last executing test programs: 4m52.359010313s ago: executing program 0 (id=523): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1000, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x40}}}}}]}}]}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4000040) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002207000000ab"], 0x0}, 0x0) 4m50.139592418s ago: executing program 0 (id=548): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e200e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4m49.434471408s ago: executing program 0 (id=550): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) times(0x0) 4m48.321951886s ago: executing program 0 (id=552): syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2) 4m47.977870912s ago: executing program 0 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a84ced88a8", 0x12, 0x84, &(0x7f0000000100)={0x11, 0x3, r2, 0x1, 0x75, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14) 4m47.44890728s ago: executing program 0 (id=560): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000034c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0) 4m46.941692158s ago: executing program 32 (id=560): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000034c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1e}]}, 0x2c}}, 0x0) 6.95214214s ago: executing program 2 (id=3146): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x10001, r0}) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 6.808859092s ago: executing program 2 (id=3149): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x124, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x98, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x2}, @TCA_ROUTE4_ACT={0x8c, 0x6, [@m_gact={0x54, 0x1b, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xfde, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x190b, 0x4, 0x3, 0x2, 0x7fffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.599425326s ago: executing program 2 (id=3152): rt_sigreturn() syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x250, 0x67, 0x9, 0xcf, 0x40, 0x710, 0x1, 0x4624, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x2, 0x0, 0x2, [{{0x9, 0x4, 0xb4, 0x4, 0x2, 0x25, 0xe8, 0xd6, 0x1, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x10, 0x3, 0x81}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x5, 0x1, 0xfd}}]}}]}}]}}, 0x0) socket$inet6(0xa, 0x3, 0x6) 5.782821568s ago: executing program 2 (id=3159): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)=""/61, 0x3d) 4.906816722s ago: executing program 2 (id=3165): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) recvmmsg$unix(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 3.686454691s ago: executing program 1 (id=3175): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) recvmmsg(r0, &(0x7f000000f240)=[{{0x0, 0x0, 0x0}, 0x44d}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) 3.246557039s ago: executing program 5 (id=3178): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x1d3, 0x0, 'queue0\x00', 0x48}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r1, &(0x7f0000000240)=[{0x22, 0xf0, 0x0, 0xfd, @tick, {}, {}, @queue={0x0, {0x7a120, 0x100}}}], 0x1c) 2.941685404s ago: executing program 5 (id=3180): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) 2.778587366s ago: executing program 1 (id=3182): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 2.776374016s ago: executing program 5 (id=3183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x8fff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.56668476s ago: executing program 5 (id=3185): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x12e042, 0x92) write$cgroup_type(r0, &(0x7f0000000100), 0x9) pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) 2.54771568s ago: executing program 1 (id=3187): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2.225804185s ago: executing program 1 (id=3189): r0 = io_uring_setup(0x1379, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0x121}) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r1, 0x4, 0x13, &(0x7f0000000000), 0x0) 2.017426318s ago: executing program 1 (id=3192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x60}}, 0x24040884) 1.798180032s ago: executing program 1 (id=3195): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0xc3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x1}, @local=@item_4={0x3, 0x2, 0x0, "c70c0e4e"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) 1.482154616s ago: executing program 3 (id=3199): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:', @ANYRESOCT], 0xa) 1.422661767s ago: executing program 4 (id=3200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.366485538s ago: executing program 4 (id=3201): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 1.355471169s ago: executing program 3 (id=3202): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040), &(0x7f0000000100)=0x8) 1.078786333s ago: executing program 4 (id=3203): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2d, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_MPU={0x8, 0xe, 0x53}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}, @qdisc_kind_options=@q_red={{0x8}, {0x10}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff8}]}, 0xaa}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 1.050177713s ago: executing program 5 (id=3204): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x489c}, 0x3c) 1.035079364s ago: executing program 3 (id=3205): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfeff}]}, 0x2c}}, 0x80) 867.202516ms ago: executing program 4 (id=3206): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x101}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}]}, 0x40}}, 0x20008014) 784.947638ms ago: executing program 3 (id=3207): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 671.70046ms ago: executing program 4 (id=3208): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, 0x1a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}]}, 0x3c}}, 0x0) 490.735272ms ago: executing program 3 (id=3209): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000002600)={0xfb, {{0xa, 0x4e21, 0x4, @loopback, 0x4}}}, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 439.536173ms ago: executing program 4 (id=3210): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 404.439524ms ago: executing program 5 (id=3211): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c, 0x4}, {}, {}, {}, {0xd360}, {0x0, 0xfffffffd}, {0x0, 0x80000}], 0x10}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 246.573206ms ago: executing program 2 (id=3212): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x208840, &(0x7f0000000080), 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) preadv2(r0, &(0x7f0000000600)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1, 0x92, 0xc959, 0x10) 246.281196ms ago: executing program 3 (id=3213): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 33 (id=3212): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x208840, &(0x7f0000000080), 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) preadv2(r0, &(0x7f0000000600)=[{&(0x7f0000000f80)=""/4096, 0x1000}], 0x1, 0x92, 0xc959, 0x10) kernel console output (not intermixed with test programs): s (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.026764][ T4532] usb 6-1: USB disconnect, device number 13 [ 314.120497][T10958] loop3: detected capacity change from 0 to 40427 [ 314.212718][T10958] F2FS-fs (loop3): Found nat_bits in checkpoint [ 314.321331][T10958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 314.511785][ T4272] syz-executor: attempt to access beyond end of device [ 314.511785][ T4272] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 314.691901][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2243'. [ 314.761887][T10999] sctp: [Deprecated]: syz.5.2234 (pid 10999) Use of int in maxseg socket option. [ 314.761887][T10999] Use struct sctp_assoc_value instead [ 314.971230][ T5950] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 315.181431][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 315.189069][ T5950] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 315.238728][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.277328][ T5950] pvrusb2: Hardware description: Terratec Grabster AV400 [ 315.294653][ T5950] pvrusb2: ********** [ 315.299131][ T5950] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 315.310240][ T5950] pvrusb2: Important functionality might not be entirely working. [ 315.318293][ T5950] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 315.329955][ T5950] pvrusb2: ********** [ 315.336486][T11017] loop3: detected capacity change from 0 to 1024 [ 315.479545][ T2305] pvrusb2: Invalid write control endpoint [ 315.486313][ T4353] hfsplus: bad catalog file entry [ 315.508915][ T4353] hfsplus: b-tree write err: -5, ino 3 [ 315.513425][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 315.608039][ T2305] pvrusb2: Invalid write control endpoint [ 315.614760][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 315.632953][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 315.640902][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 315.658995][ T2305] pvrusb2: Device being rendered inoperable [ 315.666254][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 315.689351][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 315.705239][T10996] pvrusb2: Attempted to execute control transfer when device not ok [ 315.717540][T11029] loop3: detected capacity change from 0 to 64 [ 315.728587][ T2305] pvrusb2: Attached sub-driver cx25840 [ 315.734386][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.737539][ T952] usb 3-1: USB disconnect, device number 23 [ 315.758388][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 315.772527][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 315.787810][ T22] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 315.797234][T11029] hfs: request for non-existent node 327680 in B*Tree [ 315.808183][T11029] hfs: request for non-existent node 327680 in B*Tree [ 315.822031][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.828841][T11029] hfs: request for non-existent node 327680 in B*Tree [ 315.845014][T11029] hfs: request for non-existent node 327680 in B*Tree [ 315.847370][ T22] usb 5-1: config 0 descriptor?? [ 315.856622][T11030] hfs: request for non-existent node 327680 in B*Tree [ 315.867042][T11030] hfs: request for non-existent node 327680 in B*Tree [ 315.926502][ T46] hfs: request for non-existent node 327680 in B*Tree [ 315.936364][ T46] hfs: request for non-existent node 327680 in B*Tree [ 316.269491][ T22] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 316.297258][ T22] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 316.320730][ T22] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 316.341221][ T22] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 316.349582][ T22] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 316.371660][ T22] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0x0 [ 316.379642][ T22] steelseries_srws1 0003:1038:1410.0012: unexpected long global item [ 316.389160][ T22] steelseries_srws1 0003:1038:1410.0012: parse failed [ 316.397991][ T22] steelseries_srws1: probe of 0003:1038:1410.0012 failed with error -22 [ 316.438322][T11043] loop5: detected capacity change from 0 to 1024 [ 316.562556][ T952] usb 5-1: USB disconnect, device number 13 [ 316.585137][T11045] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2254'. [ 316.736876][T11050] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.808385][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2257'. [ 316.939099][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.945460][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.727463][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2270'. [ 317.839941][T11086] loop4: detected capacity change from 0 to 128 [ 317.848181][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2270'. [ 317.894600][T11086] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 317.924662][T11086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.038442][T11088] loop5: detected capacity change from 0 to 2048 [ 318.240991][T11088] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 318.280261][ T11] device hsr_slave_0 left promiscuous mode [ 318.299687][T11088] EXT4-fs (loop5): shut down requested (2) [ 318.321939][ T11] device hsr_slave_1 left promiscuous mode [ 318.348931][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.387893][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.463358][ T5987] EXT4-fs (loop5): unmounting filesystem. [ 318.475977][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.488331][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.502885][ T11] device bridge_slave_1 left promiscuous mode [ 318.520474][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.553363][ T11] device bridge_slave_0 left promiscuous mode [ 318.566136][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.657301][ T11] device veth1_macvtap left promiscuous mode [ 318.664864][ T11] device veth0_macvtap left promiscuous mode [ 318.681311][ T11] device veth1_vlan left promiscuous mode [ 318.704996][ T11] device veth0_vlan left promiscuous mode [ 319.087971][T11107] loop2: detected capacity change from 0 to 40427 [ 319.105985][T11107] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 319.114759][T11107] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 319.144697][T11107] F2FS-fs (loop2): invalid crc value [ 319.194980][T11107] F2FS-fs (loop2): Found nat_bits in checkpoint [ 319.299505][T11107] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 319.306972][T11107] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 319.898742][ T11] team0 (unregistering): Port device team_slave_1 removed [ 319.955091][ T11] team0 (unregistering): Port device team_slave_0 removed [ 320.006454][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.061854][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.644788][ T11] bond0 (unregistering): Released all slaves [ 320.741227][T11109] netlink: 'syz.5.2281': attribute type 25 has an invalid length. [ 320.970760][T11128] device dummy0 entered promiscuous mode [ 321.012491][T11128] device dummy0 left promiscuous mode [ 321.106621][T11130] netlink: 74 bytes leftover after parsing attributes in process `syz.1.2289'. [ 321.409276][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2295'. [ 321.428706][T11148] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 321.591765][T11151] support for cryptoloop has been removed. Use dm-crypt instead. [ 321.599833][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'. [ 