last executing test programs: 5m25.057936148s ago: executing program 4 (id=10): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000000c0)={[{@dax_inode}, {@stripe={'stripe', 0x3d, 0x4}}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) 5m24.610912287s ago: executing program 4 (id=13): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file1\x00', 0x2) 5m24.270683941s ago: executing program 4 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udplite6\x00') ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x4000d4, 0x146, 0x40000063, 0x200002000001, 0x80000000, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x5, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m24.134206367s ago: executing program 4 (id=17): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000040)='./file2\x00', 0x4000, &(0x7f0000001f00)=ANY=[], 0x1, 0x210, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 5m23.981805574s ago: executing program 4 (id=18): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ocfs2(&(0x7f00000048c0), &(0x7f00000006c0)='./file0\x00', 0x200008, &(0x7f0000000140)=ANY=[@ANYBLOB="6865617274626561743d6e6f6e652c6e6f61636c2c008c6b24e288e9e36909f46d5be448db83d929a4d4d86bf6d7673b069fe498ee91a67841736c9ab342f956565aa4a2c9d08563cd9e"], 0x1, 0x48af, &(0x7f0000009240)="$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") 5m22.533908465s ago: executing program 4 (id=23): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 5m22.274048136s ago: executing program 32 (id=23): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 14.705807752s ago: executing program 0 (id=1048): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000"], 0x10}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) 12.848322422s ago: executing program 0 (id=1051): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) 12.66695593s ago: executing program 5 (id=1053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000280), 0x1, 0x7b9, &(0x7f00000007c0)="$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") syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close_range(r0, 0xffffffffffffffff, 0x0) 11.752070939s ago: executing program 5 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_open_dev$usbfs(0x0, 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 10.249775313s ago: executing program 5 (id=1062): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'wlan0\x00', {0x2, 0x4e22, @empty=0x7f000000}}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x20000000) 8.851453442s ago: executing program 0 (id=1066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x1, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x33d, 0xffffffffffffffff, 0xffffffff, 0x4, 0x9, 0x800006, 0x6c], 0x4, 0x140057}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.697572831s ago: executing program 3 (id=1069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "837642f7995ca845dc7c15567bb8f018"}]}}}}}}}}, 0x0) 7.615804005s ago: executing program 0 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_open_dev$usbfs(0x0, 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 7.51363047s ago: executing program 3 (id=1074): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000"], 0x10}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) 6.509722002s ago: executing program 0 (id=1076): socket$packet(0x11, 0x3, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x7, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) 6.226144784s ago: executing program 1 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x1, 0x180, 0x8, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x7, 0x8, 0x0, 0x0, 0x0, 0xbd5], 0xdddd0000, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.119567809s ago: executing program 3 (id=1079): socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x80805, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) socket(0x2, 0x3, 0xff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x3e, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x105, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.86962186s ago: executing program 3 (id=1080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2020) 5.825683231s ago: executing program 1 (id=1081): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x80807, 0x0) write(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) gettid() timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 4.166688572s ago: executing program 3 (id=1083): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/91, 0x71, 0x5b, 0x0, 0x803, 0x10000}, 0x28) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000000), 0x90) 3.997855489s ago: executing program 3 (id=1085): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) 3.869715204s ago: executing program 1 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_open_dev$usbfs(0x0, 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 3.73341136s ago: executing program 2 (id=1088): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x1, 0x0, 0x3}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r2, &(0x7f0000000840), 0x0, 0x406, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @empty, 0x5, 0x8, 0x40, 0x0, 0xd45, 0x400303, r3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000740)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x9, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x45b, 0xd616, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0xffffffffffffffff, 0x3ff, 0x1}}, {0x0, 0x10}}}, 0xa0) 2.528810822s ago: executing program 1 (id=1089): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000"], 0x10}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) socket(0x10, 0x3, 0x0) 2.492760463s ago: executing program 2 (id=1090): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc55, &(0x7f0000002940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.191420066s ago: executing program 2 (id=1091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x1, 0x180, 0x8, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x7, 0x8, 0x0, 0x0, 0x0, 0xbd5], 0xdddd0000, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.079525431s ago: executing program 5 (id=1092): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0) 1.781722984s ago: executing program 2 (id=1093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2020) 541.362346ms ago: executing program 5 (id=1094): socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x80805, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) socket(0x2, 0x3, 0xff) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x3e, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x105, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 470.91755ms ago: executing program 1 (id=1095): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0xfffffffffffffffe, 0x0) 325.763216ms ago: executing program 1 (id=1096): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0xa, 0x80807, 0x0) write(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 217.77772ms ago: executing program 0 (id=1097): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x20, 0x8, 0x3, "cfbdf9"}, 0x0, 0x0, 0x0, 0x0}) 118.978865ms ago: executing program 2 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf2521000000080003", @ANYRES32=r3, @ANYBLOB="4c007d804100020095f9ab60dff8d11acfa506196edb402225cdf56a6da023250390b0720d55d5a978bafd8977b849fd374077d7334271c5a3d6daa4bc5df7ed7209b4e0f10000000400029b"], 0x70}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004000) 56.885918ms ago: executing program 5 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x30) r3 = syz_open_dev$usbfs(0x0, 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 0s ago: executing program 2 (id=1100): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r1, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) kernel console output (not intermixed with test programs): 238][ T4376] XFS (loop2): Mounting V5 Filesystem [ 65.424587][ T4376] XFS (loop2): Ending clean mount [ 65.436214][ T4376] XFS (loop2): Quotacheck needed: Please wait. [ 65.510142][ T4401] loop3: detected capacity change from 0 to 1024 [ 65.589835][ T4376] XFS (loop2): Quotacheck: Done. [ 65.704182][ T4401] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 65.730617][ T4195] XFS (loop2): Unmounting Filesystem [ 65.810160][ T4401] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.873420][ T4401] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 65.921583][ T4401] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 66.034809][ T4401] EXT4-fs (loop3): Cannot turn on quotas: error -5 [ 66.086026][ T4401] EXT4-fs (loop3): 1 truncate cleaned up [ 66.110630][ T4401] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,resgid=0x000000000000ee00,init_itable,,errors=continue. Quota mode: writeback. [ 67.069961][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 67.581018][ T4387] chnl_net:caif_netlink_parms(): no params data found [ 67.663848][ T4448] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 67.670552][ T4448] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 67.790152][ T4455] ODEBUG: Out of memory. ODEBUG disabled [ 68.125970][ T4455] syz.3.40 (4455): drop_caches: 2 [ 68.155156][ T4455] syz.3.40 (4455): drop_caches: 2 [ 68.177016][ T4448] vhci_hcd vhci_hcd.0: Device attached [ 68.270993][ T4449] vhci_hcd: connection closed [ 68.274466][ T4374] vhci_hcd: stop threads [ 68.316008][ T4374] vhci_hcd: release socket [ 68.329245][ T4451] loop2: detected capacity change from 0 to 4096 [ 68.346405][ T4374] vhci_hcd: disconnect device [ 68.362171][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.384872][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.392754][ T4387] device bridge_slave_0 entered promiscuous mode [ 68.425474][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.472028][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.506692][ T4387] device bridge_slave_1 entered promiscuous mode [ 68.556043][ T4451] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 68.566592][ T4387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.597580][ T4387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.813389][ T4195] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22. [ 68.827799][ T4195] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22. [ 68.838270][ T4387] team0: Port device team_slave_0 added [ 68.899924][ T4469] xt_socket: unknown flags 0x48 [ 69.016215][ T4387] team0: Port device team_slave_1 added [ 69.528485][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 69.691805][ T4387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.704292][ T4387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.044498][ T4387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.312643][ T4475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 70.361457][ T4480] team0: No ports can be present during mode change [ 70.537342][ T4483] device vlan0 entered promiscuous mode [ 70.870769][ T4494] loop1: detected capacity change from 0 to 128 [ 70.891096][ T4387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.902527][ T4387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.997035][ T4494] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 71.053125][ T4494] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.101745][ T4387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.128656][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.135271][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.200313][ T9] device hsr_slave_0 left promiscuous mode [ 71.225035][ T9] device hsr_slave_1 left promiscuous mode [ 71.246848][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.278519][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.298442][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.304610][ T4503] loop2: detected capacity change from 0 to 1024 [ 71.306073][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.320972][ T9] device bridge_slave_1 left promiscuous mode [ 71.330393][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.362202][ T9] device bridge_slave_0 left promiscuous mode [ 71.368590][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.391880][ T9] rdma_rxe: ignoring netdev event = 10 for bond0 [ 71.424810][ T9] device veth1_macvtap left promiscuous mode [ 71.442956][ T9] device veth0_macvtap left promiscuous mode [ 71.481531][ T4503] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 71.513339][ T4503] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.528166][ T9] device veth1_vlan left promiscuous mode [ 71.531227][ T4509] loop1: detected capacity change from 0 to 4096 [ 71.542209][ T9] device veth0_vlan left promiscuous mode [ 71.555387][ T4509] ntfs3: loop1: ino=0, Correct links count -> 1. [ 71.561808][ T26] audit: type=1800 audit(1763773829.049:3): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.50" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 71.569694][ T4503] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.50: Freeing blocks not in datazone - block = 0, count = 16 [ 71.608228][ T26] audit: type=1800 audit(1763773829.049:4): pid=4503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.50" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 71.648814][ T4509] ntfs3: loop1: MFT: r=0, expect seq=1 instead of 0! [ 71.660558][ T4509] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 71.670769][ T4436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:20: bg 0: block 112: padding at end of block bitmap is not set [ 71.683435][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 71.693654][ T4509] ntfs3: loop1: Failed to load $MFT. [ 71.726058][ T4436] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.756843][ T4436] EXT4-fs (loop2): This should not happen!! Data will be lost [ 71.756843][ T4436] [ 71.770931][ T4436] EXT4-fs (loop2): Total free blocks count 0 [ 71.777370][ T4436] EXT4-fs (loop2): Free/Dirty block details [ 71.783768][ T4436] EXT4-fs (loop2): free_blocks=16 [ 71.788846][ T4436] EXT4-fs (loop2): dirty_blocks=16 [ 71.819401][ T4436] EXT4-fs (loop2): Block reservation details [ 71.825761][ T4436] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 71.951093][ T9] infiniband syz1: set down [ 72.097898][ T4516] loop1: detected capacity change from 0 to 1024 [ 72.125286][ T9] team0 (unregistering): Port device team_slave_1 removed [ 72.168850][ T9] team0 (unregistering): Port device team_slave_0 removed [ 72.200183][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.233911][ T9] rdma_rxe: ignoring netdev event = 12 for bond0 [ 72.262774][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.283028][ T9] rdma_rxe: ignoring netdev event = 8 for bond0 [ 72.295148][ T9] rdma_rxe: ignoring netdev event = 18 for bond0 [ 72.308265][ T9] rdma_rxe: ignoring netdev event = 12 for bond0 [ 72.497648][ T4436] smc: removing ib device syz1 [ 72.505732][ T9] bond0 (unregistering): Released all slaves [ 72.596847][ T4515] loop2: detected capacity change from 0 to 32768 [ 72.636764][ T4501] netlink: 'syz.0.47': attribute type 16 has an invalid length. [ 72.650131][ T4501] netlink: 'syz.0.47': attribute type 17 has an invalid length. [ 72.685739][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.714246][ T4515] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 72.735211][ T4501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.809764][ T4225] bond0 speed is unknown, defaulting to 1000 [ 72.828111][ T4289] infiniband syz1: ib_query_port failed (-19) [ 72.858734][ T4387] device hsr_slave_0 entered promiscuous mode [ 72.882678][ T4387] device hsr_slave_1 entered promiscuous mode [ 72.908293][ T4387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.923246][ T4387] Cannot create hsr debugfs directory [ 73.051431][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 73.260939][ T4524] xt_socket: unknown flags 0x48 [ 73.763299][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 75.106651][ T4536] loop2: detected capacity change from 0 to 256 [ 75.170766][ T4387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.209128][ T4387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.216672][ T4536] exfat: Unknown parameter 'keep_last_dots' [ 75.248713][ T4387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.310654][ T4387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.453826][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 75.554934][ T4546] device vlan0 entered promiscuous mode [ 75.729217][ T4387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.745733][ T4566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 75.752269][ T4566] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 75.781350][ T4566] vhci_hcd vhci_hcd.0: Device attached [ 75.820078][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.840661][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.917709][ T4387] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.956054][ T4566] syz.1.63 (4566): drop_caches: 2 [ 75.966376][ T4566] syz.1.63 (4566): drop_caches: 2 [ 75.973231][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.997251][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.054494][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.065704][ T4568] vhci_hcd: connection closed [ 76.082157][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.093963][ T4431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.114068][ T4442] vhci_hcd: stop threads [ 76.118612][ T4442] vhci_hcd: release socket [ 76.123331][ T4289] usb 36-1: SetAddress Request (2) to port 0 [ 76.132308][ T4289] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 76.133708][ T4442] vhci_hcd: disconnect device [ 76.213245][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 76.213896][ T4289] usb 36-1: enqueue for inactive port 0 [ 76.245698][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.254948][ T1108] cfg80211: failed to load regulatory.db [ 76.273936][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.282467][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.333444][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 76.383607][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.390663][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.423538][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.468681][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.510821][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.524292][ T4232] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 76.542714][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.552727][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.600383][ T4232] usb 1-1: Product: syz [ 76.619470][ T4232] usb 1-1: Manufacturer: syz [ 76.633213][ T4232] usb 1-1: SerialNumber: syz [ 76.639626][ T4578] netlink: 'syz.2.65': attribute type 16 has an invalid length. [ 76.661825][ T4232] usb 1-1: config 0 descriptor?? [ 76.698138][ T4578] netlink: 'syz.2.65': attribute type 17 has an invalid length. [ 76.715641][ T4289] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 76.735351][ T4289] usb usb36-port1: attempt power cycle [ 76.832249][ T4576] loop3: detected capacity change from 0 to 32768 [ 76.839279][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.886989][ T4576] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.66 (4576) [ 76.902711][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.990498][ T4578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.998210][ T4576] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 77.023337][ T4576] BTRFS info (device loop3): using free space tree [ 77.029871][ T4576] BTRFS info (device loop3): has skinny extents [ 77.076092][ T4578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.093379][ T4289] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 77.283334][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.291216][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.301942][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.343890][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.358487][ T4576] BTRFS info (device loop3): enabling ssd optimizations [ 77.472202][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.555659][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.626308][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.693197][ T4289] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 77.700862][ T4289] usb usb36-port1: unable to enumerate USB device [ 77.707300][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.718858][ T4603] netlink: 'syz.1.67': attribute type 16 has an invalid length. [ 77.726654][ T4603] netlink: 'syz.1.67': attribute type 17 has an invalid length. [ 77.745350][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.752761][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.760349][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.772643][ T4603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.113388][ T4232] usb 1-1: USB disconnect, device number 3 [ 78.269984][ T4197] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop3 scanned by udevd (4197) [ 78.410702][ T4387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.474425][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.481913][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.838162][ T4643] loop0: detected capacity change from 0 to 1024 [ 79.289011][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.314791][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.386650][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.412843][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.463859][ T4387] device veth0_vlan entered promiscuous mode [ 79.472454][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.513120][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.586369][ T4387] device veth1_vlan entered promiscuous mode [ 79.679126][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.420938][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.447023][ T4387] device veth0_macvtap entered promiscuous mode [ 80.508912][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.541766][ T4387] device veth1_macvtap entered promiscuous mode [ 80.669482][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.853969][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.626968][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.664182][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.717034][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.746621][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.783893][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.823220][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.869468][ T4387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.902721][ T4682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 82.093319][ T4691] overlayfs: missing 'lowerdir' [ 82.139899][ T4684] team0: No ports can be present during mode change [ 82.433383][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.442027][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.546721][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.626780][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.661797][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.700005][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.754066][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.795033][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.806179][ T4387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.816949][ T4387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.861454][ T4387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.893837][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.944245][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.766549][ T4387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.776282][ T4387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.792998][ T4387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.845466][ T4387] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.170188][ T4713] xt_socket: unknown flags 0x48 [ 85.009891][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.046598][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.106633][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.137628][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.192306][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 85.252619][ T4733] team0: No ports can be present during mode change [ 85.261628][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.632482][ T4740] overlayfs: missing 'lowerdir' [ 85.760911][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.399433][ T4755] process 'syz.1.97' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 86.408349][ T4760] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 86.415596][ T4760] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.441766][ T4760] vhci_hcd vhci_hcd.0: Device attached [ 86.679405][ T4769] xt_socket: unknown flags 0x48 [ 86.863344][ T4260] usb 44-1: SetAddress Request (2) to port 0 [ 87.367758][ T4260] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 87.420227][ T4760] syz.5.98 (4760): drop_caches: 2 [ 87.580389][ T4760] syz.5.98 (4760): drop_caches: 2 [ 88.324228][ T4761] vhci_hcd: connection reset by peer [ 88.380931][ T4442] vhci_hcd: stop threads [ 88.386801][ T4442] vhci_hcd: release socket [ 88.429439][ T4442] vhci_hcd: disconnect device [ 88.448951][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 88.518954][ T4780] team0: No ports can be present during mode change [ 88.825427][ T4795] loop0: detected capacity change from 0 to 1024 [ 90.498142][ T4810] netlink: 'syz.5.108': attribute type 16 has an invalid length. [ 90.506056][ T4810] netlink: 'syz.5.108': attribute type 17 has an invalid length. [ 90.525024][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.532470][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.539774][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.550572][ T4810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.796422][ T4814] netlink: 'syz.1.105': attribute type 16 has an invalid length. [ 90.902570][ T4814] netlink: 'syz.1.105': attribute type 17 has an invalid length. [ 91.026630][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.079702][ T4814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.483747][ T4260] usb 44-1: device descriptor read/8, error -110 [ 92.924062][ T4260] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 93.104393][ T4856] xt_socket: unknown flags 0x48 [ 93.905935][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 93.966454][ T4861] team0: No ports can be present during mode change [ 94.002541][ T4260] usb usb44-port1: attempt power cycle [ 94.260883][ T4873] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 94.267415][ T4873] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 94.423415][ T4260] usb 44-1: SetAddress Request (4) to port 0 [ 94.987906][ T4260] usb 44-1: new SuperSpeed USB device number 4 using vhci_hcd [ 94.996372][ T4873] vhci_hcd vhci_hcd.0: Device attached [ 95.485554][ T4873] syz.5.119 (4873): drop_caches: 2 [ 95.490928][ T4873] syz.5.119 (4873): drop_caches: 2 [ 95.563792][ T4874] vhci_hcd: connection reset by peer [ 95.569328][ T9] vhci_hcd: stop threads [ 95.576118][ T9] vhci_hcd: release socket [ 95.593500][ T9] vhci_hcd: disconnect device [ 96.374638][ T4905] netlink: 'syz.3.125': attribute type 16 has an invalid length. [ 96.382515][ T4905] netlink: 'syz.3.125': attribute type 17 has an invalid length. [ 96.398600][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.406485][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.413871][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.491112][ T4905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.959394][ T4918] loop1: detected capacity change from 0 to 1024 [ 98.735204][ T4941] xt_socket: unknown flags 0x48 [ 100.573313][ T4260] usb 44-1: device descriptor read/8, error -110 [ 100.993817][ T4260] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 101.564157][ T4260] usb usb44-port1: unable to enumerate USB device [ 103.070077][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 103.279856][ T5003] team0: No ports can be present during mode change [ 108.326214][ T5078] team0: No ports can be present during mode change [ 113.405318][ T5140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.166'. [ 113.419224][ T5140] team0: No ports can be present during mode change [ 113.433351][ T5140] Zero length message leads to an empty skb [ 116.457759][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 116.485168][ T5187] team0: No ports can be present during mode change [ 122.518260][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 122.586913][ T5259] team0: No ports can be present during mode change [ 128.339228][ T5305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.200'. [ 128.360197][ T5305] team0: No ports can be present during mode change [ 128.378943][ T5305] device vlan0 entered promiscuous mode [ 131.852046][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 132.565252][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.571633][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.742560][ T5365] team0: No ports can be present during mode change [ 132.811802][ T5365] device vlan0 entered promiscuous mode [ 137.680422][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 137.712433][ T5424] team0: No ports can be present during mode change [ 137.727238][ T5424] device vlan0 entered promiscuous mode [ 141.649802][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 141.686256][ T5468] team0: No ports can be present during mode change [ 145.229335][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 145.256554][ T5504] team0: No ports can be present during mode change [ 149.121361][ T5541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 149.222859][ T5538] overlayfs: missing 'lowerdir' [ 149.274409][ T5541] team0: No ports can be present during mode change [ 153.235444][ T5589] overlayfs: missing 'lowerdir' [ 153.314644][ T5592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 153.634346][ T5592] team0: No ports can be present during mode change [ 154.027658][ T5592] team0: Port device vlan0 added [ 154.043804][ T5119] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.752489][ T5625] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 155.759004][ T5625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 155.777889][ T5625] vhci_hcd vhci_hcd.0: Device attached [ 155.862568][ T5625] syz.1.290 (5625): drop_caches: 2 [ 155.868686][ T5625] syz.1.290 (5625): drop_caches: 2 [ 156.067458][ T5626] vhci_hcd: connection closed [ 156.069427][ T4431] vhci_hcd: stop threads [ 156.133674][ T23] usb 36-1: SetAddress Request (6) to port 0 [ 156.136995][ T5634] overlayfs: missing 'lowerdir' [ 156.139884][ T23] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 156.268809][ T4431] vhci_hcd: release socket [ 156.273821][ T4431] vhci_hcd: disconnect device [ 156.303239][ T23] usb 36-1: enqueue for inactive port 0 [ 156.734394][ T23] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 156.765449][ T23] usb usb36-port1: attempt power cycle [ 157.757843][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 157.851245][ T5645] team0: No ports can be present during mode change [ 158.053966][ T23] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 158.385494][ T23] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 158.437623][ T23] usb usb36-port1: unable to enumerate USB device [ 158.719051][ T5675] overlayfs: missing 'lowerdir' [ 160.192670][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 160.201097][ T5691] syz.1.306 (5691): drop_caches: 2 [ 160.202265][ T5686] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 160.210814][ T5691] syz.1.306 (5691): drop_caches: 2 [ 160.213056][ T5686] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.233559][ T5690] team0: No ports can be present during mode change [ 160.246379][ T5690] team0: Port device vlan0 