does not exist [ 276.060607][ T4735] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 276.086157][ T4735] usb 5-1: USB disconnect, device number 34 [ 276.174978][ T9437] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 276.256001][ T9439] loop3: detected capacity change from 0 to 64 [ 276.325012][ T4731] ch341-uart ttyUSB0: failed to read break control: -71 [ 276.339857][ T4731] ch341-uart: probe of ttyUSB0 failed with error -71 [ 276.349748][ T4731] usb 1-1: USB disconnect, device number 41 [ 276.360079][ T4731] ch341 1-1:0.0: device disconnected [ 276.658356][ T9450] loop4: detected capacity change from 0 to 16 [ 276.667443][ T9450] erofs: (device loop4): mounted with root inode @ nid 36. [ 276.684114][ T9450] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 276.694728][ T9450] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 276.706462][ T9450] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 276.807228][ T4735] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.997051][ T4735] usb 4-1: Using ep0 maxpacket: 8 [ 277.013649][ T4735] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 277.021958][ T4735] usb 4-1: config 2 has no interface number 0 [ 277.028683][ T4735] usb 4-1: config 2 interface 31 has no altsetting 0 [ 277.040570][ T4735] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 277.049854][ T4735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.061333][ T4735] usb 4-1: Product: syz [ 277.065643][ T4735] usb 4-1: Manufacturer: syz [ 277.070363][ T4735] usb 4-1: SerialNumber: syz [ 277.106908][ T4332] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 277.289069][ T4332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.305216][ T4332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.318210][ T4332] usb 5-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 277.331343][ T4332] usb 5-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 277.345414][ T4332] usb 5-1: config 1 interface 0 has no altsetting 0 [ 277.356249][ T9466] loop0: detected capacity change from 0 to 64 [ 277.364506][ T4332] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.373938][ T4332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.382055][ T4332] usb 5-1: Product: syz [ 277.386512][ T4332] usb 5-1: Manufacturer: syz [ 277.391213][ T4332] usb 5-1: SerialNumber: syz [ 277.460138][ T9468] loop0: detected capacity change from 0 to 1024 [ 277.468983][ T9468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 277.488170][ T4735] ch9200: probe of 4-1:2.31 failed with error -22 [ 277.497355][ T9468] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 277.498699][ T4735] usb 4-1: USB disconnect, device number 41 [ 277.515676][ T9468] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.1807: missing EA_INODE flag [ 277.532793][ T9468] EXT4-fs (loop0): Remounting filesystem read-only [ 277.539903][ T9468] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1807: error while reading EA inode 11 err=-117 [ 277.554646][ T9468] EXT4-fs (loop0): Remounting filesystem read-only [ 277.561582][ T9468] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 277.577427][ T9468] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.1807: missing EA_INODE flag [ 277.595895][ T9468] EXT4-fs (loop0): Remounting filesystem read-only [ 277.602955][ T9468] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1807: error while reading EA inode 11 err=-117 [ 277.616213][ T9468] EXT4-fs (loop0): Remounting filesystem read-only [ 277.622006][ T4332] usb 5-1: USB disconnect, device number 35 [ 277.661044][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 