last executing test programs: 1m36.391357013s ago: executing program 1 (id=5640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 1m36.089605583s ago: executing program 1 (id=5642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c0005"], 0xec}}, 0x0) 1m35.978388871s ago: executing program 1 (id=5643): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1m34.633950286s ago: executing program 1 (id=5661): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc33, &(0x7f0000001780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m34.065512436s ago: executing program 1 (id=5669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m33.128672838s ago: executing program 1 (id=5686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00E\b\x00'], 0x0, 0x2}, 0x94) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090244000101812002090400c303020600030524ab76"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 1m32.516032427s ago: executing program 32 (id=5686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00E\b\x00'], 0x0, 0x2}, 0x94) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090244000101812002090400c303020600030524ab76"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 18.6205859s ago: executing program 5 (id=6645): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x3, 0x8, 0x0, @SEQ_CONTROLLER=0xfe}) 18.505021263s ago: executing program 5 (id=6649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60) 18.325574016s ago: executing program 5 (id=6654): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x3ec, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3f2, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x4000000) 18.139679233s ago: executing program 5 (id=6660): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 17.825165162s ago: executing program 5 (id=6666): r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0), 0x8) 16.432611215s ago: executing program 5 (id=6687): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x20) 15.951071145s ago: executing program 33 (id=6687): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x20) 4.796862996s ago: executing program 2 (id=6799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 3.251130845s ago: executing program 4 (id=6812): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f000000ac40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000002280)={{}, "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"}) 3.160381029s ago: executing program 0 (id=6813): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x3, 0x4) 3.030125414s ago: executing program 0 (id=6814): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xb5, 0xa, 0x31384142, 0x8, 0x0, 0x7, 0xa, 0x800, 0x1, 0x6, 0x0, 0x3}}) 2.882707609s ago: executing program 0 (id=6815): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe2, '\x00', 0x0, 0x0}, 0x50) 2.696134614s ago: executing program 0 (id=6817): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pimreg1\x00', {0x2, 0x4e21}}) 2.162182456s ago: executing program 0 (id=6820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 1.914730091s ago: executing program 0 (id=6821): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5"], 0x0) 1.684088109s ago: executing program 3 (id=6823): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) 1.643542815s ago: executing program 2 (id=6824): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x20081, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000002c0)={0x8, 0x5}) 1.453025037s ago: executing program 3 (id=6825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a30020000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000640ffffff0008000340000000084c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000020000380"], 0xe0}}, 0x4080) 1.374254349s ago: executing program 2 (id=6826): sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2e}}}}}, 0x28}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x11, 0x7efffeff00000000) 570.057477ms ago: executing program 3 (id=6835): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000092101ef7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 420.607191ms ago: executing program 2 (id=6836): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 260.742536ms ago: executing program 4 (id=6837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xce}}}, &(0x7f0000000080)='GPL\x00'}, 0x90) 0s ago: executing program 4 (id=6838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x35, 0x107, 0xfffffffe, 0x25dfdbfd, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) kernel console output (not intermixed with test programs): idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 665.498948][ T13] bridge_slave_1: left allmulticast mode [ 665.528348][ T13] bridge_slave_1: left promiscuous mode [ 665.575964][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.688201][ T13] bridge_slave_0: left allmulticast mode [ 665.693891][ T13] bridge_slave_0: left promiscuous mode [ 665.758479][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.101788][ T6176] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 666.188859][T15713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 666.202205][T15713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 666.212702][T15713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 666.226043][T15713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 666.235904][T15713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 666.276367][T19696] openvswitch: netlink: EtherType 50a is less than min 600 [ 666.332036][ T6176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 666.332137][T19698] kAFS: unable to lookup cell 'mS²jQ€·”œ­=È A4Z1Ë¡8' [ 666.349781][ T6176] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D [ 666.381602][ T6176] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 666.401329][ T6176] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 666.414436][ T6176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.423863][ T6176] usb 1-1: Product: syz [ 666.428441][ T6176] usb 1-1: Manufacturer: syz [ 666.433498][ T6176] usb 1-1: SerialNumber: syz [ 666.443315][ T6176] usb 1-1: config 0 descriptor?? [ 666.709397][ T6176] usb 1-1: USB disconnect, device number 5 [ 666.729282][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.755680][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.768454][ T13] bond0 (unregistering): Released all slaves [ 666.772943][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.790239][ T13] bond1 (unregistering): Released all slaves [ 666.806862][ T982] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 666.848643][T19690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5706'. [ 666.858067][T19690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5706'. [ 667.009168][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 667.022539][ T982] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 667.042231][ T982] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 667.066997][ T982] usb 3-1: config 1 has no interface number 0 [ 667.076846][ T982] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 667.107828][ T982] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.136641][T19692] vxcan1 speed is unknown, defaulting to 1000 [ 667.158523][ T982] usb 3-1: config 1 interface 105 has no altsetting 0 [ 667.174839][ T982] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 667.196943][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.238069][ T982] usb 3-1: Product: syz [ 667.264520][ T982] usb 3-1: Manufacturer: syz [ 667.280857][ T982] usb 3-1: SerialNumber: syz [ 667.566150][ T982] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 667.768344][ T982] usb 3-1: USB disconnect, device number 4 [ 668.454886][ T5184] Bluetooth: hci3: command tx timeout [ 668.477184][T19753] loop4: detected capacity change from 0 to 1024 [ 668.901596][ T13] hsr_slave_0: left promiscuous mode [ 668.932739][ T13] hsr_slave_1: left promiscuous mode [ 668.953218][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.994375][T19775] QAT: failed to copy from user cfg_data. [ 669.012990][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.113747][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5742'. [ 669.123142][T19780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5742'. [ 669.244961][ T6142] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 669.445161][ T6142] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 669.466719][ T6142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.489011][ T6142] usb 4-1: Product: syz [ 669.502559][ T6142] usb 4-1: Manufacturer: syz [ 669.511945][ T6142] usb 4-1: SerialNumber: syz [ 669.528757][ T6142] usb 4-1: config 0 descriptor?? [ 669.727984][ T13] team0 (unregistering): Port device team_slave_1 removed [ 669.770406][ T6142] hso 4-1:0.0: Failed to find BULK IN ep [ 669.778075][ T13] team0 (unregistering): Port device team_slave_0 removed [ 669.992676][ T982] usb 4-1: USB disconnect, device number 9 [ 670.226701][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5749'. [ 670.337875][ T30] audit: type=1326 audit(1756889345.505:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19796 comm="syz.0.5750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x0 [ 670.547619][T19692] chnl_net:caif_netlink_parms(): no params data found [ 670.633193][ T6244] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 670.687052][ T5184] Bluetooth: hci3: command tx timeout [ 670.850123][ T6244] usb 3-1: config 7 interface 0 has no altsetting 0 [ 670.928839][ T6244] usb 3-1: string descriptor 0 read error: -22 [ 670.948688][ T6244] usb 3-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 670.996934][ T6244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.057758][ T6244] usb 3-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 671.084893][T19692] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.092046][T19692] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.108715][ T6244] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 671.133381][T19692] bridge_slave_0: entered allmulticast mode [ 671.168892][ T6244] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 671.178450][T19692] bridge_slave_0: entered promiscuous mode [ 671.210099][ T6244] usb 3-1: media controller created [ 671.210194][T19692] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.227043][T19830] netlink: 'syz.0.5761': attribute type 1 has an invalid length. [ 671.253838][T19692] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.274107][T19692] bridge_slave_1: entered allmulticast mode [ 671.301925][T19692] bridge_slave_1: entered promiscuous mode [ 671.344507][ T6244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.605457][T19692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.682557][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5766'. [ 671.693333][T19692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.855791][T19853] program syz.4.5768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.908077][ T6244] usb 3-1: USB disconnect, device number 5 [ 671.910460][T19692] team0: Port device team_slave_0 added [ 671.957148][T19692] team0: Port device team_slave_1 added [ 672.106284][T19692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.118078][T19692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.199589][T19692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.214135][T19692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.274345][T19692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.310542][T19834] loop3: detected capacity change from 0 to 32768 [ 672.325658][T19692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.414811][T19867] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5774'. [ 672.425502][T19867] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5774'. [ 672.434572][T19867] netlink: 'syz.0.5774': attribute type 5 has an invalid length. [ 672.443728][T19867] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5774'. [ 672.456548][T19834] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 672.528876][T19873] loop4: detected capacity change from 0 to 512 [ 672.537317][T19873] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 672.592652][T19834] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 73 [ 672.622113][T19834] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 672.649053][T19873] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5776: bg 0: block 384: padding at end of block bitmap is not set [ 672.701328][T19834] OCFS2: Returning error to the calling process. [ 672.709199][T19873] EXT4-fs (loop4): Remounting filesystem read-only [ 672.715870][T19873] EXT4-fs (loop4): 1 truncate cleaned up [ 672.721746][T19834] (syz.3.5762,19834,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -5 [ 672.753563][T19692] hsr_slave_0: entered promiscuous mode [ 672.760182][T19692] hsr_slave_1: entered promiscuous mode [ 672.772656][T19873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.787975][T19883] loop0: detected capacity change from 0 to 16 [ 672.804428][T19834] (syz.3.5762,19834,0):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -5 [ 672.828257][T19883] erofs (device loop0): mounted with root inode @ nid 36. [ 672.837086][T19834] (syz.3.5762,19834,0):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -5 [ 672.855892][T19692] debugfs: 'hsr0' already exists in 'hsr' [ 672.867574][T19834] (syz.3.5762,19834,1):ocfs2_mknod:353 ERROR: status = -5 [ 672.871121][T19692] Cannot create hsr debugfs directory [ 672.890008][T19834] (syz.3.5762,19834,1):ocfs2_mknod:505 ERROR: status = -5 [ 672.897152][T19834] (syz.3.5762,19834,1):ocfs2_mkdir:661 ERROR: status = -5 [ 672.912488][ T5184] Bluetooth: hci3: command tx timeout [ 673.041376][T19888] netlink: 'syz.0.5782': attribute type 1 has an invalid length. [ 673.044377][ T6098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.049553][T19888] netlink: 'syz.0.5782': attribute type 1 has an invalid length. [ 673.084948][ T6090] ocfs2: Unmounting device (7,3) on (node local) [ 673.256533][T19895] netlink: 'syz.0.5786': attribute type 1 has an invalid length. [ 673.285627][T19896] loop2: detected capacity change from 0 to 164 [ 673.338034][T19896] Unsupported NM flag settings (8) [ 673.573172][T19904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5789'. [ 673.676683][T19904] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 673.784835][T19904] bond1: entered allmulticast mode [ 673.790481][T19904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.861818][ T6244] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 673.925104][T19918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5793'. [ 673.955319][T19692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 674.051527][ T6244] usb 5-1: Using ep0 maxpacket: 32 [ 674.063108][ T6244] usb 5-1: config 0 has an invalid interface number: 66 but max is 1 [ 674.071770][ T6244] usb 5-1: config 0 has no interface number 1 [ 674.096986][ T6244] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 674.125311][ T6244] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 674.176200][ T6244] usb 5-1: too many endpoints for config 0 interface 66 altsetting 107: 137, using maximum allowed: 30 [ 674.198302][ T6244] usb 5-1: config 0 interface 66 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 137 [ 674.246538][ T6244] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.268126][ T6244] usb 5-1: config 0 interface 66 has no altsetting 0 [ 674.279138][ T6244] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 674.288184][ T6244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 674.319893][ T6244] usb 5-1: SerialNumber: syz [ 674.345306][T19692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 674.345823][ T6244] usb 5-1: config 0 descriptor?? [ 674.365438][ T6244] usb-storage 5-1:0.0: USB Mass Storage device detected [ 674.393756][T19692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 674.400294][ T6244] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 674.439047][ T6189] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 674.483987][T19692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 674.524853][ T6142] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 674.583803][ T6244] usb-storage 5-1:0.66: USB Mass Storage device detected [ 674.619130][ T6244] usb-storage 5-1:0.66: Quirks match for vid 152d pid 0539: 4000000 [ 674.667088][ T6189] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 674.688765][ T6189] usb 4-1: config 0 has no interface number 0 [ 674.700532][ T6189] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 674.704035][ T6142] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.743810][ T6244] usb 5-1: USB disconnect, device number 11 [ 674.755166][ T6189] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 674.770663][ T6189] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 674.784287][ T6142] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.802273][ T6189] usb 4-1: Product: syz [ 674.810070][ T6189] usb 4-1: Manufacturer: syz [ 674.821504][ T6189] usb 4-1: SerialNumber: syz [ 674.848381][ T6142] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 674.855201][ T6189] usb 4-1: config 0 descriptor?? [ 674.870101][T19692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.877733][ T6142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 674.884221][ T6189] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 674.886151][ T6142] usb 3-1: SerialNumber: syz [ 674.906954][T19692] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.925032][ T6189] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 674.940400][ T6189] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 674.950992][ T6142] usb 3-1: 0:2 : does not exist [ 674.966448][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.974728][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.994442][ T6189] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 675.037472][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.044664][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.075911][ T6189] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 675.088266][ T6189] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 675.139295][ T5184] Bluetooth: hci3: command tx timeout [ 675.158981][ T6189] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 675.188604][ T6189] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 675.204545][ T6189] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 675.216998][ T6189] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 675.269687][ T6189] usb 4-1: USB disconnect, device number 10 [ 675.314633][ T6189] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 675.417349][ T10] usb 3-1: USB disconnect, device number 6 [ 675.456244][ T6189] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 675.539493][ T6189] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 675.584537][ T6189] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 675.656945][ T6189] keyspan 4-1:0.107: device disconnected [ 675.702796][T19968] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 675.744407][T19968] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 675.994047][T19692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.141614][ T6244] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 676.367970][ T6244] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 676.376576][T19994] netlink: 'syz.0.5812': attribute type 1 has an invalid length. [ 676.389530][ T6244] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.422679][ T6244] usb 5-1: Product: syz [ 676.426862][ T6244] usb 5-1: Manufacturer: syz [ 676.450822][ T6244] usb 5-1: SerialNumber: syz [ 676.478023][ T6244] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 676.517301][ T5985] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 676.534328][ T30] audit: type=1326 audit(1756889351.295:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 676.635271][ T30] audit: type=1326 audit(1756889351.295:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 676.759930][ T30] audit: type=1326 audit(1756889351.332:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2b9590b07 code=0x7ffc0000 [ 676.860089][ T30] audit: type=1326 audit(1756889351.332:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb2b9590a7c code=0x7ffc0000 [ 676.946639][ T30] audit: type=1326 audit(1756889351.332:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb2b95909b4 code=0x7ffc0000 [ 677.053004][T19692] veth0_vlan: entered promiscuous mode [ 677.065480][ T5197] usb 5-1: USB disconnect, device number 12 [ 677.103714][ T30] audit: type=1326 audit(1756889351.332:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb2b95909b4 code=0x7ffc0000 [ 677.181907][ T30] audit: type=1326 audit(1756889351.332:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb2b958d84a code=0x7ffc0000 [ 677.182658][T19692] veth1_vlan: entered promiscuous mode [ 677.296010][ T30] audit: type=1326 audit(1756889351.342:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 677.398226][ T30] audit: type=1326 audit(1756889351.342:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19997 comm="syz.2.5813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 677.400474][T19692] veth0_macvtap: entered promiscuous mode [ 677.435538][T20023] loop3: detected capacity change from 0 to 256 [ 677.634973][T20025] syz_tun: left promiscuous mode [ 677.681156][T20025] bridge0: port 3(team0) entered disabled state [ 677.687617][T20025] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.693451][ T5985] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 677.694982][T20025] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.712715][ T5985] ath9k_htc: Failed to initialize the device [ 677.727066][ T5197] usb 5-1: ath9k_htc: USB layer deinitialized [ 677.856376][T20025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.887335][T20025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.905710][T20016] loop0: detected capacity change from 0 to 32768 [ 677.976040][T20016] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 678.046913][T20016] XFS (loop0): Ending clean mount [ 678.072740][T20016] XFS (loop0): Quotacheck needed: Please wait. [ 678.099440][T20025] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 678.151260][T20016] XFS (loop0): Quotacheck: Done. [ 678.156734][T20025] bond1: left allmulticast mode [ 678.172753][T20027] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 678.210166][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.229945][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.262441][T19692] veth1_macvtap: entered promiscuous mode [ 678.263516][ T6088] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 678.341946][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.390570][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.464290][T19692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.495504][T19692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.599576][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.620140][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.656817][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.697269][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.788421][T20056] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (8) [ 678.909446][ T982] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 678.929850][T20062] TCP: TCP_TX_DELAY enabled [ 678.973107][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.980941][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.030172][T20064] vivid-007: disconnect [ 679.047290][T20063] vivid-007: reconnect [ 679.087640][T19842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.101462][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 679.111981][T19842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.116493][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.179643][ T982] usb 3-1: config 0 has no interfaces? [ 679.196820][ T982] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 679.225463][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.271235][ T982] usb 3-1: Product: syz [ 679.271259][ T982] usb 3-1: Manufacturer: syz [ 679.271274][ T982] usb 3-1: SerialNumber: syz [ 679.279774][ T982] r8152-cfgselector 3-1: Unknown version 0x0000 [ 679.279797][ T982] r8152-cfgselector 3-1: config 0 descriptor?? [ 679.540469][T20084] netlink: 'syz.4.5846': attribute type 11 has an invalid length. [ 679.559360][T20084] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5846'. [ 679.664755][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5849'. [ 679.703095][T20094] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 679.722820][T20094] overlayfs: missing 'lowerdir' [ 679.803749][T20098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5853'. [ 679.935956][ T5985] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 680.106804][ T5985] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 680.139585][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 680.169921][ T5985] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 680.197070][ T5985] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 680.230151][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.251569][ T5985] usb 1-1: Product: syz [ 680.269912][ T5985] usb 1-1: Manufacturer: syz [ 680.274530][ T5985] usb 1-1: SerialNumber: syz [ 680.292602][ T5985] usb 1-1: config 0 descriptor?? [ 680.315251][T20092] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 680.334238][T20092] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 680.374814][ T5985] usb 1-1: ucan: probing device on interface #0 [ 680.409681][T20116] overlayfs: workdir and upperdir must be separate subtrees [ 680.509493][T20096] loop4: detected capacity change from 0 to 32768 [ 680.564526][T20096] JFS: metapage_get_blocks failed [ 680.585305][T20096] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 680.585305][T20096] [ 680.609883][T20096] ERROR: (device loop4): remounting filesystem as read-only [ 680.731157][ T113] blkno = 8ed2c, nblocks = 1 [ 680.740923][ T113] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 680.740923][ T113] [ 680.803980][ T5985] usb 1-1: ucan: failed to retrieve device info [ 680.811711][ T5985] usb 1-1: ucan: probe failed; try to update the device firmware [ 680.833657][ T5985] usb 1-1: USB disconnect, device number 6 [ 681.214282][T20126] loop3: detected capacity change from 0 to 32768 [ 681.222508][T20126] XFS: noikeep mount option is deprecated. [ 681.241581][T20126] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 681.339618][T20126] XFS (loop3): Ending clean mount [ 681.382917][T20126] XFS (loop3): Quotacheck needed: Please wait. [ 681.553172][T20126] XFS (loop3): Quotacheck: Done. [ 681.702491][ T30] audit: type=1326 audit(1756889356.140:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20157 comm="syz.0.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 681.705118][T20152] loop5: detected capacity change from 0 to 32768 [ 681.743603][T20152] btrfs: Deprecated parameter 'usebackuproot' [ 681.762200][ T6090] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 681.766890][T20152] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 681.807443][T20152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5877 (20152) [ 681.918538][T20152] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 681.941336][ T982] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 681.996388][T20152] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 682.200405][ T13] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32b4fbab level 0 [ 682.319752][T20152] BTRFS error (device loop5): failed to load root extent [ 682.326829][T20152] BTRFS warning (device loop5): try to load backup roots slot 1 [ 682.476602][T20152] BTRFS info (device loop5): setting nodatasum [ 682.519576][T20152] BTRFS info (device loop5): setting nodatacow [ 682.541497][T20152] BTRFS info (device loop5): turning on flush-on-commit [ 682.573115][T20152] BTRFS info (device loop5): turning on sync discard [ 682.595987][T20152] BTRFS info (device loop5): enabling free space tree [ 682.602775][T20152] BTRFS info (device loop5): force clearing of disk cache [ 682.626028][T20152] BTRFS info (device loop5): trying to use backup root at mount time [ 682.756851][T20152] btrfs: Deprecated parameter 'usebackuproot' [ 682.779529][T20152] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 682.797812][T20156] loop4: detected capacity change from 0 to 32768 [ 682.808812][T20152] BTRFS info (device loop5 state M): rebuilding free space tree [ 682.829944][T20156] XFS: ikeep mount option is deprecated. [ 682.908970][T20156] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 682.975672][T20156] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 682.981961][T20152] BTRFS info (device loop5 state M): force clearing of disk cache [ 683.018628][T20152] BTRFS info (device loop5 state M): trying to use backup root at mount time [ 683.090378][T19692] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 683.108146][T20204] loop3: detected capacity change from 0 to 4096 [ 683.125483][T20204] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 683.167586][T20156] XFS (loop4): Ending clean mount [ 683.216811][T20156] XFS (loop4): Quotacheck needed: Please wait. [ 683.325945][T20204] ntfs3(loop3): ino=19, mi_enum_attr [ 683.339638][T20156] XFS (loop4): Quotacheck: Done. [ 683.393988][T20204] ntfs3(loop3): failed to convert "c46c" to maciceland [ 683.450924][T20204] ntfs3(loop3): ino=20, mi_enum_attr [ 683.529163][ T6098] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 683.854979][T20232] loop2: detected capacity change from 0 to 64 [ 684.198731][T20246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5910'. [ 684.240659][T20247] netlink: 'syz.5.5911': attribute type 10 has an invalid length. [ 684.398793][T20247] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 684.481807][T20258] loop3: detected capacity change from 0 to 256 [ 684.544172][T20258] exfat: Deprecated parameter 'namecase' [ 684.640967][T20258] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 684.694006][T20266] loop0: detected capacity change from 0 to 1024 [ 684.866596][T20274] loop2: detected capacity change from 0 to 1024 [ 684.902444][T20274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 684.953357][T20274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.092022][T20274] EXT4-fs warning (device loop2): empty_inline_dir:1749: bad inline directory (dir #12) - no `..' [ 685.114796][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'. [ 685.115759][T20285] loop0: detected capacity change from 0 to 128 [ 685.204254][ T6092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.823404][T20291] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.830795][T20291] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.383150][T20319] loop3: detected capacity change from 0 to 512 [ 686.455116][T20319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 686.521478][T20319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 686.571645][T20319] ext4 filesystem being mounted at /1204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.623225][T20319] __quota_error: 4 callbacks suppressed [ 686.623240][T20319] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 686.641599][T20319] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 686.651846][T20319] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.5944: Failed to acquire dquot type 0 [ 686.699911][T20338] loop5: detected capacity change from 0 to 16 [ 686.719424][T20338] erofs (device loop5): mounted with root inode @ nid 36. [ 686.746333][T20338] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet [ 686.854963][ T6090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 686.977483][T20298] loop0: detected capacity change from 0 to 32768 [ 687.020946][T20298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5933 (20298) [ 687.100535][T20298] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 687.136144][T20298] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 687.352291][T20298] BTRFS info (device loop0): checking UUID tree [ 687.438026][T20298] BTRFS info (device loop0): allowing degraded mounts [ 687.456536][T20298] BTRFS info (device loop0): enabling free space tree [ 687.580632][T20381] loop4: detected capacity change from 0 to 128 [ 687.629493][T20385] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5961'. [ 687.676941][T20381] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 687.705400][ T6088] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 687.763391][T20381] ext4 filesystem being mounted at /1109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 687.887887][ T6189] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 688.058434][ T6098] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 688.137010][ T6189] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 688.152048][ T6189] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 688.165775][ T6189] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 688.214091][ T6189] usb 4-1: config 220 has no interface number 2 [ 688.220756][ T6189] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 688.252985][ T6189] usb 4-1: config 220 interface 0 has no altsetting 0 [ 688.259907][ T6189] usb 4-1: config 220 interface 76 has no altsetting 0 [ 688.314030][ T6189] usb 4-1: config 220 interface 1 has no altsetting 0 [ 688.355154][T20398] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.356632][ T6189] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 688.364875][T20398] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.401010][ T6189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.458361][ T6189] usb 4-1: Product: syz [ 688.467093][ T6189] usb 4-1: Manufacturer: syz [ 688.500385][ T6189] usb 4-1: SerialNumber: syz [ 688.636385][ T6176] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 688.747407][T20420] netlink: 'syz.0.5971': attribute type 11 has an invalid length. [ 688.770008][ T6189] usb 4-1: selecting invalid altsetting 0 [ 688.794260][ T6189] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 688.824677][ T6189] usb 4-1: No valid video chain found. [ 688.832616][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 688.855933][ T6176] usb 5-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 688.883588][ T6189] usb 4-1: selecting invalid altsetting 0 [ 688.891793][ T6189] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 688.903375][ T6176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.945218][ T6176] usb 5-1: config 0 descriptor?? [ 688.954781][ T6189] usb 4-1: USB disconnect, device number 11 [ 689.050413][T20398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.104413][T20398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.227204][ T6176] usbhid 5-1:0.0: can't add hid device: -71 [ 689.239245][ T6176] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 689.265785][ T6176] usb 5-1: USB disconnect, device number 13 [ 689.593704][ T1143] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.628016][ T1143] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.705483][ T1143] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.748605][ T1143] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.868504][T20451] loop5: detected capacity change from 0 to 512 [ 689.909486][T20451] EXT4-fs: Ignoring removed i_version option [ 689.915507][T20451] EXT4-fs: Ignoring removed mblk_io_submit option [ 690.018161][T20464] loop0: detected capacity change from 0 to 16 [ 690.024658][T20451] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.5976: inode #13: comm syz.5.5976: iget: illegal inode # [ 690.074718][T20464] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 690.136037][T20451] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5976: couldn't read orphan inode 13 (err -117) [ 690.166488][T20464] cramfs: Error -3 while decompressing! [ 690.172396][T20464] cramfs: ffffffff99e14748(453)->ffff88803ec59000(4096) [ 690.204222][T20451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.414500][T19692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.418334][T20477] gretap0: left promiscuous mode [ 690.576564][T20481] loop3: detected capacity change from 0 to 1024 [ 690.607399][T20477] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.614791][T20477] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.760400][T20489] netlink: 'syz.0.5989': attribute type 21 has an invalid length. [ 690.841796][T20491] loop5: detected capacity change from 0 to 128 [ 690.849882][T20477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.864544][T20477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.876309][ T1143] hfsplus: b-tree write err: -5, ino 4 [ 690.910202][T20491] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 690.980331][T20491] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 691.162612][T20476] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.5995'. [ 691.184293][ T1143] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.200856][T19692] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 691.213940][ T1143] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.264181][ T1143] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.323351][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.373036][T20429] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 691.545950][T20429] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.601205][T20429] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 691.634687][T20429] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 691.674821][T20429] usb 4-1: Product: syz [ 691.679021][T20429] usb 4-1: Manufacturer: syz [ 691.738314][T20429] usb 4-1: SerialNumber: syz [ 691.772711][T20522] loop5: detected capacity change from 0 to 256 [ 691.779761][T20429] usb 4-1: config 0 descriptor?? [ 691.815858][T20429] gspca_main: conex-2.14.0 probing 0572:0041 [ 692.324637][T20429] usb 4-1: USB disconnect, device number 12 [ 692.393281][T20545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6011'. [ 693.022828][T20569] loop2: detected capacity change from 0 to 256 [ 693.315252][T20533] loop4: detected capacity change from 0 to 32768 [ 693.323717][T20533] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6007 (20533) [ 693.357755][T20533] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 693.404471][T20533] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 693.436910][T20533] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 693.572397][T20588] netlink: 'syz.3.6027': attribute type 32 has an invalid length. [ 693.651090][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6027'. [ 693.662701][T20588] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 693.750741][T20533] BTRFS info (device loop4): rebuilding free space tree [ 693.856432][T20533] BTRFS info (device loop4): disabling free space tree [ 693.899899][T20533] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 693.974216][T20533] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 694.024921][T20533] BTRFS info (device loop4): enabling ssd optimizations [ 694.031899][T20533] BTRFS info (device loop4): enabling disk space caching [ 694.070887][T20533] BTRFS info (device loop4): force clearing of disk cache [ 694.105953][T20533] BTRFS info (device loop4): use zstd compression, level 3 [ 694.310577][ T6098] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 694.358589][T20571] loop5: detected capacity change from 0 to 32768 [ 694.392734][T20571] btrfs: Deprecated parameter 'usebackuproot' [ 694.409430][ T6076] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 694.419955][T20571] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 694.435194][T20571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6021 (20571) [ 694.502947][T20629] loop0: detected capacity change from 0 to 256 [ 694.510103][T20571] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 694.582875][T20629] FAT-fs (loop0): Directory bread(block 64) failed [ 694.594532][T20571] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 694.632082][ T6076] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 694.633658][T20629] FAT-fs (loop0): Directory bread(block 65) failed [ 694.665695][ T6076] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 694.698440][ T6076] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 694.716332][T20629] FAT-fs (loop0): Directory bread(block 66) failed [ 694.728677][T20629] FAT-fs (loop0): Directory bread(block 67) failed [ 694.739270][T20629] FAT-fs (loop0): Directory bread(block 68) failed [ 694.745875][T20629] FAT-fs (loop0): Directory bread(block 69) failed [ 694.753052][T20629] FAT-fs (loop0): Directory bread(block 70) failed [ 694.759575][T20629] FAT-fs (loop0): Directory bread(block 71) failed [ 694.766287][T20629] FAT-fs (loop0): Directory bread(block 72) failed [ 694.773106][T20629] FAT-fs (loop0): Directory bread(block 73) failed [ 694.775732][ T6076] usb 4-1: config 220 has no interface number 2 [ 694.851603][ T6076] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 694.900516][ T1143] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 694.939837][ T6076] usb 4-1: config 220 interface 0 has no altsetting 0 [ 694.947265][ T30] audit: type=1800 audit(1756889368.516:95): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6034" name="cpu.stat" dev="loop0" ino=1048724 res=0 errno=0 [ 694.996663][T20571] BTRFS error (device loop5): failed to load root extent [ 695.021605][ T6076] usb 4-1: config 220 interface 76 has no altsetting 0 [ 695.043758][ T6076] usb 4-1: config 220 interface 1 has no altsetting 0 [ 695.043908][T20571] BTRFS warning (device loop5): try to load backup roots slot 1 [ 695.063980][ T6076] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 695.092413][ T6076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.117893][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 695.136159][ T6076] usb 4-1: Product: syz [ 695.140336][ T6076] usb 4-1: Manufacturer: syz [ 695.144972][T20571] BTRFS warning (device loop5): couldn't read tree root [ 695.163114][ T6076] usb 4-1: SerialNumber: syz [ 695.178649][T20571] BTRFS warning (device loop5): try to load backup roots slot 2 [ 695.197287][ T36] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 695.225028][T20571] BTRFS warning (device loop5): couldn't read tree root [ 695.260949][T20571] BTRFS warning (device loop5): try to load backup roots slot 3 [ 695.288503][T20657] loop0: detected capacity change from 0 to 164 [ 695.337933][T20571] BTRFS info (device loop5): rebuilding free space tree [ 695.356059][T20657] rock: directory entry would overflow storage [ 695.375160][T20657] rock: sig=0x66, size=4, remaining=3 [ 695.397556][T20657] rock: directory entry would overflow storage [ 695.401919][T20571] BTRFS info (device loop5): checking UUID tree [ 695.419904][T20657] rock: sig=0x66, size=4, remaining=3 [ 695.437152][T20571] BTRFS info (device loop5): enabling ssd optimizations [ 695.461302][ T6076] usb 4-1: selecting invalid altsetting 0 [ 695.467125][T20571] BTRFS info (device loop5): turning off barriers [ 695.486978][ T6076] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 695.502098][ T6076] usb 4-1: No valid video chain found. [ 695.502685][T20571] BTRFS info (device loop5): turning on async discard [ 695.553442][T20571] BTRFS info (device loop5): enabling free space tree [ 695.559915][ T6076] usb 4-1: selecting invalid altsetting 0 [ 695.562201][T20571] BTRFS info (device loop5): force clearing of disk cache [ 695.582573][ T6076] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 695.601791][T20571] BTRFS info (device loop5): enabling auto defrag [ 695.619591][T20571] BTRFS info (device loop5): trying to use backup root at mount time [ 695.627682][T20571] BTRFS info (device loop5): use zlib compression, level 3 [ 695.652122][ T6076] usb 4-1: USB disconnect, device number 13 [ 695.839483][T19692] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 695.898271][T20677] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6046'. [ 696.145105][T20685] netlink: 'syz.0.6048': attribute type 79 has an invalid length. [ 696.628677][T20693] loop0: detected capacity change from 0 to 4096 [ 696.654455][T20693] ntfs3(loop0): It is recommened to use chkdsk. [ 696.693112][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 696.707260][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 696.736299][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 696.772123][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00 [ 696.779334][T20688] loop3: detected capacity change from 0 to 16384 [ 696.779987][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00 [ 696.846710][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00 [ 696.854600][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00 [ 696.900719][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00 [ 696.908725][T20693] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00 [ 697.113155][T20682] loop2: detected capacity change from 0 to 32768 [ 697.198866][T20682] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 697.218140][T20688] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,metadata_target=invalid device 255,erasure_code,reconstruct_alloc,version_upgrade=none [ 697.218164][T20688] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 697.257907][T20688] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 697.266220][T20688] bcachefs (loop3): recovering from clean shutdown, journal seq 18 [ 697.280377][T20688] bcachefs (loop3): dropping and reconstructing all alloc info [ 697.284920][T20682] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 697.401089][T20688] bcachefs (loop3): accounting_read... done [ 697.464878][T20688] bcachefs (loop3): alloc_read... done [ 697.497908][T20688] bcachefs (loop3): snapshots_read... done [ 697.537588][T20688] bcachefs (loop3): check_allocations... [ 697.576573][T20719] program syz.0.6060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.597221][T20719] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 697.614599][ T6092] ocfs2: Unmounting device (7,2) on (node