321.619079][T11156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2300'. [ 321.931473][ T5952] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 321.983701][T11171] loop3: detected capacity change from 0 to 512 [ 322.006988][T11171] EXT4-fs: Ignoring removed oldalloc option [ 322.028959][T11171] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.096780][T11171] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2308: Parent and EA inode have the same ino 15 [ 322.121800][ T5952] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 322.140121][T11171] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2308: Parent and EA inode have the same ino 15 [ 322.160841][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.182757][T11171] EXT4-fs (loop3): 1 orphan inode deleted [ 322.189640][T11171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 322.233286][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.269897][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.289404][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 322.341852][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.350822][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.380756][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.405229][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.416542][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.430971][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.450837][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.467504][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.478685][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.505836][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.516132][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.524375][T11186] loop2: detected capacity change from 0 to 128 [ 322.531017][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.556192][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.565727][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.582047][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.607941][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.625408][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.638369][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.678477][ T5952] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.706600][ T5952] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 322.723698][ T5952] usb 6-1: config 0 interface 0 has no altsetting 0 [ 322.743167][ T5952] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 322.752807][ T5952] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 322.761701][ T5952] usb 6-1: Product: syz [ 322.765940][ T5952] usb 6-1: Manufacturer: syz [ 322.770902][ T5952] usb 6-1: SerialNumber: syz [ 322.778290][ T5952] usb 6-1: config 0 descriptor?? [ 322.806356][ T5952] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 323.056460][T11194] loop3: detected capacity change from 0 to 1024 [ 323.119709][T11194] hfsplus: bad catalog entry type [ 323.142551][ T5950] usb 6-1: USB disconnect, device number 14 [ 323.153922][ T5950] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 323.250019][T11197] loop2: detected capacity change from 0 to 128 [ 323.258367][ T46] hfsplus: b-tree write err: -5, ino 4 [ 323.402624][T11197] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 323.467197][T11197] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 323.557609][T11207] loop1: detected capacity change from 0 to 2048 [ 323.606913][T11207] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 323.625945][T11207] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 323.702214][T11207] fs-verity (loop1, inode 13): Unknown hash algorithm number: 3 [ 323.773876][ T9193] EXT4-fs (loop2): unmounting filesystem. [ 323.789815][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 323.960077][T11218] loop1: detected capacity change from 0 to 512 [ 324.028948][T11218] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 324.207955][ T11] infiniband syz2: set active [ 324.217430][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 324.234656][ T4352] infiniband syz2: set down [ 324.258648][T11205] loop4: detected capacity change from 0 to 32768 [ 324.280861][T11218] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 324.319789][T11218] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 324.357949][T11205] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 324.379283][T11222] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 324.427348][T11205] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 324.505529][T11222] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 324.543076][T11222] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 324.664992][ T7703] ocfs2: Unmounting device (7,4) on (node local) [ 324.786203][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 325.250923][T11254] loop2: detected capacity change from 0 to 128 [ 325.287244][T11237] loop3: detected capacity change from 0 to 32768 [ 325.295269][T11254] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 325.310055][T11237] (syz.3.2334,11237,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 325.325650][T11254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.349438][T11237] (syz.3.2334,11237,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 325.474900][T11237] JBD2: Ignoring recovery information on journal [ 325.533757][T11237] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 325.678409][T11260] loop5: detected capacity change from 0 to 256 [ 325.750992][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 325.803297][T11260] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 326.182967][T11272] netlink: 'syz.1.2347': attribute type 2 has an invalid length. [ 326.237671][T11272] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2347'. [ 326.671736][T11286] sctp: [Deprecated]: syz.1.2354 (pid 11286) Use of int in max_burst socket option. [ 326.671736][T11286] Use struct sctp_assoc_value instead [ 326.889814][T11270] loop3: detected capacity change from 0 to 32768 [ 326.992818][T11296] loop1: detected capacity change from 0 to 2048 [ 327.001329][T11270] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 327.088008][T11296] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.302759][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 327.406560][T11306] loop4: detected capacity change from 0 to 1764 [ 327.816559][T11302] loop2: detected capacity change from 0 to 32768 [ 327.946777][ T22] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 327.953443][T11302] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 328.099461][T11325] loop4: detected capacity change from 0 to 256 [ 328.143319][ T22] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 328.186892][ T22] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 328.194744][ T9193] (syz-executor,9193,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 328.209851][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.250625][ T9193] ocfs2: Unmounting device (7,2) on (node local) [ 328.266989][ T22] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 329.290370][T11368] loop2: detected capacity change from 0 to 4096 [ 329.331857][ T22] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 329.345702][ T22] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 329.372239][ T22] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 329.501339][ T26] audit: type=1326 audit(1752875528.503:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 329.523597][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.579468][ T22] usb 4-1: USB disconnect, device number 18 [ 329.628675][ T26] audit: type=1326 audit(1752875528.513:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 329.722178][ T26] audit: type=1326 audit(1752875528.553:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 329.744471][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.818802][ T26] audit: type=1326 audit(1752875528.553:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 329.841106][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.890920][T11380] loop2: detected capacity change from 0 to 2048 [ 329.927537][ T26] audit: type=1326 audit(1752875528.553:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 329.975322][T11380] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.985485][ T26] audit: type=1326 audit(1752875528.553:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 330.007390][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2397'. [ 330.007735][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.084907][ T26] audit: type=1326 audit(1752875528.553:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 330.107182][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.119716][ T26] audit: type=1326 audit(1752875528.553:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 330.141992][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.168700][ T26] audit: type=1326 audit(1752875528.553:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 330.191006][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.239907][ T26] audit: type=1326 audit(1752875528.553:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f58e9a9 code=0x7ffc0000 [ 330.479187][T11400] netlink: 'syz.3.2403': attribute type 4 has an invalid length. [ 330.886181][ T952] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 330.967257][T11420] devpts: called with bogus options [ 330.991391][ T5773] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 331.069832][T11424] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2414'. [ 331.121321][ T952] usb 5-1: Using ep0 maxpacket: 8 [ 331.134423][ T952] usb 5-1: config 252 has an invalid interface number: 255 but max is 0 [ 331.160906][ T952] usb 5-1: config 252 has no interface number 0 [ 331.173831][ T952] usb 5-1: too many endpoints for config 252 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 331.183178][ T5773] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 331.188497][ T952] usb 5-1: config 252 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 331.204227][ T5773] usb 6-1: config 0 interface 0 has no altsetting 0 [ 331.214122][ T952] usb 5-1: config 252 interface 255 has no altsetting 0 [ 331.234247][ T5773] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.241191][ T952] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 331.266167][ T952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.266357][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 331.312830][ T5773] usb 6-1: Product: syz [ 331.313441][ T952] pvrusb2: Hardware description: Terratec Grabster AV400 [ 331.322659][ T5773] usb 6-1: Manufacturer: syz [ 331.349543][ T952] pvrusb2: ********** [ 331.358671][ T5773] usb 6-1: SerialNumber: syz [ 331.359794][ T952] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 331.384598][ T5773] usb 6-1: config 0 descriptor?? [ 331.402365][ T5773] usb 6-1: selecting invalid altsetting 0 [ 331.407117][ T952] pvrusb2: Important functionality might not be entirely working. [ 331.419600][ T952] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 331.436424][ T952] pvrusb2: ********** [ 331.440706][ T952] usb 5-1: selecting invalid altsetting 0 [ 331.447251][ T2305] pvrusb2: Invalid write control endpoint [ 331.627088][ T2305] pvrusb2: Invalid write control endpoint [ 331.635537][T11433] netlink: 'syz.2.2418': attribute type 2 has an invalid length. [ 331.643405][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 331.643450][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 331.643459][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 331.643467][ T2305] pvrusb2: Device being rendered inoperable [ 331.655704][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 331.687765][ T952] usb 5-1: USB disconnect, device number 14 [ 331.689559][T11433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2418'. [ 331.708499][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 331.723934][ T2305] pvrusb2: Attached sub-driver cx25840 [ 331.729520][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 331.744314][ T5773] usb 6-1: USB disconnect, device number 15 [ 331.746050][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 332.285378][T11435] loop1: detected capacity change from 0 to 32768 [ 332.315656][T11435] XFS: attr2 mount option is deprecated. [ 332.500715][T11463] loop4: detected capacity change from 0 to 128 [ 332.519409][T11463] EXT4-fs: Ignoring removed i_version option [ 332.520004][T11435] XFS (loop1): Mounting V5 Filesystem [ 332.620488][T11463] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 332.635413][T11463] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 332.642138][T11473] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2433'. [ 332.667352][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.790598][T11435] XFS (loop1): Ending clean mount [ 332.818289][T11435] XFS (loop1): Quotacheck needed: Please wait. [ 332.903261][ T7703] EXT4-fs (loop4): unmounting filesystem. [ 332.965044][T11435] XFS (loop1): Quotacheck: Done. [ 333.190576][ T4265] XFS (loop1): Unmounting Filesystem [ 333.491059][T11470] loop2: detected capacity change from 0 to 32768 [ 333.655193][T11470] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 333.703443][T11496] loop4: detected capacity change from 0 to 64 [ 333.753406][T11496] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 333.826661][ T9193] ocfs2: Unmounting device (7,2) on (node local) [ 333.941347][ T952] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 333.999232][T11500] loop2: detected capacity change from 0 to 16 [ 334.062556][T11500] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 334.119238][T11500] cramfs: Error -3 while decompressing! [ 334.131503][T11500] cramfs: ffffffff96d711a8(27)->ffff888051a2a000(4096) [ 334.138476][T11500] cramfs: Error -3 while decompressing! [ 334.171605][ T952] usb 6-1: Using ep0 maxpacket: 32 [ 334.179512][ T952] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 334.211355][ T952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.217021][T11500] cramfs: ffffffff96d711a8(27)->ffff888051a2a000(4096) [ 334.256881][ T952] usb 6-1: config 0 descriptor?? [ 334.260268][ T4258] udevd[4258]: incorrect cramfs checksum on /dev/loop2 [ 334.289555][ T952] gspca_main: sunplus-2.14.0 probing 041e:400b [ 334.325066][ T4258] udevd[4258]: incorrect cramfs checksum on /dev/loop2 [ 334.381704][ T4258] udevd[4258]: incorrect cramfs checksum on /dev/loop2 [ 334.946309][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2457'. [ 335.092512][ T952] gspca_sunplus: reg_r err -71 [ 335.092563][ T952] sunplus: probe of 6-1:0.0 failed with error -71 [ 335.093871][ T952] usb 6-1: USB disconnect, device number 16 [ 