277.970670][ T4332] usb 7-1: USB disconnect, device number 14 [ 278.264305][ T9477] loop0: detected capacity change from 0 to 65536 [ 278.310356][ T9477] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 278.319278][ T9477] XFS (loop0): Mounting V5 Filesystem [ 278.393349][ T9477] XFS (loop0): Ending clean mount [ 278.407980][ T4731] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 278.409973][ T9477] XFS (loop0): Quotacheck needed: Please wait. [ 278.486153][ T9477] XFS (loop0): Quotacheck: Done. [ 278.595003][ T4270] XFS (loop0): Unmounting Filesystem [ 278.648811][ T4731] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.669734][ T4731] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.704984][ T4731] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 278.760094][ T4731] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 278.804305][ T4731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 278.829332][ T4731] usb 4-1: SerialNumber: syz [ 279.056231][ T4731] usb 4-1: 0:2 : does not exist [ 279.073565][ T4731] usb 4-1: unit 5 not found! [ 279.104063][ T4731] usb 4-1: USB disconnect, device number 42 [ 279.486943][ T4332] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 279.615774][ T9530] loop4: detected capacity change from 0 to 32768 [ 279.625182][ T4762] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 279.633756][ T9530] (syz.4.1828,9530,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.647767][ T9530] (syz.4.1828,9530,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 279.673176][ T9530] JBD2: Ignoring recovery information on journal [ 279.711191][ T4332] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.715200][ T9530] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 279.736856][ T4332] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 279.761029][ T4332] usb 7-1: too many endpoints for config 1 interface 0 altsetting 90: 89, using maximum allowed: 30 [ 279.778051][ T4332] usb 7-1: config 1 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 279.779231][ T9530] [ 279.793422][ T4332] usb 7-1: config 1 interface 0 has no altsetting 0 [ 279.793450][ T9530] ====================================================== [ 279.793459][ T9530] WARNING: possible circular locking dependency detected [ 279.804709][ T4332] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.807073][ T9530] syzkaller #0 Not tainted [ 279.807083][ T9530] ------------------------------------------------------ [ 279.807091][ T9530] syz.4.1828/9530 is trying to acquire lock: [ 279.821949][ T4332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.823257][ T9530] ffff88805144d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 [ 279.833667][ T4332] usb 7-1: Product: syz [ 279.834702][ T9530] ){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 279.868671][ T9530] [ 279.868671][ T9530] but task is already holding lock: [ 279.876043][ T9530] ffff888073bb0660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 279.887039][ T9530] [ 279.887039][ T9530] which lock already depends on the new lock. [ 279.887039][ T9530] [ 279.897441][ T9530] [ 279.897441][ T9530] the existing dependency chain (in reverse order) is: [ 279.906454][ T9530] [ 279.906454][ T9530] -> #7 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 279.915322][ T9530] down_write+0x36/0x60 [ 279.920020][ T9530] ocfs2_lock_global_qf+0x1e5/0x270 [ 279.925745][ T9530] ocfs2_acquire_dquot+0x2a0/0xb10 [ 279.931385][ T9530] dqget+0x778/0xeb0 [ 279.935805][ T9530] __dquot_initialize+0x3b6/0xcb0 [ 279.941358][ T9530] ocfs2_get_init_inode+0x138/0x1b0 [ 279.947089][ T9530] ocfs2_symlink+0xc09/0x2650 [ 279.952300][ T9530] vfs_symlink+0x247/0x3d0 [ 279.957244][ T9530] do_symlinkat+0x1ae/0x3f0 [ 279.962277][ T9530] __x64_sys_symlink+0x7a/0x90 [ 279.967568][ T9530] do_syscall_64+0x4c/0xa0 [ 279.972512][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.978931][ T9530] [ 279.978931][ T9530] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 279.989544][ T9530] down_write+0x36/0x60 [ 279.994231][ T9530] ocfs2_lock_global_qf+0x1c7/0x270 [ 279.999986][ T9530] ocfs2_acquire_dquot+0x2a0/0xb10 [ 280.005637][ T9530] dqget+0x778/0xeb0 [ 280.010057][ T9530] __dquot_initialize+0x3b6/0xcb0 [ 280.015693][ T9530] ocfs2_get_init_inode+0x138/0x1b0 [ 280.021419][ T9530] ocfs2_symlink+0xc09/0x2650 [ 280.026622][ T9530] vfs_symlink+0x247/0x3d0 [ 280.031564][ T9530] do_symlinkat+0x1ae/0x3f0 [ 280.036598][ T9530] __x64_sys_symlink+0x7a/0x90 [ 280.041888][ T9530] do_syscall_64+0x4c/0xa0 [ 280.046832][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.053249][ T9530] [ 280.053249][ T9530] -> #5 (&dquot->dq_lock){+.+.}-{3:3}: [ 280.060909][ T9530] __mutex_lock+0x120/0xaf0 [ 280.066034][ T9530] dquot_commit+0x5a/0x410 [ 280.070977][ T9530] ext4_write_dquot+0x1f0/0x360 [ 280.076364][ T9530] mark_all_dquot_dirty+0xf9/0x400 [ 280.082010][ T9530] __dquot_alloc_space+0x5fc/0xe60 [ 280.087655][ T9530] ext4_mb_new_blocks+0xf74/0x4720 [ 280.093301][ T9530] ext4_ext_map_blocks+0x18de/0x66d0 [ 280.099148][ T9530] ext4_map_blocks+0x9d1/0x1b60 [ 280.104532][ T9530] ext4_alloc_file_blocks+0x370/0xb50 [ 280.110430][ T9530] ext4_fallocate+0x9e5/0x1ff0 [ 280.115721][ T9530] vfs_fallocate+0x584/0x6f0 [ 280.120846][ T9530] __x64_sys_fallocate+0xbd/0x100 [ 280.126395][ T9530] do_syscall_64+0x4c/0xa0 [ 280.131337][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.137766][ T9530] [ 280.137766][ T9530] -> #4 (&ei->i_data_sem){++++}-{3:3}: [ 280.145440][ T9530] down_write+0x36/0x60 [ 280.150158][ T9530] ext4_truncate+0x987/0x1230 [ 280.155377][ T9530] ext4_setattr+0x10cb/0x19f0 [ 280.160592][ T9530] notify_change+0xc74/0xf40 [ 280.165710][ T9530] do_truncate+0x197/0x220 [ 280.170657][ T9530] do_sys_ftruncate+0x312/0x3c0 [ 280.176039][ T9530] do_syscall_64+0x4c/0xa0 [ 280.180989][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.187416][ T9530] [ 280.187416][ T9530] -> #3 (jbd2_handle){++++}-{0:0}: [ 280.194730][ T9530] start_this_handle+0x1f49/0x2150 [ 280.200379][ T9530] jbd2__journal_start+0x2b7/0x5a0 [ 280.206025][ T9530] jbd2_journal_start+0x26/0x30 [ 280.211434][ T9530] ocfs2_start_trans+0x372/0x6c0 [ 280.216918][ T9530] ocfs2_modify_bh+0xe5/0x460 [ 280.222117][ T9530] ocfs2_local_read_info+0x13b1/0x16e0 [ 280.228100][ T9530] dquot_load_quota_sb+0x756/0xac0 [ 280.233740][ T9530] dquot_load_quota_inode+0x2d8/0x5d0 [ 280.239637][ T9530] ocfs2_enable_quotas+0x1c3/0x440 [ 280.245290][ T9530] ocfs2_fill_super+0x409f/0x4d00 [ 280.250851][ T9530] mount_bdev+0x287/0x3c0 [ 280.255710][ T9530] legacy_get_tree+0xe6/0x180 [ 280.260920][ T9530] vfs_get_tree+0x88/0x270 [ 280.265865][ T9530] do_new_mount+0x24a/0xa40 [ 280.270897][ T9530] __se_sys_mount+0x2d6/0x3c0 [ 280.276101][ T9530] do_syscall_64+0x4c/0xa0 [ 280.281051][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.287479][ T9530] [ 280.287479][ T9530] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 280.296087][ T9530] down_read+0x42/0x2d0 [ 280.300789][ T9530] ocfs2_start_trans+0x366/0x6c0 [ 280.306299][ T9530] ocfs2_modify_bh+0xe5/0x460 [ 280.311500][ T9530] ocfs2_local_read_info+0x13b1/0x16e0 [ 280.317483][ T9530] dquot_load_quota_sb+0x756/0xac0 [ 