local) [ 697.636969][T20723] loop4: detected capacity change from 0 to 256 [ 697.682741][T20688] done [ 697.706495][T20688] bcachefs (loop3): going read-write [ 697.731553][T20723] FAT-fs (loop4): Directory bread(block 64) failed [ 697.758929][T20723] FAT-fs (loop4): Directory bread(block 65) failed [ 697.765622][T20723] FAT-fs (loop4): Directory bread(block 66) failed [ 697.814914][T20688] bcachefs (loop3): journal_replay... [ 697.815788][T20723] FAT-fs (loop4): Directory bread(block 67) failed [ 697.862362][T20723] FAT-fs (loop4): Directory bread(block 68) failed [ 697.868916][T20723] FAT-fs (loop4): Directory bread(block 69) failed [ 697.916162][T20723] FAT-fs (loop4): Directory bread(block 70) failed [ 697.922711][T20723] FAT-fs (loop4): Directory bread(block 71) failed [ 697.983851][ T30] audit: type=1400 audit(1756889371.369:96): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=20731 comm="syz.0.6065" [ 698.016494][T20723] FAT-fs (loop4): Directory bread(block 72) failed [ 698.033880][T20723] FAT-fs (loop4): Directory bread(block 73) failed [ 698.465587][T20688] done [ 698.486125][T20688] bcachefs (loop3): check_alloc_info... [ 698.606637][T20725] loop2: detected capacity change from 0 to 32768 [ 698.620515][T20725] XFS: noikeep mount option is deprecated. [ 698.621387][T20748] netlink: 'syz.4.6073': attribute type 12 has an invalid length. [ 698.630238][T20688] done [ 698.648817][T20688] bcachefs (loop3): check_lrus... done [ 698.680840][T20748] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.6073'. [ 698.695474][T20688] bcachefs (loop3): check_extents_to_backpointers... [ 698.704910][T20688] bcachefs (loop3): scanning for missing backpointers in 12/512 buckets [ 698.731063][T20725] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 698.757408][T20688] done [ 698.762934][T20688] bcachefs (loop3): check_alloc_to_lru_refs... done [ 698.816412][T20688] bcachefs (loop3): resume_logged_ops... done [ 698.842336][T20688] bcachefs (loop3): delete_dead_inodes... done [ 698.876517][T20688] bcachefs (loop3): done starting filesystem [ 698.918853][T20725] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 698.966683][T20725] XFS (loop2): Starting recovery (logdev: internal) [ 699.044491][T20725] XFS (loop2): Ending recovery (logdev: internal) [ 699.083416][T20725] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_finobt block 0x20 [ 699.109252][ T6090] bcachefs (loop3): shutting down [ 699.120049][ T6090] bcachefs (loop3): going read-only [ 699.131270][T20725] XFS (loop2): Unmount and run xfs_repair [ 699.139703][T20725] XFS (loop2): Failed to initialize disk quotas, err -117. [ 699.144618][ T6090] bcachefs (loop3): finished waiting for writes to stop [ 699.194059][ T6090] bcachefs (loop3): flushing journal and stopping allocators, journal seq 31 [ 699.220304][ T6090] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 32 [ 699.245098][ T6092] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 699.269227][ T6092] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 699.279926][ T6090] bcachefs (loop3): clean shutdown complete, journal seq 33 [ 699.295630][ T6090] bcachefs (loop3): marking filesystem clean [ 699.319090][T20766] loop4: detected capacity change from 0 to 4096 [ 699.405874][T20766] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 699.443929][ T6090] bcachefs (loop3): shutdown complete [ 699.528000][T20755] loop5: detected capacity change from 0 to 32768 [ 699.574731][T20755] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6074 (20755) [ 699.633245][T20755] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 699.674473][T20755] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 699.871650][T20755] BTRFS info (device loop5): enabling ssd optimizations [ 699.880967][T20755] BTRFS info (device loop5): enabling free space tree [ 700.097122][T19692] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 700.229946][T20764] loop0: detected capacity change from 0 to 32768 [ 700.377254][T20764] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 700.807716][T20819] loop5: detected capacity change from 0 to 256 [ 700.839136][T20764] XFS (loop0): Ending clean mount [ 700.878237][T20764] XFS (loop0): Quotacheck needed: Please wait. [ 700.906088][T20819] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 700.972134][T20764] XFS (loop0): Quotacheck: Done. [ 700.981212][T20819] exFAT-fs (loop5): error, data size is invalid(9000) [ 701.033885][T20819] exFAT-fs (loop5): Filesystem has been set read-only [ 701.097179][T20825] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6096'. [ 701.133540][ T6088] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 701.199323][T20823] loop4: detected capacity change from 0 to 8192 [ 701.372818][T20831] netlink: zone id is out of range [ 701.387583][T20831] netlink: zone id is out of range [ 701.417465][T20831] netlink: set zone limit has 4 unknown bytes [ 701.981945][T20853] loop0: detected capacity change from 0 to 1024 [ 701.997915][T20853] EXT4-fs: Ignoring removed nobh option [ 702.035774][T20853] EXT4-fs: Ignoring removed bh option [ 702.171132][T20853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.392155][ T6088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.566549][T20877] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 703.223948][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6129'. [ 703.472199][T20869] loop4: detected capacity change from 0 to 40427 [ 703.482921][T20909] loop5: detected capacity change from 0 to 64 [ 703.492962][T20869] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384) [ 703.525979][T20869] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 703.751306][T20916] loop3: detected capacity change from 0 to 4096 [ 703.849777][T20869] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 703.867388][T20879] loop2: detected capacity change from 0 to 32768 [ 703.891702][T20869] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 703.907792][T20916] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 703.911285][T20869] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 703.988444][T20879] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 703.996633][T20879] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 704.076791][T20879] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 704.100661][T20929] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6140'. [ 704.121309][T20929] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6140'. [ 704.143189][T20929] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6140'. [ 704.158601][ T6076] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 704.177240][ T6076] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 704.299437][ T6098] syz-executor: attempt to access beyond end of device [ 704.299437][ T6098] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 704.338564][ T6076] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 150ms [ 704.354416][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 704.354439][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 704.354450][ T6098] Call Trace: [ 704.354459][ T6098] [ 704.354469][ T6098] dump_stack_lvl+0x189/0x250 [ 704.354499][ T6098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.354520][ T6098] ? __pfx_queue_work_on+0x10/0x10 [ 704.354535][ T6098] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 704.354554][ T6098] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 704.354590][ T6098] f2fs_handle_critical_error+0x37c/0x540 [ 704.354624][ T6098] f2fs_write_end_io+0x886/0xb60 [ 704.354667][ T6098] __submit_merged_bio+0x27a/0x6a0 [ 704.354701][ T6098] __submit_merged_write_cond+0x255/0x530 [ 704.354736][ T6098] f2fs_write_data_pages+0x261d/0x3000 [ 704.354799][ T6098] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 704.354836][ T6098] ? is_bpf_text_address+0x292/0x2b0 [ 704.354860][ T6098] ? is_bpf_text_address+0x26/0x2b0 [ 704.354919][ T6098] ? check_path+0x21/0x40 [ 704.354935][ T6098] ? check_noncircular+0xe0/0x160 [ 704.355017][ T6098] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 704.355038][ T6098] do_writepages+0x32e/0x550 [ 704.355076][ T6098] ? do_raw_spin_unlock+0x122/0x240 [ 704.355102][ T6098] filemap_fdatawrite+0x199/0x240 [ 704.355127][ T6098] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 704.355218][ T6098] ? do_raw_spin_unlock+0x122/0x240 [ 704.355245][ T6098] f2fs_sync_dirty_inodes+0x31f/0x830 [ 704.355285][ T6098] f2fs_write_checkpoint+0x93e/0x2440 [ 704.355305][ T6098] ? __lock_acquire+0xab9/0xd20 [ 704.355365][ T6098] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 704.355456][ T6098] kill_f2fs_super+0x2cc/0x6d0 [ 704.355484][ T6098] ? __pfx_kill_f2fs_super+0x10/0x10 [ 704.355528][ T6098] ? shrinker_free+0x2ce/0x3e0 [ 704.355551][ T6098] deactivate_locked_super+0xb9/0x130 [ 704.355576][ T6098] cleanup_mnt+0x425/0x4c0 [ 704.355597][ T6098] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.355622][ T6098] task_work_run+0x1d1/0x260 [ 704.355649][ T6098] ? __pfx_task_work_run+0x10/0x10 [ 704.355667][ T6098] ? __x64_sys_umount+0x122/0x160 [ 704.355696][ T6098] ? exit_to_user_mode_loop+0x40/0x130 [ 704.355725][ T6098] exit_to_user_mode_loop+0xec/0x130 [ 704.355749][ T6098] do_syscall_64+0x2bd/0xfa0 [ 704.355768][ T6098] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.355787][ T6098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.355805][ T6098] ? clear_bhb_loop+0x60/0xb0 [ 704.355828][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.355847][ T6098] RIP: 0033:0x7f41dfd8ff17 [ 704.355864][ T6098] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 704.355879][ T6098] RSP: 002b:00007ffe6b67ae18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 704.355899][ T6098] RAX: 0000000000000000 RBX: 00007f41dfe11c05 RCX: 00007f41dfd8ff17 [ 704.355912][ T6098] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6b67aed0 [ 704.355924][ T6098] RBP: 00007ffe6b67aed0 R08: 0000000000000000 R09: 0000000000000000 [ 704.355936][ T6098] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6b67bf60 [ 704.355947][ T6098] R13: 00007f41dfe11c05 R14: 00000000000a5555 R15: 00007ffe6b67bfa0 [ 704.355984][ T6098] [ 704.355993][ T6098] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 704.455038][T20935] loop5: detected capacity change from 0 to 1764 [ 704.458069][ T6076] gfs2: fsid=syz:syz.0: jid=0: Done [ 704.518688][T20879] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 705.185925][T20406] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 705.369574][T20406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.380052][T20406] usb 1-1: config 0 has no interface number 0 [ 705.401750][T20406] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 705.439291][T20406] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 705.468373][T20406] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 705.490281][T20406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.503753][T20941] infiniband syz!: set active [ 705.520839][T20406] usb 1-1: config 0 descriptor?? [ 705.538343][T20941] infiniband syz!: added team_slave_0 [ 705.547094][T20406] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 705.681023][T20941] RDS/IB: syz!: added [ 705.685111][T20941] smc: adding ib device syz! with port count 1 [ 705.694952][T20941] smc: ib device syz! port 1 has pnetid [ 705.805689][T20945] iowarrior 1-1:0.1: Error -90 while submitting URB [ 705.863027][T20431] usb 1-1: USB disconnect, device number 7 [ 706.055612][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6164'. [ 706.078828][T20991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6164'. [ 706.100022][T20991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6164'. [ 706.553806][T20429] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 706.599238][T21022] loop2: detected capacity change from 0 to 2048 [ 706.676451][T21030] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 706.746409][T20429] usb 5-1: Using ep0 maxpacket: 32 [ 706.754082][T21022] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 65536 [ 706.806438][T21022] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 706.818251][T20429] usb 5-1: config 0 has an invalid interface number: 111 but max is 1 [ 706.819351][T21033] loop0: detected capacity change from 0 to 8 [ 706.843030][T21033] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 706.850600][T21022] Remounting filesystem read-only [ 706.856345][T20429] usb 5-1: config 0 has no interface number 1 [ 706.864279][T21022] NILFS (loop2): error -5 truncating bmap (ino=16) [ 706.876559][T21033] cramfs: Error -3 while decompressing! [ 706.882344][T21033] cramfs: ffffffff99e10868(18)->ffff88805396f000(4096) [ 706.884082][T20429] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 706.890919][T21033] cramfs: Error -3 while decompressing! [ 706.923256][T20429] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 706.952559][T20429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.966191][T21033] cramfs: ffffffff99e10868(18)->ffff88805396f000(4096) [ 706.976538][T20429] usb 5-1: Product: syz [ 706.981315][ T30] audit: type=1800 audit(1756889379.778:97): pid=21033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6176" name="file1" dev="loop0" ino=324 res=0 errno=0 [ 707.006717][T20429] usb 5-1: Manufacturer: syz [ 707.011327][T20429] usb 5-1: SerialNumber: syz [ 707.020382][ T6092] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 707.032921][T20429] usb 5-1: config 0 descriptor?? [ 707.278501][T20429] snd-usb-6fire 5-1:0.111: unable to receive device firmware state. [ 707.316120][T20429] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 707.366707][T20429] usb 5-1: USB disconnect, device number 14 [ 707.588883][T21078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6184'. [ 707.818478][T21040] loop5: detected capacity change from 0 to 32768 [ 707.842932][T21040] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6178 (21040) [ 707.869439][T21084] loop0: detected capacity change from 0 to 4096 [ 707.913743][T21040] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 707.925679][T21084] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 707.963456][T21040] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 708.243352][T21040] BTRFS info (device loop5): enabling ssd optimizations [ 708.296280][T21040] BTRFS info (device loop5): enabling free space tree [ 708.505516][T19692] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 709.325156][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6211'. [ 709.345333][T21181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6211'. [ 709.524718][T21183] loop2: detected capacity change from 0 to 4096 [ 709.530309][T21190] loop4: detected capacity change from 0 to 2048 [ 709.629080][T21190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.770622][T21190] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 709.834963][T21212] ieee802154 phy0 wpan0: encryption failed: -22 [ 709.861044][T21210] loop0: detected capacity change from 0 to 256 [ 709.961092][T21219] loop2: detected capacity change from 0 to 256 [ 710.019964][ T6098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.109491][T21230] netlink: 'syz.0.6223': attribute type 21 has an invalid length. [ 710.146805][T21230] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6223'. [ 710.167620][T21230] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6223'. [ 710.257057][T21219] FAT-fs (loop2): Directory bread(block 64) failed [ 710.272545][T21236] loop5: detected capacity change from 0 to 1024 [ 710.297955][T21219] FAT-fs (loop2): Directory bread(block 65) failed [ 710.305368][T21219] FAT-fs (loop2): Directory bread(block 66) failed [ 710.316838][T21219] FAT-fs (loop2): Directory bread(block 67) failed [ 710.323465][T21219] FAT-fs (loop2): Directory bread(block 68) failed [ 710.387549][T21240] loop4: detected capacity change from 0 to 256 [ 710.391151][T21219] FAT-fs (loop2): Directory bread(block 69) failed [ 710.418701][T21219] FAT-fs (loop2): Directory bread(block 70) failed [ 710.436841][T21219] FAT-fs (loop2): Directory bread(block 71) failed [ 710.443584][T21219] FAT-fs (loop2): Directory bread(block 72) failed [ 710.479125][T21219] FAT-fs (loop2): Directory bread(block 73) failed [ 710.668952][ T30] audit: type=1326 audit(1756889383.229:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.0.