335.378630][T11544] loop4: detected capacity change from 0 to 64 [ 335.467625][T11544] hfs: request for non-existent node 131072 in B*Tree [ 335.491463][T11544] hfs: request for non-existent node 131072 in B*Tree [ 335.547605][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2465'. [ 335.780637][T11559] loop1: detected capacity change from 0 to 256 [ 336.268241][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 336.268254][ T26] audit: type=1326 audit(1752875535.273:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11576 comm="syz.2.2479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f954c38e9a9 code=0x0 [ 336.447673][T11550] loop3: detected capacity change from 0 to 32768 [ 336.565164][T11591] Set syz1 is full, maxelem 65536 reached [ 336.566898][T11550] XFS (loop3): Mounting V5 Filesystem [ 336.684731][T11550] XFS (loop3): Ending clean mount [ 336.699578][T11550] XFS (loop3): Quotacheck needed: Please wait. [ 336.775672][T11550] XFS (loop3): Quotacheck: Done. [ 336.801429][ T952] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 336.861760][T11599] loop4: detected capacity change from 0 to 1024 [ 336.869629][T11599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.948493][T11599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 336.975158][ T4272] XFS (loop3): Unmounting Filesystem [ 337.001248][ T952] usb 3-1: Using ep0 maxpacket: 32 [ 337.012935][ T952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.025014][ T952] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 337.037494][ T952] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 337.046962][ T952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.067169][ T952] usb 3-1: config 0 descriptor?? [ 337.146939][ T7703] EXT4-fs (loop4): unmounting filesystem. [ 337.285288][ T5773] usb 3-1: USB disconnect, device number 24 [ 337.937916][T11609] loop3: detected capacity change from 0 to 40427 [ 337.981244][T11609] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 337.996555][T11609] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 338.029999][T11609] F2FS-fs (loop3): invalid crc value [ 338.077480][T11609] F2FS-fs (loop3): Found nat_bits in checkpoint [ 338.187190][T11609] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 338.196878][T11609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 338.728638][T11622] loop4: detected capacity change from 0 to 65536 [ 338.778652][T11622] XFS (loop4): Mounting V5 Filesystem [ 338.826113][T11622] XFS (loop4): Ending clean mount [ 338.846574][T11622] XFS (loop4): Quotacheck needed: Please wait. [ 338.914839][ T4352] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x25 dinode [ 338.961355][ T4352] XFS (loop4): Unmount and run xfs_repair [ 338.967126][ T4352] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 338.994603][ T4352] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 339.007405][ T4352] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 339.037067][ T4352] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 339.047016][ T4352] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 339.070574][ T4352] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 339.086283][ T4352] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 339.095973][ T4352] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 339.110246][ T4352] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 339.135855][T11654] binder: 11653:11654 ioctl c018620c 200000000700 returned -1 [ 339.212893][T11622] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 339.219220][T11658] loop2: detected capacity change from 0 to 64 [ 340.067930][ T7703] XFS (loop4): Unmounting Filesystem [ 340.113919][T11656] loop5: detected capacity change from 0 to 32768 [ 340.157098][T11660] loop3: detected capacity change from 0 to 131072 [ 340.194329][T11660] F2FS-fs (loop3): invalid crc value [ 340.258024][T11656] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 340.278705][T11660] F2FS-fs (loop3): Found nat_bits in checkpoint [ 340.327335][T11660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 340.442602][ T5987] ocfs2: Unmounting device (7,5) on (node local) [ 340.470316][ T5773] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 340.683500][ T5773] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 340.705830][ T5773] usb 3-1: config 0 interface 0 has no altsetting 0 [ 340.756362][ T5773] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.793338][T11680] loop5: detected capacity change from 0 to 128 [ 340.811511][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.819925][ T5773] usb 3-1: Product: syz [ 340.834569][ T5773] usb 3-1: Manufacturer: syz [ 340.839204][ T5773] usb 3-1: SerialNumber: syz [ 340.873113][ T5773] usb 3-1: config 0 descriptor?? [ 340.900369][ T5773] usb 3-1: selecting invalid altsetting 0 [ 340.916677][T11686] binder: 11685:11686 ioctl c00c620f 2000000002c0 returned -22 [ 340.931915][T11680] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 340.958618][T11688] loop1: detected capacity change from 0 to 512 [ 340.962952][T11680] ext4 filesystem being mounted at /386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.972173][T11688] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 341.034069][T11688] EXT4-fs (loop1): 1 truncate cleaned up [ 341.101249][T11688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 341.137984][ T5773] usb 3-1: USB disconnect, device number 25 [ 341.342562][T11688] EXT4-fs error (device loop1): ext4_xattr_block_find:1837: inode #15: comm syz.1.2517: corrupted xattr block 33 [ 341.465923][ T5987] EXT4-fs (loop5): unmounting filesystem. [ 341.569533][T11693] loop3: detected capacity change from 0 to 1024 [ 341.586964][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 341.595517][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.616220][T11695] loop5: detected capacity change from 0 to 128 [ 341.702258][T11693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 341.850961][T11693] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 342.007223][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 342.331415][T11705] loop5: detected capacity change from 0 to 8192 [ 342.369185][T11705] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.699878][T11699] loop1: detected capacity change from 0 to 32768 [ 342.719219][T11720] loop2: detected capacity change from 0 to 1024 [ 342.813461][ T26] audit: type=1800 audit(1752875541.823:86): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2529" name="file1" dev="loop2" ino=3 res=0 errno=0 [ 342.955847][ T38] hfsplus: b-tree write err: -5, ino 3 [ 343.050552][T11724] __sock_release: fasync list not empty! [ 343.063567][T11703] loop4: detected capacity change from 0 to 32768 [ 343.161097][T11735] loop2: detected capacity change from 0 to 1764 [ 343.177414][T11703] XFS (loop4): Mounting V5 Filesystem [ 343.382567][T11703] XFS (loop4): Ending clean mount [ 343.393257][T11703] XFS (loop4): Quotacheck needed: Please wait. [ 343.535877][T11703] XFS (loop4): Quotacheck: Done. [ 343.651968][ T4532] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 343.721440][ T7703] XFS (loop4): Unmounting Filesystem [ 343.852756][ T4532] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.881512][ T4532] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.894787][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2543'. [ 343.911262][ T4532] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 343.927477][T11761] device bond_slave_0 entered promiscuous mode [ 343.942215][T11761] device bond_slave_1 entered promiscuous mode [ 343.949504][T11763] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2544'. [ 343.965419][ T4532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.991680][ T4532] usb 4-1: config 0 descriptor?? [ 344.026908][T11761] device macvlan3 entered promiscuous mode [ 344.058381][T11761] device bond0 entered promiscuous mode [ 344.087350][T11761] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 344.336867][T11775] loop5: detected capacity change from 0 to 256 [ 344.406194][ T4532] hid-led 0003:1D34:000A.0013: unknown main item tag 0x0 [ 344.431653][ T4532] hid-led 0003:1D34:000A.0013: unknown main item tag 0x0 [ 344.438743][ T4532] hid-led 0003:1D34:000A.0013: unknown main item tag 0x0 [ 344.615133][ T4532] hid-led: probe of 0003:1D34:000A.0013 failed with error -71 [ 344.641919][ T4532] usb 4-1: USB disconnect, device number 19 [ 344.887965][T11791] Can't find ip_set type [ 345.029779][T11803] loop2: detected capacity change from 0 to 2048 [ 345.087493][T11803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 345.357147][ T9193] EXT4-fs (loop2): unmounting filesystem. [ 345.375434][T11820] loop3: detected capacity change from 0 to 1024 [ 345.461800][T11820] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 345.512703][T11820] hfsplus: xattr searching failed [ 345.561610][T11827] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 345.592328][T11827] hfsplus: xattr search failed [ 345.727290][T11833] loop1: detected capacity change from 0 to 128 [ 345.738159][ T4352] hfsplus: b-tree write err: -5, ino 4 [ 345.779778][T11833] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 345.874179][T11833] ext4 filesystem being mounted at /476/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.912788][ T26] audit: type=1326 audit(1752875544.923:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.5.2575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb0ef8e9a9 code=0x0 [ 346.124206][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 346.874533][T11871] netlink: 'syz.5.2588': attribute type 5 has an invalid length. [ 346.952113][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 347.077053][T11879] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2592'. [ 347.098201][T11881] loop5: detected capacity change from 0 to 512 [ 347.129152][T11881] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 347.152320][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 347.163928][ T7] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 347.178766][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.204926][ T7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 347.219915][ T7] pvrusb2: ********** [ 347.231903][ T7] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 347.262602][ T7] pvrusb2: Important functionality might not be entirely working. [ 347.283933][ T7] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 347.315311][ T7] pvrusb2: ********** [ 347.413007][ T2305] pvrusb2: Invalid write control endpoint [ 347.472638][ T2305] pvrusb2: Invalid write control endpoint [ 347.486164][ T2305] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 347.537527][ T2305] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 347.551354][ T2305] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 347.571849][ T2305] pvrusb2: Device being rendered inoperable [ 347.589653][ T2305] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 347.601424][ T2305] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 347.616132][ T2305] pvrusb2: Attached sub-driver cx25840 [ 347.645750][ T2305] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 347.662183][T11866] pvrusb2: Attempted to execute control transfer when device not ok [ 347.681111][ T7] usb 4-1: USB disconnect, device number 20 [ 347.690872][ T2305] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 347.791344][T11896] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 4, id = 0 [ 348.084680][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2604'. [ 348.458086][T11919] loop2: detected capacity change from 0 to 1024 [ 348.540560][T11919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 348.561291][T11919] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.730339][T11919] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 348.990577][ T9193] EXT4-fs (loop2): unmounting filesystem. [ 349.397109][T11917] loop1: detected capacity change from 0 to 32768 [ 349.444076][T11948] loop4: detected capacity change from 0 to 256 [ 349.452001][T11921] loop5: detected capacity change from 0 to 32768 [ 349.478542][T11921] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2611 (11921) [ 349.507773][T11921] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 349.513598][T11948] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 349.532246][T11921] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 349.550020][T11921] BTRFS info (device loop5): turning on sync discard [ 349.561412][T11917] XFS (loop1): Mounting V5 Filesystem [ 349.598139][T11921] BTRFS info (device loop5): doing ref verification [ 349.621047][T11921] BTRFS info (device loop5): disabling tree log [ 349.641506][T11921] BTRFS info (device loop5): enabling ssd optimizations [ 349.648509][T11921] BTRFS info (device loop5): using spread ssd allocation scheme [ 349.710342][T11921] BTRFS info (device loop5): not using ssd optimizations [ 349.749949][T11921] BTRFS info (device loop5): not using spread ssd allocation scheme [ 349.762753][T11917] XFS (loop1): Ending clean mount [ 349.785878][T11921] BTRFS info (device loop5): using free space tree [ 349.840113][T11967] udevd[11967]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 349.931491][ T4265] XFS (loop1): Unmounting Filesystem [ 350.294362][T11992] udevd[11992]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 350.443041][T11970] loop3: detected capacity change from 0 to 32768 [ 350.458428][T11970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2628 (11970) [ 350.508729][T11970] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 350.522035][ T7449] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 350.532476][T11970] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 350.537715][ T5987] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 350.541485][T11970] BTRFS info (device loop3): using free space tree [ 350.725728][ T7449] usb 5-1: Using ep0 maxpacket: 32 [ 350.733003][ T7449] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 350.752042][ T7449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.797263][ T7449] usb 5-1: config 0 descriptor?? [ 350.807972][T11970] BTRFS info (device loop3): enabling ssd optimizations [ 350.856218][T12012] udevd[12012]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 350.906234][T11994] loop1: detected capacity change from 0 to 32768 [ 350.922567][T11994] XFS: attr2 mount option is deprecated. [ 351.046618][ T7449] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 351.065315][ T7449] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 351.076219][ T7449] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 351.088728][ T7449] usb 5-1: media controller created [ 351.126955][T11994] XFS (loop1): Mounting V5 