last executing test programs: 7.900911701s ago: executing program 4 (id=1855): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x13, "b1253bc598134631b66eb7c3ae695132b095e1"}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000400)=0xffff) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x0, 0x0, "9181033835aeb99f"}) 7.664758963s ago: executing program 4 (id=1859): r0 = memfd_create(&(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) setreuid(0x0, 0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.484922549s ago: executing program 4 (id=1862): creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x80) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000084) 7.324886174s ago: executing program 4 (id=1866): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101) 6.628080078s ago: executing program 4 (id=1874): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@noquota}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@quota}, {@discard}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x109543, 0x0) fsync(r0) 5.734344591s ago: executing program 4 (id=1884): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt(r0, 0x6, 0x2, 0x0, &(0x7f0000002840)) 4.150878887s ago: executing program 3 (id=1899): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$eJzs3M1rHGUYAPBnptmkH9GNIPhxEKGFFko3SXNpT40Xb4VCwWsNm0kImWRDdlO7sWDrWajNRUEQ9ezRq1DqH+BNCgreBdEaD+JlZTablMZsum3Sbkl/P5jO+87H+zxPd3izAzsTwAvr7eKfJGI4Ii5FRLmzPY2IwXbrcMSNjePW71+PgYhqEq3W5T+S4rRYb5W3xko662PRPiVej4i7pYjTH/8/br25Oj+V59lypz/aWFgarTdXz8wtTM1ms9ni+MT5sXMTE+fGJh5Zw2s91nrivfNHbv/47traT981br01cCaJyXbdsVFbtcdhHsvG/0kpJrdtX3wawfoo6XcCAAD0pPiefyii+F4fpSjHoXYLAAAAOEhaQy0AAADgwEui3xkAAAAAT9fm7wDW71+vbi7P8vcHv78TESM7xR9oP0MccThKEXF0PXnoyYRk4zTYkxs3I+LO5Pbr75viCruxx7HHtvUffkZ6cI+jsx/uFPPP5E7zT7o1/8QO88/A5rsT9qj7/Pcg/qEu89+lHmN8/+Ubpa7xb0a8ObBT/GQrftIl/vs9xr+19sntbvtaX0ec3PHvT/JQrF3eDzE5M5fv+vqBu/+eurdb/Ue7xU92r3+px/o/XP9rvttcUsQ/dXz3z3+n+MU18WknjzQibnfWRX9tW4zjCz//sFv90xGtJ/n8v+qx/l+/HbrW46EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQlkbEcCRpZaudppVKxLGIeDWOpnmt3jg9U1tZnC72RYxEKZ2Zy7OxiChv9JOiP95uP+if3dafiIhXfjmyEXQuzyrVWj7d7+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYciwihiNJKxGRRsTf5TStVCIGejh36BnkBwAAAOyTkX4nAAAAADx17v8BAADg4HvS+/9kn/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrRLFy8WS2v9/vVq0Z++2lyZr109M53V5ysLK9VKtba8VJmt1WbzrFKtLTxqvLxWWxo/HyvXRhtZvTFab65eWaitLDauzC1MzWZXstIzqQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHNdxekrQSEWm7naaVSsRLETESpWRmLs/GIuLliLhXLg0V/fF+Jw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC+qzdX56fyPFt+bhqDncyel3w0NPa/8dFzf4X3eWICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAv6s3V+ak8z5br/c4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/kp/SyKiWE6WTwxv3zuY/FNuryPigy8uf3ZtqtFYHi+2/7m1vfF5Z/vZfuQPAAAAL4QLj3Pw5n365n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAr+rN1fmpPM+W99a4EM3VVtLlmH7XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJn/AgAA///3Y8EX") chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="fe"}) 3.822398137s ago: executing program 3 (id=1902): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback, r1}, 0x14) sendto$inet6(r0, &(0x7f0000000400)="800037e92208a1cc", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 3.471872859s ago: executing program 3 (id=1904): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.920962601s ago: executing program 2 (id=1911): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa56, &(0x7f0000002700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0186e86, &(0x7f0000000080)={@id={0x20000000, 0x0, @auto="9e9767122800a73e1baeff79da3b89f5"}}) 2.610670949s ago: executing program 0 (id=1914): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000ec0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) 2.49286503s ago: executing program 1 (id=1915): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_getlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x14352}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x20}}]}]}]}, 0x34}}, 0x0) 2.462052833s ago: executing program 2 (id=1916): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4725}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0xa0}}, 0x0) 2.358508472s ago: executing program 0 (id=1917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.158768361s ago: executing program 3 (id=1918): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4}}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) 2.105692466s ago: executing program 0 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getpid() 2.096673537s ago: executing program 1 (id=1920): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x0, 0x1}}}}]}, 0x78}}, 0x0) 1.979962317s ago: executing program 2 (id=1921): creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$sysv(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x9eb4, &(0x7f0000001600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, 0x9, 0x0) 1.915405533s ago: executing program 0 (id=1922): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x6, 0x2a3, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f0000000280)='./file1\x00') ftruncate(r0, 0x5) 1.804021204s ago: executing program 3 (id=1923): unshare(0x26000400) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5516, &(0x7f0000005a40)="$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") r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lseek(r0, 0x0, 0x3) 1.638239509s ago: executing program 1 (id=1924): bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0) 1.453988016s ago: executing program 1 (id=1925): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000007) 1.385604102s ago: executing program 0 (id=1926): r0 = syz_io_uring_setup(0x82b, &(0x7f0000000300)={0x0, 0x11000000, 0x10}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x5, r3, 0x0, 0x0}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.385120452s ago: executing program 2 (id=1927): bpf$BPF_LINK_CREATE_XDP(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0xc, @val=@tracing}, 0x40) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x2f, 0x5bc, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100000020"], 0x0) 1.244158945s ago: executing program 1 (id=1928): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) 1.08933925s ago: executing program 1 (id=1929): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x0) 1.070135471s ago: executing program 0 (id=1930): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x5d, 0x95, 0x8d, 0x8, 0xbaf, 0xf5, 0xdfc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xf5, 0x0, 0x0, 0x46, 0x4b, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000005ec0)={0x4, 0x2, 0x64, 0xb, "a2196bf0ae9048ced3900813726203ea0333b065c6b388e3cdf73cb18bbd1b04"}) 783.572238ms ago: executing program 2 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x28, r1, 0x1, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}}, 0x0) 349.152188ms ago: executing program 2 (id=1932): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x20, r1, 0x489, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4, 0x20}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x20}}, 0x0) 0s ago: executing program 3 (id=1933): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x141}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_LLADDR={0xa, 0x2, @random="000200"}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): duct=000e, bcdDevice=8e.8f [ 280.359709][ T3687] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 280.409988][ T3687] usb 5-1: Product: syz [ 280.414246][ T3687] usb 5-1: SerialNumber: syz [ 280.435005][ T3687] usb 5-1: config 0 descriptor?? [ 280.495470][ T3687] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 280.514500][ T3687] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input18 [ 280.628476][ T8364] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1297'. [ 280.720519][ T8364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1297'. [ 280.851218][ T8370] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 281.070750][ T3685] usb 5-1: USB disconnect, device number 12 [ 281.090322][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 281.097407][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 281.112283][ T3685] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 281.302160][ T8356] loop3: detected capacity change from 0 to 32768 [ 281.328929][ T8382] loop0: detected capacity change from 0 to 512 [ 281.375398][ T8356] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 281.445053][ T8382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 281.460253][ T8382] ext4 filesystem being mounted at /253/bus supports timestamps until 2038 (0x7fffffff) [ 281.485347][ T27] audit: type=1804 audit(1727972092.040:41): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1293" name="/newroot/158/file1/file0" dev="loop3" ino=17058 res=1 errno=0 [ 281.546769][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.571245][ T5934] ocfs2: Unmounting device (7,3) on (node local) [ 281.617845][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.661702][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.699123][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.733022][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 281.737537][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.749459][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.769400][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.787562][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.805631][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.820097][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.837913][ T4175] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.909653][ T4175] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 281.969364][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1308'. [ 282.142157][ T8374] loop2: detected capacity change from 0 to 40427 [ 282.191740][ T8374] F2FS-fs (loop2): invalid crc value [ 282.226470][ T8400] loop3: detected capacity change from 0 to 1024 [ 282.258213][ T8374] F2FS-fs (loop2): Found nat_bits in checkpoint [ 282.265633][ T8400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.342302][ T8406] loop4: detected capacity change from 0 to 512 [ 282.418280][ T8406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.427123][ T8374] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 282.479563][ T8406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.521256][ T8406] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038 (0x7fffffff) [ 282.564327][ T8374] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=ff000000, run fsck to fix. [ 282.615381][ T8411] loop3: detected capacity change from 0 to 256 [ 282.623166][ T8411] exfat: Deprecated parameter 'utf8' [ 282.628688][ T8411] exfat: Deprecated parameter 'utf8' [ 282.672232][ T8406] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 282.681924][ T8411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 282.866253][ T6886] EXT4-fs (loop4): unmounting filesystem. [ 283.231114][ T8395] loop0: detected capacity change from 0 to 32768 [ 283.343877][ T8395] XFS (loop0): Mounting V5 Filesystem [ 283.468047][ T8435] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1323'. [ 283.595033][ T8395] XFS (loop0): Ending clean mount [ 283.623989][ T8395] XFS (loop0): Quotacheck needed: Please wait. [ 283.720362][ T8395] XFS (loop0): Quotacheck: Done. [ 283.859481][ T8401] loop1: detected capacity change from 0 to 32768 [ 283.889551][ T8401] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 283.904160][ T8401] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 283.904367][ T8444] loop4: detected capacity change from 0 to 512 [ 283.935610][ T8401] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 283.949627][ T3687] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 283.973449][ T3687] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 283.990851][ T3640] XFS (loop0): Unmounting Filesystem [ 284.037003][ T8444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.050392][ T8444] ext4 filesystem being mounted at /93/bus supports timestamps until 2038 (0x7fffffff) [ 284.178743][ T3687] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 205ms [ 284.193439][ T6886] EXT4-fs (loop4): unmounting filesystem. [ 284.195334][ T3687] gfs2: fsid=syz:syz.0: jid=0: Done [ 284.206536][ T8401] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 284.816158][ T8463] loop0: detected capacity change from 0 to 4096 [ 284.824958][ T8463] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 285.043532][ T8448] loop3: detected capacity change from 0 to 32768 [ 285.077312][ T8448] XFS: attr2 mount option is deprecated. [ 285.165882][ T8448] XFS (loop3): Mounting V5 Filesystem [ 285.278822][ T8448] XFS (loop3): Ending clean mount [ 285.328006][ T8448] XFS (loop3): Quotacheck needed: Please wait. [ 285.404983][ T8448] XFS (loop3): Quotacheck: Done. [ 285.457594][ T8477] loop2: detected capacity change from 0 to 4096 [ 285.497144][ T8461] loop4: detected capacity change from 0 to 32768 [ 285.538453][ T8477] ntfs: volume version 3.1. [ 285.549451][ T8477] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 285.581309][ T8477] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 285.592896][ T8477] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 285.679844][ T8461] XFS (loop4): Mounting V5 Filesystem [ 285.757558][ T8461] XFS (loop4): Ending clean mount [ 285.831124][ T5934] XFS (loop3): Unmounting Filesystem [ 285.914833][ T8487] loop1: detected capacity change from 0 to 4096 [ 285.955921][ T8487] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 286.064430][ T8487] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 286.234296][ T7192] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 286.294131][ T7192] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 286.410701][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.418126][ T8496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.603278][ T6886] XFS (loop4): Unmounting Filesystem [ 287.110265][ T3685] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 287.338495][ T8518] input: syz1 as /devices/virtual/input/input19 [ 287.360177][ T3685] usb 1-1: Using ep0 maxpacket: 32 [ 287.485033][ T3685] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 287.513701][ T3685] usb 1-1: config 0 has no interface number 0 [ 287.542468][ T8505] loop1: detected capacity change from 0 to 40427 [ 287.560174][ T8505] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 287.587523][ T8505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 287.592385][ T8520] loop2: detected capacity change from 0 to 4096 [ 287.626141][ T8505] F2FS-fs (loop1): invalid crc value [ 287.631656][ T8520] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 287.687738][ T8520] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 287.695421][ T3685] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 287.705013][ T3685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.714526][ T3685] usb 1-1: Product: syz [ 287.720376][ T3685] usb 1-1: Manufacturer: syz [ 287.724836][ T8505] F2FS-fs (loop1): Found nat_bits in checkpoint [ 287.725032][ T8520] ntfs3: loop2: Failed to load $Extend. [ 287.737502][ T3685] usb 1-1: SerialNumber: syz [ 287.757350][ T3685] usb 1-1: config 0 descriptor?? [ 287.784465][ T27] audit: type=1800 audit(1727972098.340:42): pid=8520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1353" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 287.811451][ T3685] smsc95xx v2.0.0 [ 287.856356][ T8505] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 287.873327][ T8505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 287.992108][ T8516] loop3: detected capacity change from 0 to 32768 [ 288.032991][ T8516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1352 (8516) [ 288.065094][ T8516] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 288.109005][ T8516] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 288.139461][ T8516] BTRFS info (device loop3): using free space tree [ 288.435931][ T8516] BTRFS info (device loop3): enabling ssd optimizations [ 288.638784][ T5934] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 288.722462][ T3685] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 288.765881][ T3685] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.772337][ T8530] loop4: detected capacity change from 0 to 32768 [ 288.835032][ T8530] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1356 (8530) [ 288.850136][ T3685] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 288.881782][ T3685] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 288.919550][ T3685] usb 1-1: USB disconnect, device number 18 [ 289.067371][ T8530] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.085919][ T8530] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 289.104624][ T8530] BTRFS info (device loop4): using free space tree [ 289.205443][ T8563] loop1: detected capacity change from 0 to 1024 [ 289.263054][ T8563] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 289.297853][ T8563] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 289.309332][ T8563] EXT4-fs (loop1): invalid journal inode [ 289.315573][ T8563] EXT4-fs (loop1): can't get journal size [ 289.359045][ T8563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 289.490364][ T4168] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 289.511898][ T8563] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 37: comm syz.1.1360: path /62/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 289.540033][ T8530] BTRFS info (device loop4): enabling ssd optimizations [ 289.574032][ T8563] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.1360: path /62/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 289.722433][ T6886] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.743541][ T7192] EXT4-fs (loop1): unmounting filesystem. [ 290.040163][ T4168] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 290.049596][ T4168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.070164][ T4168] usb 4-1: Product: syz [ 290.074525][ T4168] usb 4-1: Manufacturer: syz [ 290.089349][ T4168] usb 4-1: SerialNumber: syz [ 290.108349][ T4168] r8152-cfgselector 4-1: config 0 descriptor?? [ 290.211532][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1372'. [ 290.289482][ T4179] kernel write not supported for file /media0 (pid: 4179 comm: kworker/1:17) [ 290.424792][ T8608] loop1: detected capacity change from 0 to 512 [ 290.468845][ T8612] loop0: detected capacity change from 0 to 64 [ 290.491619][ T8608] EXT4-fs: Ignoring removed orlov option [ 290.574600][ T8608] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1373: couldn't read orphan inode 16 (err -116) [ 290.600038][ T4168] r8152-cfgselector 4-1: Unknown version 0x0000 [ 290.612531][ T4168] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 290.665362][ T8608] EXT4-fs (loop1): Remounting filesystem read-only [ 290.674809][ T8608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 290.684426][ T8608] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038 (0x7fffffff) [ 290.728465][ T8608] EXT4-fs error (device loop1): ext4_xattr_block_list:719: inode #15: comm syz.1.1373: corrupted xattr block 19 [ 290.786737][ T8608] EXT4-fs (loop1): Remounting filesystem read-only [ 290.858741][ T7192] EXT4-fs (loop1): unmounting filesystem. [ 290.958673][ T8626] loop0: detected capacity change from 0 to 128 [ 290.998015][ T8626] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 291.074536][ T8626] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 291.107140][ T8624] loop4: detected capacity change from 0 to 4096 [ 291.240372][ T8633] loop2: detected capacity change from 0 to 256 [ 291.314894][ T8633] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 291.649649][ T27] audit: type=1400 audit(1727972102.200:43): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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 [ 291.667019][ T8647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1391'. [ 291.895501][ T8656] PKCS7: Unknown OID: [5] 0.0 [ 291.903632][ T8656] PKCS7: Only support pkcs7_signedData type [ 291.914815][ T8657] program syz.4.1394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.945173][ T8659] loop1: detected capacity change from 0 to 512 [ 291.964770][ T8659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.985800][ T8659] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #17: comm syz.1.1396: iget: bogus i_mode (0) [ 292.035397][ T8659] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1396: couldn't read orphan inode 17 (err -117) [ 292.072448][ T8659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 292.102351][ T8665] loop3: detected capacity change from 0 to 24 [ 292.147361][ T8659] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1396: bg 0: block 7: invalid block bitmap [ 292.267248][ T7192] EXT4-fs (loop1): unmounting filesystem. [ 292.462892][ T8677] loop4: detected capacity change from 0 to 256 [ 292.650442][ T8672] loop2: detected capacity change from 0 to 8192 [ 292.877906][ T8689] loop0: detected capacity change from 0 to 256 [ 293.123348][ T8693] loop3: detected capacity change from 0 to 4096 [ 293.124748][ T3717] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 293.167378][ T8693] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 293.449991][ T8703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1417'. [ 293.540392][ T3717] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 293.549588][ T3717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.575485][ T8707] loop3: detected capacity change from 0 to 256 [ 293.605213][ T3717] usb 2-1: config 0 descriptor?? [ 293.678973][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 293.800209][ T3685] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 294.065259][ T3685] usb 3-1: Using ep0 maxpacket: 8 [ 294.133883][ T3717] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 294.172626][ T3717] [drm] Initialized udl on minor 2 [ 294.336376][ T3717] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 294.350177][ T3685] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 294.360696][ T3717] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 294.369037][ T3685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.385685][ T3685] usb 3-1: Product: syz [ 294.394166][ T3685] usb 3-1: Manufacturer: syz [ 294.398911][ T3685] usb 3-1: SerialNumber: syz [ 294.416058][ T3685] usb 3-1: config 0 descriptor?? [ 294.423044][ T8734] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1432'. [ 294.440520][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1432'. [ 294.464176][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.483237][ T3685] gspca_main: spca500-2.14.0 probing 046d:0900 [ 294.496269][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.503516][ T8734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.548516][ T3728] usb 2-1: USB disconnect, device number 15 [ 294.554963][ T3717] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 294.592443][ T3717] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 294.612976][ T3717] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 294.693441][ T3717] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 294.710279][ T3685] gspca_spca500: reg write: error -71 [ 294.730675][ T3717] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 294.751190][ T3685] gspca_spca500: reg write: error -71 [ 294.772014][ T3685] gspca_spca500: reg write: error -71 [ 294.790252][ T3685] gspca_spca500: reg write: error -71 [ 294.810067][ T3685] gspca_spca500: reg write: error -71 [ 294.830109][ T3685] gspca_spca500: reg write: error -71 [ 294.850072][ T3685] gspca_spca500: reg write: error -71 [ 294.870063][ T3685] gspca_spca500: reg write: error -71 [ 294.890076][ T3685] gspca_spca500: reg write: error -71 [ 294.922152][ T3685] gspca_spca500: reg write: error -71 [ 294.948925][ T3685] gspca_spca500: reg write: error -71 [ 294.972360][ T3685] gspca_spca500: reg write: error -71 [ 295.002180][ T3685] gspca_spca500: reg write: error -71 [ 295.026703][ T3685] gspca_spca500: reg write: error -71 [ 295.057205][ T3685] usb 3-1: USB disconnect, device number 11 [ 295.273586][ T8753] loop3: detected capacity change from 0 to 1024 [ 295.300175][ T3689] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 295.356108][ T3733] hfsplus: b-tree write err: -5, ino 4 [ 295.458373][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 295.577402][ T8761] netlink: 'syz.4.1444': attribute type 2 has an invalid length. [ 295.616921][ T8761] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1444'. [ 295.654211][ T8765] loop3: detected capacity change from 0 to 128 [ 295.700301][ T3689] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.700603][ T8765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 295.730051][ T3689] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 295.747212][ T3689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.766833][ T3689] usb 1-1: config 0 descriptor?? [ 295.773356][ T8765] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 295.804640][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.030993][ T5934] EXT4-fs (loop3): unmounting filesystem. [ 296.041140][ T3689] usb 1-1: USB disconnect, device number 19 [ 296.084199][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1450'. [ 296.184671][ T8775] loop3: detected capacity change from 0 to 1024 [ 296.257614][ T8775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.403499][ T5934] EXT4-fs (loop3): unmounting filesystem. [ 296.536294][ T8760] loop1: detected capacity change from 0 to 40427 [ 296.576563][ T8760] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 296.644843][ T8760] F2FS-fs (loop1): invalid crc value [ 296.697754][ T8760] F2FS-fs (loop1): Found nat_bits in checkpoint [ 296.972164][ T8760] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 297.058810][ T8804] ptrace attach of ""[8805] was attempted by "./syz-executor exec"[8804] [ 297.088738][ T27] audit: type=1800 audit(1727972107.640:44): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1445" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 297.118500][ T8760] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x1b1/0xde0 [ 297.245898][ T8760] syz.1.1445: attempt to access beyond end of device [ 297.245898][ T8760] loop1: rw=2049, sector=77824, nr_sectors = 552 limit=40427 [ 297.386497][ T7192] syz-executor: attempt to access beyond end of device [ 297.386497][ T7192] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 297.594121][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.851533][ T8828] loop2: detected capacity change from 0 to 2048 [ 297.886962][ T8830] loop4: detected capacity change from 0 to 4096 [ 297.982896][ T8828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 298.019644][ T8828] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038 (0x7fffffff) [ 298.058579][ T8840] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.103849][ T8830] overlayfs: workdir and upperdir must reside under the same mount [ 298.221778][ T5056] EXT4-fs (loop2): unmounting filesystem. [ 298.630315][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.971330][ T8876] loop3: detected capacity change from 0 to 256 [ 298.979475][ T8876] exfat: Deprecated parameter 'namecase' [ 298.996923][ T8876] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x6ff59669, utbl_chksum : 0xe619d30d) [ 299.357845][ T8884] loop2: detected capacity change from 0 to 1024 [ 299.388157][ T8884] hfsplus: unable to parse mount options [ 299.671074][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.032723][ T8901] loop1: detected capacity change from 0 to 64 [ 300.070210][ T8901] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 300.175825][ T8873] loop4: detected capacity change from 0 to 40427 [ 300.230142][ T3650] Bluetooth: hci1: command tx timeout [ 300.276335][ T8873] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 300.286816][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.317372][ T8873] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 300.354393][ T8873] F2FS-fs (loop4): inline encryption not supported [ 300.419116][ T8873] F2FS-fs (loop4): invalid crc value [ 300.462706][ T8873] F2FS-fs (loop4): Found nat_bits in checkpoint [ 300.639258][ T8873] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 300.656898][ T8873] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 300.710269][ T3653] Bluetooth: hci4: command tx timeout [ 300.715917][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.743529][ T8873] syz.4.1492: attempt to access beyond end of device [ 300.743529][ T8873] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 300.762960][ T8873] syz.4.1492: attempt to access beyond end of device [ 300.762960][ T8873] loop4: rw=2049, sector=53272, nr_sectors = 24 limit=40427 [ 300.777856][ T8873] syz.4.1492: attempt to access beyond end of device [ 300.777856][ T8873] loop4: rw=2049, sector=53328, nr_sectors = 16 limit=40427 [ 300.841500][ T8873] syz.4.1492: attempt to access beyond end of device [ 300.841500][ T8873] loop4: rw=2049, sector=53360, nr_sectors = 24 limit=40427 [ 300.863538][ T8873] syz.4.1492: attempt to access beyond end of device [ 300.863538][ T8873] loop4: rw=2049, sector=53392, nr_sectors = 8 limit=40427 [ 300.899685][ T8873] syz.4.1492: attempt to access beyond end of device [ 300.899685][ T8873] loop4: rw=2049, sector=53416, nr_sectors = 16 limit=40427 [ 300.970389][ T8873] syz.4.1492: attempt to access beyond end of device [ 300.970389][ T8873] loop4: rw=2049, sector=53440, nr_sectors = 24 limit=40427 [ 301.108151][ T6886] syz-executor: attempt to access beyond end of device [ 301.108151][ T6886] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.672123][ T3685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.720062][ T3717] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 301.750374][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.980270][ T3717] usb 2-1: Using ep0 maxpacket: 16 [ 302.094872][ T8945] loop4: detected capacity change from 0 to 2048 [ 302.120383][ T3717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.158903][ T3717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.178600][ T3717] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 302.193674][ T8948] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.196509][ T3717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.250135][ T8948] NILFS (loop4): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 302.257957][ T3717] usb 2-1: config 0 descriptor?? [ 302.303530][ T8948] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=2) [ 302.339725][ T8948] Remounting filesystem read-only [ 302.347008][ T33] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 302.364888][ T33] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 302.377713][ T33] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 302.410166][ T8951] loop2: detected capacity change from 0 to 4096 [ 302.418834][ T33] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 302.457112][ T33] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 302.502198][ T8955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1528'. [ 302.550081][ T33] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 302.569761][ T27] audit: type=1800 audit(1727972113.120:45): pid=8951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1526" name="file0" dev="loop2" ino=28 res=0 errno=0 [ 302.592613][ T33] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 302.614217][ T33] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 302.654963][ T33] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 302.664353][ T33] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 302.684614][ T8945] NILFS (loop4): mounting fs with errors [ 302.708420][ T8948] NILFS (loop4): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 302.724481][ T8959] virtio-fs: tag <(null)> not found [ 302.742426][ T3717] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 302.760627][ T8948] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=2) [ 302.778692][ T3717] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 302.784984][ T8948] Remounting filesystem read-only [ 302.858627][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.898197][ T6886] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 302.912660][ T6886] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 302.929781][ T6886] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 302.939391][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 302.951461][ T102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.961346][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.976958][ T3728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.994458][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 303.010497][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 303.030184][ T6886] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 303.036949][ T6886] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 303.060006][ T6886] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 303.067369][ T6886] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 303.117166][ T6886] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 303.117237][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.131712][ T6886] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 303.156198][ T8970] loop3: detected capacity change from 0 to 64 [ 303.168290][ T6886] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 303.189965][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 303.219320][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 303.237807][ T3728] usb 2-1: USB disconnect, device number 16 [ 303.252523][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 303.279212][ T6886] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 303.296389][ T6886] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 303.304431][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 303.326460][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 303.336823][ T6886] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 303.355887][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.710586][ T3717] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 303.750377][ T3653] Bluetooth: hci4: command 0x0406 tx timeout [ 303.754318][ T8979] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 303.812296][ T8979] overlayfs: workdir and upperdir must be separate subtrees [ 303.846748][ T8968] loop2: detected capacity change from 0 to 32768 [ 303.917378][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.917489][ T8968] XFS (loop2): Mounting V5 Filesystem [ 304.068982][ T8968] XFS (loop2): Ending clean mount [ 304.110032][ T8968] XFS (loop2): Quotacheck needed: Please wait. [ 304.150512][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.230862][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.239761][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.270096][ T3717] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 304.274700][ T8968] XFS (loop2): Quotacheck: Done. [ 304.286091][ T3717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.294807][ T3717] usb 5-1: Product: syz [ 304.299003][ T3717] usb 5-1: Manufacturer: syz [ 304.304092][ T3717] usb 5-1: SerialNumber: syz [ 304.337943][ T3717] usb 5-1: config 0 descriptor?? [ 304.473475][ T5056] XFS (loop2): Unmounting Filesystem [ 304.880166][ T3717] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 304.898299][ T3717] usb 5-1: Firmware version (0.0) predates our first public release. [ 304.928716][ T3717] usb 5-1: Please update to version 0.2 or newer [ 305.197106][ T3717] usb 5-1: USB disconnect, device number 13 [ 306.090251][ T4168] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 306.256624][ T9053] loop3: detected capacity change from 0 to 2048 [ 306.296179][ T9053] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.339840][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 306.393208][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1569'. [ 306.405005][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 306.470201][ T4168] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 306.489239][ T4168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.590264][ T4168] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 306.623361][ T4168] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 306.643123][ T4168] usb 2-1: Manufacturer: syz [ 306.662480][ T4168] usb 2-1: config 0 descriptor?? [ 306.848652][ T9047] loop2: detected capacity change from 0 to 32768 [ 306.870076][ T4168] rc_core: IR keymap rc-hauppauge not found [ 306.876090][ T4168] Registered IR keymap rc-empty [ 306.893841][ T4168] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 306.931572][ T4168] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 306.988817][ T9074] loop0: detected capacity change from 0 to 1024 [ 307.019993][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 307.027745][ T9074] EXT4-fs: Ignoring removed orlov option [ 307.046706][ T9074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.054120][ T9077] netlink: 'syz.3.1576': attribute type 1 has an invalid length. [ 307.067440][ T3689] usb 2-1: USB disconnect, device number 17 [ 307.158860][ T9074] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 307.354373][ T9087] loop3: detected capacity change from 0 to 64 [ 307.422301][ T9087] hfs: request for non-existent node 16777216 in B*Tree [ 307.441187][ T9087] hfs: request for non-existent node 16777216 in B*Tree [ 307.465849][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 307.821329][ T9099] loop1: detected capacity change from 0 to 512 [ 307.847660][ T9103] loop2: detected capacity change from 0 to 64 [ 307.861694][ T9099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 307.909283][ T9099] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1586: invalid indirect mapped block 4294967295 (level 0) [ 308.016675][ T9103] syz.2.1588: attempt to access beyond end of device [ 308.016675][ T9103] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 308.070369][ T3689] net_ratelimit: 12 callbacks suppressed [ 308.070390][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.097944][ T9103] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 308.159112][ T9099] EXT4-fs (loop1): Remounting filesystem read-only [ 308.182545][ T9099] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1586: invalid indirect mapped block 