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 710.761008][ T30] audit: type=1326 audit(1756889383.229:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.0.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 710.861085][ T30] audit: type=1326 audit(1756889383.257:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.0.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 710.982345][ T30] audit: type=1326 audit(1756889383.257:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.0.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 711.048569][ T30] audit: type=1326 audit(1756889383.257:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.0.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 711.052706][T21281] loop5: detected capacity change from 0 to 256 [ 711.157228][T21287] netlink: 'syz.3.6238': attribute type 5 has an invalid length. [ 711.182617][ T6076] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 711.255167][T21287] ip6erspan0: entered promiscuous mode [ 711.293145][T21281] FAT-fs (loop5): Directory bread(block 64) failed [ 711.321966][T21281] FAT-fs (loop5): Directory bread(block 65) failed [ 711.353324][T21281] FAT-fs (loop5): Directory bread(block 66) failed [ 711.368592][T21300] loop2: detected capacity change from 0 to 256 [ 711.390124][T21281] FAT-fs (loop5): Directory bread(block 67) failed [ 711.393130][ T6076] usb 5-1: unable to get BOS descriptor or descriptor too short [ 711.424068][ T6076] usb 5-1: not running at top speed; connect to a high speed hub [ 711.429656][T21304] netlink: 'syz.3.6243': attribute type 7 has an invalid length. [ 711.443444][T21281] FAT-fs (loop5): Directory bread(block 68) failed [ 711.448471][ T6076] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 711.462294][T21304] netlink: 'syz.3.6243': attribute type 8 has an invalid length. [ 711.470237][T21281] FAT-fs (loop5): Directory bread(block 69) failed [ 711.498889][T21281] FAT-fs (loop5): Directory bread(block 70) failed [ 711.499191][ T6076] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.531635][T21281] FAT-fs (loop5): Directory bread(block 71) failed [ 711.565088][ T6076] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 711.574442][T21281] FAT-fs (loop5): Directory bread(block 72) failed [ 711.599584][ T6076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.611069][T21281] FAT-fs (loop5): Directory bread(block 73) failed [ 711.621704][ T6076] usb 5-1: Product: syz [ 711.625879][ T6076] usb 5-1: Manufacturer: syz [ 711.654791][ T6076] usb 5-1: SerialNumber: syz [ 711.892146][T21331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6249'. [ 711.943521][T21341] loop3: detected capacity change from 0 to 16 [ 711.949786][T21331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6249'. [ 711.971077][ T6076] usb 5-1: USB disconnect, device number 15 [ 712.140547][T21341] erofs (device loop3): mounted with root inode @ nid 36. [ 712.181648][T21341] syz.3.6251: attempt to access beyond end of device [ 712.181648][T21341] loop3: rw=0, sector=103079215104, nr_sectors = 8 limit=16 [ 712.547699][T21386] loop3: detected capacity change from 0 to 64 [ 712.605219][ T6076] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 712.638007][T21386] Trying to free block not in datazone [ 712.643755][T21386] Trying to free block not in datazone [ 712.655423][T21386] Trying to free block not in datazone [ 712.666132][T21386] Trying to free block not in datazone [ 712.701206][T21386] minix_free_block (loop3:6): bit already cleared [ 712.715973][T21386] Trying to free block not in datazone [ 712.721508][T21386] Trying to free block not in datazone [ 712.729084][T21397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6265'. [ 712.809877][ T6076] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 712.818173][ T6076] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 712.886448][ T6076] usb 6-1: config 220 has no interface number 2 [ 712.892784][ T6076] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 712.943596][ T6076] usb 6-1: config 220 interface 0 has no altsetting 0 [ 712.963785][ T6076] usb 6-1: config 220 interface 76 has no altsetting 0 [ 712.981677][ T6076] usb 6-1: config 220 interface 1 has no altsetting 0 [ 712.991643][ T6076] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 713.003666][ T6076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.047391][ T6076] usb 6-1: Product: syz [ 713.051577][ T6076] usb 6-1: Manufacturer: syz [ 713.081422][ T6076] usb 6-1: SerialNumber: syz [ 713.129907][T21424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6272'. [ 713.204067][T21430] netlink: 'syz.3.6274': attribute type 11 has an invalid length. [ 713.351562][ T6076] usb 6-1: selecting invalid altsetting 0 [ 713.364764][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.364824][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.428350][ T6076] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 713.447041][ T6076] usb 6-1: No valid video chain found. [ 713.479488][ T6076] usb 6-1: selecting invalid altsetting 0 [ 713.491784][ T6076] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 713.521875][ T6076] usb 6-1: USB disconnect, device number 2 [ 713.636020][T21423] loop0: detected capacity change from 0 to 16384 [ 713.705741][T20406] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 713.810840][T21423] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,metadata_target=invalid device 255,erasure_code,reconstruct_alloc,version_upgrade=none [ 713.810867][T21423] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 713.882833][T21423] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 713.900932][T21423] bcachefs (loop0): recovering from clean shutdown, journal seq 18 [ 713.924268][T20406] usb 4-1: Using ep0 maxpacket: 8 [ 713.931032][T21423] bcachefs (loop0): dropping and reconstructing all alloc info [ 713.974439][T20406] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 713.982718][T20406] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 714.007401][T20406] usb 4-1: config 162 has no interface number 0 [ 714.024341][T20406] usb 4-1: config 162 has no interface number 1 [ 714.031372][T21423] bcachefs (loop0): accounting_read... [ 714.042309][T20406] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 714.055605][T21423] done [ 714.079762][T21423] bcachefs (loop0): alloc_read... done [ 714.083837][T20406] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 714.086201][T21423] bcachefs (loop0): snapshots_read... [ 714.107074][T21428] loop2: detected capacity change from 0 to 40427 [ 714.133572][T21423] done [ 714.136437][T21423] bcachefs (loop0): check_allocations... [ 714.138149][T20406] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 714.170274][T21428] F2FS-fs (loop2): Image doesn't support compression [ 714.191316][T21428] F2FS-fs (loop2): build fault injection rate: 690 [ 714.201855][T20406] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 714.231767][T20406] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 714.242405][T20406] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 714.268657][T21428] F2FS-fs (loop2): invalid crc value [ 714.274916][T20406] usb 4-1: config 162 interface 84 has no altsetting 0 [ 714.282469][T20406] usb 4-1: config 162 interface 2 has no altsetting 0 [ 714.300347][T21423] done [ 714.310996][T20406] usb 4-1: config 162 interface 3 has no altsetting 0 [ 714.344709][T20406] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 714.359299][T20406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.374679][T21423] bcachefs (loop0): going read-write [ 714.391479][T20406] usb 4-1: Product: syz [ 714.408439][T20406] usb 4-1: Manufacturer: syz [ 714.415212][T21423] bcachefs (loop0): journal_replay... [ 714.424216][T20406] usb 4-1: SerialNumber: syz [ 714.618263][T21428] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 714.657190][T21428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 714.787794][T15713] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 714.820824][T21428] F2FS-fs (loop2): Image doesn't support compression [ 714.839884][T20406] usb 4-1: USB disconnect, device number 14 [ 714.868582][T21428] F2FS-fs (loop2): build fault injection rate: 690 [ 714.961235][T21423] done [ 714.983966][T21423] bcachefs (loop0): check_alloc_info... done [ 715.041527][T21423] bcachefs (loop0): check_lrus... done [ 715.050345][T21423] bcachefs (loop0): check_extents_to_backpointers... [ 715.075691][T21423] bcachefs (loop0): scanning for missing backpointers in 9/512 buckets [ 715.128303][T21423] done [ 715.131940][T21423] bcachefs (loop0): check_alloc_to_lru_refs... done [ 715.147094][T21423] bcachefs (loop0): resume_logged_ops... done [ 715.155059][T21423] bcachefs (loop0): delete_dead_inodes... done [ 715.218818][T21423] bcachefs (loop0): done starting filesystem [ 715.537843][ T6088] bcachefs (loop0): shutting down [ 715.542904][ T6088] bcachefs (loop0): going read-only [ 715.588539][ T6088] bcachefs (loop0): finished waiting for writes to stop [ 715.641261][ T6088] bcachefs (loop0): flushing journal and stopping allocators, journal seq 33 [ 715.674310][ T6088] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 33 [ 715.714870][ T6088] bcachefs (loop0): clean shutdown complete, journal seq 34 [ 715.737640][ T6088] bcachefs (loop0): marking filesystem clean [ 715.947227][ T6088] bcachefs (loop0): shutdown complete [ 715.975586][T21592] loop3: detected capacity change from 0 to 8 [ 716.027267][T21592] cramfs: Error -3 while decompressing! [ 716.032851][T21592] cramfs: ffffffff99e14888(26)->ffff888048458000(4096) [ 716.070594][T21592] cramfs: Error -3 while decompressing! [ 716.088058][ T6008] udevd[6008]: incorrect cramfs checksum on /dev/loop3 [ 716.094986][T21592] cramfs: ffffffff99e148a2(2074)->ffff88804710a000(4096) [ 716.095053][T21592] cramfs: bad data blocksize 4294965264 [ 716.095155][T21592] cramfs: Error -3 while decompressing! [ 716.095167][T21592] cramfs: ffffffff99e14888(26)->ffff888048458000(4096) [ 716.255719][T21604] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 716.572937][T21622] netlink: 'syz.5.6318': attribute type 2 has an invalid length. [ 716.617757][T21576] loop4: detected capacity change from 0 to 32768 [ 716.645698][T21576] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6307 (21576) [ 716.704802][T21576] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 716.762397][T21576] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 716.805910][T21576] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 717.036288][T21576] BTRFS info (device loop4): rebuilding free space tree [ 717.136031][T21576] BTRFS info (device loop4): disabling free space tree [ 717.177930][T21576] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 717.216484][T21617] loop3: detected capacity change from 0 to 32768 [ 717.228500][T21576] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 717.251633][T21617] BTRFS warning: excessive commit interval 491628334, use with care [ 717.270967][T21576] BTRFS info (device loop4): setting nodatasum [ 717.280261][T21617] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6317 (21617) [ 717.293546][T21576] BTRFS info (device loop4): allowing degraded mounts [ 717.313693][T21576] BTRFS info (device loop4): enabling disk space caching [ 717.323241][T21576] BTRFS info (device loop4): force clearing of disk cache [ 717.331964][T21576] BTRFS info (device loop4): force zlib compression, level 3 [ 717.356438][T21617] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 717.388640][T21617] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 717.673425][T21617] BTRFS info (device loop3): setting nodatasum [ 717.679651][T21617] BTRFS info (device loop3): enabling ssd optimizations [ 717.696995][T21617] BTRFS info (device loop3): enabling free space tree [ 717.717044][ T6098] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 717.732353][T21617] BTRFS info (device loop3): max_inline set to 0 [ 718.052161][ T6090] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 718.180764][T21660] loop2: detected capacity change from 0 to 32768 [ 718.254305][T21660] read_mapping_page failed! [ 718.259139][T21660] ERROR: (device loop2): txCommit: [ 718.259139][T21660] [ 718.671905][T21725] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.6304' sets config #0 [ 718.722148][T21712] loop4: detected capacity change from 0 to 4096 [ 718.772232][T21712] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 719.003853][T21712] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 719.045303][T21744] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6342'. [ 719.096590][T21712] ntfs3: Cannot use different iocharset when remounting! [ 719.107438][T21744] netlink: 'syz.3.6342': attribute type 2 has an invalid length. [ 720.188531][ T30] audit: type=1326 audit(1756889392.134:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21806 comm="syz.3.6358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ad8ebe9 code=0x7ffc0000 [ 720.242082][T21740] loop0: detected capacity change from 0 to 32768 [ 720.268856][ T30] audit: type=1326 audit(1756889392.162:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21806 comm="syz.3.6358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ad8ebe9 code=0x7ffc0000 [ 720.340957][T21740] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 720.394319][ T30] audit: type=1326 audit(1756889392.172:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21806 comm="syz.3.6358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f905ad8ebe9 code=0x7ffc0000 [ 720.511695][ T30] audit: type=1326 audit(1756889392.172:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21806 comm="syz.3.6358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ad8ebe9 code=0x7ffc0000 [ 720.618979][T21740] XFS (loop0): Ending clean mount [ 720.644660][ T30] audit: type=1326 audit(1756889392.172:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21806 comm="syz.3.6358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905ad8ebe9 code=0x7ffc0000 [ 720.853031][ T6088] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 720.854175][T21847] loop4: detected capacity change from 0 to 16 [ 720.873726][T21852] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6371'. [ 720.884922][T21847] erofs (device loop4): mounted with root inode @ nid 36. [ 720.933324][T21851] loop2: detected capacity change from 0 to 1024 [ 720.999137][T21847] erofs (device loop4): invalid tail-packing