added [ 160.256474][ T5686] vhci_hcd vhci_hcd.0: Device attached [ 160.320453][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.363734][ T5687] vhci_hcd: connection closed [ 160.365539][ T4436] vhci_hcd: stop threads [ 160.425230][ T4436] vhci_hcd: release socket [ 160.456197][ T4436] vhci_hcd: disconnect device [ 161.585372][ T5716] overlayfs: missing 'lowerdir' [ 162.168174][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.320'. [ 162.225789][ T5733] team0: No ports can be present during mode change [ 162.248798][ T5733] team0: Port device vlan0 added [ 162.258460][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.542423][ T5766] overlayfs: missing 'lowerdir' [ 164.668224][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 164.769335][ T5770] team0: No ports can be present during mode change [ 167.761589][ T5812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.346'. [ 167.802116][ T5812] team0: No ports can be present during mode change [ 168.120734][ T5819] overlayfs: missing 'lowerdir' [ 170.660257][ T5862] netlink: 'syz.0.358': attribute type 16 has an invalid length. [ 170.668151][ T5862] netlink: 'syz.0.358': attribute type 17 has an invalid length. [ 170.678251][ T5862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.686770][ T5862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.843242][ T5870] overlayfs: missing 'lowerdir' [ 172.663394][ T4246] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 172.825174][ T5887] syz.3.368[5887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.826555][ T5887] syz.3.368[5887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.923489][ T4246] usb 2-1: Using ep0 maxpacket: 32 [ 173.153529][ T5893] xt_socket: unknown flags 0x48 [ 173.293546][ T4246] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 173.308076][ T4246] usb 2-1: config 0 has no interface number 0 [ 173.554464][ T4246] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 173.577037][ T4246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.653266][ T4246] usb 2-1: Product: syz [ 173.657601][ T4246] usb 2-1: Manufacturer: syz [ 173.662412][ T4246] usb 2-1: SerialNumber: syz [ 173.683787][ T4246] usb 2-1: config 0 descriptor?? [ 173.811679][ T4246] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 174.748009][ T4246] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 174.766980][ T4246] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 175.715191][ T4255] Bluetooth: hci4: command 0x0406 tx timeout [ 175.721403][ T4255] Bluetooth: hci2: command 0x0406 tx timeout [ 175.727887][ T4255] Bluetooth: hci3: command 0x0406 tx timeout [ 175.734205][ T4255] Bluetooth: hci0: command 0x0406 tx timeout [ 175.783293][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 176.022502][ T5905] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 176.032249][ T5905] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 176.043934][ T5905] overlayfs: missing 'lowerdir' [ 176.174109][ T4255] usb 2-1: USB disconnect, device number 3 [ 176.183178][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 176.252812][ T4255] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 176.293365][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 176.463021][ T4255] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 176.483937][ T4255] quatech2 2-1:0.51: device disconnected [ 176.553303][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.603389][ T4232] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 176.694113][ T4232] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 176.753915][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.764067][ T4232] usb 3-1: SerialNumber: syz [ 176.844135][ T4232] cdc_acm 3-1:1.0: Zero length descriptor references [ 176.862619][ T4232] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 176.890717][ T4232] usb-storage 3-1:1.0: USB Mass Storage device detected [ 176.917813][ T4232] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 177.120983][ T1108] usb 3-1: USB disconnect, device number 2 [ 177.626778][ T5928] netlink: 'syz.1.379': attribute type 16 has an invalid length. [ 177.634594][ T5928] netlink: 'syz.1.379': attribute type 17 has an invalid length. [ 177.645648][ T5928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.822908][ T5929] netlink: 84 bytes leftover after parsing attributes in process `syz.5.381'. [ 177.851316][ T5928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.298417][ T5952] netlink: 'syz.2.386': attribute type 16 has an invalid length. [ 179.306274][ T5952] netlink: 'syz.2.386': attribute type 17 has an invalid length. [ 179.344186][ T5952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.660224][ T5952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.406523][ T5966] netlink: 84 bytes leftover after parsing attributes in process `syz.3.394'. [ 182.490156][ T5978] loop3: detected capacity change from 0 to 64 [ 183.378506][ T5986] netlink: 'syz.5.399': attribute type 16 has an invalid length. [ 183.386417][ T5986] netlink: 'syz.5.399': attribute type 17 has an invalid length. [ 183.396711][ T5986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.409319][ T5986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.900994][ T5994] netlink: 'syz.1.402': attribute type 16 has an invalid length. [ 183.908861][ T5994] netlink: 'syz.1.402': attribute type 17 has an invalid length. [ 183.944204][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.981274][ T5994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.923840][ T6003] netlink: 84 bytes leftover after parsing attributes in process `syz.3.406'. [ 185.282254][ T6007] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 185.292765][ T6007] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 185.304618][ T6007] overlayfs: missing 'lowerdir' [ 187.949754][ T6030] netlink: 'syz.5.413': attribute type 16 has an invalid length. [ 187.957609][ T6030] netlink: 'syz.5.413': attribute type 17 has an invalid length. [ 187.993604][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.477388][ T6030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.093254][ T4260] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 190.209830][ T6060] netlink: 'syz.3.419': attribute type 16 has an invalid length. [ 190.217806][ T6060] netlink: 'syz.3.419': attribute type 17 has an invalid length. [ 190.258664][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.358364][ T6060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.842716][ T6063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 190.849269][ T6063] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.869531][ T6063] vhci_hcd vhci_hcd.0: Device attached [ 190.932889][ T6063] syz.0.426 (6063): drop_caches: 2 [ 190.938614][ T6063] syz.0.426 (6063): drop_caches: 2 [ 190.963240][ T1346] Bluetooth: hci1: command 0x0406 tx timeout [ 190.993163][ T6067] netlink: 84 bytes leftover after parsing attributes in process `syz.2.427'. [ 191.013724][ T6064] vhci_hcd: connection closed [ 191.014003][ T5046] vhci_hcd: stop threads [ 191.025784][ T5046] vhci_hcd: release socket [ 191.030343][ T5046] vhci_hcd: disconnect device [ 191.043300][ T4260] usb 6-1: Using ep0 maxpacket: 16 [ 191.173351][ T4260] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 191.363426][ T4260] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.373925][ T4232] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 191.376833][ T4260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.793369][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.734320][ T4232] usb 3-1: not running at top speed; connect to a high speed hub [ 192.811693][ T4260] usb 6-1: Product: syz [ 192.816172][ T4260] usb 6-1: Manufacturer: syz [ 192.820960][ T4260] usb 6-1: SerialNumber: syz [ 192.831596][ T4260] usb 6-1: config 0 descriptor?? [ 192.853349][ T4260] usb 6-1: can't set config #0, error -71 [ 192.863963][ T4232] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 192.864653][ T4260] usb 6-1: USB disconnect, device number 2 [ 192.872131][ T4232] usb 3-1: config 1 has no interface number 0 [ 192.872168][ T4232] usb 3-1: config 1 interface 138 has no altsetting 0 [ 193.085477][ T6075] loop0: detected capacity change from 0 to 40427 [ 193.152777][ T6075] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 193.160880][ T6075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 193.197889][ T6075] F2FS-fs (loop0): invalid crc value [ 193.292084][ T6088] loop3: detected capacity change from 0 to 256 [ 193.298900][ T4232] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 193.304399][ T6075] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.343822][ T6078] overlayfs: failed to resolve './file0': -2 [ 193.352217][ T6075] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 193.359346][ T6075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 193.385809][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.426972][ T6088] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 256) [ 193.445487][ T4232] usb 3-1: Product: syz [ 193.476553][ T4232] usb 3-1: Manufacturer: syz [ 193.517876][ T4232] usb 3-1: SerialNumber: syz [ 194.014738][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.021063][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.154840][ T4232] usb 3-1: USB disconnect, device number 3 [ 195.770046][ T6128] loop0: detected capacity change from 0 to 64 [ 195.793248][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 196.629238][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 197.010602][ T6153] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 197.017143][ T6153] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 197.063505][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.083630][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 197.271612][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.450504][ T6153] vhci_hcd vhci_hcd.0: Device attached [ 197.676163][ T6160] loop3: detected capacity change from 0 to 32768 [ 197.705409][ T6163] capability: warning: `syz.1.459' uses deprecated v2 capabilities in a way that may be insecure [ 197.762432][ T6160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.458 (6160) [ 197.818818][ T6153] syz.5.457 (6153): drop_caches: 2 [ 197.839326][ T6153] syz.5.457 (6153): drop_caches: 2 [ 197.983364][ T4232] usb 44-1: SetAddress Request (6) to port 0 [ 197.994270][ T4232] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 198.003068][ T6154] vhci_hcd: connection closed [ 198.003588][ T4973] vhci_hcd: stop threads [ 198.058392][ T6164] loop1: detected capacity change from 0 to 512 [ 198.076495][ T4973] vhci_hcd: release socket [ 198.125939][ T4973] vhci_hcd: disconnect device [ 198.381538][ T6164] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 198.518126][ T23] usb 1-1: config 0 descriptor?? [ 198.523874][ T6164] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.527152][ T6160] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 198.542878][ T6160] BTRFS info (device loop3): use zlib compression, level 3 [ 198.550144][ T6160] BTRFS info (device loop3): enabling disk space caching [ 198.557206][ T6160] BTRFS info (device loop3): setting nodatasum [ 198.563426][ T6160] BTRFS info (device loop3): turning off barriers [ 198.569855][ T6160] BTRFS info (device loop3): disabling tree log [ 198.576214][ T6160] BTRFS info (device loop3): enabling ssd optimizations [ 198.583205][ T6160] BTRFS info (device loop3): force clearing of disk cache [ 198.590326][ T6160] BTRFS info (device loop3): not using ssd optimizations [ 198.598012][ T6160] BTRFS info (device loop3): max_inline at 0 [ 198.604204][ T6160] BTRFS info (device loop3): disk space caching is enabled [ 198.611427][ T6160] BTRFS info (device loop3): has skinny extents [ 198.791257][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 198.826181][ T6160] BTRFS info (device loop3): clearing free space tree [ 198.834464][ T6160] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.844994][ T6160] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.869797][ T6160] BTRFS info (device loop3): checking UUID tree [ 199.353199][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 199.593235][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 199.663469][ T23] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 199.713983][ T21] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 199.835216][ T21] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 199.905320][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.036132][ T21] usb 6-1: config 0 descriptor?? [ 200.054474][ T23] usb 1-1: USB disconnect, device number 4 [ 200.063444][ T6194] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 200.084214][ T21] hub 6-1:0.0: bad descriptor, ignoring hub [ 200.090892][ T21] hub: probe of 6-1:0.0 failed with error -5 [ 200.129095][ T21] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 202.452934][ T6231] loop2: detected capacity change from 0 to 1764 [ 202.592021][ T6231] autofs4:pid:6231:autofs_fill_super: called with bogus options [ 202.600377][ T4289] usb 6-1: USB disconnect, device number 3 [ 203.511920][ T4232] usb 44-1: device descriptor read/8, error -110 [ 203.863400][ T4625] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 203.880673][ T6253] loop5: detected capacity change from 0 to 764 [ 203.983308][ T4232] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 204.021201][ T6253] Symlink component flag not implemented [ 204.055771][ T4232] usb usb44-port1: attempt power cycle [ 204.088603][ T6253] Symlink component flag not implemented (101) [ 204.601036][ T4232] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 204.623308][ T4625] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 204.635207][ T4625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.643910][ T4625] usb 3-1: Product: syz [ 204.649179][ T4625] usb 3-1: Manufacturer: syz [ 204.653973][ T4625] usb 3-1: SerialNumber: syz [ 204.668719][ T6263] netlink: 'syz.5.484': attribute type 12 has an invalid length. [ 204.688578][ T4625] usb 3-1: config 0 descriptor?? [ 204.765592][ T4625] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 204.913320][ T4232] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 204.931101][ T4232] usb usb44-port1: unable to enumerate USB device [ 205.433271][ T4625] gspca_stk1135: reg_w 0x3 err -71 [ 205.439522][ T4625] gspca_stk1135: serial bus timeout: status=0x00 [ 205.896453][ T4625] gspca_stk1135: Sensor write failed [ 205.901801][ T4625] gspca_stk1135: serial bus timeout: status=0x00 [ 205.919605][ T4625] gspca_stk1135: Sensor write failed [ 205.925139][ T4625] gspca_stk1135: serial bus timeout: status=0x00 [ 205.934812][ T4625] gspca_stk1135: Sensor read failed [ 205.940045][ T4625] gspca_stk1135: serial bus timeout: status=0x00 [ 205.946645][ T4625] gspca_stk1135: Sensor read failed [ 205.951852][ T4625] gspca_stk1135: Detected sensor type unknown (0x0) [ 205.953498][ T6272] netlink: 64 bytes leftover after parsing attributes in process `syz.5.487'. [ 205.958843][ T4625] gspca_stk1135: serial bus timeout: status=0x00 [ 205.974284][ T4625] gspca_stk1135: Sensor read failed [ 205.979511][ T4625] gspca_stk1135: serial bus timeout: status=0x00 [ 205.986105][ T4625] gspca_stk1135: Sensor read failed [ 205.991322][ T4625] gspca_stk1135: serial bus timeout: status=0x00 [ 205.997911][ T4625] gspca_stk1135: Sensor write failed [ 206.003425][ T4625] gspca_stk1135: serial bus timeout: status=0x00 [ 206.009759][ T4625] gspca_stk1135: Sensor write failed [ 206.015597][ T4625] stk1135: probe of 3-1:0.0 failed with error -71 [ 206.024567][ T4625] usb 3-1: USB disconnect, device number 4 [ 206.067069][ T6277] netlink: 'syz.1.489': attribute type 3 has an invalid length. [ 207.210912][ T6293] loop1: detected capacity change from 0 to 1024 [ 207.353235][ T4246] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.749967][ T6293] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 207.864648][ T6306] loop2: detected capacity change from 