Filesystem [ 351.132969][ T7449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.215519][ T38] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 351.246166][ T4272] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.257219][ T7449] az6027: usb out operation failed. (-71) [ 351.276936][ T7449] az6027: usb out operation failed. (-71) [ 351.287019][ T7449] stb0899_attach: Driver disabled by Kconfig [ 351.293846][ T7449] az6027: no front-end attached [ 351.293846][ T7449] [ 351.319403][ T7449] az6027: usb out operation failed. (-71) [ 351.327853][ T7449] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 351.363151][ T7449] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 351.423207][ T7449] dvb-usb: schedule remote query interval to 400 msecs. [ 351.444951][ T7449] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 351.485002][ T7449] usb 5-1: USB disconnect, device number 15 [ 351.549654][T12028] loop2: detected capacity change from 0 to 128 [ 351.568323][ T4258] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop3 scanned by udevd (4258) [ 351.638796][T12029] udevd[12029]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 351.752557][T11994] XFS (loop1): Ending clean mount [ 351.814241][T11994] XFS (loop1): Quotacheck needed: Please wait. [ 351.837754][ T7449] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 351.909848][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 351.935310][T11994] XFS (loop1): Quotacheck: Done. [ 352.063004][ T4265] XFS (loop1): Unmounting Filesystem [ 352.101256][ T14] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 352.362780][ T14] usb 4-1: config 0 has no interfaces? [ 352.403846][ T14] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 352.442371][T12045] loop2: detected capacity change from 0 to 512 [ 352.451389][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.469115][T12045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 352.474242][ T14] usb 4-1: Product: syz [ 352.510580][T12048] loop5: detected capacity change from 0 to 512 [ 352.511465][ T14] usb 4-1: Manufacturer: syz [ 352.537616][ T14] usb 4-1: SerialNumber: syz [ 352.554044][ T14] usb 4-1: config 0 descriptor?? [ 352.677301][T12045] EXT4-fs (loop2): 1 truncate cleaned up [ 352.716669][T12048] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 352.735099][T12045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 352.756713][T12048] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.867451][ T14] usb 4-1: USB disconnect, device number 21 [ 352.902809][T12048] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 18: comm syz.5.2645: lblock 23 mapped to illegal pblock 18 (length 1) [ 352.997359][ T9193] EXT4-fs (loop2): unmounting filesystem. [ 353.093175][ T5987] EXT4-fs (loop5): unmounting filesystem. [ 353.481278][ T127] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 353.555426][T12086] loop3: detected capacity change from 0 to 1024 [ 353.657973][T12086] hfsplus: xattr searching failed [ 353.678676][ T127] usb 6-1: Using ep0 maxpacket: 8 [ 353.718692][ T127] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 353.760509][ T127] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 353.791023][ T127] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.818276][ T127] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.837201][ T9] hfsplus: b-tree write err: -5, ino 3 [ 353.848431][ T127] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.901788][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.057841][T12078] loop2: detected capacity change from 0 to 32768 [ 354.127518][T12078] JBD2: Ignoring recovery information on journal [ 354.145144][ T127] usb 6-1: GET_CAPABILITIES returned 0 [ 354.150679][ T127] usbtmc 6-1:16.0: can't read capabilities [ 354.167461][T12101] loop4: detected capacity change from 0 to 256 [ 354.180016][T12102] loop3: detected capacity change from 0 to 512 [ 354.260070][T12102] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 24 [ 354.312403][T12078] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 354.369755][ T127] usb 6-1: USB disconnect, device number 17 [ 354.387569][T12102] loop3: detected capacity change from 0 to 629 [ 354.449505][T12102] EXT4-fs (loop3): failed to parse options in superblock: üüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüüü [ 354.478978][T12078] ocfs2: Unmounting device (7,2) on (node local) [ 354.516012][T12102] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 25443 [ 355.079900][T12130] loop2: detected capacity change from 0 to 256 [ 355.140521][T12130] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.211967][T12130] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 355.230637][T12130] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 355.281810][T12135] loop5: detected capacity change from 0 to 512 [ 355.317461][T12135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.418290][T12135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 355.438274][T12135] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.580604][T12122] loop4: detected capacity change from 0 to 40427 [ 355.598472][T12122] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 355.607135][T12122] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 355.622973][ T5987] EXT4-fs (loop5): unmounting filesystem. [ 355.634304][T12122] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 355.656354][T12122] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 355.688961][T12122] F2FS-fs (loop4): invalid crc value [ 355.731617][T12122] F2FS-fs (loop4): Found nat_bits in checkpoint [ 355.770537][T12141] loop2: detected capacity change from 0 to 4096 [ 355.825193][T12148] loop3: detected capacity change from 0 to 1024 [ 355.846656][T12141] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 355.897322][T12141] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 355.916617][T12122] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 355.935602][T12122] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 355.948944][T12148] hfsplus: xattr searching failed [ 355.969556][T12141] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 355.992372][T12148] hfsplus: b-tree write err: -5, ino 3 [ 356.008766][T12141] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 356.055293][T12141] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 356.094094][T12141] ntfs: volume version 3.1. [ 356.104528][ T7703] syz-executor: attempt to access beyond end of device [ 356.104528][ T7703] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 356.105703][T12141] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 356.136725][T12141] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 356.157952][ T9] hfsplus: b-tree write err: -5, ino 3 [ 356.225932][T12141] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 356.257234][T12141] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 356.291452][T12141] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 356.406889][T12155] loop5: detected capacity change from 0 to 64 [ 356.616320][T12159] loop2: detected capacity change from 0 to 128 [ 356.646006][T12159] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 356.776327][ T9193] sysv_free_block: trying to free block not in datazone [ 356.818546][ T9193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 356.968484][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 357.146935][T12174] loop2: detected capacity change from 0 to 128 [ 357.165523][T12174] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 357.196338][T12174] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 357.766968][T12192] ptrace attach of "./syz-executor exec"[9193] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ \x09  \x07 \x07þ\x07þ\x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07 \x07þ\x07þ\x07þ\x07 À  € , /dev/vcsa"[12192] [ 358.151272][ T4707] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 358.178247][T12204] loop1: detected capacity change from 0 to 2048 [ 358.200750][T12204] EXT4-fs: Ignoring removed mblk_io_submit option [ 358.211466][ T127] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 358.277813][T12204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 358.346439][ T4707] usb 4-1: Using ep0 maxpacket: 16 [ 358.368159][ T4707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.380681][T12211] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2709: bg 0: block 234: padding at end of block bitmap is not set [ 358.404604][T12211] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 236 with error 28 [ 358.419747][T12211] EXT4-fs (loop1): This should not happen!! Data will be lost [ 358.419747][T12211] [ 358.429943][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 358.435693][T12211] EXT4-fs (loop1): Total free blocks count 0 [ 358.444807][ T127] usb 5-1: config 0 has no interfaces? [ 358.445903][ T4707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.455401][T12211] EXT4-fs (loop1): Free/Dirty block details [ 358.469055][ T127] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 358.471291][T12211] EXT4-fs (loop1): free_blocks=0 [ 358.483313][ T127] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 358.497343][T12214] loop5: detected capacity change from 0 to 256 [ 358.501365][ T127] usb 5-1: Manufacturer: syz [ 358.508826][ T4707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 358.512653][ T127] usb 5-1: config 0 descriptor?? [ 358.542292][ T4707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 358.552362][T12214] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 358.576125][T12211] EXT4-fs (loop1): dirty_blocks=240 [ 358.583200][ T4707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.606938][T12214] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 358.611607][T12211] EXT4-fs (loop1): Block reservation details [ 358.631395][T12211] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 358.647132][ T4707] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 358.663543][T12214] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 358.678143][ T4707] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 358.706174][ T4707] usb 4-1: Manufacturer: syz [ 358.729573][ T4707] usb 4-1: config 0 descriptor?? [ 358.740079][ T38] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 236 with max blocks 2 with error 28 [ 358.807452][ T127] usb 5-1: USB disconnect, device number 16 [ 358.954083][ T4707] rc_core: Couldn't load IR keymap rc-hauppauge [ 358.973990][ T4707] Registered IR keymap rc-empty [ 358.978963][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 358.993638][T12219] loop5: detected capacity change from 0 to 2048 [ 359.019399][T12219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.036474][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.081941][ T4707] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 359.111498][ T4707] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 359.151089][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.192428][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.221492][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.270709][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.321432][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.351283][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.391440][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.421320][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.481450][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.511318][ T4707] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 359.555153][ T4707] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 359.566429][ T4707] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 359.590848][ T4707] usb 4-1: USB disconnect, device number 22 [ 359.707755][T12230] loop1: detected capacity change from 0 to 32768 [ 359.745566][T12230] XFS (loop1): Mounting V5 Filesystem [ 359.751690][ T7252] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 359.795634][T12230] XFS (loop1): Ending clean mount [ 359.826776][T12230] XFS (loop1): Quotacheck needed: Please wait. [ 359.917353][T12230] XFS (loop1): Quotacheck: Done. [ 359.941287][ T7252] usb 3-1: Using ep0 maxpacket: 32 [ 359.950348][ T7252] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 359.960243][ T7252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.968574][ T7252] usb 3-1: Product: syz [ 359.990512][ T7252] usb 3-1: Manufacturer: syz [ 360.004813][ T7252] usb 3-1: SerialNumber: syz [ 360.026913][ T4265] XFS (loop1): Unmounting Filesystem [ 360.028079][ T7252] usb 3-1: config 0 descriptor?? [ 360.096332][ T7252] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 360.683541][ T7252] gspca_stk1135: reg_w 0x3 err -71 [ 360.700090][ T7252] gspca_stk1135: serial bus timeout: status=0x00 [ 360.733419][ T7252] gspca_stk1135: Sensor write failed [ 360.738766][ T7252] gspca_stk1135: serial bus timeout: status=0x00 [ 360.784914][ T7252] gspca_stk1135: Sensor write failed [ 360.797721][ T7252] gspca_stk1135: serial bus timeout: status=0x00 [ 360.829090][ T7252] gspca_stk1135: Sensor read failed [ 360.841333][ T7252] gspca_stk1135: serial bus timeout: status=0x00 [ 360.848152][ T7252] gspca_stk1135: Sensor read failed [ 360.858280][ T7252] gspca_stk1135: Detected sensor type unknown (0x0) [ 360.883350][ T7252] gspca_stk1135: serial bus timeout: status=0x00 [ 360.900131][ T7252] gspca_stk1135: Sensor read failed [ 360.910250][ T7252] gspca_stk1135: serial bus timeout: status=0x00 [ 360.923260][ T7252] gspca_stk1135: Sensor read failed [ 360.947229][ T7252] gspca_stk1135: serial bus timeout: status=0x00 [ 360.957541][T12266] loop4: detected capacity change from 0 to 4096 [ 360.964170][ T7252] gspca_stk1135: Sensor write failed [ 360.964198][ T7252] gspca_stk1135: serial bus timeout: status=0x00 [ 360.964208][ T7252] gspca_stk1135: Sensor write failed [ 360.964255][ T7252] stk1135: probe of 3-1:0.0 failed with error -71 [ 360.966471][ T7252] usb 3-1: USB disconnect, device number 26 [ 361.012760][T12266] __ntfs_warning: 6 callbacks suppressed [ 361.012775][T12266] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 361.181665][T12266] ntfs: volume version 3.1. [ 361.615635][T12280] serio: Serial port ttynull [ 361.861072][ T7252] kernel write not supported for file /sg0 (pid: 7252 comm: kworker/0:19) [ 362.389168][T12291] loop1: detected capacity change from 0 to 32768 [ 362.416897][T12291] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.2740 (12291) [ 362.447865][T12291] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 362.461355][ T127] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 362.473973][T12291] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 362.484439][T12291] BTRFS info (device loop1): using