280.323140][ T9530] dquot_load_quota_inode+0x2d8/0x5d0 [ 280.329074][ T9530] ocfs2_enable_quotas+0x1c3/0x440 [ 280.334737][ T9530] ocfs2_fill_super+0x409f/0x4d00 [ 280.340302][ T9530] mount_bdev+0x287/0x3c0 [ 280.345176][ T9530] legacy_get_tree+0xe6/0x180 [ 280.350395][ T9530] vfs_get_tree+0x88/0x270 [ 280.355340][ T9530] do_new_mount+0x24a/0xa40 [ 280.360374][ T9530] __se_sys_mount+0x2d6/0x3c0 [ 280.365578][ T9530] do_syscall_64+0x4c/0xa0 [ 280.370529][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.376950][ T9530] [ 280.376950][ T9530] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 280.384436][ T9530] ocfs2_start_trans+0x267/0x6c0 [ 280.389918][ T9530] ocfs2_mknod+0xe6a/0x2350 [ 280.394952][ T9530] ocfs2_mkdir+0x1b6/0x4a0 [ 280.399897][ T9530] vfs_mkdir+0x387/0x570 [ 280.404660][ T9530] do_mkdirat+0x1d0/0x430 [ 280.409509][ T9530] __x64_sys_mkdir+0x6a/0x80 [ 280.414620][ T9530] do_syscall_64+0x4c/0xa0 [ 280.419580][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.425992][ T9530] [ 280.425992][ T9530] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 280.436512][ T9530] __lock_acquire+0x2cf8/0x7c50 [ 280.441893][ T9530] lock_acquire+0x1b4/0x490 [ 280.446935][ T9530] down_write+0x36/0x60 [ 280.451708][ T9530] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 280.458388][ T9530] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 280.465247][ T9530] ocfs2_lock_allocators+0x2f7/0x5b0 [ 280.471066][ T9530] ocfs2_extend_allocation+0x394/0x1840 [ 280.477231][ T9530] ocfs2_extend_no_holes+0x20b/0x490 [ 280.483048][ T9530] ocfs2_acquire_dquot+0x5e8/0xb10 [ 280.488682][ T9530] dqget+0x778/0xeb0 [ 280.493101][ T9530] dquot_set_dqblk+0x27/0xf90 [ 280.498303][ T9530] quota_setquota+0x4ac/0x530 [ 280.503504][ T9530] __se_sys_quotactl+0x295/0x6b0 [ 280.508972][ T9530] do_syscall_64+0x4c/0xa0 [ 280.513917][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.520343][ T9530] [ 280.520343][ T9530] other info that might help us debug this: [ 280.520343][ T9530] [ 280.530567][ T9530] Chain exists of: [ 280.530567][ T9530] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &ocfs2_quota_ip_alloc_sem_key [ 280.530567][ T9530] [ 280.550565][ T9530] Possible unsafe locking scenario: [ 280.550565][ T9530] [ 280.558011][ T9530] CPU0 CPU1 [ 280.563372][ T9530] ---- ---- [ 280.568746][ T9530] lock(&ocfs2_quota_ip_alloc_sem_key); [ 280.574384][ T9530] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 280.584199][ T9530] lock(&ocfs2_quota_ip_alloc_sem_key); [ 280.592368][ T9530] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 280.599689][ T9530] [ 280.599689][ T9530] *** DEADLOCK *** [ 280.599689][ T9530] [ 280.607845][ T9530] 4 locks held by syz.4.1828/9530: [ 280.613093][ T9530] #0: ffff88805e1b00e0 (&type->s_umount_key#53){++++}-{3:3}, at: user_get_super+0x118/0x240 [ 280.623311][ T9530] #1: ffff88807043a0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 280.633333][ T9530] #2: ffff888073bb09c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 280.646317][ T9530] #3: ffff888073bb0660 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 280.657640][ T9530] [ 280.657640][ T9530] stack backtrace: [ 280.663549][ T9530] CPU: 0 PID: 9530 Comm: syz.4.1828 Not tainted syzkaller #0 [ 280.670941][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.681012][ T9530] Call Trace: [ 280.684301][ T9530] [ 280.687252][ T9530] dump_stack_lvl+0x168/0x22e [ 280.691954][ T9530] ? load_image+0x3b0/0x3b0 [ 280.696477][ T9530] ? show_regs_print_info+0x12/0x12 [ 280.701686][ T9530] ? print_circular_bug+0x12b/0x1a0 [ 280.706908][ T9530] check_noncircular+0x274/0x310 [ 280.711860][ T9530] ? add_chain_block+0x940/0x940 [ 280.716814][ T9530] ? lockdep_lock+0xdc/0x1e0 [ 280.721416][ T9530] ? verify_lock_unused+0x140/0x140 [ 280.726623][ T9530] ? _find_first_zero_bit+0xcf/0x100 [ 280.731924][ T9530] __lock_acquire+0x2cf8/0x7c50 [ 280.736793][ T9530] ? verify_lock_unused+0x140/0x140 [ 280.742005][ T9530] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 280.747646][ T9530] ? do_raw_spin_lock+0x11d/0x280 [ 280.752685][ T9530] ? mutex_unlock+0x10/0x10 [ 280.757199][ T9530] ? __rwlock_init+0x140/0x140 [ 280.761981][ T9530] ? __rwlock_init+0x140/0x140 [ 280.766757][ T9530] ? do_raw_spin_unlock+0x11d/0x230 [ 280.771987][ T9530] lock_acquire+0x1b4/0x490 [ 280.776500][ T9530] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 280.782841][ T9530] ? __might_sleep+0xd0/0xd0 [ 280.787448][ T9530] ? mark_lock+0x94/0x320 [ 280.791790][ T9530] ? read_lock_is_recursive+0x10/0x10 [ 280.797176][ T9530] ? mark_lock+0x94/0x320 [ 280.801526][ T9530] ? __lock_acquire+0x13c0/0x7c50 [ 280.806560][ T9530] ? lock_chain_count+0x20/0x20 [ 280.811423][ T9530] down_write+0x36/0x60 [ 280.815605][ T9530] ? ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 280.821938][ T9530] ocfs2_reserve_local_alloc_bits+0x122/0x2670 [ 280.828099][ T9530] ? _raw_spin_unlock+0x40/0x40 [ 280.832974][ T9530] ? stack_trace_save+0x98/0xe0 [ 280.837834][ T9530] ? verify_lock_unused+0x140/0x140 [ 280.843047][ T9530] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 280.849725][ T9530] ? kasan_set_track+0x60/0x70 [ 280.854498][ T9530] ? kasan_set_track+0x4b/0x70 [ 280.859267][ T9530] ? __kasan_kmalloc+0x8e/0xa0 [ 280.864041][ T9530] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 280.870485][ T9530] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 280.875962][ T9530] ? ocfs2_extend_allocation+0x394/0x1840 [ 280.881693][ T9530] ? ocfs2_extend_no_holes+0x20b/0x490 [ 280.887163][ T9530] ? ocfs2_acquire_dquot+0x5e8/0xb10 [ 280.892475][ T9530] ? dqget+0x778/0xeb0 [ 280.896549][ T9530] ? dquot_set_dqblk+0x27/0xf90 [ 280.901405][ T9530] ? quota_setquota+0x4ac/0x530 [ 280.906262][ T9530] ? __se_sys_quotactl+0x295/0x6b0 [ 280.911391][ T9530] ? do_syscall_64+0x4c/0xa0 [ 280.915994][ T9530] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 280.922073][ T9530] ? __lock_acquire+0x7c50/0x7c50 [ 280.927111][ T9530] ? do_raw_spin_lock+0x11d/0x280 [ 280.932175][ T9530] ? __rwlock_init+0x140/0x140 [ 280.936964][ T9530] ? do_raw_spin_unlock+0x11d/0x230 [ 280.942176][ T9530] ? ocfs2_alloc_should_use_local+0x16b/0x370 [ 280.948257][ T9530] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 280.954602][ T9530] ? ocfs2_reserve_clusters+0x30/0x30 [ 280.959992][ T9530] ? lock_chain_count+0x20/0x20 [ 280.964853][ T9530] ? rcu_is_watching+0x11/0xa0 [ 280.969633][ T9530] ? ocfs2_num_free_extents+0x2fa/0x620 [ 280.975195][ T9530] ? ocfs2_validate_extent_block+0x5e0/0x5e0 [ 280.981188][ T9530] ? ocfs2_read_blocks_sync+0xc50/0xc50 [ 280.986759][ T9530] ? stack_trace_save+0x98/0xe0 [ 280.991624][ T9530] ocfs2_lock_allocators+0x2f7/0x5b0 [ 280.996933][ T9530] ? _ocfs2_clear_bit+0x30/0x30 [ 281.001800][ T9530] ? ocfs2_read_inode_block+0x11a/0x180 [ 281.007361][ T9530] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 281.013355][ T9530] ? ocfs2_acquire_dquot+0x2e8/0xb10 [ 281.018645][ T9530] ? dquot_set_dqblk+0x27/0xf90 [ 281.023515][ T9530] ? quota_setquota+0x4ac/0x530 [ 281.028371][ T9530] ? __se_sys_quotactl+0x295/0x6b0 [ 281.033577][ T9530] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.039658][ T9530] ocfs2_extend_allocation+0x394/0x1840 [ 281.045217][ T9530] ? __lock_acquire+0x13c0/0x7c50 [ 281.050260][ T9530] ? ocfs2_extend_no_holes+0x490/0x490 [ 281.055750][ T9530] ? kasan_quarantine_put+0xd4/0x220 [ 281.061041][ T9530] ? lockdep_hardirqs_on+0x94/0x140 [ 281.066275][ T9530] ? slab_free_freelist_hook+0x131/0x1a0 [ 281.071931][ T9530] ? ocfs2_allocate_extend_trans+0x640/0x640 [ 281.077945][ T9530] ? find_tree_dqentry+0xbb1/0xf30 [ 281.083075][ T9530] ? ocfs2_qinfo_unlock+0xa4/0x140 [ 281.088203][ T9530] ocfs2_extend_no_holes+0x20b/0x490 [ 281.093501][ T9530] ? ocfs2_zero_extend+0x2950/0x2950 [ 281.098939][ T9530] ? do_raw_spin_unlock+0x11d/0x230 [ 281.104183][ T9530] ? _raw_spin_unlock+0x24/0x40 [ 281.109053][ T9530] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 281.114270][ T9530] ocfs2_acquire_dquot+0x5e8/0xb10 [ 281.119399][ T9530] ? ocfs2_destroy_dquot+0x40/0x40 [ 281.124515][ T9530] dqget+0x778/0xeb0 [ 281.128419][ T9530] dquot_set_dqblk+0x27/0xf90 [ 281.133107][ T9530] quota_setquota+0x4ac/0x530 [ 281.137800][ T9530] ? quota_getnextquota+0x450/0x450 [ 281.143018][ T9530] ? bpf_lsm_capable+0x5/0x10 [ 281.147710][ T9530] ? do_quotactl+0x4f3/0x710 [ 281.152327][ T9530] __se_sys_quotactl+0x295/0x6b0 [ 281.157274][ T9530] ? __x64_sys_quotactl+0xa0/0xa0 [ 281.162322][ T9530] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 281.168359][ T9530] ? lock_chain_count+0x20/0x20 [ 281.173250][ T9530] ? lockdep_hardirqs_on+0x94/0x140 [ 281.178735][ T9530] do_syscall_64+0x4c/0xa0 [ 281.183172][ T9530] ? clear_bhb_loop+0x60/0xb0 [ 281.187879][ T9530] ? clear_bhb_loop+0x60/0xb0 [ 281.192571][ T9530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.198480][ T9530] RIP: 0033:0x7fa4a198f749 [ 281.202926][ T9530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.222544][ T9530] RSP: 002b:00007fa4a27ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 281.230963][ T9530] RAX: ffffffffffffffda RBX: 00007fa4a1be5fa0 RCX: 00007fa4a198f749 [ 281.238945][ T9530] RDX: 000000000000ee00 RSI: 0000200000000100 RDI: ffffffff80000800 [ 281.246924][ T9530] RBP: 00007fa4a1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 281.254982][ T9530] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 281.262964][ T9530] R13: 00007fa4a1be6038 R14: 00007fa4a1be5fa0 R15: 00007fff8dc26d48 [ 281.270944][ T9530] [ 281.273974][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.280014][ C0] sched: RT throttling activated [ 281.326111][ T4332] usb 7-1: Manufacturer: syz [ 281.328784][ T4762] usb 1-1: config 0 has an invalid interface number: 82 but max is 0 [ 281.339114][ T4332] usb 7-1: SerialNumber: syz [ 281.346869][ T4762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.367250][ T4762] usb 1-1: config 0 has no interface number 0 [ 281.373385][ T4762] usb 1-1: config 0 interface 82 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 281.409585][ T4762] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 281.421211][ T4277] ocfs2: Unmounting device (7,4) on (node local) [ 281.432671][ T4762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.441017][ T4762] usb 1-1: Product: syz [ 281.445210][ T4762] usb 1-1: Manufacturer: syz [ 281.476930][ T4762] usb 1-1: SerialNumber: syz [ 281.487598][ T4762] usb 1-1: config 0 descriptor?? [ 281.518106][ T4762] cdc_ether 1-1:0.82: skipping garbage [ 281.523678][ T4762] usb 1-1: bad CDC descriptors [ 281.529251][ T4762] usb 1-1: unsupported MDLM descriptors [ 281.535158][ T4762] cdc_acm 1-1:0.82: skipping garbage [ 281.571287][ T4332] usb 7-1: USB disconnect, device number 15 [ 281.696568][ T4731] usb 1-1: USB disconnect, device number 42