0 to 1024 [ 207.874259][ T4246] usb 1-1: Using ep0 maxpacket: 32 [ 208.023345][ T4246] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 208.357324][ T6293] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.368180][ T4246] usb 1-1: config 0 has no interface number 0 [ 208.398260][ T4246] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 208.601637][ T6310] netlink: 68 bytes leftover after parsing attributes in process `syz.3.498'. [ 208.618403][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 208.653556][ T4246] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 208.688850][ T6314] loop5: detected capacity change from 0 to 128 [ 208.696087][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.716021][ T4246] usb 1-1: Product: syz [ 208.720632][ T4246] usb 1-1: Manufacturer: syz [ 208.746950][ T4246] usb 1-1: SerialNumber: syz [ 208.752847][ T4246] usb 1-1: config 0 descriptor?? [ 208.767639][ T6314] hpfs: bad mount options. [ 208.773488][ T5046] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:55: bg 0: block 112: padding at end of block bitmap is not set [ 208.791777][ T6284] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 208.801575][ T5046] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 449 with error 28 [ 208.821289][ T5046] EXT4-fs (loop1): This should not happen!! Data will be lost [ 208.821289][ T5046] [ 208.831248][ T5046] EXT4-fs (loop1): Total free blocks count 0 [ 208.843808][ T5046] EXT4-fs (loop1): Free/Dirty block details [ 208.867282][ T5046] EXT4-fs (loop1): free_blocks=0 [ 208.882694][ T5046] EXT4-fs (loop1): dirty_blocks=480 [ 208.888564][ T5046] EXT4-fs (loop1): Block reservation details [ 208.903454][ T5046] EXT4-fs (loop1): i_reserved_data_blocks=30 [ 208.930220][ T4431] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 208.962945][ T4431] EXT4-fs (loop1): This should not happen!! Data will be lost [ 208.962945][ T4431] [ 209.147768][ T6284] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.323006][ T6328] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 210.329835][ T6328] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 210.450203][ T4246] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 210.492057][ T4246] asix: probe of 1-1:0.188 failed with error -71 [ 210.613077][ T6328] vhci_hcd vhci_hcd.0: Device attached [ 210.646025][ T4246] usb 1-1: USB disconnect, device number 5 [ 211.703183][ T4289] usb 40-1: SetAddress Request (2) to port 0 [ 211.903735][ T4289] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 211.922286][ T6344] loop2: detected capacity change from 0 to 1024 [ 212.529745][ T6333] vhci_hcd: connection reset by peer [ 212.563487][ T5048] vhci_hcd: stop threads [ 212.567762][ T5048] vhci_hcd: release socket [ 212.715805][ T6361] loop5: detected capacity change from 0 to 40427 [ 212.770531][ T5048] vhci_hcd: disconnect device [ 212.787847][ T6361] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 213.035041][ T6361] F2FS-fs (loop5): invalid crc value [ 213.081360][ T6361] F2FS-fs (loop5): Found nat_bits in checkpoint [ 213.141560][ T6361] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 213.459142][ T21] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 214.343775][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.423537][ T21] usb 2-1: not running at top speed; connect to a high speed hub [ 214.492489][ T6397] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 214.499070][ T6397] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 214.507489][ T6392] loop3: detected capacity change from 0 to 4096 [ 214.517843][ T6397] vhci_hcd vhci_hcd.0: Device attached [ 214.523457][ T21] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 214.655029][ T6397] syz.5.522 (6397): drop_caches: 2 [ 214.724419][ T6397] syz.5.522 (6397): drop_caches: 2 [ 215.113498][ T21] usb 2-1: config 8 descriptor has 1 excess byte, ignoring [ 215.278811][ T6405] loop0: detected capacity change from 0 to 1024 [ 215.411116][ T6400] vhci_hcd: connection closed [ 215.969688][ T5048] vhci_hcd: stop threads [ 215.979009][ T5048] vhci_hcd: release socket [ 215.983887][ T5048] vhci_hcd: disconnect device [ 216.219120][ T21] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 61952, setting to 64 [ 216.231395][ T21] usb 2-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.250312][ T21] usb 2-1: config 8 interface 0 has no altsetting 0 [ 216.301472][ T6392] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 216.324006][ T21] usb 2-1: string descriptor 0 read error: -71 [ 216.573393][ T21] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 216.603176][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.697957][ T21] usb 2-1: can't set config #8, error -71 [ 216.759268][ T21] usb 2-1: USB disconnect, device number 4 [ 216.929164][ T4188] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 216.963347][ T4289] usb 40-1: device descriptor read/8, error -110 [ 217.005947][ T6426] loop1: detected capacity change from 0 to 64 [ 217.323356][ T4246] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 217.393633][ T4289] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 217.404206][ T6434] input: syz1 as /devices/virtual/input/input17 [ 217.557681][ T4289] usb usb40-port1: attempt power cycle [ 218.373287][ T4246] usb 4-1: Using ep0 maxpacket: 32 [ 218.452253][ T6443] netlink: 208 bytes leftover after parsing attributes in process `syz.5.535'. [ 218.600362][ T4246] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 218.616016][ T4246] usb 4-1: config 0 has no interface number 0 [ 218.683536][ T4289] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 218.753784][ T6450] loop1: detected capacity change from 0 to 1024 [ 219.503398][ T4246] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 219.579158][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.591887][ T4246] usb 4-1: Product: syz [ 219.605604][ T4246] usb 4-1: Manufacturer: syz [ 219.616862][ T4246] usb 4-1: SerialNumber: syz [ 219.630610][ T4246] usb 4-1: config 0 descriptor?? [ 219.698173][ T4246] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 219.714986][ T4289] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 219.749298][ T4289] usb usb40-port1: unable to enumerate USB device [ 220.027911][ T4246] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 220.153887][ T4246] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 220.328662][ T4289] usb 4-1: USB disconnect, device number 3 [ 220.343176][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 220.371771][ T4289] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 220.451542][ T4289] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 220.595541][ T4289] quatech2 4-1:0.51: device disconnected [ 220.722643][ T6481] loop1: detected capacity change from 0 to 256 [ 221.234010][ T6481] exfat: Deprecated parameter 'namecase' [ 221.378821][ T6481] exfat: Deprecated parameter 'utf8' [ 221.584406][ T6486] loop0: detected capacity change from 0 to 40427 [ 221.608288][ T6481] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 221.623686][ T6486] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 221.630361][ T6486] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 221.654684][ T6486] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.686310][ T6486] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 221.693537][ T6486] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.719208][ T6485] Process accounting resumed [ 221.732662][ T4182] attempt to access beyond end of device [ 221.732662][ T4182] loop0: rw=2049, want=45104, limit=40427 [ 222.864096][ T6498] loop1: detected capacity change from 0 to 32768 [ 222.923360][ T6498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.552 (6498) [ 222.938473][ T6498] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 222.947284][ T6498] BTRFS info (device loop1): turning on flush-on-commit [ 222.954267][ T6498] BTRFS info (device loop1): max_inline at 0 [ 222.960259][ T6498] BTRFS info (device loop1): enabling disk space caching [ 222.967287][ T6498] BTRFS info (device loop1): setting nodatasum [ 222.973966][ T6498] BTRFS info (device loop1): turning off barriers [ 222.980377][ T6498] BTRFS info (device loop1): disabling tree log [ 222.986665][ T6498] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 222.996116][ T6498] BTRFS info (device loop1): use lzo compression, level 0 [ 223.003307][ T6498] BTRFS info (device loop1): enabling ssd optimizations [ 223.010251][ T6498] BTRFS info (device loop1): force clearing of disk cache [ 223.017411][ T6498] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.026808][ T6498] BTRFS info (device loop1): use zstd compression, level 3 [ 223.034045][ T6498] BTRFS info (device loop1): enabling auto defrag [ 223.040482][ T6498] BTRFS info (device loop1): max_inline at 0 [ 223.046484][ T6498] BTRFS info (device loop1): disk space caching is enabled [ 223.053702][ T6498] BTRFS info (device loop1): has skinny extents [ 224.071522][ T6513] loop5: detected capacity change from 0 to 256 [ 224.178547][ T6513] syz.5.555 uses obsolete (PF_INET,SOCK_PACKET) [ 224.554072][ T6537] loop3: detected capacity change from 0 to 128 [ 224.578727][ T6537] EXT4-fs (loop3): Ignoring removed nobh option [ 225.540605][ T6498] BTRFS info (device loop1): clearing free space tree [ 225.548419][ T6498] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.558809][ T6498] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.570733][ T6537] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 225.642984][ T6537] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.650581][ T6550] loop0: detected capacity change from 0 to 128 [ 225.783286][ T6550] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 225.842835][ T6550] hpfs: filesystem error: improperly stopped [ 225.933985][ T6550] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 225.979696][ T6550] hpfs: You really don't want any checks? You are crazy... [ 225.997406][ T6550] hpfs: hpfs_map_sector(): read error [ 226.048847][ T6550] hpfs: code page support is disabled [ 226.083653][ T6550] hpfs: hpfs_map_4sectors(): unaligned read [ 226.089810][ T6550] hpfs: hpfs_map_4sectors(): unaligned read [ 226.106824][ T6550] hpfs: filesystem error: unable to find root dir [ 226.269429][ T6550] hpfs: hpfs_map_4sectors(): unaligned read [ 226.432501][ T6569] loop1: detected capacity change from 0 to 256 [ 226.490562][ T6571] loop3: detected capacity change from 0 to 64 [ 226.501375][ T26] audit: type=1800 audit(1763773983.989:5): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.561" name="file3" dev="loop1" ino=1048594 res=0 errno=0 [ 226.686362][ T6573] loop0: detected capacity change from 0 to 32768 [ 226.736864][ T6573] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.565 (6573) [ 226.818149][ T6573] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 226.827111][ T6573] BTRFS info (device loop0): using free space tree [ 226.833664][ T6573] BTRFS info (device loop0): has skinny extents [ 226.929141][ T6585] netlink: 'syz.5.560': attribute type 16 has an invalid length. [ 227.030464][ T6585] netlink: 'syz.5.560': attribute type 17 has an invalid length. [ 227.053203][ T6567] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 227.178797][ T6597] loop3: detected capacity change from 0 to 128 [ 227.235905][ T6585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.268582][ T6597] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 227.279246][ T6585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.293251][ T6567] usb 2-1: Using ep0 maxpacket: 16 [ 227.354305][ T6573] BTRFS info (device loop0): enabling ssd optimizations [ 227.376990][ T6597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.577555][ T6567] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 227.595732][ T6567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.616885][ T6567] usb 2-1: Product: syz [ 227.627803][ T6567] usb 2-1: Manufacturer: syz [ 227.632426][ T6567] usb 2-1: SerialNumber: syz [ 227.681323][ T6567] usb 2-1: config 0 descriptor?? [ 227.756254][ T6567] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 227.998951][ T4626] usb 2-1: USB disconnect, device number 5 [ 228.282125][ T6614] loop0: detected capacity change from 0 to 4096 [ 228.290537][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 228.324902][ T6619] tipc: Started in network mode [ 228.330144][ T6619] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 228.362386][ T6619] tipc: Enabled bearer , priority 10 [ 229.143201][ T1108] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 229.153363][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.299874][ T6640] loop2: detected capacity change from 0 to 32768 [ 229.374437][ T6640] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.581 (6640) [ 229.399606][ T6640] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 229.408387][ T6640] BTRFS info (device loop2): using free space tree [ 229.415005][ T6640] BTRFS info (device loop2): has skinny extents [ 229.444283][ T6611] tipc: Node number set to 1 [ 229.457469][ T6640] BTRFS info (device loop2): enabling ssd optimizations [ 229.472249][ T26] audit: type=1800 audit(1763773986.959:6): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.581" name="file2" dev="loop2" ino=261 res=0 errno=0 [ 229.521462][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 229.536928][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 229.651586][ T1108] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 229.670476][ T1108] usb 6-1: config 1 has no interface number 0 [ 229.684051][ T4232] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 229.695256][ T4232] usb 2-1: config 0 has no interface number 0 [ 229.700691][ T1108] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 229.709680][ T4232] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 229.720479][ T1108] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.739188][ T1108] usb 6-1: config 1 interface 105 has no altsetting 0 [ 229.742023][ T4232] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.903388][ T1108] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 229.912552][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.922162][ T1108] usb 6-1: Product: syz [ 229.933458][ T1108] usb 6-1: Manufacturer: syz [ 229.938074][ T1108] usb 6-1: SerialNumber: syz [ 229.963436][ T4232] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 229.973447][ T6632] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 229.980618][ T6632] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 229.983222][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.006116][ T4232] usb 2-1: Product: syz [ 230.020823][ T4232] usb 2-1: Manufacturer: syz [ 230.057743][ T4232] usb 2-1: SerialNumber: syz [ 230.071677][ T4232] usb 2-1: config 0 descriptor?? [ 230.092822][ T6666] binder: 6665:6666 ioctl 400c620e 200000000dc0 returned -22 [ 230.113457][ T6630] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.118563][ T6664] loop2: detected capacity change from 0 to 2048 [ 230.127876][ T6630] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.205961][ T6671] loop3: detected capacity change from 0 to 256 [ 230.213362][ T6664] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,dioread_lock,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 230.260163][ T6664] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.286409][ T6664] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.582: bg 0: block 345: padding at end of block bitmap is not set [ 230.311614][ T6664] EXT4-fs (loop2): Remounting filesystem read-only [ 230.322597][ T6664] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 230.338918][ T6664] EXT4-fs (loop2): Remounting filesystem read-only [ 230.347203][ T26] audit: type=1800 audit(1763773987.839:7): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.585" name="file1" dev="loop3" ino=1048595 res=0 errno=0 [ 230.381896][ T6630] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.453612][ T6630] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.461120][ T6632] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 230.463466][ T6678] loop0: detected capacity change from 0 to 128 [ 230.483505][ T6632] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 230.491039][ T6678] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.519132][ T6678] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.550904][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.053776][ T1108] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 231.433535][ T1108] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 231.443247][ T4232] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 231.464087][ T4232] asix: probe of 2-1:0.251 failed with error -524 [ 231.475682][ T4232] usb 2-1: USB disconnect, device number 6 [ 231.559541][ T1108] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 62:2e:39:bc:2b:d9 [ 231.670455][ T6691] loop3: detected capacity change from 0 to 1024 [ 231.674515][ T1108] usb 6-1: USB disconnect, device number 4 [ 231.699414][ T1108] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 231.724092][ T6691] EXT4-fs (loop3): inline encryption not supported [ 231.731452][ T6691] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 231.821915][ T6693] netlink: 'syz.2.589': attribute type 16 has an invalid length. [ 231.866660][ T6693] netlink: 'syz.2.589': attribute type 17 has an invalid length. [ 231.991652][ T6693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.128277][ T6693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.211288][ T1108] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 232.937581][ T1108] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 232.947011][ T1108] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 233.476450][ T6729] loop1: detected capacity change from 0 to 64 [ 233.540333][ T6729] BFS-fs: bfs_fill_super(): Impossible last inode number 144386 > 513 on loop1 [ 233.619130][ T4626] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 233.626797][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 234.019487][ T6741] loop1: detected capacity change from 0 to 8192 [ 234.043329][ T4232] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.082831][ T4232] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 234.098439][ T4232] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 234.109779][ T4626] usb 6-1: unable to get BOS descriptor or descriptor too short [ 234.124172][ T4232] usb 4-1: config 220 has no interface number 2 [ 234.131136][ T4232] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.145089][ T4232] usb 4-1: config 220 interface 0 has no altsetting 0 [ 234.151907][ T4232] usb 4-1: config 220 interface 76 has no altsetting 0 [ 234.159413][ T4232] usb 4-1: config 220 interface 1 has no altsetting 0 [ 234.166571][ T4626] usb 6-1: not running at top speed; connect to a high speed hub [ 234.296946][ T4626] usb 6-1: config 1 has an invalid interface number: 138 but max is 0 [ 234.318084][ T4626] usb 6-1: config 1 has no interface number 0 [ 234.325969][ T4626] usb 6-1: config 1 interface 138 has no altsetting 0 [ 235.112985][ T4232] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 235.149284][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.158140][ T4232] usb 4-1: Product: syz [ 235.162320][ T4232] usb 4-1: Manufacturer: syz [ 235.245439][ T4232] usb 4-1: SerialNumber: syz [ 235.344702][ T4232] usb 4-1: can't set config #220, error -71 [ 235.388159][ T6765] syz.1.605 (6765): drop_caches: 2 [ 235.475034][ T6765] syz.1.605 (6765): drop_caches: 2 [ 235.741819][ T4626] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 236.633407][ T4232] usb 4-1: USB disconnect, device number 4 [ 236.647519][ T6773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.610'. [ 236.656549][ T4626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.783276][ T4626] usb 6-1: can't set config #1, error -71 [ 236.790160][ T4626] usb 6-1: USB disconnect, device number 5 [ 237.238236][ T4232] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 238.210443][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 238.366998][ T6800] netlink: 'syz.2.614': attribute type 16 has an invalid length. [ 238.390078][ T6800] netlink: 'syz.2.614': attribute type 17 has an invalid length. [ 238.464295][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.499720][ T4232] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 238.514320][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.538977][ T4232] usb 4-1: Product: syz [ 238.542456][ T6799] loop5: detected capacity change from 0 to 40427 [ 238.558843][ T4232] usb 4-1: Manufacturer: syz [ 238.577476][ T4232] usb 4-1: SerialNumber: syz [ 238.589434][ T4232] usb 4-1: config 0 descriptor?? [ 238.598626][ T6800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.654381][ T4232] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 238.664571][ T6799] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 238.672660][ T6799] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 238.686729][ T6799] F2FS-fs (loop5): invalid crc value [ 238.837161][ T6799] F2FS-fs (loop5): Found nat_bits in checkpoint [ 238.892771][ T4635] usb 4-1: USB disconnect, device number 5 [ 239.078292][ T6812] loop0: detected capacity change from 0 to 32768 [ 239.751566][ T6799] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 239.758750][ T6799] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 239.963286][ T6822] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 239.969931][ T6822] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 240.008562][ T6822] vhci_hcd vhci_hcd.0: Device attached [ 240.140229][ T6822] syz.1.626 (6822): drop_caches: 2 [ 240.148236][ T6822] syz.1.626 (6822): drop_caches: 2 [ 240.763282][ T6565] usb 36-1: SetAddress Request (10) to port 0 [ 240.769542][ T6565] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 240.808811][ T6823] vhci_hcd: connection closed [ 240.811001][ T5032] vhci_hcd: stop threads [ 241.380151][ T5032] vhci_hcd: release socket [ 241.413382][ T5032] vhci_hcd: disconnect device [ 242.655178][ T6853] loop5: detected capacity change from 0 to 1024 [ 242.819664][ T6853] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,jqfmt=vfsold,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 243.010945][ T6847] block nbd0: shutting down sockets [ 243.383316][ T1108] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 243.763246][ T1108] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 244.361246][ T6870] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 244.367874][ T6870] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 244.376158][ T6870] vhci_hcd vhci_hcd.0: Device attached [ 244.456461][ T6870] syz.0.639 (6870): drop_caches: 2 [ 244.473202][ T6870] syz.0.639 (6870): drop_caches: 2 [ 244.622168][ T6872] vhci_hcd: connection closed [ 244.622895][ T5032] vhci_hcd: stop threads [ 244.713501][ T5032] vhci_hcd: release socket [ 244.752098][ T5032] vhci_hcd: disconnect device [ 245.106742][ T1108] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.118241][ T1108] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 245.128157][ T1108] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.144294][ T1108] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.153470][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.172290][ T6879] loop2: detected capacity change from 0 to 128 [ 245.206368][ T1108] usb 6-1: invalid MIDI out EP 0 [ 245.243918][ T1108] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 245.257057][ T6879] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 245.308189][ T26] audit: type=1800 audit(1763774002.799:8): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.643" name="bus" dev="loop2" ino=115 res=0 errno=0 [ 245.439169][ T1108] usb 6-1: USB disconnect, device number 6 [ 245.580768][ T4635] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.667010][ T6895] loop0: detected capacity change from 0 to 512 [ 245.717223][ T6895] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 245.744578][ T4329] udevd[4329]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.761506][ T6895] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.648: Invalid inode bitmap blk 4 in block_group 0 [ 245.781536][ T6895] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,mblk_io_submit,noload,nobarrier,grpquota,acl,barrier=0x0000000000000008,grpjquota=,quota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 246.023912][ T4635] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.127815][ T4635] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.392269][ T1108] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.401497][ T4635] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 246.403408][ T6565] usb 36-1: device descriptor read/8, error -110 [ 247.267029][ T4635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.333336][ T4635] usb 2-1: SerialNumber: syz [ 247.433299][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.467026][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.477568][ T6565] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 247.477907][ T6914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 247.491635][ T6914] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 247.509546][ T6914] vhci_hcd vhci_hcd.0: Device attached [ 247.510374][ T6565] usb usb36-port1: attempt power cycle [ 247.525487][ T1108] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 247.546015][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.606276][ T6917] syz.0.654 (6917): drop_caches: 2 [ 247.632070][ T6917] syz.0.654 (6917): drop_caches: 2 [ 247.893602][ T6565] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 248.140202][ T4635] usb 2-1: 0:2 : does not exist [ 248.287495][ T6915] vhci_hcd: connection closed [ 248.301105][ T5046] vhci_hcd: stop threads [ 248.807328][ T5046] vhci_hcd: release socket [ 248.818603][ T5046] vhci_hcd: disconnect device [ 248.820577][ T1108] usb 6-1: config 0 descriptor?? [ 248.833026][ T4635] usb 2-1: USB disconnect, device number 7 [ 248.921772][ T6923] loop1: detected capacity change from 0 to 512 [ 248.976038][ T6923] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 249.024890][ T6923] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.656: bg 0: block 5: invalid block bitmap [ 249.084259][ T4197] udevd[4197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.113311][ T6565] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 249.134020][ T6923] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 249.142932][ T6565] usb usb36-port1: unable to enumerate USB device [ 249.150007][ T6923] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.656: invalid indirect mapped block 3 (level 2) [ 249.173337][ T6611] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 249.173417][ T6923] EXT4-fs (loop1): 2 truncates cleaned up [ 249.192461][ T6923] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 249.298282][ T1108] usbhid 6-1:0.0: can't add hid device: -71 [ 249.304475][ T1108] usbhid: probe of 6-1:0.0 failed with error -71 [ 249.357222][ T1108] usb 6-1: USB disconnect, device number 7 [ 249.587132][ T6931] loop5: detected capacity change from 0 to 4096 [ 249.595045][ T6611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.617689][ T6611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.887185][ T6611] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 249.932786][ T6931] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 250.413138][ T6611] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 250.421176][ T6611] usb 4-1: Manufacturer: syz [ 250.630693][ T6611] usb 4-1: config 0 descriptor?? [ 250.666726][ T6941] loop1: detected capacity change from 0 to 32768 [ 251.349055][ T6941] JBD2: journal file too short [ 251.353943][ T6941] (syz.1.662,6941,0):ocfs2_journal_wipe:1154 ERROR: status = -22 [ 251.361738][ T6941] (syz.1.662,6941,0):ocfs2_check_volume:2424 ERROR: status = -22 [ 251.369964][ T6941] (syz.1.662,6941,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 251.377767][ T6941] (syz.1.662,6941,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 251.396847][ T6941] (syz.1.662,6941,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 251.533314][ T6611] usbhid 4-1:0.0: can't add hid device: -71 [ 251.540838][ T6611] usbhid: probe of 4-1:0.0 failed with error -71 [ 251.918830][ T6611] usb 4-1: USB disconnect, device number 6 [ 252.033969][ T6958] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 252.040614][ T6958] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 252.083319][ T6958] vhci_hcd vhci_hcd.0: Device attached [ 252.188610][ T6958] syz.5.667 (6958): drop_caches: 2 [ 252.196968][ T6958] syz.5.667 (6958): drop_caches: 2 [ 252.446358][ T6565] usb 44-1: SetAddress Request (11) to port 0 [ 252.838446][ T6959] vhci_hcd: connection closed [ 252.838620][ T5046] vhci_hcd: stop threads [ 253.367179][ T6565] usb 44-1: new SuperSpeed USB device number 11 using vhci_hcd [ 253.386050][ T5046] vhci_hcd: release socket [ 253.432740][ T5046] vhci_hcd: disconnect device [ 253.503227][ T6565] usb 44-1: enqueue for inactive port 0 [ 253.638738][ T6946] netlink: 'syz.0.664': attribute type 16 has an invalid length. [ 253.692803][ T6946] netlink: 'syz.0.664': attribute type 17 has an invalid length. [ 253.868023][ T6946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.902072][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 253.939396][ T6565] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 253.955350][ T6565] usb usb44-port1: attempt power cycle [ 254.213231][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 254.323357][ T6565] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 255.153526][ T6946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.343219][ T1108] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 255.351517][ T1108] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 255.373192][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.393205][ T1108] usb 2-1: config 0 has no interface number 0 [ 255.445335][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.446340][ T4622] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 255.451930][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.514386][ T6565] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 255.540368][ T6565] usb usb44-port1: unable to enumerate USB device [ 255.583373][ T1108] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 255.609374][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.669286][ T1108] usb 2-1: Product: syz [ 255.693581][ T1108] usb 2-1: Manufacturer: syz [ 255.704615][ T4622] usb 6-1: Using ep0 maxpacket: 8 [ 255.713594][ T1108] usb 2-1: SerialNumber: syz [ 255.795502][ T1108] usb 2-1: config 0 descriptor?? [ 256.084992][ T1108] usb 2-1: Found UVC 0.00 device syz (046c:14e0) [ 256.096297][ T1108] usb 2-1: No valid video chain found. [ 256.304765][ T1108] usb 2-1: USB disconnect, device number 8 [ 256.395531][ T7005] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 256.402089][ T7005] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 256.453683][ T4622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.465808][ T4622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.486040][ T4622] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 256.506322][ T4622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.538519][ T4622] usb 6-1: config 0 descriptor?? [ 256.562854][ T7005] vhci_hcd vhci_hcd.0: Device attached [ 256.668528][ T7006] vhci_hcd: connection closed [ 256.668831][ T5047] vhci_hcd: stop threads [ 256.678143][ T5047] vhci_hcd: release socket [ 256.687707][ T5047] vhci_hcd: disconnect device [ 257.024002][ T4622] hid (null): invalid report_size 40099 [ 257.058492][ T4622] wacom 0003:056A:0000.0001: unknown main item tag 0x0 [ 257.066643][ T4622] wacom 0003:056A:0000.0001: unknown main item tag 0x0 [ 257.081035][ T4622] wacom 0003:056A:0000.0001: invalid report_size 40099 [ 257.089886][ T4622] wacom 0003:056A:0000.0001: item 0 2 1 7 parsing failed [ 257.104438][ T4622] wacom 0003:056A:0000.0001: parse failed [ 257.114001][ T4622] wacom: probe of 0003:056A:0000.0001 failed with error -22 [ 257.522158][ T4288] usb 6-1: USB disconnect, device number 8 [ 258.026882][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 258.314126][ T7049] loop5: detected capacity change from 0 to 736 [ 258.326862][ T7047] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 258.333401][ T7047] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 258.357379][ T7047] vhci_hcd vhci_hcd.0: Device attached [ 258.541040][ T7053] loop3: detected capacity change from 0 to 40427 [ 258.621427][ T7053] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 258.713732][ T7056] syz.0.696 (7056): drop_caches: 2 [ 258.736216][ T7056] syz.0.696 (7056): drop_caches: 2 [ 258.806524][ T4255] usb 34-1: SetAddress Request (5) to port 0 [ 259.169273][ T7048] vhci_hcd: connection closed [ 259.169496][ T4431] vhci_hcd: stop threads [ 259.263119][ T4431] vhci_hcd: release socket [ 259.350025][ T4431] vhci_hcd: disconnect device [ 259.742041][ T4255] usb 34-1: new SuperSpeed USB device number 5 using vhci_hcd [ 259.793333][ T4255] usb 34-1: enqueue for inactive port 0 [ 259.812966][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 260.021565][ T7076] netlink: 'syz.5.705': attribute type 10 has an invalid length. [ 260.029887][ T7076] device lo entered promiscuous mode [ 260.038308][ T7076] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.133391][ T4626] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 260.812023][ T7079] loop1: detected capacity change from 0 to 32768 [ 260.819608][ T4255] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 260.832818][ T4255] usb usb34-port1: attempt power cycle [ 260.857724][ T7079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.704 (7079) [ 261.193854][ T4255] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 261.233615][ T4626] usb 1-1: config 4 has an invalid interface number: 95 but max is 0 [ 261.260741][ T4626] usb 1-1: config 4 has no interface number 0 [ 261.348626][ T4626] usb 1-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 261.533832][ T4255] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 261.558297][ T4255] usb usb34-port1: unable to enumerate USB device [ 261.693663][ T4626] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 261.745746][ T7079] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 261.754568][ T7079] BTRFS info (device loop1): use zlib compression, level 3 [ 261.761863][ T7079] BTRFS info (device loop1): enabling disk space caching [ 261.768993][ T7079] BTRFS info (device loop1): setting nodatasum [ 261.775197][ T7079] BTRFS info (device loop1): turning off barriers [ 261.782139][ T7079] BTRFS info (device loop1): disabling tree log [ 261.788449][ T7079] BTRFS info (device loop1): enabling ssd optimizations [ 261.795554][ T7079] BTRFS info (device loop1): force clearing of disk cache [ 261.802692][ T7079] BTRFS info (device loop1): not using ssd optimizations [ 261.809834][ T7079] BTRFS info (device loop1): max_inline at 0 [ 261.815867][ T7079] BTRFS info (device loop1): disk space caching is enabled [ 261.823079][ T7079] BTRFS info (device loop1): has skinny extents [ 262.477142][ T4626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.485584][ T4626] usb 1-1: Product: syz [ 262.489789][ T4626] usb 1-1: Manufacturer: syz [ 262.494755][ T4626] usb 1-1: SerialNumber: syz [ 262.632654][ T7072] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 262.831125][ T7114] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 262.837688][ T7114] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 262.893459][ T4626] usb 1-1: MIDIStreaming interface descriptor not found [ 262.970545][ T7079] BTRFS info (device loop1): clearing free space tree [ 262.978041][ T7079] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 262.987843][ T7079] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.014591][ T7079] BTRFS info (device loop1): checking UUID tree [ 263.021176][ T7079] BTRFS warning (device loop1): failed to start uuid_rescan task [ 263.029044][ T7079] BTRFS warning (device loop1): failed to check the UUID tree: -4 [ 263.085262][ T4626] usb 1-1: USB disconnect, device number 6 [ 263.107200][ T7079] BTRFS error (device loop1): open_ctree failed: -4 [ 263.124571][ T7114] vhci_hcd vhci_hcd.0: Device attached [ 263.158536][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 263.377454][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 263.445631][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.523872][ T7116] vhci_hcd: connection closed [ 263.526536][ T4973] vhci_hcd: stop threads [ 263.705677][ T4973] vhci_hcd: release socket [ 263.716306][ T4973] vhci_hcd: disconnect device [ 265.343187][ T7146] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 266.100807][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 266.365279][ T7183] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 266.371841][ T7183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 266.443330][ T7146] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 266.472948][ T7146] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.650701][ T7146] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.660707][ T7146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.688360][ T7183] vhci_hcd vhci_hcd.0: Device attached [ 266.704447][ T7146] usb 4-1: config 0 descriptor?? [ 266.745214][ T7146] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 266.785782][ T7184] vhci_hcd: connection closed [ 266.786117][ T5119] vhci_hcd: stop threads [ 266.813312][ T4325] usb 44-1: SetAddress Request (15) to port 0 [ 266.819589][ T4325] usb 44-1: new SuperSpeed USB device number 15 using vhci_hcd [ 266.830760][ T5119] vhci_hcd: release socket [ 266.836407][ T5119] vhci_hcd: disconnect device [ 266.893485][ T4325] usb 44-1: enqueue for inactive port 0 [ 267.333859][ T4325] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 267.874273][ T7146] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 267.901451][ T4325] usb usb44-port1: attempt power cycle [ 267.929147][ T7209] loop1: detected capacity change from 0 to 8 [ 268.113275][ T7146] usb 6-1: Using ep0 maxpacket: 16 [ 268.233823][ T7146] usb 6-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 268.267932][ T7146] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.406062][ T7146] usb 6-1: config 0 descriptor?? [ 268.497323][ T7209] SQUASHFS error: zstd decompression error: 2 [ 268.555663][ T7209] SQUASHFS error: zstd decompression failed, data probably corrupt [ 268.610029][ T7209] SQUASHFS error: Failed to read block 0x62b: -5 [ 268.637754][ T7209] SQUASHFS error: Unable to read metadata cache entry [629] [ 268.669731][ T7209] SQUASHFS error: Unable to read directory block [629:ff26] [ 268.905841][ T4288] usb 4-1: USB disconnect, device number 7 [ 269.083869][ T4325] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 269.863325][ T7146] pegasus 6-1:0.0: can't reset MAC [ 269.884975][ T7146] pegasus: probe of 6-1:0.0 failed with error -5 [ 269.896624][ T7146] usb 6-1: USB disconnect, device number 9 [ 269.971129][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 269.998914][ T7222] netlink: 'syz.3.740': attribute type 12 has an invalid length. [ 270.223358][ T4325] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 270.719612][ T7227] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 270.726178][ T7227] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 270.787566][ T4325] usb usb44-port1: unable to enumerate USB device [ 270.922806][ T7227] vhci_hcd vhci_hcd.0: Device attached [ 271.233250][ T7146] usb 36-1: SetAddress Request (14) to port 0 [ 271.243207][ T7146] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd [ 271.295420][ T7229] syz.1.741 (7229): drop_caches: 2 [ 271.300911][ T7229] syz.1.741 (7229): drop_caches: 2 [ 271.517661][ T7228] vhci_hcd: connection reset by peer [ 271.525463][ T4960] vhci_hcd: stop threads [ 271.529780][ T4960] vhci_hcd: release socket [ 271.734307][ T4960] vhci_hcd: disconnect device [ 272.208398][ T7242] loop5: detected capacity change from 0 to 512 [ 272.425922][ T7242] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.744: bg 0: block 393: padding at end of block bitmap is not set [ 272.453933][ T7242] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 272.473024][ T7242] EXT4-fs (loop5): 2 truncates cleaned up [ 272.479034][ T7242] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.492605][ T7258] loop2: detected capacity change from 0 to 512 [ 273.736356][ T7258] EXT4-fs (loop2): Ignoring removed bh option [ 275.403213][ T7258] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 275.445910][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 275.495181][ T7258] EXT4-fs (loop2): 1 truncate cleaned up [ 275.537265][ T7258] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 275.608317][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.757'. [ 275.620856][ T7278] loop3: detected capacity change from 0 to 1024 [ 275.731788][ T7280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.739753][ T7280] IPv6: NLM_F_CREATE should be set when creating new route [ 276.323249][ T7146] usb 36-1: device descriptor read/8, error -110 [ 276.381650][ T4431] hfsplus: b-tree write err: -5, ino 4 [ 276.400034][ T7292] ERROR: device name not specified. [ 276.633222][ T7302] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 276.639794][ T7302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 276.673531][ T7302] vhci_hcd vhci_hcd.0: Device attached [ 276.703702][ T26] audit: type=1326 audit(1763774034.199:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.3.764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4424ce0749 code=0x0 [ 276.793310][ T7146] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 277.523840][ T7312] syz.0.761 (7312): drop_caches: 2 [ 277.540093][ T7312] syz.0.761 (7312): drop_caches: 2 [ 277.561681][ T7303] vhci_hcd: connection closed [ 277.561937][ T4960] vhci_hcd: stop threads [ 277.639968][ T4960] vhci_hcd: release socket [ 277.713961][ T4960] vhci_hcd: disconnect device [ 278.073369][ T7146] usb usb36-port1: attempt power cycle [ 278.453371][ T7146] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 278.740695][ T7324] loop1: detected capacity change from 0 to 4096 [ 278.843413][ T7146] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 279.135039][ T7324] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 279.608190][ T7146] usb usb36-port1: unable to enumerate USB device [ 279.831383][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 280.934985][ T7351] netlink: 'syz.5.765': attribute type 16 has an invalid length. [ 280.950209][ T7351] netlink: 'syz.5.765': attribute type 17 has an invalid length. [ 280.959018][ T7351] device lo left promiscuous mode [ 281.016304][ T7350] loop2: detected capacity change from 0 to 128 [ 281.051263][ T7351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.093522][ T7351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.607391][ T7350] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.701924][ T7350] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.983926][ T7365] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 281.991018][ T7365] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 282.036671][ T7365] vhci_hcd vhci_hcd.0: Device attached [ 282.443194][ T13] usb 40-1: SetAddress Request (6) to port 0 [ 283.781792][ T7366] vhci_hcd: connection closed [ 283.803188][ T5046] vhci_hcd: stop threads [ 283.812198][ T5046] vhci_hcd: release socket [ 284.245018][ T13] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 284.536115][ T5046] vhci_hcd: disconnect device [ 286.830019][ T7414] loop2: detected capacity change from 0 to 512 [ 287.513170][ T7414] EXT4-fs (loop2): Test dummy encryption mode enabled [ 287.520581][ T7414] EXT4-fs (loop2): Test dummy encryption mode enabled [ 287.558251][ T7425] capability: warning: `syz.3.795' uses 32-bit capabilities (legacy support in use) [ 287.574189][ T7414] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 287.753333][ T7414] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.793: Directory hole found for htree leaf block 0 [ 288.039211][ T7414] EXT4-fs (loop2): Remounting filesystem read-only [ 288.513606][ T7437] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 288.520173][ T7437] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 288.545421][ T7437] vhci_hcd vhci_hcd.0: Device attached [ 288.633245][ T6555] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 289.387781][ T7438] vhci_hcd: connection closed [ 289.784799][ T13] usb 40-1: device descriptor read/8, error -110 [ 289.806782][ T5119] vhci_hcd: stop threads [ 289.827806][ T5119] vhci_hcd: release socket [ 289.900301][ T5119] vhci_hcd: disconnect device [ 290.393206][ T6555] usb 4-1: Using ep0 maxpacket: 32 [ 290.523458][ T6555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.937304][ T13] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 291.087714][ T6555] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.105004][ T6555] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 291.113589][ T13] usb usb40-port1: attempt power cycle [ 291.114578][ T6555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.130028][ T6555] usb 4-1: config 0 descriptor?? [ 291.214918][ T6555] hub 4-1:0.0: USB hub found [ 291.479848][ T7465] loop1: detected capacity change from 0 to 32768 [ 291.527058][ T7465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.807 (7465) [ 291.533284][ T6555] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 291.583702][ T7465] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 291.592463][ T7465] BTRFS info (device loop1): use zlib compression, level 3 [ 291.599847][ T7465] BTRFS info (device loop1): enabling disk space caching [ 291.606978][ T7465] BTRFS info (device loop1): setting nodatasum [ 291.613200][ T7465] BTRFS info (device loop1): turning off barriers [ 291.619714][ T7465] BTRFS info (device loop1): disabling tree log [ 291.626008][ T7465] BTRFS info (device loop1): enabling ssd optimizations [ 291.632956][ T7465] BTRFS info (device loop1): force clearing of disk cache [ 291.640095][ T7465] BTRFS info (device loop1): not using ssd optimizations [ 291.647269][ T7465] BTRFS info (device loop1): max_inline at 0 [ 291.653292][ T7465] BTRFS info (device loop1): disk space caching is enabled [ 291.660606][ T7465] BTRFS info (device loop1): has skinny extents [ 291.663310][ T6555] usbhid 4-1:0.0: can't add hid device: -71 [ 291.678270][ T6555] usbhid: probe of 4-1:0.0 failed with error -71 [ 291.713344][ T13] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 291.734219][ T6555] usb 4-1: USB disconnect, device number 8 [ 291.960391][ T7465] BTRFS info (device loop1): clearing free space tree [ 291.967750][ T7465] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 291.977582][ T7465] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 291.999779][ T7465] BTRFS info (device loop1): checking UUID tree [ 292.043320][ T13] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 292.053232][ T13] usb usb40-port1: unable to enumerate USB device [ 292.164335][ T4255] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 292.416896][ T4255] usb 3-1: Using ep0 maxpacket: 16 [ 292.563395][ T4255] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 292.763438][ T4255] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 292.786512][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.815296][ T4255] usb 3-1: Product: syz [ 292.826657][ T4255] usb 3-1: Manufacturer: syz [ 292.840481][ T4255] usb 3-1: SerialNumber: syz [ 292.869534][ T4255] usb 3-1: config 0 descriptor?? [ 293.912080][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 295.033983][ T7525] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 295.040545][ T7525] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 