free space tree [ 362.602789][T12318] udevd[12318]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 362.620380][T12291] BTRFS info (device loop1): enabling ssd optimizations [ 362.662235][T12291] BTRFS info (device loop1): device stats zeroed by syz.1.2740 (12291) [ 362.669005][ T127] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.688314][T12299] loop4: detected capacity change from 0 to 32768 [ 362.688594][ T127] usb 6-1: config 0 has no interface number 0 [ 362.735989][ T4265] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 362.739285][T12299] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 362.766346][ T127] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.806304][ T127] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.817254][ T127] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 362.829550][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.855215][ T127] usb 6-1: config 0 descriptor?? [ 362.947850][T12299] XFS (loop4): Quotacheck needed: Please wait. [ 363.294641][ T127] uclogic 0003:256C:006D.0014: unknown main item tag 0x0 [ 363.323817][ T127] uclogic 0003:256C:006D.0014: unknown main item tag 0x0 [ 363.330950][ T127] uclogic 0003:256C:006D.0014: unknown main item tag 0x0 [ 363.347712][T12299] XFS (loop4): Quotacheck: Done. [ 363.387675][ T127] uclogic 0003:256C:006D.0014: unknown main item tag 0x0 [ 363.419460][ T127] uclogic 0003:256C:006D.0014: unknown main item tag 0x0 [ 363.435857][ T7703] XFS (loop4): Unmounting Filesystem [ 363.449893][ T127] uclogic 0003:256C:006D.0014: No inputs registered, leaving [ 363.523202][ T127] uclogic 0003:256C:006D.0014: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input1 [ 363.569788][ T127] usb 6-1: USB disconnect, device number 18 [ 363.649035][T12343] udevd[12343]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 363.799376][T12334] loop3: detected capacity change from 0 to 32768 [ 363.930751][T12334] XFS (loop3): Mounting V5 Filesystem [ 364.029397][T12334] XFS (loop3): Ending clean mount [ 364.222968][ T4272] XFS (loop3): Unmounting Filesystem [ 364.665892][T12378] loop4: detected capacity change from 0 to 128 [ 364.702012][T12378] FAT-fs (loop4): Directory bread(block 11554) failed [ 364.710065][T12378] FAT-fs (loop4): Directory bread(block 11555) failed [ 364.717424][T12378] FAT-fs (loop4): Directory bread(block 11556) failed [ 364.724675][T12378] FAT-fs (loop4): Directory bread(block 11557) failed [ 364.739465][T12378] FAT-fs (loop4): Directory bread(block 11558) failed [ 364.746640][T12378] FAT-fs (loop4): Directory bread(block 11559) failed [ 364.759327][T12378] FAT-fs (loop4): Directory bread(block 11560) failed [ 364.766613][T12378] FAT-fs (loop4): Directory bread(block 11561) failed [ 364.780612][T12378] FAT-fs (loop4): Directory bread(block 11562) failed [ 364.787751][T12378] FAT-fs (loop4): Directory bread(block 11563) failed [ 364.838529][T12369] loop2: detected capacity change from 0 to 32768 [ 364.856066][T12369] XFS: ikeep mount option is deprecated. [ 364.874402][T12369] XFS: noikeep mount option is deprecated. [ 364.924384][T12369] XFS (loop2): Mounting V5 Filesystem [ 365.049259][T12369] XFS (loop2): Ending clean mount [ 365.072377][T12369] XFS (loop2): Quotacheck needed: Please wait. [ 365.185709][T12369] XFS (loop2): Quotacheck: Done. [ 365.277505][ T9193] XFS (loop2): Unmounting Filesystem [ 365.410124][T12403] netem: incorrect gi model size [ 365.429911][T12403] netem: change failed [ 365.931758][T12409] loop4: detected capacity change from 0 to 4096 [ 365.955580][T12409] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 366.044778][T12409] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 366.255388][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2783'. [ 366.266484][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2783'. [ 366.681089][T12438] loop4: detected capacity change from 0 to 1024 [ 366.742137][T12438] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 366.993607][ T7703] EXT4-fs (loop4): unmounting filesystem. [ 367.320933][T12451] xt_CT: No such helper "snmp" [ 367.404262][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2797'. [ 367.741403][T12459] loop1: detected capacity change from 0 to 32768 [ 367.813192][T12459] JBD2: Ignoring recovery information on journal [ 367.914766][T12459] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 367.937520][T12459] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 367.954597][T12459] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 367.964464][T12459] OCFS2: File system is now read-only. [ 367.969925][T12459] (syz.1.2798,12459,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 367.978682][T12459] (syz.1.2798,12459,0):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -30 [ 367.988108][T12459] (syz.1.2798,12459,0):ocfs2_local_alloc_reserve_for_window:1123 ERROR: status = -30 [ 367.998183][T12459] (syz.1.2798,12459,0):ocfs2_local_alloc_reserve_for_window:1139 ERROR: status = -30 [ 368.009131][T12459] (syz.1.2798,12459,0):ocfs2_local_alloc_slide_window:1254 ERROR: status = -30 [ 368.018185][T12459] (syz.1.2798,12459,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 368.027569][T12459] (syz.1.2798,12459,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 368.036532][T12459] (syz.1.2798,12459,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 368.046481][T12459] (syz.1.2798,12459,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 368.056108][T12459] (syz.1.2798,12459,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 368.065928][T12459] (syz.1.2798,12459,0):ocfs2_symlink:1911 ERROR: status = -30 [ 368.073660][T12459] (syz.1.2798,12459,0):ocfs2_symlink:2065 ERROR: status = -30 [ 368.230212][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 368.475024][T12430] loop2: detected capacity change from 0 to 65536 [ 368.568399][T12430] XFS (loop2): Mounting V5 Filesystem [ 368.681466][T12430] XFS (loop2): Ending clean mount [ 368.797953][ T5950] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 368.836563][ T5950] XFS (loop2): Unmount and run xfs_repair [ 368.866887][ T5950] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 368.891240][ T5950] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 368.902476][ T5773] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 368.920522][ T5950] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 368.949383][ T5950] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 368.985473][ T5950] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 368.987830][T12477] loop1: detected capacity change from 0 to 32768 [ 369.011372][ T5950] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 369.021730][ T5950] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 369.030606][ T5950] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 369.065887][ T5950] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 369.072643][T12471] loop4: detected capacity change from 0 to 32768 [ 369.089837][T12430] XFS (loop2): metadata I/O error in "xfs_read_agf+0x2a0/0x620" at daddr 0x1 len 1 error 74 [ 369.110136][T12477] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.121452][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.129885][T12473] loop3: detected capacity change from 0 to 32768 [ 369.148930][ T5773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.162030][T12477] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 369.176199][T12430] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x54e/0x9a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 369.191361][T12430] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 369.201085][T12477] BTRFS info (device loop1): turning on async discard [ 369.208016][T12477] BTRFS info (device loop1): using free space tree [ 369.227241][ T5773] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 369.241287][ T5773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.252887][ T5773] usb 6-1: config 0 descriptor?? [ 369.264279][T12471] XFS (loop4): Mounting V5 Filesystem [ 369.270761][T12473] XFS (loop3): Mounting V5 Filesystem [ 369.279658][ T9193] XFS (loop2): Unmounting Filesystem [ 369.440263][T12473] XFS (loop3): Ending clean mount [ 369.447400][T12473] XFS (loop3): Quotacheck needed: Please wait. [ 369.458871][T12518] udevd[12518]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 369.499766][T12471] XFS (loop4): Ending clean mount [ 369.564701][T12477] BTRFS info (device loop1): enabling ssd optimizations [ 369.577740][T12473] XFS (loop3): Quotacheck: Done. [ 369.683404][ T5773] hid (null): nested delimiters [ 369.694072][ T5773] hid-led 0003:27B8:01ED.0015: nested delimiters [ 369.708211][ T5773] hid-led 0003:27B8:01ED.0015: item 0 1 2 10 parsing failed [ 369.729703][ T5773] hid-led: probe of 0003:27B8:01ED.0015 failed with error -22 [ 369.826442][ T7703] XFS (loop4): Unmounting Filesystem [ 369.866082][ T4272] XFS (loop3): Unmounting Filesystem [ 369.886187][ T5773] usb 6-1: USB disconnect, device number 19 [ 369.931800][T12524] udevd[12524]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 370.091373][T12528] loop2: detected capacity change from 0 to 164 [ 370.211266][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 370.384406][ T4265] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.432309][ T4705] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 370.636102][ T4705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.662884][ T4705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.703132][ T4705] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 370.706687][T12536] loop1: detected capacity change from 0 to 512 [ 370.730986][T12536] EXT4-fs (loop1): Test dummy encryption mode enabled [ 370.734359][ T4705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.756704][T12536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 370.799699][T12536] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 370.809974][T12536] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.2814: Directory hole found for htree leaf block 0 [ 370.830794][T12536] EXT4-fs (loop1): Remounting filesystem read-only [ 370.874836][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 371.488178][T12539] loop5: detected capacity change from 0 to 131072 [ 371.507591][ T4705] usb 3-1: config 0 descriptor?? [ 371.516716][T12539] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 371.525360][T12539] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 371.535328][T12539] F2FS-fs (loop5): invalid crc value [ 371.616916][T12539] F2FS-fs (loop5): Found nat_bits in checkpoint [ 371.673799][T12539] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 371.681001][T12539] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 371.777318][T12539] fscrypt (loop5, inode 8): Error -61 getting encryption context [ 371.921103][ T4705] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 371.933225][ T4705] pyra 0003:1E7D:2CF6.0016: item fetching failed at offset 6/7 [ 371.974125][ T4705] pyra 0003:1E7D:2CF6.0016: parse failed [ 371.979826][ T4705] pyra: probe of 0003:1E7D:2CF6.0016 failed with error -22 [ 372.047222][T12557] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 372.073533][T12557] syzkaller1: ignored: set checksum enabled [ 372.098987][ T3638] udevd[3638]: worker [6670] terminated by signal 33 (Unknown signal 33) [ 372.125895][ T4533] usb 3-1: USB disconnect, device number 27 [ 372.144335][ T3638] udevd[3638]: worker [6670] failed while handling '/devices/virtual/block/loop1' [ 372.966132][ T3638] udevd[3638]: worker [4258] terminated by signal 33 (Unknown signal 33) [ 372.988619][ T3638] udevd[3638]: worker [4258] failed while handling '/devices/virtual/block/loop5' [ 373.005391][T12565] loop3: detected capacity change from 0 to 32768 [ 373.025039][T12565] XFS: ikeep mount option is deprecated. [ 373.071233][ T6902] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 373.116308][T12565] XFS (loop3): Mounting V5 Filesystem [ 373.217867][T12590] loop4: detected capacity change from 0 to 256 [ 373.225376][T12565] XFS (loop3): Ending clean mount [ 373.237377][T12565] XFS (loop3): Quotacheck needed: Please wait. [ 373.281276][ T6902] usb 3-1: Using ep0 maxpacket: 16 [ 373.288744][ T6902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.335391][ T6902] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 373.369751][ T6902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.399836][ T6902] usb 3-1: config 0 descriptor?? [ 373.415645][T12574] loop5: detected capacity change from 0 to 40427 [ 373.470920][T12574] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 373.488712][T12565] XFS (loop3): Quotacheck: Done. [ 373.527971][T12574] F2FS-fs (loop5): invalid crc value [ 373.564183][T12574] F2FS-fs (loop5): Found nat_bits in checkpoint [ 373.608873][T12580] loop1: detected capacity change from 0 to 40427 [ 373.682773][ T4272] XFS (loop3): Unmounting Filesystem [ 373.744514][T12574] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 373.775010][T12580] F2FS-fs (loop1): Found nat_bits in checkpoint [ 373.819010][ T6902] uclogic 0003:5543:0003.0017: unknown main item tag 0x0 [ 373.840457][ T6902] uclogic 0003:5543:0003.0017: unknown main item tag 0x0 [ 373.871814][ T6902] uclogic 0003:5543:0003.0017: unknown main item tag 0x0 [ 373.902171][ T6902] uclogic 0003:5543:0003.0017: unknown main item tag 0x0 [ 373.913928][T12580] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 373.929687][ T6902] uclogic 0003:5543:0003.0017: unknown main item tag 0x0 [ 373.950434][ T6902] uclogic 0003:5543:0003.0017: No inputs registered, leaving [ 373.957997][T12580] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 373.982343][ T6902] uclogic 0003:5543:0003.0017: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.2-1/input0 [ 374.041692][ T6902] usb 3-1: USB disconnect, device number 28 [ 374.127647][T12601] udevd[12601]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 374.168117][ T4265] syz-executor: attempt to access beyond end of device [ 374.168117][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 374.608514][T12596] loop4: detected capacity change from 0 to 32768 [ 374.694031][T12596] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 374.738135][T12596] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 374.899359][T12596] (syz.4.2832,12596,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 374.970782][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2840'. [ 375.133397][ T7703] ocfs2: Unmounting device (7,4) on (node local) [ 375.215819][ T4705] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 375.247663][T12626] loop1: detected capacity change from 0 to 64 [ 375.431431][ T4705] usb 4-1: Using ep0 maxpacket: 16 [ 375.438309][ T4705] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 375.466701][ T4705] usb 4-1: config 0 has no interface number 0 [ 375.486935][ T4705] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.497062][T12636] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2848'. [ 375.515041][ T4705] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.543220][ T4705] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 375.569579][ T4705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.610244][ T4705] usb 4-1: config 0 descriptor?? [ 375.702107][T12638] netlink: 'syz.5.2850': attribute type 5 has an invalid length. [ 375.980029][T12632] loop4: detected capacity change from 0 to 32768 [ 376.016973][T12632] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2844 (12632) [ 376.044721][ T4705] hid (null): report_id 3440387768 is invalid [ 376.050850][ T4705] hid (null): unknown global tag 0xc [ 376.137287][T12632] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 376.178725][T12632] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 376.231527][T12632] BTRFS info (device loop4): use zlib compression, level 3 [ 376.238831][T12632] BTRFS info (device loop4): turning on sync discard [ 376.264432][ T5950] usb 4-1: USB disconnect, device number 23 [ 376.281443][T12632] BTRFS info (device loop4): doing ref verification [ 376.299046][T12632] BTRFS info (device loop4): disabling tree log [ 376.343529][T12632] BTRFS info (device loop4): enabling tree log [ 376.361386][T12632] BTRFS info (device loop4): enabling ssd optimizations [ 376.368405][T12632] BTRFS info (device loop4): using spread ssd allocation scheme [ 376.410665][T12632] BTRFS info (device loop4): not using ssd optimizations [ 376.431399][T12632] BTRFS info (device loop4): not using spread ssd allocation scheme [ 376.458294][T12632] BTRFS info (device loop4): using free space tree [ 376.463407][T12660] udevd[12660]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 376.657674][ T26] audit: type=1800 audit(1752875575.663:88): pid=12632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2844" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 376.670609][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 376.695106][T12688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2864'. [ 376.731950][ T7703] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 376.780282][T12689] udevd[12689]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 376.999522][T12691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2867'. [ 377.607782][T12695] loop2: detected capacity change from 0 to 32768 [ 377.664228][T12695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2868 (12695) [ 377.717495][T12695] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.759881][T12695] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 377.790204][T12695] BTRFS info (device loop2): metadata ratio 2 [ 377.851514][T12695] BTRFS info (device loop2): allowing degraded mounts [ 377.871208][T12695] BTRFS info (device loop2): force zlib compression, level 3 [ 377.878654][T12695] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 377.943493][T12695] BTRFS info (device loop2): use zstd compression, level 3 [ 377.960498][T12695] BTRFS info (device loop2): force clearing of disk cache [ 377.979259][T12695] BTRFS info (device loop2): allowing degraded mounts [ 377.989573][T12720] udevd[12720]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 378.004482][T12695] BTRFS info (device loop2): max_inline at 0 [ 378.010495][T12695] BTRFS info (device loop2): using free space tree [ 378.227527][T12695] BTRFS info (device loop2): enabling ssd optimizations [ 378.236203][T12695] BTRFS info (device loop2): rebuilding free space tree [ 378.373390][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.481470][ T4705] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 378.518344][T12751] udevd[12751]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 378.608738][ T9193] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.739744][ T4705] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 378.756725][ T4705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.785783][ T4705] usb 6-1: config 0 descriptor?? [ 378.827440][ T4705] gspca_main: spca508-2.14.0 probing 8086:0110 [ 379.032225][ T4705] gspca_spca508: reg_read err -32 [ 379.243742][ T4705] gspca_spca508: reg_read err -71 [ 379.250943][ T4705] gspca_spca508: reg_read err -71 [ 379.252226][T12768] device wlan0 entered promiscuous mode [ 379.273850][ T4705] gspca_spca508: reg_read err -71 [ 379.277385][T12768] device macsec3 entered promiscuous mode [ 379.296105][ T4705] gspca_spca508: reg write: error -71 [ 379.302198][ T4705] spca508: probe of 6-1:0.0 failed with error -71 [ 379.310965][ T4705] usb 6-1: USB disconnect, device number 20 [ 379.324239][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2894'. [ 379.427618][T12774] tipc: Started in network mode [ 379.432756][T12774] tipc: Node identity , cluster identity 4711 [ 379.452435][T12774] tipc: Failed to set node id, please configure manually [ 379.459533][T12774] tipc: Enabling of bearer rejected, failed to enable media [ 379.516117][ T32] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 379.608253][T12782] loop1: detected capacity change from 0 to 2048 [ 379.630716][T12782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 379.652006][T12782] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 379.671732][T12782] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 379.690607][T12782] EXT4-fs (loop1): This should not happen!! Data will be lost [ 379.690607][T12782] [ 379.701498][T12782] EXT4-fs (loop1): Total free blocks count 0 [ 379.707986][T12782] EXT4-fs (loop1): Free/Dirty block details [ 379.714085][T12782] EXT4-fs (loop1): free_blocks=4096 [ 379.719448][T12782] EXT4-fs (loop1): dirty_blocks=32 [ 379.725375][T12782] EXT4-fs (loop1): Block reservation details [ 379.731886][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 379.737827][T12782] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 379.746006][ T32] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 379.768643][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.771230][ T4342] psmouse serio6: Failed to reset mouse on : -5 [ 379.784916][ T32] usb 4-1: config 0 descriptor?? [ 379.849949][ T5330] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 380.005426][ T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 380.021770][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.042322][ T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 380.049521][ T32] usb 4-1: media controller created [ 380.100677][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.220704][ T32] az6027: usb out operation failed. (-71) [ 380.231874][ T32] az6027: usb out operation failed. (-71) [ 380.240505][ T32] stb0899_attach: Driver disabled by Kconfig [ 380.253292][ T32] az6027: no front-end attached [ 380.253292][ T32] [ 380.261343][T12817] serio: Serial port ptm0 [ 380.265473][ T32] az6027: usb out operation failed. (-71) [ 380.276695][ T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 380.308017][ T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 380.342227][ T32] dvb-usb: schedule remote query interval to 400 msecs. [ 380.349279][ T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 380.373284][ T32] usb 4-1: USB disconnect, device number 24 [ 380.421422][ T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 380.543311][T12813] loop1: detected capacity change from 0 to 32768 [ 380.550288][T12813] XFS: attr2 mount option is deprecated. [ 380.555968][T12813] XFS: ikeep mount option is deprecated. [ 380.565198][T12813] XFS (loop1): Mounting V5 Filesystem [ 380.599250][T12813] XFS (loop1): Ending clean mount [ 380.606561][T12813] XFS (loop1): Quotacheck needed: Please wait. [ 380.660644][T12813] XFS (loop1): Quotacheck: Done. [ 380.707744][ T4265] XFS (loop1): Unmounting Filesystem [ 380.830571][T12837] netlink: 'syz.3.2920': attribute type 1 has an invalid length. [ 380.845542][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'. [ 380.934840][T12841] loop1: detected capacity change from 0 to 256 [ 380.956432][T12841] FAT-fs (loop1): Directory bread(block 64) failed [ 380.968302][T12841] FAT-fs (loop1): Directory bread(block 65) failed [ 380.975270][T12841] FAT-fs (loop1): Directory bread(block 66) failed [ 380.981381][ T4705] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 380.987390][T12841] FAT-fs (loop1): Directory bread(block 67) failed [ 380.997367][T12841] FAT-fs (loop1): Directory bread(block 68) failed [ 381.008832][T12841] FAT-fs (loop1): Directory bread(block 69) failed [ 381.026906][T12841] FAT-fs (loop1): Directory bread(block 70) failed [ 381.034130][T12841] FAT-fs (loop1): Directory bread(block 71) failed [ 381.041030][T12841] FAT-fs (loop1): Directory bread(block 72) failed [ 381.047950][T12841] FAT-fs (loop1): Directory bread(block 73) failed [ 381.087384][ T26] audit: type=1800 audit(1752875580.093:89): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2919" name=3830322E31352E34204D4143 dev="loop1" ino=1048679 res=0 errno=0 [ 381.172917][ T4705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.194011][ T4705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.214376][ T4705] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 381.236293][ T4705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.251367][ T4705] usb 3-1: config 0 descriptor?? [ 381.667389][ T4705] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 381.673338][T12860] loop1: detected capacity change from 0 to 32768 [ 381.681924][ T4705] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 381.696052][ T4705] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0 [ 381.713716][ T4705] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 381.729643][T12860] XFS (loop1): Mounting V5 Filesystem [ 381.776036][T12860] XFS (loop1): Ending clean mount [ 381.783332][T12860] XFS (loop1): Quotacheck needed: Please wait. [ 381.796392][ T4705] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 381.811638][T12876] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2934'. [ 381.851794][T12860] XFS (loop1): Quotacheck: Done. [ 381.872336][ T22] usb 3-1: USB disconnect, device number 29 [ 381.884298][ T22] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 381.920215][ T4265] XFS (loop1): Unmounting Filesystem [ 382.238230][T12888] binder: 12887:12888 ioctl c018620b 200000000100 returned -14 [ 382.569452][T12910] loop1: detected capacity change from 0 to 16 [ 382.585597][T12910] erofs: (device loop1): mounted with root inode @ nid 36. [ 382.605888][T12910] syz.1.2950: attempt to access beyond end of device [ 382.605888][T12910] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 382.629890][T12910] syz.1.2950: attempt to access beyond end of device [ 382.629890][T12910] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 382.632379][T12913] raw_sendmsg: syz.2.2952 forgot to set AF_INET. Fix it! [ 382.662857][T12914] syz.1.2950: attempt to access beyond end of device [ 382.662857][T12914] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 382.818510][T12924] loop3: detected capacity change from 0 to 16 [ 382.832043][T12924] erofs: (device loop3): mounted with root inode @ nid 36. [ 383.184972][T12940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2965'. [ 383.280580][T12928] loop1: detected capacity change from 0 to 32768 [ 383.296821][T12928] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2959 (12928) [ 383.323675][T12928] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 383.325826][T12946] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2968'. [ 383.341305][T12928] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 383.366123][T12928] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 383.386135][ T4342] misc userio: Buffer overflowed, userio client isn't keeping up [ 383.403312][T12928] BTRFS info (device loop1): use zstd compression, level 3 [ 383.410569][T12928] BTRFS info (device loop1): using free space tree [ 383.514823][T12928] BTRFS info (device loop1): enabling ssd optimizations [ 383.548782][ T26] audit: type=1800 audit(1752875582.553:90): pid=12928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2959" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 383.715989][ T4265] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 383.811451][ T4317] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 384.021364][ T4317] usb 3-1: Using ep0 maxpacket: 32 [ 384.043295][ T4317] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 384.066330][ T4317] usb 3-1: config 0 has no interface number 0 [ 384.082237][ T4317] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 384.107471][ T4317] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.118291][ T4317] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 384.140023][ T4317] usb 3-1: config 0 interface 126 has no altsetting 0 [ 384.188099][ T4317] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 384.206948][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.216925][ T4317] usb 3-1: Product: syz [ 384.221119][ T4317] usb 3-1: Manufacturer: syz [ 384.231308][ T4317] usb 3-1: SerialNumber: syz [ 384.252452][ T4317] usb 3-1: config 0 descriptor?? [ 384.258038][T12961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 384.575912][T12983] loop1: detected capacity change from 0 to 40427 [ 384.587308][T12983] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(83886082) root(3) [ 384.595957][T12983] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 384.613700][T12983] F2FS-fs (loop1): invalid crc value [ 384.627556][T12983] F2FS-fs (loop1): Found nat_bits in checkpoint [ 384.664327][ T4342] input: PS/2 Generic Mouse as /devices/serio6/input/input38 [ 384.690719][ T4317] ir_usb 3-1:0.126: IR Dongle converter detected [ 384.703236][T12983] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 384.710434][T12983] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 384.768673][ T4265] syz-executor: attempt to access beyond end of device [ 384.768673][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 384.890394][ T4317] usb 3-1: IRDA class descriptor not found, device not bound [ 384.898119][ T4342] psmouse serio6: Failed to enable mouse on [ 385.094559][ T4317] usb 3-1: USB disconnect, device number 30 [ 385.235530][ T26] audit: type=1326 audit(1752875584.243:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.4.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452b8e9a9 code=0x7ffc0000 [ 385.280941][ T26] audit: type=1326 audit(1752875584.243:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.4.