pclustersize 32768 [ 721.006826][T21847] erofs (device loop4): invalid tail-packing pclustersize 32768 [ 721.069854][T21847] erofs (device loop4): read error -117 @ 32811 of nid 36 [ 721.469644][T21876] loop0: detected capacity change from 0 to 64 [ 721.661942][T21838] loop5: detected capacity change from 0 to 32768 [ 722.168039][T20406] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 722.186185][T21913] netlink: 'syz.0.6387': attribute type 27 has an invalid length. [ 722.209156][T21913] netlink: 'syz.0.6387': attribute type 3 has an invalid length. [ 722.229901][T21913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6387'. [ 722.358715][T20406] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 722.382358][T20406] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 722.422572][T20406] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 722.451010][T20406] usb 5-1: config 220 has no interface number 2 [ 722.467202][T20406] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 722.506420][T20406] usb 5-1: config 220 interface 0 has no altsetting 0 [ 722.524194][T20406] usb 5-1: config 220 interface 76 has no altsetting 0 [ 722.556438][T20406] usb 5-1: config 220 interface 1 has no altsetting 0 [ 722.567413][T21928] netlink: 'syz.3.6391': attribute type 4 has an invalid length. [ 722.596134][T21928] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6391'. [ 722.596993][T20406] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 722.620076][T20406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.631046][T20406] usb 5-1: Product: syz [ 722.642919][T20406] usb 5-1: Manufacturer: syz [ 722.647534][T20406] usb 5-1: SerialNumber: syz [ 722.953899][T20406] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 722.960348][T20406] usb 5-1: No valid video chain found. [ 722.979849][T20406] usb 5-1: selecting invalid altsetting 0 [ 723.026854][T21910] loop2: detected capacity change from 0 to 32768 [ 723.057624][T21910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6386 (21910) [ 723.077744][T20406] usb 5-1: selecting invalid altsetting 0 [ 723.084937][T20406] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 723.112423][T21910] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 723.136480][T20406] usb 5-1: USB disconnect, device number 16 [ 723.149526][T21910] BTRFS info (device loop2 state S): using crc32c (crc32c-lib) checksum algorithm [ 723.348937][ T12] BTRFS warning (device loop2 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x4e035593 level 0, ignored [ 723.438439][T21996] loop0: detected capacity change from 0 to 256 [ 723.491188][ T13] BTRFS warning (device loop2 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 723.567889][ T13] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x48746f3c level 0, ignored [ 723.602980][ T12] BTRFS warning (device loop2 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x49206b5e level 0, ignored [ 723.609262][T21996] FAT-fs (loop0): Directory bread(block 64) failed [ 723.657223][T21996] FAT-fs (loop0): Directory bread(block 65) failed [ 723.674691][T21996] FAT-fs (loop0): Directory bread(block 66) failed [ 723.686292][T21910] BTRFS info (device loop2 state S): bdev /dev/loop2 errs: wr 0, rd 0, flush 0, corrupt 7, gen 0 [ 723.729941][T21996] FAT-fs (loop0): Directory bread(block 67) failed [ 723.751367][T21996] FAT-fs (loop0): Directory bread(block 68) failed [ 723.751398][T21996] FAT-fs (loop0): Directory bread(block 69) failed [ 723.751476][T21996] FAT-fs (loop0): Directory bread(block 70) failed [ 723.751499][T21996] FAT-fs (loop0): Directory bread(block 71) failed [ 723.751574][T21996] FAT-fs (loop0): Directory bread(block 72) failed [ 723.751596][T21996] FAT-fs (loop0): Directory bread(block 73) failed [ 723.760862][T21910] BTRFS info (device loop2 state S): enabling ssd optimizations [ 723.760886][T21910] BTRFS info (device loop2 state S): disabling tree log [ 723.760903][T21910] BTRFS info (device loop2 state S): turning on flush-on-commit [ 723.760920][T21910] BTRFS info (device loop2 state S): enabling free space tree [ 723.760937][T21910] BTRFS info (device loop2 state S): ignoring meta csums [ 723.760953][T21910] BTRFS info (device loop2 state S): use zlib compression, level 3 [ 723.761296][ T13] BTRFS warning (device loop2 state S): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x9b2456e4 level 0, ignored [ 723.912810][ T6092] BTRFS info (device loop2 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 724.242049][ T30] audit: type=1326 audit(1756889395.923:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.0.6412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 724.242101][ T30] audit: type=1326 audit(1756889395.923:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.0.6412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 724.243039][ T30] audit: type=1326 audit(1756889395.923:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.0.6412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 724.245727][ T30] audit: type=1326 audit(1756889395.923:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22028 comm="syz.0.6412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 724.507019][T22007] loop3: detected capacity change from 0 to 32768 [ 724.576985][T22007] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 724.614098][ T30] audit: type=1800 audit(1756889396.278:112): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6406" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 724.657752][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.701540][T22037] loop0: detected capacity change from 0 to 2048 [ 724.745198][T22037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 724.772137][ T6090] ocfs2: Unmounting device (7,3) on (node local) [ 725.340352][T22062] loop2: detected capacity change from 0 to 4096 [ 725.521028][T22062] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 725.568245][T22085] trusted_key: encrypted_key: keyword 'lo„d' not recognized [ 725.597041][T22062] ntfs3(loop2): Failed to load $Extend (-22). [ 725.603176][T22062] ntfs3(loop2): Failed to initialize $Extend. [ 725.755652][T22093] loop5: detected capacity change from 0 to 1024 [ 726.140305][T22118] netlink: 'syz.4.6436': attribute type 5 has an invalid length. [ 726.336978][T22131] netlink: 'syz.4.6440': attribute type 29 has an invalid length. [ 726.358076][T22131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6440'. [ 726.551621][T22076] loop0: detected capacity change from 0 to 32768 [ 726.614946][T22076] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 726.683081][T22076] XFS (loop0): Ending clean mount [ 726.719743][T22076] XFS (loop0): Quotacheck needed: Please wait. [ 726.850460][ T60] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1807 dinode [ 726.895711][ T60] XFS (loop0): Unmount and run xfs_repair [ 726.914091][ T60] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 726.936476][T22177] loop2: detected capacity change from 0 to 8 [ 726.943059][ T60] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 726.943105][ T60] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 726.943120][ T60] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 726.943134][ T60] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00 4.Xh....|....... [ 726.943148][ T60] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01 ................ [ 726.943162][ T60] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5 .............6.. [ 726.943176][ T60] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06 ......Ty........ [ 726.943188][ T60] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 727.116803][T22177] SQUASHFS error: Failed to read block 0x1ec: -5 [ 727.123585][T22177] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 727.174951][T22076] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 727.183977][T20411] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 727.205199][T22186] loop4: detected capacity change from 0 to 256 [ 727.219754][T22076] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 727.241867][T22076] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 727.362758][T20411] usb 6-1: Using ep0 maxpacket: 8 [ 727.381289][T20411] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 727.390512][T20411] usb 6-1: config 0 has no interface number 0 [ 727.437779][T20411] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 727.464690][T20411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.504952][T20411] usb 6-1: Product: syz [ 727.521215][T20411] usb 6-1: Manufacturer: syz [ 727.525857][T20411] usb 6-1: SerialNumber: syz [ 727.565237][T20411] usb 6-1: config 0 descriptor?? [ 727.630332][T22210] loop4: detected capacity change from 0 to 256 [ 727.725402][T22210] FAT-fs (loop4): Directory bread(block 64) failed [ 727.740462][T22210] FAT-fs (loop4): Directory bread(block 65) failed [ 727.772322][T22210] FAT-fs (loop4): Directory bread(block 66) failed [ 727.793296][T20411] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 727.817434][T22210] FAT-fs (loop4): Directory bread(block 67) failed [ 727.822812][T20411] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 727.847315][T20411] usb 6-1: Failed to create links for entity 5 [ 727.866499][T20411] usb 6-1: Failed to register entities (-22). [ 727.873613][T22210] FAT-fs (loop4): Directory bread(block 68) failed [ 727.880187][T22210] FAT-fs (loop4): Directory bread(block 69) failed [ 727.930588][T20411] usb 6-1: USB disconnect, device number 3 [ 727.945647][T22210] FAT-fs (loop4): Directory bread(block 70) failed [ 728.009987][T22210] FAT-fs (loop4): Directory bread(block 71) failed [ 728.034230][T22210] FAT-fs (loop4): Directory bread(block 72) failed [ 728.051678][T22210] FAT-fs (loop4): Directory bread(block 73) failed [ 728.721366][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6473'. [ 728.907690][ T6076] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 728.963999][T22294] netlink: 'syz.4.6476': attribute type 3 has an invalid length. [ 728.993510][T22294] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6476'. [ 729.043091][T22298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6477'. [ 729.089759][ T6076] usb 3-1: Using ep0 maxpacket: 16 [ 729.101758][T22249] loop0: detected capacity change from 0 to 32768 [ 729.125271][ T6076] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 729.158303][T22249] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 729.158303][T22249] [ 729.166139][ T6076] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 729.190218][ T6076] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 729.223468][ T6076] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 729.224387][T22305] batadv1: entered promiscuous mode [ 729.238154][T22308] netlink: 'syz.4.6480': attribute type 37 has an invalid length. [ 729.259011][ T1143] read_mapping_page failed! [ 729.273653][ T1143] ERROR: (device loop0): txCommit: [ 729.273653][ T1143] [ 729.283243][ T6076] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 729.291989][ T1143] jfs_write_inode: jfs_commit_inode failed! [ 729.313717][ T6076] usb 3-1: config 1 interface 0 has no altsetting 0 [ 729.338025][ T6076] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 729.391766][ T6076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.446969][ T6076] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 729.447446][T22323] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6484'. [ 729.535128][T22323] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6484'. [ 729.688194][ T6076] scsi host1: usb-storage 3-1:1.0 [ 729.918672][T20402] usb 3-1: USB disconnect, device number 8 [ 730.260846][T22390] bridge1: entered promiscuous mode [ 730.418570][T22403] loop4: detected capacity change from 0 to 24 [ 730.437500][T22403] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 730.461961][T22403] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 730.826284][T22427] loop2: detected capacity change from 0 to 1024 [ 730.887910][T22427] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 730.994346][T22427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.072364][T22427] /dev/loop2: Can't open blockdev [ 731.222023][ T6092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.267926][T22457] loop5: detected capacity change from 0 to 512 [ 731.334640][T22396] loop3: detected capacity change from 0 to 32768 [ 731.360278][T22396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6501 (22396) [ 731.415488][T22457] __quota_error: 1 callbacks suppressed [ 731.415504][T22457] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 731.440745][T22396] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 731.473950][T22457] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 731.484142][T22457] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.6519: Failed to acquire dquot type 1 [ 731.510417][T22457] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6519: corrupted inode contents [ 731.511418][T22475] loop0: detected capacity change from 0 to 64 [ 731.545666][T22396] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 731.572560][T22457] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.6519: mark_inode_dirty error [ 731.664554][T22457] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6519: corrupted inode contents [ 731.763900][T22457] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.6519: mark_inode_dirty error [ 731.804171][T22396] BTRFS info (device loop3): enabling ssd optimizations [ 731.807611][T22455] loop4: detected capacity change from 0 to 32768 [ 731.818671][T22455] XFS: ikeep mount option is deprecated. [ 731.842848][T22396] BTRFS info (device loop3): enabling free space tree [ 731.850022][T22457] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6519: corrupted inode contents [ 731.894289][T22457] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 731.926274][T22455] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 731.931496][T22457] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6519: corrupted inode contents [ 732.072588][ T6090] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 732.094770][T22457] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.6519: mark_inode_dirty error [ 732.150033][T22457] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 732.196326][T22516] loop0: detected capacity change from 0 to 2048 [ 732.217509][T22516] EXT4-fs: Ignoring removed mblk_io_submit option [ 732.223932][T22457] EXT4-fs (loop5): 1 truncate cleaned up [ 732.252677][T22457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.290384][T22455] XFS (loop4): Ending clean mount [ 732.320749][T22457] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.348131][T22455] XFS (loop4): Quotacheck needed: Please wait. [ 732.353226][T22516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.495397][T22455] XFS (loop4): Quotacheck: Done. [ 732.502530][T22457] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 732.528631][T22457] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 732.555352][T22457] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.6519: Failed to acquire dquot type 1 [ 732.558900][T22516] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6526: bg 0: block 234: padding at end of block bitmap is not set [ 732.610100][T22516] EXT4-fs (loop0): Remounting filesystem read-only [ 732.697189][T19692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.717646][ T6098] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 732.765144][ T6088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.860719][T22539] loop3: detected capacity change from 0 to 16 [ 732.923813][T22539] erofs (device loop3): mounted with root inode @ nid 36. [ 732.960272][T22539] erofs (device loop3): failed to decompress 1929 in[58, 4038] out[2639] [ 732.980793][T22539] erofs (device loop3): read error -117 @ 39 of nid 36 [ 733.126132][T22549] loop5: detected capacity change from 0 to 4096 [ 733.194901][T22549] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 733.330789][T22560] loop3: detected capacity change from 0 to 2048 [ 733.448803][T22560] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 733.461908][T22566] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 733.523669][T22564] loop0: detected capacity change from 0 to 4096 [ 733.540166][T22560] Remounting filesystem read-only [ 733.583625][T22531] loop2: detected capacity change from 0 to 32768 [ 733.601142][T22560] NILFS (loop3): the device already has a read-only mount. [ 733.676147][T22574] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.6538' sets config #3 [ 734.203598][T22602] dvmrp0: entered allmulticast mode [ 734.229956][T22610] QAT: failed to copy from user cfg_data. [ 734.434941][T22622] netlink: 'syz.2.6551': attribute type 10 has an invalid length. [ 734.458151][T22622] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6551'. [ 734.674916][T22641] netlink: 'syz.3.6557': attribute type 1 has an invalid length. [ 734.690733][T22641] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6557'. [ 735.085123][T22668] netlink: 'syz.0.6566': attribute type 1 has an invalid length. [ 735.117935][T22668] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6566'. [ 735.405862][T22693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6575'. [ 735.709485][T22717] loop0: detected capacity change from 0 to 128 [ 736.081988][T22742] loop0: detected capacity change from 0 to 64 [ 736.115989][T22742] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 736.249913][T22742] minix_free_inode: bit 4 already cleared [ 736.805266][T22790] loop4: detected capacity change from 0 to 1024 [ 736.884604][T22790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.963886][T22808] loop0: detected capacity change from 0 to 64 [ 736.965094][ T6098] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.972073][T22806] netlink: 'syz.5.6607': attribute type 3 has an invalid length. [ 736.987718][T22806] tc_dump_action: action bad kind [ 737.522577][T22847] loop4: detected capacity change from 0 to 764 [ 737.864490][T22867] loop4: detected capacity change from 0 to 2048 [ 737.870864][T22873] loop0: detected capacity change from 0 to 1024 [ 738.027249][ T12] hfsplus: b-tree write err: -5, ino 4 [ 738.037713][T22881] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 738.081406][ T30] audit: type=1326 audit(1756889408.869:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.2.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 738.108241][T22867] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 738.162410][ T30] audit: type=1326 audit(1756889408.869:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.2.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 738.217517][T22867] Remounting filesystem read-only [ 738.249836][ T30] audit: type=1326 audit(1756889408.897:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.2.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 738.275011][ T30] audit: type=1326 audit(1756889408.897:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.2.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 738.301069][ T30] audit: type=1326 audit(1756889408.897:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.2.6629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b958ebe9 code=0x7ffc0000 [ 738.419044][ T6098] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 738.430964][T22900] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6633'. [ 738.572119][T22910] netlink: 'syz.4.6636': attribute type 87 has an invalid length. [ 738.884369][T22931] ieee802154 phy0 wpan0: encryption failed: -22 [ 739.272579][T22966] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ ' [ 739.422075][T22976] loop5: detected capacity change from 0 to 128 [ 739.453191][T22976] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 739.503545][T22976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 739.598268][T22976] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 739.603408][T22989] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 739.617273][T22976] UDF-fs: error (device loop5): udf_count_free_bitmap: udf_count_free failed [ 739.642135][T22989] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 739.650410][T22989] overlayfs: missing 'lowerdir' [ 739.767039][T22997] bridge1: entered promiscuous mode [ 739.814076][T22997] bridge1: entered allmulticast mode [ 739.848327][T23002] netlink: 'syz.3.6668': attribute type 25 has an invalid length. [ 740.322591][T23017] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6673'. [ 740.510464][T19692] UDF-fs: error (device loop5): udf_read_inode: (ino 104) failed !bh [ 740.532087][T19692] UDF-fs: error (device loop5): udf_read_inode: (ino 104) failed !bh [ 740.995980][T23053] loop4: detected capacity change from 0 to 4096 [ 741.055407][T23053] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 741.296662][T23053] ntfs3(loop4): mft corrupted [ 741.334673][ T30] audit: type=1800 audit(1756889411.918:119): pid=23053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6683" name="file0" dev="loop4" ino=33 res=0 errno=0 [ 741.739019][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6694'. [ 741.944991][T23098] batadv1: entered promiscuous mode [ 742.143544][ T12] bridge_slave_1: left allmulticast mode [ 742.149224][ T12] bridge_slave_1: left promiscuous mode [ 742.192967][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.262444][ T12] bridge_slave_0: left allmulticast mode [ 742.268124][ T12] bridge_slave_0: left promiscuous mode [ 742.294135][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.532671][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 742.553277][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 742.565515][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 742.573856][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 742.582262][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 742.788881][T23159] loop3: detected capacity change from 0 to 1024 [ 742.887874][ T1112] hfsplus: b-tree write err: -5, ino 4 [ 743.129336][T23178] loop3: detected capacity change from 0 to 512 [ 743.172919][T23178] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 743.192294][T23178] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 743.212040][T23178] System zones: 0-1, 15-15, 18-18, 34-34 [ 743.217991][T23178] EXT4-fs (loop3): orphan cleanup on readonly fs [ 743.237424][T23178] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 743.263643][T23178] EXT4-fs warning (device loop3): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 743.302887][T23178] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 743.320388][T23178] EXT4-fs (loop3): 1 truncate cleaned up [ 743.328104][T23178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 743.390299][T23178] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 743.460651][ T6090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.474017][T23192] loop4: detected capacity change from 0 to 4096 [ 743.500174][T23192] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 743.653108][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.694541][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.716047][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 743.737538][ T12] bond0 (unregistering): Released all slaves [ 743.913626][T23141] vxcan1 speed is unknown, defaulting to 1000 [ 744.129731][T23223] loop3: detected capacity change from 0 to 1024 [ 744.354008][T23241] loop4: detected capacity change from 0 to 64 [ 744.580395][ T30] audit: type=1800 audit(1756889414.949:120): pid=23241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6727" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 744.829220][T15713] Bluetooth: hci3: command tx timeout [ 744.952912][T23277] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.6735'. [ 745.814864][T23318] loop2: detected capacity change from 0 to 256 [ 745.942163][T23318] FAT-fs (loop2): Directory bread(block 64) failed [ 745.959210][T23318] FAT-fs (loop2): Directory bread(block 65) failed [ 745.968258][T23318] FAT-fs (loop2): Directory bread(block 66) failed [ 746.055354][T23318] FAT-fs (loop2): Directory bread(block 67) failed [ 746.083603][T23318] FAT-fs (loop2): Directory bread(block 68) failed [ 746.126672][T23318] FAT-fs (loop2): Directory bread(block 69) failed [ 746.129906][T23280] loop4: detected capacity change from 0 to 32768 [ 746.151733][T23318] FAT-fs (loop2): Directory bread(block 70) failed [ 746.158272][T23318] FAT-fs (loop2): Directory bread(block 71) failed [ 746.196965][T23318] FAT-fs (loop2): Directory bread(block 72) failed [ 746.248528][T23318] FAT-fs (loop2): Directory bread(block 73) failed [ 746.287416][T23280] find_entry called with index = 0 [ 746.316533][T23280] read_mapping_page failed! [ 746.357133][T23280] ERROR: (device loop4): txCommit: [ 746.357133][T23280] [ 746.432403][T23298] loop3: detected capacity change from 0 to 32768 [ 747.049816][T15713] Bluetooth: hci3: command tx timeout [ 748.008055][ T12] hsr_slave_0: left promiscuous mode [ 748.025031][ T12] hsr_slave_1: left promiscuous mode [ 748.042715][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.092925][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.330623][T23520] loop0: detected capacity change from 0 to 64 [ 748.493439][T20406] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 748.649244][T23534] netlink: 'syz.0.6776': attribute type 32 has an invalid length. [ 748.678251][T20406] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 748.696979][T20406] usb 5-1: config 0 has no interface number 0 [ 748.718301][T20406] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 748.741621][T20406] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 748.766836][T20406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.789590][T20406] usb 5-1: config 0 descriptor?? [ 748.812318][T20406] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input64 [ 749.109434][T20406] usb 5-1: USB disconnect, device number 17 [ 749.115472][ C1] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 749.273881][T15713] Bluetooth: hci3: command tx timeout [ 749.335562][T23528] loop2: detected capacity change from 0 to 32768 [ 749.364480][T23528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6775 (23528) [ 749.441162][T23528] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 749.484643][T23528] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 749.646395][T23528] BTRFS info (device loop2): enabling ssd optimizations [ 749.661503][T23528] BTRFS info (device loop2): enabling free space tree [ 749.674917][ T30] audit: type=1326 audit(1756889419.691:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23587 comm="syz.0.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 749.761175][ T30] audit: type=1326 audit(1756889419.729:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23587 comm="syz.0.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 749.797655][ T6092] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 750.000080][ T12] team0 (unregistering): Port device team_slave_1 removed [ 750.106648][ T12] team0 (unregistering): Port device team_slave_0 removed [ 750.187663][T23603] loop2: detected capacity change from 0 to 512 [ 750.232880][T23603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.245839][T23603] ext4 filesystem being mounted at /1315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.302389][T23603] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 750.325223][T23603] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 750.335608][T23603] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6782: Failed to acquire dquot type 1 [ 750.443228][ T6092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.814800][T23141] chnl_net:caif_netlink_parms(): no params data found [ 751.050888][T23634] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 751.114558][T23655] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6787'. [ 751.217095][T23637] loop2: detected capacity change from 0 to 16384 [ 751.361390][T23141] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.388596][T23141] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.400286][T23141] bridge_slave_0: entered allmulticast mode [ 751.420654][T23141] bridge_slave_0: entered promiscuous mode [ 751.437562][T23141] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.445768][T23141] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.452977][T23141] bridge_slave_1: entered allmulticast mode [ 751.461219][T23141] bridge_slave_1: entered promiscuous mode [ 751.497172][T15713] Bluetooth: hci3: command tx timeout [ 751.524497][T23637] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,background_compression=gzip,erasure_code,grpquota,no_splitbrain_check,norecovery,reconstruct_alloc,version_upgrade=none,nocow [ 751.524525][T23637] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 751.681868][T23637] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 751.690760][T23637] bcachefs (loop2): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing [ 751.717121][T23141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.729410][T23141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.881863][T23637] bcachefs (loop2): recovering from clean shutdown, journal seq 18 [ 751.936108][T23637] bcachefs (loop2): dropping and reconstructing all alloc info [ 751.947709][T23141] team0: Port device team_slave_0 added [ 751.982952][T23141] team0: Port device team_slave_1 added [ 752.048817][T23637] bcachefs (loop2): accounting_read... done [ 752.118675][T23637] bcachefs (loop2): alloc_read... done [ 752.124563][T23637] bcachefs (loop2): snapshots_read... done [ 752.147033][T23671] loop4: detected capacity change from 0 to 32768 [ 752.153929][T23637] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 752.175926][T23637] bcachefs (loop2): reading quotas [ 752.202240][T23637] bcachefs (loop2): quotas done [ 752.219382][T23637] bcachefs (loop2): done starting filesystem [ 752.236569][T23671] (syz.4.6788,23671,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 752.302780][T23671] (syz.4.6788,23671,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 752.378314][T23141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.420919][T23671] (syz.4.6788,23671,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 752.463499][T23141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.563086][T23637] bcachefs (loop2): error going rw: -2267 [ 752.593468][T23671] JBD2: Ignoring recovery information on journal [ 752.635906][T23141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.688466][T23141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.703639][T23141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.741045][ T6092] bcachefs (loop2): shutting down [ 