295.098029][ T7525] vhci_hcd vhci_hcd.0: Device attached [ 295.174541][ T7503] usb 3-1: USB disconnect, device number 5 [ 295.713849][ T6562] usb 44-1: SetAddress Request (19) to port 0 [ 295.720098][ T6562] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 295.919513][ T7526] vhci_hcd: connection closed [ 295.920941][ T5115] vhci_hcd: stop threads [ 296.001962][ T5115] vhci_hcd: release socket [ 296.071277][ T5115] vhci_hcd: disconnect device [ 296.433255][ T6562] usb 44-1: enqueue for inactive port 0 [ 296.476641][ T7534] loop3: detected capacity change from 0 to 1024 [ 296.876584][ T6562] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 297.580897][ T6562] usb usb44-port1: attempt power cycle [ 298.104441][ T6562] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 299.303924][ T6562] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 299.520707][ T6562] usb usb44-port1: unable to enumerate USB device [ 302.038882][ T7573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 302.045454][ T7573] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 302.216431][ T7573] vhci_hcd vhci_hcd.0: Device attached [ 302.778234][ T6555] usb 34-1: SetAddress Request (9) to port 0 [ 303.244670][ T6555] usb 34-1: new SuperSpeed USB device number 9 using vhci_hcd [ 303.444007][ T7574] vhci_hcd: connection reset by peer [ 303.453200][ T4436] vhci_hcd: stop threads [ 303.458175][ T4436] vhci_hcd: release socket [ 303.491436][ T4436] vhci_hcd: disconnect device [ 307.885420][ T7625] loop2: detected capacity change from 0 to 1024 [ 308.328095][ T6555] usb 34-1: device descriptor read/8, error -110 [ 309.533338][ T6555] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 309.738783][ T6555] usb usb34-port1: attempt power cycle [ 310.608630][ T7640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 310.615216][ T7640] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 310.652622][ T7640] vhci_hcd vhci_hcd.0: Device attached [ 310.781848][ T7641] vhci_hcd: connection closed [ 310.793672][ T4965] vhci_hcd: stop threads [ 310.837682][ T4965] vhci_hcd: release socket [ 310.866076][ T4965] vhci_hcd: disconnect device [ 310.953449][ T6555] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 311.263675][ T6555] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 311.976137][ T6555] usb usb34-port1: unable to enumerate USB device [ 316.887180][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.893549][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.354895][ T7715] loop0: detected capacity change from 0 to 1024 [ 329.139427][ T7761] loop1: detected capacity change from 0 to 1024 [ 330.206938][ T7784] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 330.213517][ T7784] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 330.273762][ T7784] vhci_hcd vhci_hcd.0: Device attached [ 331.093174][ T4626] usb 40-1: SetAddress Request (10) to port 0 [ 331.099333][ T4626] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 331.553945][ T7785] vhci_hcd: connection reset by peer [ 331.566140][ T4441] vhci_hcd: stop threads [ 331.570446][ T4441] vhci_hcd: release socket [ 331.578588][ T4441] vhci_hcd: disconnect device [ 334.102476][ T7819] loop5: detected capacity change from 0 to 1024 [ 336.193056][ T7843] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 336.199635][ T7843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 336.217581][ T7843] vhci_hcd vhci_hcd.0: Device attached [ 336.483230][ T4626] usb 40-1: device descriptor read/8, error -110 [ 336.563377][ T6560] usb 36-1: SetAddress Request (19) to port 0 [ 337.049700][ T7844] vhci_hcd: connection closed [ 337.049960][ T4973] vhci_hcd: stop threads [ 337.593005][ T6560] usb 36-1: new SuperSpeed USB device number 19 using vhci_hcd [ 337.643208][ T4973] vhci_hcd: release socket [ 337.683440][ T4973] vhci_hcd: disconnect device [ 337.693256][ T6560] usb 36-1: enqueue for inactive port 0 [ 337.959983][ T7854] loop3: detected capacity change from 0 to 32768 [ 337.973821][ T4626] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 337.981804][ T4626] usb usb40-port1: attempt power cycle [ 338.171894][ T6560] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 338.195574][ T6560] usb usb36-port1: attempt power cycle [ 338.697945][ T7854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.909 (7854) [ 339.308010][ T6560] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 339.550327][ T4626] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 339.571269][ T7854] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 339.580882][ T7854] BTRFS info (device loop3): use zlib compression, level 3 [ 339.588208][ T7854] BTRFS info (device loop3): enabling disk space caching [ 339.595308][ T7854] BTRFS info (device loop3): setting nodatasum [ 339.601612][ T7854] BTRFS info (device loop3): turning off barriers [ 339.608559][ T7854] BTRFS info (device loop3): disabling tree log [ 339.614883][ T7854] BTRFS info (device loop3): enabling ssd optimizations [ 339.621868][ T7854] BTRFS info (device loop3): force clearing of disk cache [ 339.629053][ T7854] BTRFS info (device loop3): not using ssd optimizations [ 339.636220][ T7854] BTRFS info (device loop3): max_inline at 0 [ 339.642275][ T7854] BTRFS info (device loop3): disk space caching is enabled [ 339.649535][ T7854] BTRFS info (device loop3): has skinny extents [ 339.738757][ T6560] usb usb36-port1: Cannot enable. Maybe the USB cable is bad? [ 339.755194][ T6560] usb usb36-port1: unable to enumerate USB device [ 339.884376][ T4626] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 339.915313][ T4626] usb usb40-port1: unable to enumerate USB device [ 340.058025][ T7854] BTRFS info (device loop3): clearing free space tree [ 340.065248][ T7854] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 340.075079][ T7854] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 340.100306][ T7854] BTRFS info (device loop3): checking UUID tree [ 340.464456][ T7912] block nbd2: shutting down sockets [ 340.788014][ T7916] loop5: detected capacity change from 0 to 32768 [ 341.014322][ T7916] XFS (loop5): Mounting V5 Filesystem [ 341.489845][ T7916] XFS (loop5): Ending clean mount [ 341.497259][ T7916] XFS (loop5): Quotacheck needed: Please wait. [ 341.513578][ T7936] loop1: detected capacity change from 0 to 1024 [ 342.316283][ T7916] XFS (loop5): Quotacheck: Done. [ 343.116738][ T4387] XFS (loop5): Unmounting Filesystem [ 343.203027][ T7950] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 343.266739][ T7950] netlink: 15150 bytes leftover after parsing attributes in process `syz.2.931'. [ 343.607610][ T7959] netlink: 'syz.0.928': attribute type 16 has an invalid length. [ 343.680701][ T7959] netlink: 'syz.0.928': attribute type 17 has an invalid length. [ 343.741163][ T7964] block nbd2: shutting down sockets [ 343.796877][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 343.858180][ T7959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.952711][ T6560] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 344.147264][ T7970] loop3: detected capacity change from 0 to 32768 [ 344.237731][ T7975] Cannot find set identified by id 0 to match [ 344.303867][ T7970] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.939 (7970) [ 344.322614][ T7970] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 344.331449][ T7970] BTRFS info (device loop3): using free space tree [ 344.338799][ T7970] BTRFS info (device loop3): has skinny extents [ 344.373194][ T6560] usb 2-1: Using ep0 maxpacket: 32 [ 345.814927][ T7970] BTRFS info (device loop3): enabling ssd optimizations [ 345.825083][ T6560] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 345.837491][ T6560] usb 2-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 345.847798][ T6560] usb 2-1: config 0 has no interface number 0 [ 345.854723][ T6560] usb 2-1: config 0 interface 120 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.867994][ T6560] usb 2-1: config 0 interface 120 has no altsetting 0 [ 346.034564][ T6560] usb 2-1: New USB device found, idVendor=0421, idProduct=0475, bcdDevice=41.76 [ 346.056102][ T6560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.071746][ T6560] usb 2-1: Product: syz [ 346.083355][ T6560] usb 2-1: Manufacturer: syz [ 346.088050][ T6560] usb 2-1: SerialNumber: syz [ 346.120004][ T6560] usb 2-1: config 0 descriptor?? [ 346.419483][ T6560] rndis_wlan 2-1:0.120: skipping garbage [ 346.425732][ T6560] usb 2-1: bad CDC descriptors [ 346.451544][ T8018] netlink: 'syz.3.947': attribute type 30 has an invalid length. [ 346.460064][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 346.469832][ T8018] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 346.479042][ T8018] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 346.604653][ T6560] rndis_host 2-1:0.120: skipping garbage [ 346.610347][ T6560] usb 2-1: bad CDC descriptors [ 346.615927][ T6560] cdc_acm 2-1:0.120: Zero length descriptor references [ 346.622880][ T6560] cdc_acm: probe of 2-1:0.120 failed with error -22 [ 346.632697][ T6560] usb 2-1: USB disconnect, device number 9 [ 346.993814][ T8023] block nbd0: shutting down sockets [ 349.466981][ T8062] loop1: detected capacity change from 0 to 32768 [ 349.516255][ T8062] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.959 (8062) [ 349.570658][ T8062] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 349.579585][ T8062] BTRFS info (device loop1): using free space tree [ 349.586211][ T8062] BTRFS info (device loop1): has skinny extents [ 349.831964][ T8062] BTRFS info (device loop1): enabling ssd optimizations [ 351.445499][ T8091] block nbd3: shutting down sockets [ 353.280283][ T8129] loop5: detected capacity change from 0 to 1024 [ 353.383552][ T8135] loop3: detected capacity change from 0 to 2048 [ 353.499681][ T8133] loop0: detected capacity change from 0 to 2048 [ 353.580352][ T8135] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 354.116920][ T8133] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none. [ 354.282350][ T4329] udevd[4329]: incorrect nilfs2 checksum on /dev/loop3 [ 354.418163][ T8145] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.662918][ T8135] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 354.683895][ T26] audit: type=1800 audit(1763774112.119:10): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.977" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 354.723064][ C1] sched: RT throttling activated [ 354.728767][ T4260] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 354.760581][ T8135] Remounting filesystem read-only [ 355.066737][ T4188] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 355.113422][ T4260] usb 2-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x93, skipping [ 355.145544][ T4260] usb 2-1: config 0 interface 0 has no altsetting 0 [ 355.353738][ T4260] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.520223][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 355.534579][ T8151] block nbd5: shutting down sockets [ 355.730091][ T4260] usb 2-1: Product: syz [ 355.853227][ T4260] usb 2-1: Manufacturer: syz [ 355.857871][ T4260] usb 2-1: SerialNumber: syz [ 355.921175][ T4260] usb 2-1: config 0 descriptor?? [ 355.963388][ T8131] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 356.036067][ T4260] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 356.120858][ T8168] device syzkaller0 entered promiscuous mode [ 356.141167][ T4197] udevd[4197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.208225][ T4260] usb 2-1: USB disconnect, device number 10 [ 356.963910][ T8181] Cannot find del_set index 0 as target [ 357.813663][ T8191] loop1: detected capacity change from 0 to 128 [ 357.929103][ T8191] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.023245][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 358.045074][ T8191] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.313307][ T8198] loop2: detected capacity change from 0 to 1024 [ 358.363129][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 358.459056][ T8191] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 358.493406][ T21] usb 4-1: config 2 interface 0 has no altsetting 0 [ 358.569233][ T8191] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 358.664129][ T21] usb 4-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 358.686681][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 358.722920][ T21] usb 4-1: Product: syz [ 358.757691][ T21] usb 4-1: Manufacturer: syz [ 358.783275][ T21] usb 4-1: SerialNumber: syz [ 359.414370][ T21] usb 4-1: USB disconnect, device number 9 [ 359.489073][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.5.997'. [ 360.210994][ T8216] block nbd1: shutting down sockets [ 361.022714][ T8234] loop3: detected capacity change from 0 to 40427 [ 361.080824][ T8234] F2FS-fs (loop3): invalid crc value [ 361.136496][ T8234] F2FS-fs (loop3): Found nat_bits in checkpoint [ 361.184722][ T8234] F2FS-fs (loop3): Start checkpoint disabled! [ 361.216136][ T8234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 361.335093][ T8242] loop1: detected capacity change from 0 to 1024 [ 363.274955][ T8258] loop3: detected capacity change from 0 to 128 [ 363.464236][ T8258] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.475113][ T8258] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.635704][ T8264] loop0: detected capacity change from 0 to 32768 [ 363.728745][ T8264] XFS (loop0): Mounting V5 Filesystem [ 363.812753][ T8264] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 363.827101][ T8264] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 364.025147][ T8264] XFS (loop0): Ending clean mount [ 364.073758][ T8264] XFS (loop0): Quotacheck needed: Please wait. [ 364.402011][ T4425] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1803 dinode [ 364.593507][ T4425] XFS (loop0): Unmount and run xfs_repair [ 364.676748][ T4425] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 364.734619][ T4425] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 364.743612][ T4425] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 364.752581][ T4425] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d 4.Xh....4.Xh...= [ 364.761565][ T4425] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 364.770613][ T4425] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 364.779549][ T4425] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1 ..............=. [ 364.789213][ T4425] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04 ....n..-........ [ 364.798493][ T4425] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06 ................ [ 364.863430][ T8264] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 364.896306][ T4182] XFS (loop0): Unmounting Filesystem [ 365.268836][ T8282] block nbd2: shutting down sockets [ 366.022916][ T8305] loop0: detected capacity change from 0 to 1024 [ 366.023159][ T21] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 366.055284][ T8307] loop5: detected capacity change from 0 to 1024 [ 366.135853][ T8307] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.473611][ T21] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 366.481842][ T21] usb 3-1: config 0 has no interface number 0 [ 367.304167][ T21] usb 3-1: config 0 interface 41 has no altsetting 0 [ 367.490773][ T21] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 367.531540][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.568800][ T21] usb 3-1: Product: syz [ 367.583555][ T8108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 367.593360][ T21] usb 3-1: Manufacturer: syz [ 367.597990][ T21] usb 3-1: SerialNumber: syz [ 367.635347][ T21] usb 3-1: config 0 descriptor?? [ 367.640000][ T8320] loop1: detected capacity change from 0 to 32768 [ 367.802003][ T8320] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 367.810840][ T8320] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 367.818664][ T8320] XFS (loop1): DAX and reflink cannot be used together! [ 367.990588][ T8342] netlink: 'syz.1.1033': attribute type 4 has an invalid length. [ 368.035670][ T8342] netlink: 'syz.1.1033': attribute type 4 has an invalid length. [ 368.073710][ T8334] block nbd5: shutting down sockets [ 368.114648][ T8108] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 368.143771][ T8108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.151811][ T8108] usb 4-1: Product: syz [ 368.198894][ T8108] usb 4-1: Manufacturer: syz [ 368.207373][ T8108] usb 4-1: SerialNumber: syz [ 368.225506][ T8108] usb 4-1: config 0 descriptor?? [ 368.773369][ T21] CoreChips: probe of 3-1:0.41 failed with error -71 [ 368.798939][ T21] usb 3-1: USB disconnect, device number 6 [ 369.321373][ T8357] loop0: detected capacity change from 0 to 1024 [ 369.473590][ T8108] usb 4-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 370.019776][ T8108] usb 4-1: Firmware version (0.0) predates our first public release. [ 370.081852][ T8108] usb 4-1: Please update to version 0.2 or newer [ 370.158168][ T8108] usb 4-1: atusb_probe: initialization failed, error = -71 [ 370.173595][ T8108] atusb: probe of 4-1:0.0 failed with error -71 [ 370.197332][ T8108] usb 4-1: USB disconnect, device number 10 [ 370.578569][ T8381] netlink: 'syz.5.1046': attribute type 72 has an invalid length. [ 370.690304][ T8381] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1046'. [ 371.158972][ T8371] loop3: detected capacity change from 0 to 4096 [ 371.346964][ T8385] loop2: detected capacity change from 0 to 40427 [ 371.407431][ T8385] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 371.415273][ T8385] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 371.427293][ T8385] F2FS-fs (loop2): invalid crc value [ 371.625896][ T8392] loop5: detected capacity change from 0 to 1024 [ 371.781435][ T8371] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 372.474691][ T8385] F2FS-fs (loop2): Found nat_bits in checkpoint [ 372.522015][ T8385] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 372.529195][ T8385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 372.824055][ T4232] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 372.842868][ T4260] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 372.890422][ T4260] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.895287][ T8404] loop5: detected capacity change from 0 to 2048 [ 373.000086][ T8404] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 373.138354][ T8408] fido_id[8408]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 373.433575][ T4232] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 373.618506][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.657220][ T8418] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 373.761233][ T4232] usb 1-1: Product: syz [ 373.825789][ T4232] usb 1-1: Manufacturer: syz [ 373.862790][ T4232] usb 1-1: SerialNumber: syz [ 373.994469][ T4232] usb 1-1: config 0 descriptor?? [ 374.052018][ T8423] netlink: 'syz.1.1060': attribute type 72 has an invalid length. [ 374.060116][ T8423] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1060'. [ 375.133275][ T4232] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -61 [ 375.148932][ T4232] usb 1-1: Firmware version (0.0) predates our first public release. [ 375.178012][ T4232] usb 1-1: Please update to version 0.2 or newer [ 375.413358][ T4232] usb 1-1: atusb_probe: initialization failed, error = -61 [ 375.422246][ T4232] atusb: probe of 1-1:0.0 failed with error -61 [ 375.471754][ T4232] usb 1-1: USB disconnect, device number 7 [ 375.884828][ T8448] loop1: detected capacity change from 0 to 1024 [ 376.486752][ T8447] loop2: detected capacity change from 0 to 4096 [ 376.604044][ T8447] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 376.719616][ T8458] netlink: 'syz.5.1062': attribute type 16 has an invalid length. [ 376.791881][ T8458] netlink: 'syz.5.1062': attribute type 17 has an invalid length. [ 376.887426][ T8458] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.917062][ T8458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.840653][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.863128][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.048868][ T8480] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1075'. [ 379.558593][ T8491] loop2: detected capacity change from 0 to 1024 [ 381.347234][ T8502] block nbd1: shutting down sockets [ 381.396321][ T8508] loop2: detected capacity change from 0 to 512 [ 381.406406][ T8508] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 381.417312][ T8508] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 381.579222][ T8513] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1087'. [ 381.695464][ T4246] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 382.743195][ T4246] usb 4-1: Using ep0 maxpacket: 16 [ 382.863435][ T4246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 383.022421][ T8523] loop2: detected capacity change from 0 to 2048 [ 383.050742][ T8523] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 383.084612][ T8523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.113347][ T4246] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.159245][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.206496][ T4246] usb 4-1: Product: syz [ 383.227797][ T4246] usb 4-1: Manufacturer: syz [ 383.240983][ T4246] usb 4-1: SerialNumber: syz [ 383.264937][ T4246] usb 4-1: config 0 descriptor?? [ 383.304918][ T4246] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.329191][ T4246] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 383.660053][ T8534] loop5: detected capacity change from 0 to 1024 [ 384.851852][ T4246] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 385.302870][ T8550] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1098'. [ 385.507464][ T8556] [ 385.509836][ T8556] ====================================================== [ 385.516875][ T8556] WARNING: possible circular locking dependency detected [ 385.523904][ T8556] syzkaller #0 Not tainted [ 385.528316][ T8556] ------------------------------------------------------ [ 385.535332][ T8556] syz.2.1100/8556 is trying to acquire lock: [ 385.541315][ T8556] ffff888079f2cc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 385.552376][ T8556] [ 385.552376][ T8556] but task is already holding lock: [ 385.559728][ T8556] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 385.569381][ T8556] [ 385.569381][ T8556] which lock already depends on the new lock. [ 385.569381][ T8556] [ 385.579771][ T8556] [ 385.579771][ T8556] the existing dependency chain (in reverse order) is: [ 385.588802][ T8556] [ 385.588802][ T8556] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 385.596780][ T8556] __mutex_lock_common+0x1eb/0x2390 [ 385.602489][ T8556] mutex_lock_nested+0x17/0x20 [ 385.607850][ T8556] rfkill_register+0x33/0x8a0 [ 385.613047][ T8556] hci_register_dev+0x452/0x970 [ 385.618431][ T8556] vhci_create_device+0x32c/0x5c0 [ 385.623973][ T8556] vhci_write+0x391/0x450 [ 385.628824][ T8556] vfs_write+0x712/0xd00 [ 385.633585][ T8556] ksys_write+0x14d/0x250 [ 385.638447][ T8556] do_syscall_64+0x4c/0xa0 [ 385.643371][ T8556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.649781][ T8556] [ 385.649781][ T8556] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 385.657590][ T8556] __mutex_lock_common+0x1eb/0x2390 [ 385.663299][ T8556] mutex_lock_nested+0x17/0x20 [ 385.668574][ T8556] vhci_send_frame+0x88/0x100 [ 385.673759][ T8556] hci_send_frame+0x1a9/0x2e0 [ 385.678972][ T8556] hci_tx_work+0x9f9/0x1710 [ 385.683991][ T8556] process_one_work+0x863/0x1000 [ 385.689462][ T8556] worker_thread+0xaa8/0x12a0 [ 385.694658][ T8556] kthread+0x436/0x520 [ 385.699259][ T8556] ret_from_fork+0x1f/0x30 [ 385.704190][ T8556] [ 385.704190][ T8556] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 385.713386][ T8556] __flush_work+0xdd/0x1b0 [ 385.718333][ T8556] hci_dev_do_close+0x1e7/0x1030 [ 385.723780][ T8556] hci_unregister_dev+0x2d7/0x580 [ 385.729314][ T8556] vhci_release+0x73/0xc0 [ 385.734168][ T8556] __fput+0x234/0x930 [ 385.738684][ T8556] task_work_run+0x125/0x1a0 [ 385.743800][ T8556] do_exit+0x61e/0x20a0 [ 385.748490][ T8556] do_group_exit+0x12e/0x300 [ 385.753597][ T8556] __x64_sys_exit_group+0x3b/0x40 [ 385.759161][ T8556] do_syscall_64+0x4c/0xa0 [ 385.764095][ T8556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.770496][ T8556] [ 385.770496][ T8556] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 385.778128][ T8556] __mutex_lock_common+0x1eb/0x2390 [ 385.783839][ T8556] mutex_lock_nested+0x17/0x20 [ 385.789116][ T8556] bg_scan_update+0x44/0x3b0 [ 385.794226][ T8556] process_one_work+0x863/0x1000 [ 385.799696][ T8556] worker_thread+0xaa8/0x12a0 [ 385.804916][ T8556] kthread+0x436/0x520 [ 385.809671][ T8556] ret_from_fork+0x1f/0x30 [ 385.814621][ T8556] [ 385.814621][ T8556] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 385.824449][ T8556] __lock_acquire+0x2c33/0x7c60 [ 385.829816][ T8556] lock_acquire+0x197/0x3f0 [ 385.834879][ T8556] __flush_work+0xdd/0x1b0 [ 385.839836][ T8556] __cancel_work_timer+0x3ac/0x520 [ 385.845467][ T8556] hci_request_cancel_all+0xcc/0x300 [ 385.851290][ T8556] hci_dev_do_close+0x4e/0x1030 [ 385.856671][ T8556] hci_rfkill_set_block+0x10a/0x190 [ 385.862380][ T8556] rfkill_set_block+0x1c6/0x420 [ 385.867743][ T8556] rfkill_fop_write+0x458/0x560 [ 385.873142][ T8556] vfs_write+0x300/0xd00 [ 385.877917][ T8556] ksys_write+0x14d/0x250 [ 385.882756][ T8556] do_syscall_64+0x4c/0xa0 [ 385.887688][ T8556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 385.894113][ T8556] [ 385.894113][ T8556] other info that might help us debug this: [ 385.894113][ T8556] [ 385.904370][ T8556] Chain exists of: [ 385.904370][ T8556] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 385.904370][ T8556] [ 385.920086][ T8556] Possible unsafe locking scenario: [ 385.920086][ T8556] [ 385.927526][ T8556] CPU0 CPU1 [ 385.932889][ T8556] ---- ---- [ 385.938284][ T8556] lock(rfkill_global_mutex); [ 385.943049][ T8556] lock(&data->open_mutex); [ 385.950174][ T8556] lock(rfkill_global_mutex); [ 385.957452][ T8556] lock((work_completion)(&hdev->bg_scan_update)); [ 385.964068][ T8556] [ 385.964068][ T8556] *** DEADLOCK *** [ 385.964068][ T8556] [ 385.972221][ T8556] 1 lock held by syz.2.1100/8556: [ 385.977257][ T8556] #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 385.987458][ T8556] [ 385.987458][ T8556] stack backtrace: [ 385.993352][ T8556] CPU: 1 PID: 8556 Comm: syz.2.1100 Not tainted syzkaller #0 [ 386.000757][ T8556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.010820][ T8556] Call Trace: [ 386.014101][ T8556] [ 386.017043][ T8556] dump_stack_lvl+0x168/0x230 [ 386.021724][ T8556] ? load_image+0x3b0/0x3b0 [ 386.026222][ T8556] ? show_regs_print_info+0x20/0x20 [ 386.031416][ T8556] ? print_circular_bug+0x12b/0x1a0 [ 386.036626][ T8556] check_noncircular+0x274/0x310 [ 386.041562][ T8556] ? add_chain_block+0x940/0x940 [ 386.046505][ T8556] ? lockdep_lock+0xdc/0x1e0 [ 386.051098][ T8556] ? __lock_acquire+0x12d9/0x7c60 [ 386.056119][ T8556] ? lockdep_lock+0x1e0/0x1e0 [ 386.060792][ T8556] ? mark_lock+0x94/0x320 [ 386.065131][ T8556] ? _find_first_zero_bit+0xce/0xf0 [ 386.070362][ T8556] __lock_acquire+0x2c33/0x7c60 [ 386.075245][ T8556] ? verify_lock_unused+0x140/0x140 [ 386.080493][ T8556] ? mark_lock+0x94/0x320 [ 386.084911][ T8556] lock_acquire+0x197/0x3f0 [ 386.089414][ T8556] ? __flush_work+0xc1/0x1b0 [ 386.094004][ T8556] ? __lock_acquire+0x7c60/0x7c60 [ 386.099072][ T8556] ? read_lock_is_recursive+0x10/0x10 [ 386.104441][ T8556] ? start_flush_work+0x776/0x820 [ 386.109460][ T8556] __flush_work+0xdd/0x1b0 [ 386.113879][ T8556] ? __flush_work+0xc1/0x1b0 [ 386.118480][ T8556] ? flush_work+0x20/0x20 [ 386.122798][ T8556] ? try_to_grab_pending+0xf3/0x7e0 [ 386.127982][ T8556] ? lockdep_hardirqs_off+0x70/0x100 [ 386.133265][ T8556] ? mark_lock+0x94/0x320 [ 386.137606][ T8556] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 386.143571][ T8556] ? lock_chain_count+0x20/0x20 [ 386.148410][ T8556] ? mark_lock+0x94/0x320 [ 386.152730][ T8556] ? __cancel_work_timer+0x331/0x520 [ 386.158010][ T8556] __cancel_work_timer+0x3ac/0x520 [ 386.163128][ T8556] ? cancel_work_sync+0x20/0x20 [ 386.167966][ T8556] ? __cancel_work+0x1f4/0x2d0 [ 386.172819][ T8556] ? lockdep_hardirqs_on+0x94/0x140 [ 386.178051][ T8556] ? __cancel_work+0x26f/0x2d0 [ 386.182807][ T8556] ? cancel_work+0x20/0x20 [ 386.187214][ T8556] ? lock_chain_count+0x20/0x20 [ 386.192055][ T8556] hci_request_cancel_all+0xcc/0x300 [ 386.197328][ T8556] hci_dev_do_close+0x4e/0x1030 [ 386.202177][ T8556] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 386.208060][ T8556] ? _raw_spin_unlock+0x40/0x40 [ 386.212939][ T8556] hci_rfkill_set_block+0x10a/0x190 [ 386.218130][ T8556] ? rcu_lock_release+0x20/0x20 [ 386.222965][ T8556] rfkill_set_block+0x1c6/0x420 [ 386.227806][ T8556] rfkill_fop_write+0x458/0x560 [ 386.232648][ T8556] ? rfkill_fop_read+0x4b0/0x4b0 [ 386.237572][ T8556] ? common_file_perm+0x130/0x1c0 [ 386.242587][ T8556] ? fsnotify_perm+0x5d/0x560 [ 386.247256][ T8556] ? security_file_permission+0x75/0xa0 [ 386.252789][ T8556] ? rfkill_fop_read+0x4b0/0x4b0 [ 386.257725][ T8556] vfs_write+0x300/0xd00 [ 386.262000][ T8556] ? file_end_write+0x250/0x250 [ 386.266842][ T8556] ? __fget_files+0x40f/0x480 [ 386.271509][ T8556] ? __fdget_pos+0x1e2/0x370 [ 386.276088][ T8556] ? ksys_write+0x71/0x250 [ 386.280491][ T8556] ksys_write+0x14d/0x250 [ 386.284842][ T8556] ? __ia32_sys_read+0x80/0x80 [ 386.289711][ T8556] ? lockdep_hardirqs_on+0x94/0x140 [ 386.294910][ T8556] do_syscall_64+0x4c/0xa0 [ 386.299338][ T8556] ? clear_bhb_loop+0x30/0x80 [ 386.304012][ T8556] ? clear_bhb_loop+0x30/0x80 [ 386.308679][ T8556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 386.314573][ T8556] RIP: 0033:0x7f7eb130c749 [ 386.319012][ T8556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.338627][ T8556] RSP: 002b:00007f7eaf573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 386.347056][ T8556] RAX: ffffffffffffffda RBX: 00007f7eb1562fa0 RCX: 00007f7eb130c749 [ 386.355030][ T8556] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000005 [ 386.363020][ T8556] RBP: 00007f7eb1390f91 R08: 0000000000000000 R09: 0000000000000000 [ 386.370999][ T8556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.378963][ T8556] R13: 00007f7eb1563038 R14: 00007f7eb1562fa0 R15: 00007ffc6ef17b88 [ 386.386935][ T8556] [ 386.403103][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 386.433147][ T4246] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 386.446892][ T4246] em28xx 4-1:0.0: board has no eeprom [ 386.456586][ T4194] block nbd1: Receive control failed (result -32) [ 386.464140][ T8557] block nbd1: shutting down sockets [ 386.803152][ T4246] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 386.815909][ T4246] em28xx 4-1:0.0: dvb set to bulk mode. [ 386.825611][ T4246] usb 4-1: USB disconnect, device number 11 [ 386.832075][ T4246] em28xx 4-1:0.0: Disconnecting em28xx [ 386.845719][ T1346] em28xx 4-1:0.0: Binding DVB extension [ 386.898115][ T1346] em28xx 4-1:0.0: Registering input extension [ 386.906897][ T4246] em28xx 4-1:0.0: Closing input extension [ 386.917933][ T4246] em28xx 4-1:0.0: Freeing device [ 387.263215][ T21] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 387.272308][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.280355][ T21] usb 1-1: Product: syz [ 387.284565][ T21] usb 1-1: Manufacturer: syz [ 387.289161][ T21] usb 1-1: SerialNumber: syz [ 387.296220][ T21] usb 1-1: config 0 descriptor?? [ 387.753161][ T21] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 387.761133][ T21] usb 1-1: Firmware version (0.0) predates our first public release. [ 387.769352][ T21] usb 1-1: Please update to version 0.2 or newer [ 387.813153][ T21] usb 1-1: Firmware: build Ͻù [ 387.817959][ T21] usb 1-1: atusb_probe: initialization failed, error = -32 [ 387.826761][ T21] atusb: probe of 1-1:0.0 failed with error -32 [ 388.015914][ T4246] usb 1-1: USB disconnect, device number 8