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452b8e9a9 code=0x7ffc0000 [ 385.337199][ T26] audit: type=1326 audit(1752875584.263:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.4.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3452b8e9a9 code=0x7ffc0000 [ 385.408137][ T26] audit: type=1326 audit(1752875584.263:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452b8e9a9 code=0x7ffc0000 [ 385.449600][T13011] loop1: detected capacity change from 0 to 8192 [ 385.453613][ T26] audit: type=1326 audit(1752875584.263:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452b8e9a9 code=0x7ffc0000 [ 385.484455][ T26] audit: type=1326 audit(1752875584.263:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f3452b8e9a9 code=0x7ffc0000 [ 385.491810][T13011] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 385.514254][ T26] audit: type=1326 audit(1752875584.263:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452b8e9a9 code=0x7ffc0000 [ 385.546046][ T26] audit: type=1326 audit(1752875584.263:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm=98D9E98622158B30828785925E45C2 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3452b8e9a9 code=0x7ffc0000 [ 385.571513][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 385.581716][T13011] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 385.591052][T13011] REISERFS (device loop1): using ordered data mode [ 385.597778][T13011] reiserfs: using flush barriers [ 385.604327][T13011] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 385.631615][T13011] REISERFS (device loop1): checking transaction log (loop1) [ 385.667703][T13011] REISERFS (device loop1): Using r5 hash to sort names [ 385.675446][T13011] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 385.855290][T13023] loop2: detected capacity change from 0 to 2048 [ 385.948499][T13023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 386.015665][T13037] loop3: detected capacity change from 0 to 1024 [ 386.096473][ T9193] EXT4-fs (loop2): unmounting filesystem. [ 386.112798][T13037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.483229][T13038] loop5: detected capacity change from 0 to 65536 [ 386.559504][ T48] block nbd0: Receive control failed (result -32) [ 386.614374][T13038] XFS (loop5): Mounting V5 Filesystem [ 386.670409][T13058] input: syz1 as /devices/virtual/input/input40 [ 386.691655][T13038] XFS (loop5): Ending clean mount [ 386.813889][ T5987] XFS (loop5): Unmounting Filesystem [ 386.910882][T13065] loop4: detected capacity change from 0 to 512 [ 386.949135][T13069] loop3: detected capacity change from 0 to 256 [ 386.989293][T13065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 387.223544][ T7703] EXT4-fs (loop4): unmounting filesystem. [ 387.379526][T13081] loop1: detected capacity change from 0 to 1024 [ 387.413275][T13081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 387.462067][T13081] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.508240][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3008'. [ 387.664124][T13081] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 387.759000][T13094] loop5: detected capacity change from 0 to 4096 [ 387.982044][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 388.021233][ T4342] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 388.059463][T13099] udevd[13099]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 388.175602][T13102] netlink: 'syz.1.3021': attribute type 8 has an invalid length. [ 388.212914][ T4342] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.243192][T13102] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.250542][T13102] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.269473][ T4342] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 388.333952][ T4342] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.413589][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.481274][ T4342] usb 5-1: Product: syz [ 388.490864][ T4342] usb 5-1: Manufacturer: syz [ 388.521424][ T4342] usb 5-1: SerialNumber: syz [ 388.579044][T13077] loop2: detected capacity change from 0 to 32768 [ 388.683441][T13077] [ 388.683441][T13077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.683441][T13077] [ 388.791550][T13096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.807947][T13077] [ 388.807947][T13077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.807947][T13077] [ 388.861990][T13096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.916221][T13077] [ 388.916221][T13077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.916221][T13077] [ 388.938719][ T4342] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 388.979638][T13077] [ 388.979638][T13077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.979638][T13077] [ 388.982098][ T4342] usb 5-1: USB disconnect, device number 17 [ 389.126060][T13077] [ 389.126060][T13077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.126060][T13077] [ 389.211022][T13090] loop3: detected capacity change from 0 to 32768 [ 389.259068][T13077] [ 389.259068][T13077] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.259068][T13077] [ 389.305601][T13090] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 389.364092][ T107] [ 389.364092][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.364092][ T107] [ 389.396436][T13090] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 389.448743][T13090] BTRFS info (device loop3): force clearing of disk cache [ 389.487839][T13090] BTRFS info (device loop3): enabling auto defrag [ 389.521586][T13090] BTRFS info (device loop3): max_inline at 0 [ 389.528213][ T56] [ 389.528213][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.528213][ T56] [ 389.538183][T13090] BTRFS info (device loop3): enabling disk space caching [ 389.549454][ T56] [ 389.549454][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.549454][ T56] [ 389.551254][ T4342] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 389.594471][ T108] [ 389.594471][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.594471][ T108] [ 389.615624][T13090] BTRFS info (device loop3): disk space caching is enabled [ 389.646547][ T9193] [ 389.646547][ T9193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.646547][ T9193] [ 389.701009][ T9193] [ 389.701009][ T9193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.701009][ T9193] [ 389.728942][T13119] udevd[13119]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 389.818731][ T4342] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 389.844144][ T4342] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 389.920885][ T4342] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.930975][T13090] BTRFS info (device loop3): enabling ssd optimizations [ 389.951650][T13090] BTRFS info (device loop3): rebuilding free space tree [ 389.989341][T13090] BTRFS info (device loop3): disabling free space tree [ 389.996027][ T4342] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 390.006724][T13090] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 390.037764][ T4342] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 390.040546][T13090] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 390.099824][ T4342] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.150804][ T4342] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 390.181573][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.234169][T13140] udevd[13140]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 390.259719][ T4272] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 390.420869][ T4342] usb 5-1: usb_control_msg returned -71 [ 390.433222][ T4342] usbtmc 5-1:16.0: can't read capabilities [ 390.439103][ T4342] usbtmc 5-1:16.0: Failed to submit iin_urb [ 390.485990][ T4342] usbtmc: probe of 5-1:16.0 failed with error -90 [ 390.531969][ T4342] usb 5-1: USB disconnect, device number 18 [ 390.595574][ T4283] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (4283) [ 390.676519][T13143] udevd[13143]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 390.718253][T13125] loop5: detected capacity change from 0 to 32768 [ 390.861528][T13137] loop2: detected capacity change from 0 to 32768 [ 390.870908][T13125] XFS (loop5): Mounting V5 Filesystem [ 390.930789][T13125] XFS (loop5): Ending clean mount [ 390.936772][T13137] XFS (loop2): Mounting V5 Filesystem [ 391.080749][T13137] XFS (loop2): Ending clean mount [ 391.092335][ T5987] XFS (loop5): Unmounting Filesystem [ 391.177167][T13137] XFS (loop2): Quotacheck needed: Please wait. [ 391.199380][T13163] loop1: detected capacity change from 0 to 2048 [ 391.270823][T13137] XFS (loop2): Quotacheck: Done. [ 391.292013][T13163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.526541][ T9193] XFS (loop2): Unmounting Filesystem [ 391.898010][T13182] loop5: detected capacity change from 0 to 1024 [ 391.929176][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3039'. [ 392.052092][T13182] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 392.110204][T13182] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.279831][T13182] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 392.582051][ T5987] EXT4-fs (loop5): unmounting filesystem. [ 392.635170][T13208] loop1: detected capacity change from 0 to 64 [ 392.717872][T13206] loop4: detected capacity change from 0 to 4096 [ 392.747590][T13206] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 392.830840][T13206] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 392.889649][T13206] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 392.924204][T13206] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 392.975809][ T5773] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 393.017398][T13206] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 393.037486][T13206] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 393.116192][T13206] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 393.139872][T13206] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 393.201605][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 393.221355][T13206] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 393.222403][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.240311][T13206] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 393.301243][ T5773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.311070][ T5773] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.348602][ T5773] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 393.364912][T13206] ntfs: volume version 3.1. [ 393.381399][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.404759][T13226] loop1: detected capacity change from 0 to 2048 [ 393.416918][ T5773] usb 4-1: config 0 descriptor?? [ 393.456679][T13226] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 393.464312][T13228] netlink: 'syz.5.3056': attribute type 3 has an invalid length. [ 393.495368][T13203] loop2: detected capacity change from 0 to 32768 [ 393.529551][T13226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 393.686891][T13203] XFS (loop2): Mounting V5 Filesystem [ 393.703162][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 393.829121][T13203] XFS (loop2): Ending clean mount [ 393.838132][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x2 [ 393.888161][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 393.904077][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 393.945315][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 393.959096][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 393.981359][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 393.988620][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 394.018561][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 394.071279][ T5773] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 394.116119][ T5773] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001B/input/input41 [ 394.169999][ T5773] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 394.211600][ T5773] usb 4-1: USB disconnect, device number 25 [ 394.227725][T13255] tipc: Started in network mode [ 394.271334][T13255] tipc: Node identity 7365725f69643d3, cluster identity 4711 [ 394.280026][T13255] tipc: Enabling of bearer rejected, failed to enable media [ 394.296501][ T9193] XFS (loop2): Unmounting Filesystem [ 394.387764][T13260] udevd[13260]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 394.875844][T13271] loop2: detected capacity change from 0 to 512 [ 394.924851][T13271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3066: bg 0: block 248: padding at end of block bitmap is not set [ 394.949081][T13271] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.3066: Failed to acquire dquot type 1 [ 395.003749][T13271] EXT4-fs (loop2): 1 truncate cleaned up [ 395.012493][T13259] loop5: detected capacity change from 0 to 32768 [ 395.022713][T13271] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 395.045971][T13271] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.061423][T13259] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 395.134910][T13271] EXT4-fs (loop2): shut down requested (2) [ 395.276727][ T9193] EXT4-fs (loop2): unmounting filesystem. [ 395.329382][T13284] loop4: detected capacity change from 0 to 64 [ 395.400290][ T4283] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 395.428357][T13284] hfs: hfs: Invalid key length: 94 [ 395.585710][ T7703] hfs: node 4:3 still has 1 user(s)! [ 395.696515][T13295] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 396.333073][T13314] mkiss: ax0: crc mode is auto. [ 396.859121][T13309] loop1: detected capacity change from 0 to 32768 [ 396.964616][T13309] XFS (loop1): Mounting V5 Filesystem [ 397.038857][T13322] loop2: detected capacity change from 0 to 40427 [ 397.049816][T13322] F2FS-fs (loop2): invalid crc value [ 397.061658][T13322] F2FS-fs (loop2): Found nat_bits in checkpoint [ 397.118620][T13322] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 397.142630][T13309] XFS (loop1): Ending clean mount [ 397.156685][T13309] XFS (loop1): Quotacheck needed: Please wait. [ 397.270022][T13309] XFS (loop1): Quotacheck: Done. [ 397.368801][T13357] loop3: detected capacity change from 0 to 512 [ 397.409496][T13357] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.3103: bad orphan inode 15 [ 397.429188][T13357] ext4_test_bit(bit=14, block=5) = 0 [ 397.439129][T13357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 397.517371][ T9193] syz-executor: attempt to access beyond end of device [ 397.517371][ T9193] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 397.533451][ T4265] XFS (loop1): Unmounting Filesystem [ 397.546493][ T4272] EXT4-fs (loop3): unmounting filesystem. [ 398.298497][T13382] loop3: detected capacity change from 0 to 256 [ 398.340844][T13382] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.391700][T13382] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 