752.767384][T23671] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 752.838073][T23141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.868804][ T30] audit: type=1326 audit(1756889422.675:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23819 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 752.903848][ T6092] bcachefs (loop2): shutdown complete [ 752.942620][ T30] audit: type=1326 audit(1756889422.675:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23819 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 753.024455][ T30] audit: type=1326 audit(1756889422.694:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23819 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 753.134035][T23141] hsr_slave_0: entered promiscuous mode [ 753.141676][T23141] hsr_slave_1: entered promiscuous mode [ 753.143690][ T6098] ocfs2: Unmounting device (7,4) on (node local) [ 753.148836][T23141] debugfs: 'hsr0' already exists in 'hsr' [ 753.172394][T23141] Cannot create hsr debugfs directory [ 753.204679][ T30] audit: type=1326 audit(1756889423.003:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23819 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 753.236345][ T30] audit: type=1326 audit(1756889423.003:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23819 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac03d8ebe9 code=0x7ffc0000 [ 753.346551][T20406] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 753.523530][T20406] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 753.558896][T20406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.599354][T20406] usb 4-1: config 0 descriptor?? [ 753.773637][T23944] loop4: detected capacity change from 0 to 764 [ 753.833691][T20406] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 754.048254][T20406] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 754.091645][T23141] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 754.098734][T20406] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 754.136120][T20406] asix 4-1:0.0: probe with driver asix failed with error -71 [ 754.152584][T23141] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 754.192177][T20406] usb 4-1: USB disconnect, device number 15 [ 754.220142][T23141] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 754.250130][T23141] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 754.564350][T23141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.606445][T23141] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.675875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.683072][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.746981][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.754136][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.244746][T24023] autofs4:pid:24023:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.33), cmd(0xc0189375) [ 755.346051][T24023] autofs4:pid:24023:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 755.364498][T23990] loop4: detected capacity change from 0 to 32768 [ 755.389892][T23990] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6812 (23990) [ 755.495275][T23990] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 755.538247][T23990] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 755.800295][T23141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.902352][T23990] BTRFS info (device loop4): enabling ssd optimizations [ 755.909341][T23990] BTRFS info (device loop4): enabling free space tree [ 756.003617][T20411] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 756.192901][ T6098] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 756.235986][T20411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 756.276550][T20411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 238, changing to 7 [ 756.328803][T20411] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50512, setting to 1024 [ 756.430930][T20411] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 756.477816][T20411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.507903][T24096] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 756.517777][T20411] usb 1-1: Product: syz [ 756.527639][T20411] usb 1-1: Manufacturer: syz [ 756.537197][T20411] usb 1-1: SerialNumber: syz [ 756.548003][T24096] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 756.571242][T20411] usb 1-1: config 0 descriptor?? [ 756.592177][T20411] usb 1-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress d7 [ 757.029862][T20411] usb 1-1: USB disconnect, device number 8 [ 757.197795][T23141] veth0_vlan: entered promiscuous mode [ 757.242022][T23141] veth1_vlan: entered promiscuous mode [ 757.280915][T20431] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 757.292618][T24139] loop2: detected capacity change from 0 to 4096 [ 757.387166][T24139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.393829][T23141] veth0_macvtap: entered promiscuous mode [ 757.412043][T23141] veth1_macvtap: entered promiscuous mode [ 757.435502][T23141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.448254][T23141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.476399][T24139] [ 757.478759][T24139] ====================================================== [ 757.485775][T24139] WARNING: possible circular locking dependency detected [ 757.492804][T24139] syzkaller #0 Not tainted [ 757.497218][T24139] ------------------------------------------------------ [ 757.504232][T24139] syz.2.6836/24139 is trying to acquire lock: [ 757.510292][T24139] ffff88805812d068 (&dquot->dq_lock){+.+.}-{4:4}, at: dqget+0x72a/0xf10 [ 757.518663][T24139] [ 757.518663][T24139] but task is already holding lock: [ 757.526020][T24139] ffff8880580de9f8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x855/0x1bc0 [ 757.534994][T24139] [ 757.534994][T24139] which lock already depends on the new lock. [ 757.534994][T24139] [ 757.545382][T24139] [ 757.545382][T24139] the existing dependency chain (in reverse order) is: [ 757.554379][T24139] [ 757.554379][T24139] -> #5 (&ei->xattr_sem){++++}-{4:4}: [ 757.561924][T24139] lock_acquire+0x120/0x360 [ 757.566938][T24139] down_read+0x46/0x2e0 [ 757.571603][T24139] ext4_setattr+0x855/0x1bc0 [ 757.576697][T24139] notify_change+0xc17/0xf40 [ 757.581797][T24139] chown_common+0x40c/0x5c0 [ 757.586806][T24139] do_fchownat+0x161/0x270 [ 757.591725][T24139] __x64_sys_chown+0x82/0xa0 [ 757.596821][T24139] do_syscall_64+0xfa/0xfa0 [ 757.601832][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.608240][T24139] [ 757.608240][T24139] -> #4 (jbd2_handle){++++}-{0:0}: [ 757.615528][T24139] lock_acquire+0x120/0x360 [ 757.620541][T24139] start_this_handle+0x1fa7/0x21c0 [ 757.626164][T24139] jbd2__journal_start+0x2c1/0x5b0 [ 757.631819][T24139] jbd2_journal_start+0x2a/0x40 [ 757.637186][T24139] ocfs2_start_trans+0x376/0x6d0 [ 757.642630][T24139] ocfs2_modify_bh+0xe8/0x470 [ 757.647818][T24139] ocfs2_local_read_info+0x1465/0x17e0 [ 757.653789][T24139] dquot_load_quota_sb+0x791/0xbd0 [ 757.659403][T24139] dquot_load_quota_inode+0x2e1/0x5d0 [ 757.665724][T24139] ocfs2_enable_quotas+0x1c6/0x450 [ 757.671341][T24139] ocfs2_fill_super+0x50e7/0x63a0 [ 757.676888][T24139] get_tree_bdev_flags+0x40e/0x4d0 [ 757.682525][T24139] vfs_get_tree+0x92/0x2b0 [ 757.687461][T24139] do_new_mount+0x2a2/0xa30 [ 757.692473][T24139] __se_sys_mount+0x317/0x410 [ 757.697653][T24139] do_syscall_64+0xfa/0xfa0 [ 757.702674][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.709090][T24139] [ 757.709090][T24139] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 757.717599][T24139] lock_acquire+0x120/0x360 [ 757.722619][T24139] down_read+0x46/0x2e0 [ 757.727284][T24139] ocfs2_start_trans+0x36a/0x6d0 [ 757.732734][T24139] ocfs2_modify_bh+0xe8/0x470 [ 757.737917][T24139] ocfs2_local_read_info+0x1465/0x17e0 [ 757.743882][T24139] dquot_load_quota_sb+0x791/0xbd0 [ 757.749497][T24139] dquot_load_quota_inode+0x2e1/0x5d0 [ 757.755372][T24139] ocfs2_enable_quotas+0x1c6/0x450 [ 757.760994][T24139] ocfs2_fill_super+0x50e7/0x63a0 [ 757.766528][T24139] get_tree_bdev_flags+0x40e/0x4d0 [ 757.772152][T24139] vfs_get_tree+0x92/0x2b0 [ 757.777075][T24139] do_new_mount+0x2a2/0xa30 [ 757.782096][T24139] __se_sys_mount+0x317/0x410 [ 757.787351][T24139] do_syscall_64+0xfa/0xfa0 [ 757.792369][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.798777][T24139] [ 757.798777][T24139] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 757.806245][T24139] lock_acquire+0x120/0x360 [ 757.811262][T24139] ocfs2_start_trans+0x26b/0x6d0 [ 757.816716][T24139] ocfs2_acquire_dquot+0x455/0xb30 [ 757.822424][T24139] dqget+0x7b1/0xf10 [ 757.826827][T24139] dquot_set_dqblk+0x2b/0xfa0 [ 757.832014][T24139] quota_setquota+0x4b7/0x540 [ 757.837201][T24139] __se_sys_quotactl+0x279/0x950 [ 757.842741][T24139] do_syscall_64+0xfa/0xfa0 [ 757.847751][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.854150][T24139] [ 757.854150][T24139] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 757.862996][T24139] lock_acquire+0x120/0x360 [ 757.868015][T24139] down_write+0x96/0x1f0 [ 757.872778][T24139] ocfs2_create_local_dquot+0x19d/0x1a40 [ 757.878940][T24139] ocfs2_acquire_dquot+0x80f/0xb30 [ 757.884571][T24139] dqget+0x7b1/0xf10 [ 757.888984][T24139] dquot_set_dqblk+0x2b/0xfa0 [ 757.894177][T24139] quota_setquota+0x4b7/0x540 [ 757.899372][T24139] __se_sys_quotactl+0x279/0x950 [ 757.904828][T24139] do_syscall_64+0xfa/0xfa0 [ 757.909843][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.916240][T24139] [ 757.916240][T24139] -> #0 (&dquot->dq_lock){+.+.}-{4:4}: [ 757.923883][T24139] validate_chain+0xb9b/0x2140 [ 757.929158][T24139] __lock_acquire+0xab9/0xd20 [ 757.934341][T24139] lock_acquire+0x120/0x360 [ 757.939352][T24139] __mutex_lock+0x187/0x1350 [ 757.944445][T24139] dqget+0x72a/0xf10 [ 757.948846][T24139] dquot_transfer+0x4b8/0x6d0 [ 757.954033][T24139] ext4_setattr+0x865/0x1bc0 [ 757.959128][T24139] notify_change+0xc17/0xf40 [ 757.964227][T24139] chown_common+0x40c/0x5c0 [ 757.969281][T24139] do_fchownat+0x161/0x270 [ 757.974217][T24139] __x64_sys_lchown+0x85/0xa0 [ 757.979416][T24139] do_syscall_64+0xfa/0xfa0 [ 757.984430][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.990834][T24139] [ 757.990834][T24139] other info that might help us debug this: [ 757.990834][T24139] [ 758.001043][T24139] Chain exists of: [ 758.001043][T24139] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 758.001043][T24139] [ 758.013631][T24139] Possible unsafe locking scenario: [ 758.013631][T24139] [ 758.021061][T24139] CPU0 CPU1 [ 758.026406][T24139] ---- ---- [ 758.031752][T24139] rlock(&ei->xattr_sem); [ 758.036155][T24139] lock(jbd2_handle); [ 758.042733][T24139] lock(&ei->xattr_sem); [ 758.049571][T24139] lock(&dquot->dq_lock); [ 758.053969][T24139] [ 758.053969][T24139] *** DEADLOCK *** [ 758.053969][T24139] [ 758.062099][T24139] 3 locks held by syz.2.6836/24139: [ 758.067277][T24139] #0: ffff8880429d0428 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 758.076408][T24139] #1: ffff8880580ded10 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: chown_common+0x313/0x5c0 [ 758.086577][T24139] #2: ffff8880580de9f8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x855/0x1bc0 [ 758.095959][T24139] [ 758.095959][T24139] stack backtrace: [ 758.101836][T24139] CPU: 0 UID: 0 PID: 24139 Comm: syz.2.6836 Not tainted syzkaller #0 PREEMPT(full) [ 758.101866][T24139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 758.101882][T24139] Call Trace: [ 758.101890][T24139] [ 758.101898][T24139] dump_stack_lvl+0x189/0x250 [ 758.101919][T24139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.101934][T24139] ? __pfx__printk+0x10/0x10 [ 758.101953][T24139] ? print_lock_name+0xde/0x100 [ 758.101972][T24139] print_circular_bug+0x2ee/0x310 [ 758.101987][T24139] check_noncircular+0x134/0x160 [ 758.102003][T24139] validate_chain+0xb9b/0x2140 [ 758.102017][T24139] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 758.102032][T24139] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 758.102048][T24139] ? look_up_lock_class+0x74/0x170 [ 758.102064][T24139] ? register_lock_class+0x51/0x320 [ 758.102084][T24139] __lock_acquire+0xab9/0xd20 [ 758.102103][T24139] ? dqget+0x72a/0xf10 [ 758.102116][T24139] lock_acquire+0x120/0x360 [ 758.102134][T24139] ? dqget+0x72a/0xf10 [ 758.102150][T24139] __mutex_lock+0x187/0x1350 [ 758.102167][T24139] ? dqget+0x72a/0xf10 [ 758.102184][T24139] ? dqget+0x72a/0xf10 [ 758.102197][T24139] ? __pfx___mutex_lock+0x10/0x10 [ 758.102219][T24139] dqget+0x72a/0xf10 [ 758.102235][T24139] dquot_transfer+0x4b8/0x6d0 [ 758.102252][T24139] ? __pfx_dquot_transfer+0x10/0x10 [ 758.102266][T24139] ? ext4_journal_check_start+0x1cf/0x2b0 [ 758.102282][T24139] ? down_read+0x1ad/0x2e0 [ 758.102299][T24139] ext4_setattr+0x865/0x1bc0 [ 758.102314][T24139] ? __pfx_current_time+0x10/0x10 [ 758.102331][T24139] ? try_break_deleg+0x79/0x130 [ 758.102347][T24139] ? __pfx_ext4_setattr+0x10/0x10 [ 758.102360][T24139] notify_change+0xc17/0xf40 [ 758.102379][T24139] chown_common+0x40c/0x5c0 [ 758.102396][T24139] ? __pfx_chown_common+0x10/0x10 [ 758.102413][T24139] ? mnt_get_write_access+0x223/0x2a0 [ 758.102431][T24139] do_fchownat+0x161/0x270 [ 758.102445][T24139] ? __pfx_do_fchownat+0x10/0x10 [ 758.102461][T24139] __x64_sys_lchown+0x85/0xa0 [ 758.102475][T24139] do_syscall_64+0xfa/0xfa0 [ 758.102491][T24139] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.102505][T24139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.102519][T24139] ? clear_bhb_loop+0x60/0xb0 [ 758.102535][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.102549][T24139] RIP: 0033:0x7fb2b958ebe9 [ 758.102563][T24139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.102574][T24139] RSP: 002b:00007fb2ba3c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 758.102589][T24139] RAX: ffffffffffffffda RBX: 00007fb2b97c5fa0 RCX: 00007fb2b958ebe9 [ 758.102600][T24139] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 00002000000006c0 [ 758.102609][T24139] RBP: 00007fb2b9611e19 R08: 0000000000000000 R09: 0000000000000000 [ 758.102618][T24139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.102627][T24139] R13: 00007fb2b97c6038 R14: 00007fb2b97c5fa0 R15: 00007ffe3bb57cc8 [ 758.102643][T24139] [ 758.483535][T20431] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 758.494296][T20431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.503826][T20431] usb 4-1: Product: syz [ 758.508002][T20431] usb 4-1: Manufacturer: syz [ 758.514412][T20431] usb 4-1: SerialNumber: syz [ 758.524542][T20431] r8152-cfgselector 4-1: Unknown version 0x0000 [ 758.530818][T20431] r8152-cfgselector 4-1: config 0 descriptor?? [ 758.552082][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.562819][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.599301][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.605016][ T6092] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.615857][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.644544][T23141] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 758.695167][T23141] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 758.705168][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.716204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.740540][T19842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.750289][T19842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.995217][T20411] r8152-cfgselector 4-1: USB disconnect, device number 16