398.429031][T13382] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 398.753373][T13398] loop2: detected capacity change from 0 to 512 [ 398.772571][T13398] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.794380][T13398] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 398.828456][T13398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 398.855426][T13398] System zones: 1-12 [ 398.869245][T13398] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.3120: corrupted in-inode xattr [ 398.898680][T13401] loop3: detected capacity change from 0 to 4096 [ 398.911468][T13398] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3120: couldn't read orphan inode 15 (err -117) [ 398.939641][T13398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 398.995243][T13401] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 399.066159][T13401] ntfs3: loop3: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size [ 399.099296][ T5773] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 399.109608][ T9193] EXT4-fs (loop2): unmounting filesystem. [ 399.283110][ T5773] usb 5-1: Using ep0 maxpacket: 16 [ 399.290322][ T5773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 399.319230][ T5773] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 399.347788][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.367936][ T5773] usb 5-1: config 0 descriptor?? [ 399.469443][T13419] Falling back ldisc for ptm0. [ 399.632123][ T5780] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 399.695936][T13430] futex_wake_op: syz.3.3134 tries to shift op by 32; fix this program [ 399.788753][ T5773] hid (null): report_id 0 is invalid [ 399.797782][ T5773] hid (null): invalid report_size 22022 [ 399.805471][ T5773] hid (null): global environment stack underflow [ 399.821523][ T5780] usb 3-1: Using ep0 maxpacket: 32 [ 399.835035][ T5780] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.854511][ T5780] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.883064][ T5780] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 399.892384][ T7449] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 399.900238][ T5780] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 399.909472][ T5780] usb 3-1: Product: syz [ 399.914354][ T5780] usb 3-1: Manufacturer: syz [ 399.930724][ T5780] hub 3-1:4.0: USB hub found [ 399.988657][ T5773] usb 5-1: USB disconnect, device number 19 [ 400.020690][T13432] loop3: detected capacity change from 0 to 32768 [ 400.066548][T13432] XFS (loop3): Mounting V5 Filesystem [ 400.097756][T13432] XFS (loop3): Ending clean mount [ 400.105401][T13432] XFS (loop3): Quotacheck needed: Please wait. [ 400.107806][ T7449] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 400.127794][ T7449] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 400.145634][ T5780] hub 3-1:4.0: 2 ports detected [ 400.151063][ T7449] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 400.186407][T13432] XFS (loop3): Quotacheck: Done. [ 400.191083][ T7449] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 400.200583][ T7449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.210318][ T7449] usb 6-1: Product: syz [ 400.219269][ T7449] usb 6-1: Manufacturer: syz [ 400.225625][ T7449] usb 6-1: SerialNumber: syz [ 400.233229][T13426] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 400.270521][ T4272] XFS (loop3): Unmounting Filesystem [ 400.369780][ T5780] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 400.392235][ T5780] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 400.462157][ T5780] usb 3-1: USB disconnect, device number 31 [ 400.486018][ T7449] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 400.683019][ C1] usblp0: nonzero read bulk status received: -71 [ 400.698833][T13426] usblp0: error -71 reading from printer [ 400.711144][ C1] usblp0: nonzero read bulk status received: -71 [ 400.720187][ T5780] usb 6-1: USB disconnect, device number 21 [ 400.747555][ T5780] usblp0: removed [ 401.229881][T13466] loop4: detected capacity change from 0 to 1764 [ 401.273294][T13466] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 401.398228][T13470] loop5: detected capacity change from 0 to 1024 [ 401.461486][T13470] EXT4-fs (loop5): Test dummy encryption mode enabled [ 401.549729][T13470] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 401.582313][T13462] loop3: detected capacity change from 0 to 32768 [ 401.614955][T13477] loop4: detected capacity change from 0 to 512 [ 401.634910][T13477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 401.642468][T13462] JBD2: Ignoring recovery information on journal [ 401.683135][T13477] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 401.706327][T13462] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 401.764687][T13470] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 401.791296][T13477] EXT4-fs (loop4): 1 truncate cleaned up [ 401.798771][T13477] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 401.856539][ T4272] ocfs2: Unmounting device (7,3) on (node local) [ 401.868809][ T5987] EXT4-fs (loop5): unmounting filesystem. [ 401.982994][ T7703] EXT4-fs (loop4): unmounting filesystem. [ 402.307847][T13500] loop2: detected capacity change from 0 to 512 [ 402.339511][T13500] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 402.359828][T13492] loop5: detected capacity change from 0 to 4096 [ 402.405403][T13492] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 402.425234][T13500] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 402.433893][T13492] ntfs3: loop5: Failed to load $Extend. [ 402.478229][T13500] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 402.555813][T13500] System zones: 0-1, 15-15, 18-18, 34-34 [ 402.567820][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 402.567834][ T26] audit: type=1800 audit(1752875601.573:106): pid=13492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3157" name="file2" dev="loop5" ino=31 res=0 errno=0 [ 402.584241][T13494] loop3: detected capacity change from 0 to 32768 [ 402.629150][T13494] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 402.642386][T13500] EXT4-fs (loop2): orphan cleanup on readonly fs [ 402.648838][T13500] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 402.711282][T13494] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 402.719983][T13494] BTRFS info (device loop3): force clearing of disk cache [ 402.727299][T13500] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 402.761273][T13500] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 402.768250][T13494] BTRFS info (device loop3): force zlib compression, level 3 [ 402.791741][T13494] BTRFS info (device loop3): enabling auto defrag [ 402.798252][T13494] BTRFS info (device loop3): max_inline at 0 [ 402.807235][T13500] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3159: bg 0: block 40: padding at end of block bitmap is not set [ 402.844113][T13494] BTRFS info (device loop3): using free space tree [ 402.884061][T13500] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 402.924449][T13500] EXT4-fs (loop2): 1 truncate cleaned up [ 402.930145][T13500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 403.008416][T13494] BTRFS info (device loop3): enabling ssd optimizations [ 403.009876][T13500] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.3159: bad symlink. [ 403.028260][T13494] BTRFS info (device loop3): rebuilding free space tree [ 403.154993][T13528] udevd[13528]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 403.276970][ T4272] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.529019][ T7073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop3 scanned by udevd (7073) [ 403.604306][T13538] udevd[13538]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 403.685710][T13503] loop1: detected capacity change from 0 to 40427 [ 403.727286][T13503] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 403.746363][T13503] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 403.802910][T13503] F2FS-fs (loop1): invalid crc value [ 403.854007][T13503] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 404.139063][T13503] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 404.153173][T13503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 404.313680][ T4265] syz-executor: attempt to access beyond end of device [ 404.313680][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 404.441022][T13554] loop5: detected capacity change from 0 to 1024 [ 404.516482][T13554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.360737][T13574] syz.5.3183[13574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.360868][T13574] syz.5.3183[13574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.572140][T13582] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 406.179680][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3193'. [ 406.468670][T13578] loop5: detected capacity change from 0 to 40427 [ 406.501568][T13578] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 406.539440][T13578] F2FS-fs (loop5): invalid crc value [ 406.612774][T13578] F2FS-fs (loop5): Found nat_bits in checkpoint [ 406.771338][T13578] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 406.812865][ T26] audit: type=1800 audit(1752875605.813:107): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3185" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 406.884657][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.979018][ T5987] syz-executor: attempt to access beyond end of device [ 406.979018][ T5987] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 407.002348][T13625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3203'. [ 407.021267][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3203'. [ 407.150221][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.369544][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.519384][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.649037][ T9193] EXT4-fs (loop2): unmounting filesystem. [ 407.898716][T13645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3213'. [ 407.965269][T13648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3213'. SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 409.722233][ T46] device hsr_slave_0 left promiscuous mode [ 409.728627][ T46] device hsr_slave_1 left promiscuous mode [ 409.736246][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.743732][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.751540][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.758957][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.766792][ T46] device bridge_slave_1 left promiscuous mode [ 409.773380][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.781982][ T46] device bridge_slave_0 left promiscuous mode [ 409.788162][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.827619][ T46] device veth1_macvtap left promiscuous mode [ 409.833949][ T46] device veth0_macvtap left promiscuous mode [ 409.840018][ T46] device veth1_vlan left promiscuous mode [ 409.845895][ T46] device veth0_vlan left promiscuous mode [ 411.088535][ T46] team0 (unregistering): Port device team_slave_1 removed [ 411.153032][ T46] team0 (unregistering): Port device team_slave_0 removed [ 411.207335][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.259055][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.826280][ T46] bond0 (unregistering): Released all slaves [ 412.396704][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.456515][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.513160][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.599527][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.720735][ T46] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.787383][ T46] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.864795][ T46] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.924580][ T46] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.104758][ T46] tipc: Left network mode [ 413.952148][ T46] IPVS: stopping master sync thread 11896 ... [ 414.567396][ T46] device hsr_slave_0 left promiscuous mode [ 414.573873][ T46] device hsr_slave_1 left promiscuous mode [ 414.580331][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.587911][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.596481][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.604192][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.617039][ T46] device bridge_slave_1 left promiscuous mode [ 414.623618][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.632744][ T46] device bridge_slave_0 left promiscuous mode [ 414.638939][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.650830][ T46] device hsr_slave_0 left promiscuous mode [ 414.657816][ T46] device hsr_slave_1 left promiscuous mode [ 414.664294][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.671875][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.680079][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.687588][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.695325][ T46] device bridge_slave_1 left promiscuous mode [ 414.701613][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.712491][ T46] device bridge_slave_0 left promiscuous mode [ 414.718657][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.766458][ T46] device veth1_macvtap left promiscuous mode [ 414.772622][ T46] device veth0_macvtap left promiscuous mode [ 414.778698][ T46] device veth1_vlan left promiscuous mode [ 414.787012][ T46] device veth0_vlan left promiscuous mode [ 414.795273][ T46] device bond0 left promiscuous mode [ 414.800979][ T46] device bond_slave_0 left promiscuous mode [ 414.807522][ T46] device bond_slave_1 left promiscuous mode [ 414.815514][ T46] device team_slave_0 left promiscuous mode [ 414.821976][ T46] device team_slave_1 left promiscuous mode [ 414.828733][ T46] device veth1_macvtap left promiscuous mode [ 414.834806][ T46] device veth0_macvtap left promiscuous mode [ 414.840841][ T46] device veth1_vlan left promiscuous mode [ 414.846692][ T46] device veth0_vlan left promiscuous mode [ 415.572280][ T46] team0 (unregistering): Port device team_slave_1 removed [ 415.630692][ T46] team0 (unregistering): Port device team_slave_0 removed [ 415.695258][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.757312][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.228353][ T46] bond0 (unregistering): Released all slaves [ 416.775354][ T46] team0 (unregistering): Port device team_slave_1 removed [ 416.827940][ T46] team0 (unregistering): Port device team_slave_0 removed [ 416.881691][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.939384][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.494627][ T46] bond0 (unregistering): Released all slaves