4294967295 (level 1) [ 308.258493][ T9099] EXT4-fs (loop1): 1 orphan inode deleted [ 308.285844][ T9099] EXT4-fs (loop1): 1 truncate cleaned up [ 308.314184][ T9099] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 308.470406][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.496951][ T9119] loop2: detected capacity change from 0 to 512 [ 308.532069][ T9119] EXT4-fs: Ignoring removed orlov option [ 308.601634][ T7192] EXT4-fs (loop1): unmounting filesystem. [ 308.624028][ T9117] loop0: detected capacity change from 0 to 8192 [ 308.657834][ T9119] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 308.697724][ T9119] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 308.711386][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.738877][ T9117] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 308.757240][ T9119] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1594: Failed to acquire dquot type 0 [ 308.770577][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.790990][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.800432][ T9119] EXT4-fs (loop2): Remounting filesystem read-only [ 308.807115][ T9119] EXT4-fs (loop2): 1 orphan inode deleted [ 308.823552][ T9119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 308.851136][ T9117] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 308.864973][ T9119] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038 (0x7fffffff) [ 308.896332][ T9117] REISERFS (device loop0): using ordered data mode [ 308.917181][ T9117] reiserfs: using flush barriers [ 308.960720][ T9119] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 308.982353][ T9117] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 309.000480][ T9119] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 309.029398][ T9117] REISERFS (device loop0): checking transaction log (loop0) [ 309.040055][ T3685] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 309.052540][ T9119] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1594: Failed to acquire dquot type 0 [ 309.055401][ T9117] REISERFS (device loop0): Using r5 hash to sort names [ 309.105441][ T9117] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 309.121581][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.137167][ T9119] EXT4-fs (loop2): Remounting filesystem read-only [ 309.148659][ T9117] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 309.309989][ T3685] usb 5-1: Using ep0 maxpacket: 8 [ 309.327665][ T5056] EXT4-fs (loop2): unmounting filesystem. [ 309.444243][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.460260][ T3685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.500113][ T3685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.540039][ T3685] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 309.549314][ T3685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.592174][ T3685] usb 5-1: config 0 descriptor?? [ 309.599062][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.789054][ T9144] loop0: detected capacity change from 0 to 512 [ 309.846938][ T9144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 309.886584][ T9144] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.1599: iget: bogus i_mode (0) [ 309.908309][ T9144] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1599: couldn't read orphan inode 17 (err -117) [ 309.940103][ T9144] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.962108][ T9122] loop3: detected capacity change from 0 to 40427 [ 309.972726][ T9144] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1599: bg 0: block 7: invalid block bitmap [ 310.018818][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.028005][ T9130] loop1: detected capacity change from 0 to 32768 [ 310.029939][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.053235][ T9130] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1596 (9130) [ 310.066582][ T9122] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 310.076699][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 310.084664][ T3685] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 310.103421][ T9122] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 310.109560][ T9130] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 310.111959][ T3685] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 310.146043][ T9122] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 310.178280][ T9122] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 310.192860][ T3685] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 310.208389][ T3685] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 310.218310][ T9122] F2FS-fs (loop3): invalid crc value [ 310.240347][ T3685] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 310.265711][ T9130] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 310.274762][ T3685] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 310.299992][ T3685] playstation 0003:054C:0CE6.000A: unknown main item tag 0x0 [ 310.326545][ T9130] BTRFS info (device loop1): using free space tree [ 310.336805][ T9122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 310.344354][ T3685] playstation 0003:054C:0CE6.000A: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.4-1/input0 [ 310.540313][ T3685] playstation 0003:054C:0CE6.000A: Invalid reportID received, expected 9 got 119 [ 310.570729][ T3685] playstation 0003:054C:0CE6.000A: Failed to retrieve DualSense pairing info: -22 [ 310.611254][ T3685] playstation 0003:054C:0CE6.000A: Failed to get MAC address from DualSense [ 310.638782][ T3685] playstation 0003:054C:0CE6.000A: Failed to create dualsense. [ 310.669195][ T9181] loop0: detected capacity change from 0 to 512 [ 310.681551][ T9122] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 310.703514][ T3685] playstation: probe of 0003:054C:0CE6.000A failed with error -22 [ 310.719315][ T9130] BTRFS info (device loop1): enabling ssd optimizations [ 310.720846][ T9122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 310.772655][ T3685] usb 5-1: USB disconnect, device number 14 [ 310.775481][ T9181] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 310.790634][ T9181] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038 (0x7fffffff) [ 310.818266][ T9122] syz.3.1595: attempt to access beyond end of device [ 310.818266][ T9122] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 310.915852][ T9181] EXT4-fs error (device loop0): ext4_empty_dir:3152: inode #12: block 31: comm syz.0.1605: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 311.027460][ T7192] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 311.052382][ T5934] syz-executor: attempt to access beyond end of device [ 311.052382][ T5934] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.053999][ T9181] EXT4-fs (loop0): Remounting filesystem read-only [ 311.079404][ T9181] EXT4-fs warning (device loop0): ext4_empty_dir:3154: inode #12: comm syz.0.1605: directory missing '..' [ 311.405699][ T9166] loop2: detected capacity change from 0 to 32768 [ 311.540236][ T9166] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 311.540236][ T9166] [ 311.643642][ T9166] ERROR: (device loop2): remounting filesystem as read-only [ 311.659677][ T9166] ERROR: (device loop2): jfs_unlink: [ 311.659677][ T9166] [ 311.701422][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 311.869753][ T5056] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 311.869753][ T5056] [ 312.098303][ T9209] loop1: detected capacity change from 0 to 1024 [ 312.188317][ T9209] hfsplus: bad catalog entry type [ 312.241021][ T47] hfsplus: b-tree write err: -5, ino 4 [ 312.290000][ T4168] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 312.449686][ T9219] loop2: detected capacity change from 0 to 1024 [ 312.490804][ T9219] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 312.494808][ T9221] loop1: detected capacity change from 0 to 164 [ 312.507666][ T9219] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 312.540227][ T9219] EXT4-fs (loop2): invalid journal inode [ 312.546112][ T9219] EXT4-fs (loop2): can't get journal size [ 312.550031][ T4168] usb 4-1: Using ep0 maxpacket: 8 [ 312.563330][ T9219] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 312.588997][ T9219] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 37: comm syz.2.1617: path /274/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 312.620175][ T9219] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.1617: path /274/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 312.706200][ T5056] EXT4-fs (loop2): unmounting filesystem. [ 312.796608][ T9226] loop2: detected capacity change from 0 to 2048 [ 312.803329][ T3685] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 312.833408][ T9226] NILFS (loop2): invalid segment: Checksum error in segment payload [ 312.844347][ T9226] NILFS (loop2): trying rollback from an earlier position [ 312.874300][ T4168] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 312.886881][ T4168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.889658][ T9226] NILFS (loop2): recovery complete [ 312.895182][ T4168] usb 4-1: Product: syz [ 312.904957][ T4168] usb 4-1: Manufacturer: syz [ 312.909747][ T4168] usb 4-1: SerialNumber: syz [ 312.916559][ T9230] loop1: detected capacity change from 0 to 64 [ 312.924684][ T9231] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.962244][ T4168] usb 4-1: config 0 descriptor?? [ 312.997656][ T27] audit: type=1804 audit(1727972123.550:46): pid=9226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1620" name="/newroot/275/file0/file1" dev="loop2" ino=12 res=1 errno=0 [ 313.002370][ T4168] gspca_main: spca500-2.14.0 probing 046d:0900 [ 313.060128][ T3685] usb 1-1: Using ep0 maxpacket: 16 [ 313.110635][ T3717] net_ratelimit: 10 callbacks suppressed [ 313.110653][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.190298][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.240265][ T3717] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 313.250096][ T4168] gspca_spca500: reg write: error -71 [ 313.260655][ T3717] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 313.294726][ T4168] gspca_spca500: reg write: error -71 [ 313.320133][ T4168] gspca_spca500: reg write: error -71 [ 313.340832][ T4168] gspca_spca500: reg write: error -71 [ 313.360348][ T4168] gspca_spca500: reg write: error -71 [ 313.385921][ T4168] gspca_spca500: reg write: error -71 [ 313.412280][ T4168] gspca_spca500: reg write: error -71 [ 313.426099][ T3685] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 313.440157][ T4168] gspca_spca500: reg write: error -71 [ 313.460299][ T3685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.470101][ T4168] gspca_spca500: reg write: error -71 [ 313.481684][ T3685] usb 1-1: Product: syz [ 313.485907][ T3685] usb 1-1: Manufacturer: syz [ 313.494122][ T4168] gspca_spca500: reg write: error -71 [ 313.499934][ T3685] usb 1-1: SerialNumber: syz [ 313.502165][ T3685] usb 1-1: config 0 descriptor?? [ 313.530135][ T4168] gspca_spca500: reg write: error -71 [ 313.550084][ T4168] gspca_spca500: reg write: error -71 [ 313.570102][ T4168] gspca_spca500: reg write: error -71 [ 313.574694][ T3685] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 313.592278][ T3685] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 313.600289][ T4168] gspca_spca500: reg write: error -71 [ 313.657382][ T4168] usb 4-1: USB disconnect, device number 16 [ 313.770718][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.895663][ T3717] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 314.000220][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.080040][ T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 314.108716][ T9268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.118583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.170133][ T3717] usb 2-1: Using ep0 maxpacket: 8 [ 314.204711][ T9270] loop3: detected capacity change from 0 to 1024 [ 314.224907][ T9270] hfsplus: bad catalog entry type [ 314.230518][ T3685] em28xx 1-1:0.0: chip ID is em2710/2820 [ 314.259211][ T11] hfsplus: b-tree write err: -5, ino 4 [ 314.305812][ T3717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.317723][ T3717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.334647][ T3717] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 314.345858][ T3717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.361954][ T3717] usb 2-1: config 0 descriptor?? [ 314.440393][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.457323][ T26] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.468661][ T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.486885][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.528045][ T9256] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 314.627270][ T3685] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 314.648466][ T3685] em28xx 1-1:0.0: board has no eeprom [ 314.694337][ T9272] loop3: detected capacity change from 0 to 32768 [ 314.715322][ T9272] XFS (loop3): Mounting V5 Filesystem [ 314.780180][ T3837] usb 3-1: USB disconnect, device number 12 [ 314.794792][ T3685] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 314.799509][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.829957][ T3685] em28xx 1-1:0.0: dvb set to bulk mode. [ 314.844386][ T3835] em28xx 1-1:0.0: Binding DVB extension [ 314.856979][ T3717] playstation 0003:054C:0CE6.000C: unknown main item tag 0x0 [ 314.876321][ T9272] XFS (loop3): Ending clean mount [ 314.902374][ T3685] usb 1-1: USB disconnect, device number 20 [ 314.909204][ T3685] em28xx 1-1:0.0: Disconnecting em28xx [ 314.928137][ T3717] playstation 0003:054C:0CE6.000C: unknown main item tag 0x0 [ 314.957170][ T3717] playstation 0003:054C:0CE6.000C: unknown main item tag 0x0 [ 314.986979][ T3717] playstation 0003:054C:0CE6.000C: unknown main item tag 0x0 [ 315.023172][ T5934] XFS (loop3): Unmounting Filesystem [ 315.026913][ T3717] playstation 0003:054C:0CE6.000C: unknown main item tag 0x0 [ 315.030563][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.046418][ T3717] playstation 0003:054C:0CE6.000C: unknown main item tag 0x0 [ 315.060782][ T3717] playstation 0003:054C:0CE6.000C: unknown main item tag 0x0 [ 315.113556][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.127271][ T3717] playstation 0003:054C:0CE6.000C: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 315.143603][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 315.152768][ T3835] em28xx 1-1:0.0: Registering input extension [ 315.153652][ T3685] em28xx 1-1:0.0: Closing input extension [ 315.176188][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.195159][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.300851][ T3717] playstation 0003:054C:0CE6.000C: Invalid byte count transferred, expected 20 got 0 [ 315.313643][ T3717] playstation 0003:054C:0CE6.000C: Failed to retrieve DualSense pairing info: -22 [ 315.330819][ T3717] playstation 0003:054C:0CE6.000C: Failed to get MAC address from DualSense [ 315.343450][ T3685] em28xx 1-1:0.0: Freeing device [ 315.346959][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1643'. [ 315.354094][ T3717] playstation 0003:054C:0CE6.000C: Failed to create dualsense. [ 315.427913][ T3717] playstation: probe of 0003:054C:0CE6.000C failed with error -22 [ 315.553366][ T4179] usb 2-1: USB disconnect, device number 18 [ 315.692328][ T9289] 8021q: VLANs not supported on lo [ 316.150019][ T3685] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 316.208124][ T9301] loop2: detected capacity change from 0 to 1764 [ 316.390095][ T3685] usb 5-1: Using ep0 maxpacket: 8 [ 316.680175][ T3685] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 316.693836][ T9291] loop3: detected capacity change from 0 to 40427 [ 316.709803][ T3685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.717989][ T9291] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 316.731872][ T3685] usb 5-1: Product: syz [ 316.736091][ T3685] usb 5-1: Manufacturer: syz [ 316.752151][ T3685] usb 5-1: SerialNumber: syz [ 316.772528][ T4179] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 316.791120][ T3685] usb 5-1: config 0 descriptor?? [ 316.796900][ T9291] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 316.825652][ T9291] F2FS-fs (loop3): invalid crc value [ 316.842396][ T3685] gspca_main: spca500-2.14.0 probing 046d:0900 [ 316.896592][ T9291] F2FS-fs (loop3): Found nat_bits in checkpoint [ 316.909012][ T9285] loop0: detected capacity change from 0 to 65536 [ 316.938018][ T9314] loop1: detected capacity change from 0 to 4096 [ 316.999234][ T9322] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.999376][ T9285] XFS (loop0): Mounting V5 Filesystem [ 317.033601][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.040025][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.048521][ T9291] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 317.057285][ T3837] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 317.065155][ T9291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 317.070185][ T4179] usb 3-1: Using ep0 maxpacket: 8 [ 317.098927][ T3837] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 317.110260][ T3685] gspca_spca500: reg write: error -71 [ 317.150123][ T3685] gspca_spca500: reg write: error -71 [ 317.180073][ T3685] gspca_spca500: reg write: error -71 [ 317.191551][ T4179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.210168][ T3685] gspca_spca500: reg write: error -71 [ 317.230288][ T3685] gspca_spca500: reg write: error -71 [ 317.250152][ T3685] gspca_spca500: reg write: error -71 [ 317.255849][ T4179] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.270138][ T3685] gspca_spca500: reg write: error -71 [ 317.290051][ T3685] gspca_spca500: reg write: error -71 [ 317.299499][ T4179] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 317.310109][ T3685] gspca_spca500: reg write: error -71 [ 317.330197][ T3685] gspca_spca500: reg write: error -71 [ 317.350238][ T3685] gspca_spca500: reg write: error -71 [ 317.356575][ T4179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.370092][ T3685] gspca_spca500: reg write: error -71 [ 317.390229][ T3685] gspca_spca500: reg write: error -71 [ 317.404992][ T4179] usb 3-1: config 0 descriptor?? [ 317.415300][ T9285] XFS (loop0): Ending clean mount [ 317.420875][ T3685] gspca_spca500: reg write: error -71 [ 317.441404][ T3685] usb 5-1: USB disconnect, device number 15 [ 317.656294][ T3640] XFS (loop0): Unmounting Filesystem [ 317.923319][ T4179] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 317.934398][ T4179] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 317.959454][ T4179] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 317.973096][ T4179] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 317.988029][ T4179] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 318.006284][ T4179] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 318.028247][ T4179] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 318.057919][ T4179] playstation 0003:054C:0CE6.000E: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 318.151461][ T3689] net_ratelimit: 6 callbacks suppressed [ 318.151481][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.212436][ T4179] playstation 0003:054C:0CE6.000E: Invalid reportID received, expected 9 got 119 [ 318.230205][ T3685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.233679][ T4179] playstation 0003:054C:0CE6.000E: Failed to retrieve DualSense pairing info: -22 [ 318.303946][ T4179] playstation 0003:054C:0CE6.000E: Failed to get MAC address from DualSense [ 318.313477][ T3685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.327969][ T4179] playstation 0003:054C:0CE6.000E: Failed to create dualsense. [ 318.343160][ T4179] playstation: probe of 0003:054C:0CE6.000E failed with error -22 [ 318.449798][ T4179] usb 3-1: USB disconnect, device number 13 [ 318.496273][ T9349] loop4: detected capacity change from 0 to 1024 [ 318.518688][ T9349] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 318.549601][ T9349] jbd2_journal_init_inode: Cannot locate journal superblock [ 318.560209][ T3685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.578825][ T9349] EXT4-fs (loop4): Could not load journal inode [ 318.776701][ T9334] loop1: detected capacity change from 0 to 40427 [ 318.793636][ T9334] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 318.821784][ T9334] F2FS-fs (loop1): invalid crc value [ 318.835570][ T9334] F2FS-fs (loop1): Found nat_bits in checkpoint [ 318.876922][ T9334] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 318.959979][ T3837] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 318.968558][ T7192] F2FS-fs (loop1): access invalid blkaddr:2816 [ 318.977220][ T7192] CPU: 1 PID: 7192 Comm: syz-executor Not tainted 6.1.112-syzkaller #0 [ 318.985542][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.995625][ T7192] Call Trace: [ 318.998918][ T7192] [ 319.001968][ T7192] dump_stack_lvl+0x1e3/0x2cb [ 319.006699][ T7192] ? nf_tcp_handle_invalid+0x642/0x642 [ 319.012266][ T7192] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 319.018796][ T7192] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 319.024196][ T7192] f2fs_map_blocks+0x15fd/0x3ab0 [ 319.029178][ T7192] ? f2fs_do_map_lock+0x70/0x70 [ 319.034141][ T7192] ? page_index+0xff/0x4b0 [ 319.038586][ T7192] f2fs_mpage_readpages+0xbd5/0x2b90 [ 319.043897][ T7192] ? mark_lock+0x9a/0x340 [ 319.048356][ T7192] ? dquot_release_reservation_block+0x90/0x90 [ 319.054553][ T7192] ? folio_add_lru+0x34d/0xd70 [ 319.059342][ T7192] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 319.065513][ T7192] ? f2fs_readahead+0x18a/0x3a0 [ 319.070418][ T7192] ? blk_start_plug+0x95/0x110 [ 319.075192][ T7192] read_pages+0x17f/0x830 [ 319.079623][ T7192] ? folio_add_lru+0x34d/0xd70 [ 319.084492][ T7192] ? folio_add_lru+0x34d/0xd70 [ 319.089574][ T7192] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 319.095248][ T7192] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 319.100726][ T7192] ? page_cache_ra_order+0xb2a/0xd80 [ 319.106053][ T7192] page_cache_ra_unbounded+0x68b/0x7b0 [ 319.111627][ T7192] f2fs_readdir+0x5ae/0xc30 [ 319.116255][ T7192] ? __might_sleep+0xb0/0xb0 [ 319.120870][ T7192] ? f2fs_fill_dentries+0xd60/0xd60 [ 319.126112][ T7192] ? iterate_dir+0x10a/0x560 [ 319.130712][ T7192] ? __fdget_pos+0x2ba/0x360 [ 319.135356][ T7192] ? common_file_perm+0x17d/0x1d0 [ 319.140429][ T7192] ? fsnotify_perm+0x439/0x590 [ 319.145214][ T7192] iterate_dir+0x224/0x560 [ 319.149656][ T7192] ? f2fs_fill_dentries+0xd60/0xd60 [ 319.154900][ T7192] __se_sys_getdents64+0x209/0x4f0 [ 319.160290][ T7192] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 319.166290][ T7192] ? __x64_sys_getdents64+0x80/0x80 [ 319.171500][ T7192] ? filldir+0x6f0/0x6f0 [ 319.175807][ T7192] ? syscall_enter_from_user_mode+0x2e/0x230 [ 319.181851][ T7192] ? lockdep_hardirqs_on+0x94/0x130 [ 319.187077][ T7192] ? syscall_enter_from_user_mode+0x2e/0x230 [ 319.193167][ T7192] do_syscall_64+0x3b/0xb0 [ 319.197615][ T7192] ? clear_bhb_loop+0x45/0xa0 [ 319.202851][ T7192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.208972][ T7192] RIP: 0033:0x7fef74db0193 [ 319.213784][ T7192] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 319.233609][ T7192] RSP: 002b:00007ffe0a897488 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 319.242263][ T7192] RAX: ffffffffffffffda RBX: 0000555576e12600 RCX: 00007fef74db0193 [ 319.250536][ T7192] RDX: 0000000000008000 RSI: 0000555576e12600 RDI: 0000000000000005 [ 319.258560][ T7192] RBP: 0000555576e125d4 R08: 0000000000000000 R09: 0000000000000000 [ 319.266565][ T7192] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 319.274546][ T7192] R13: 0000000000000010 R14: 0000555576e125d0 R15: 00007ffe0a899730 [ 319.282632][ T7192] [ 319.292158][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.298924][ T7192] F2FS-fs (loop1): access invalid blkaddr:2816 [ 319.307049][ T7192] CPU: 0 PID: 7192 Comm: syz-executor Not tainted 6.1.112-syzkaller #0 [ 319.311419][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.315305][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.333451][ T7192] Call Trace: [ 319.336758][ T7192] [ 319.339716][ T7192] dump_stack_lvl+0x1e3/0x2cb [ 319.344710][ T7192] ? nf_tcp_handle_invalid+0x642/0x642 [ 319.350225][ T7192] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 319.356181][ T7192] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 319.361620][ T7192] f2fs_map_blocks+0x15fd/0x3ab0 [ 319.366639][ T7192] ? f2fs_do_map_lock+0x70/0x70 [ 319.371544][ T7192] ? page_index+0xff/0x4b0 [ 319.376101][ T7192] f2fs_mpage_readpages+0xbd5/0x2b90 [ 319.381453][ T7192] ? mark_lock+0x9a/0x340 [ 319.385852][ T7192] ? dquot_release_reservation_block+0x90/0x90 [ 319.392055][ T7192] ? folio_add_lru+0x34d/0xd70 [ 319.396878][ T7192] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 319.403164][ T7192] ? f2fs_readahead+0x18a/0x3a0 [ 319.408048][ T7192] ? blk_start_plug+0x95/0x110 [ 319.412844][ T7192] read_pages+0x17f/0x830 [ 319.417224][ T7192] ? folio_add_lru+0x34d/0xd70 [ 319.421999][ T7192] ? folio_add_lru+0x34d/0xd70 [ 319.426784][ T7192] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 319.432542][ T7192] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 319.438026][ T7192] ? page_cache_ra_order+0xb2a/0xd80 [ 319.443344][ T7192] page_cache_ra_unbounded+0x68b/0x7b0 [ 319.448831][ T7192] f2fs_readdir+0x5ae/0xc30 [ 319.453525][ T7192] ? __might_sleep+0xb0/0xb0 [ 319.458147][ T7192] ? f2fs_fill_dentries+0xd60/0xd60 [ 319.463367][ T7192] ? iterate_dir+0x10a/0x560 [ 319.467974][ T7192] ? __fdget_pos+0x2ba/0x360 [ 319.472576][ T7192] ? common_file_perm+0x17d/0x1d0 [ 319.477618][ T7192] ? fsnotify_perm+0x439/0x590 [ 319.482408][ T7192] iterate_dir+0x224/0x560 [ 319.486831][ T7192] ? f2fs_fill_dentries+0xd60/0xd60 [ 319.492051][ T7192] __se_sys_getdents64+0x209/0x4f0 [ 319.497172][ T7192] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 319.503185][ T7192] ? __x64_sys_getdents64+0x80/0x80 [ 319.508447][ T7192] ? filldir+0x6f0/0x6f0 [ 319.512705][ T7192] ? syscall_enter_from_user_mode+0x2e/0x230 [ 319.518698][ T7192] ? lockdep_hardirqs_on+0x94/0x130 [ 319.523906][ T7192] ? syscall_enter_from_user_mode+0x2e/0x230 [ 319.529903][ T7192] do_syscall_64+0x3b/0xb0 [ 319.534451][ T7192] ? clear_bhb_loop+0x45/0xa0 [ 319.539161][ T7192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.545081][ T7192] RIP: 0033:0x7fef74db0193 [ 319.549505][ T7192] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 319.569378][ T7192] RSP: 002b:00007ffe0a897488 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 319.577800][ T7192] RAX: ffffffffffffffda RBX: 0000555576e12600 RCX: 00007fef74db0193 [ 319.585795][ T7192] RDX: 0000000000008000 RSI: 0000555576e12600 RDI: 0000000000000005 [ 319.593771][ T7192] RBP: 0000555576e125d4 R08: 0000000000000000 R09: 0000000000000000 [ 319.601777][ T7192] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 319.609956][ T7192] R13: 0000000000000010 R14: 0000555576e125d0 R15: 00007ffe0a899730 [ 319.617974][ T7192] [ 319.637436][ T7192] syz-executor: attempt to access beyond end of device [ 319.637436][ T7192] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 319.646782][ T3685] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 319.782340][ T3837] usb 5-1: Using ep0 maxpacket: 32 [ 319.803049][ T33] kworker/u4:2: attempt to access beyond end of device [ 319.803049][ T33] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 319.916011][ T3837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 181, changing to 7 [ 319.955898][ T3837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8338, setting to 1024 [ 319.973100][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.991454][ T3717] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 320.066017][ T3685] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.087843][ T3685] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.108223][ T3685] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.134038][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.145302][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.164279][ T9353] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 320.180346][ T3837] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 320.195847][ T3837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.233021][ T3837] usb 5-1: Product: syz [ 320.244731][ T3837] usb 5-1: Manufacturer: syz [ 320.252813][ T3837] usb 5-1: SerialNumber: syz [ 320.259647][ T3837] usb 5-1: config 0 descriptor?? [ 320.316623][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.317317][ T3837] hub 5-1:0.0: bad descriptor, ignoring hub [ 320.325837][ T9358] loop3: detected capacity change from 0 to 32768 [ 320.356536][ T3837] hub: probe of 5-1:0.0 failed with error -5 [ 320.369310][ T3837] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 320.371789][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.390587][ T3717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.431342][ T3717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.454968][ T3837] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 320.478710][ T3717] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 320.506304][ T3717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.522597][ T3717] usb 3-1: config 0 descriptor?? [ 320.585801][ T9358] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 320.587138][ T3835] usb 1-1: USB disconnect, device number 21 [ 320.602474][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.621462][ T9358] XFS (loop3): Mounting V5 Filesystem [ 320.621847][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.665940][ T9358] XFS (loop3): Ending clean mount [ 320.673918][ T9358] XFS (loop3): Quotacheck needed: Please wait. [ 320.677960][ T3837] usbtouchscreen: probe of 5-1:0.0 failed with error -22 [ 320.785856][ T3837] usb 5-1: USB disconnect, device number 16 [ 320.787578][ T9358] XFS (loop3): Quotacheck: Done. [ 320.898989][ T27] audit: type=1804 audit(1727972131.450:47): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1668" name="/newroot/236/file0/bus" dev="loop3" ino=4428 res=1 errno=0 [ 321.032626][ T3717] lg-g15 0003:046D:C222.000F: unknown main item tag 0x1 [ 321.040882][ T3717] lg-g15 0003:046D:C222.000F: unbalanced delimiter at end of report description [ 321.055309][ T3717] lg-g15: probe of 0003:046D:C222.000F failed with error -22 [ 321.095294][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.114492][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.123903][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.147659][ T3653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.156252][ T5934] XFS (loop3): Unmounting Filesystem [ 321.162967][ T3653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.171944][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.250796][ T3685] usb 3-1: USB disconnect, device number 14 [ 321.321457][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.350365][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.458659][ T9380] loop4: detected capacity change from 0 to 128 [ 321.554651][ T9380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 321.670201][ T9380] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 321.878779][ T6886] EXT4-fs (loop4): unmounting filesystem. [ 322.596565][ T9371] chnl_net:caif_netlink_parms(): no params data found [ 322.816382][ T9413] loop3: detected capacity change from 0 to 4096 [ 322.828697][ T9413] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 322.841765][ T9419] loop2: detected capacity change from 0 to 1024 [ 322.877897][ T9419] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 322.961661][ T9413] ntfs3: loop3: failed to convert "c46c" to cp850 [ 322.988069][ T9419] jbd2_journal_init_inode: Cannot locate journal superblock [ 322.998443][ T9419] EXT4-fs (loop2): Could not load journal inode [ 323.204674][ T3657] Bluetooth: hci1: command tx timeout [ 323.356134][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.381379][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.416563][ T9371] device bridge_slave_0 entered promiscuous mode [ 323.430626][ T4168] net_ratelimit: 2053 callbacks suppressed [ 323.430644][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.450035][ T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 323.470401][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.477695][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.530122][ T9371] device bridge_slave_1 entered promiscuous mode [ 323.698010][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 323.801455][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.820189][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 181, changing to 7 [ 323.848888][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 8338, setting to 1024 [ 323.888077][ T4168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.902592][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.938760][ T33] device hsr_slave_0 left promiscuous mode [ 323.947161][ T33] device hsr_slave_1 left promiscuous mode [ 323.954352][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.962369][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.981369][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.997822][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.016611][ T33] device bridge_slave_1 left promiscuous mode [ 324.024275][ T9427] loop0: detected capacity change from 0 to 32768 [ 324.031128][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.056723][ T33] device bridge_slave_0 left promiscuous mode [ 324.063447][ T26] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 324.073845][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.082606][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.090804][ T26] usb 3-1: Product: syz [ 324.095013][ T26] usb 3-1: Manufacturer: syz [ 324.112233][ T26] usb 3-1: SerialNumber: syz [ 324.163905][ T26] usb 3-1: config 0 descriptor?? [ 324.225185][ T26] hub 3-1:0.0: bad descriptor, ignoring hub [ 324.233512][ T26] hub: probe of 3-1:0.0 failed with error -5 [ 324.267807][ T26] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 324.288728][ T33] device veth1_macvtap left promiscuous mode [ 324.298383][ T33] device veth0_macvtap left promiscuous mode [ 324.305165][ T26] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 324.307133][ T33] device veth1_vlan left promiscuous mode [ 324.324856][ T33] device veth0_vlan left promiscuous mode [ 324.337956][ T26] usbtouchscreen: probe of 3-1:0.0 failed with error -22 [ 324.400181][ T3835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.470445][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.612509][ T26] usb 3-1: USB disconnect, device number 15 [ 324.630136][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.957263][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.280474][ T3653] Bluetooth: hci1: command tx timeout [ 325.413953][ T9445] loop4: detected capacity change from 0 to 40427 [ 325.421565][ T9449] loop3: detected capacity change from 0 to 32768 [ 325.461792][ T9445] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 325.474298][ T9449] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1692 (9449) [ 325.494957][ T9445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 325.512598][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.540303][ T4179] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 325.548375][ T9449] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 325.590477][ T9449] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 325.607065][ T9449] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 325.617546][ T9445] F2FS-fs (loop4): Found nat_bits in checkpoint [ 325.670997][ T9449] BTRFS info (device loop3): use lzo compression, level 0 [ 325.678192][ T9449] BTRFS info (device loop3): using free space tree [ 325.753505][ T9451] loop2: detected capacity change from 0 to 32768 [ 325.800155][ T4179] usb 1-1: Using ep0 maxpacket: 8 [ 325.828760][ T9445] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 325.850264][ T9445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 325.873843][ T9451] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 325.895276][ T9451] XFS (loop2): Mounting V5 Filesystem [ 325.911375][ T9449] BTRFS info (device loop3): enabling ssd optimizations [ 325.982957][ T27] audit: type=1804 audit(1727972136.540:48): pid=9445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1690" name="/newroot/162/bus/file0" dev="loop4" ino=10 res=1 errno=0 [ 325.992171][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.025659][ T9451] XFS (loop2): Ending clean mount [ 326.048857][ T9451] XFS (loop2): Quotacheck needed: Please wait. [ 326.076602][ T5934] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 326.091588][ T4179] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 326.101398][ T4179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.110925][ T4179] usb 1-1: Product: syz [ 326.115229][ T4179] usb 1-1: Manufacturer: syz [ 326.120978][ T4179] usb 1-1: SerialNumber: syz [ 326.160241][ T4179] usb 1-1: config 0 descriptor?? [ 326.179757][ T9451] XFS (loop2): Quotacheck: Done. [ 326.202844][ T4179] gspca_main: spca500-2.14.0 probing 046d:0900 [ 326.312518][ T27] audit: type=1804 audit(1727972136.870:49): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1693" name="/newroot/288/file0/bus" dev="loop2" ino=4428 res=1 errno=0 [ 326.426114][ T4168] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 326.437668][ T4168] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 326.458118][ T4179] gspca_spca500: reg write: error -71 [ 326.530414][ T4179] gspca_spca500: reg write: error -71 [ 326.547344][ T5056] XFS (loop2): Unmounting Filesystem [ 326.553344][ T4179] gspca_spca500: reg write: error -71 [ 326.580202][ T4179] gspca_spca500: reg write: error -71 [ 326.600317][ T4179] gspca_spca500: reg write: error -71 [ 326.620125][ T4179] gspca_spca500: reg write: error -71 [ 326.636851][ T3631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.650170][ T4179] gspca_spca500: reg write: error -71 [ 326.670289][ T4179] gspca_spca500: reg write: error -71 [ 326.690160][ T4179] gspca_spca500: reg write: error -71 [ 326.710448][ T4179] gspca_spca500: reg write: error -71 [ 326.750537][ T4179] gspca_spca500: reg write: error -71 [ 326.770252][ T4179] gspca_spca500: reg write: error -71 [ 326.790750][ T4179] gspca_spca500: reg write: error -71 [ 326.812487][ T4179] gspca_spca500: reg write: error -71 [ 326.813687][ T33] team0 (unregistering): Port device team_slave_1 removed [ 326.838027][ T4179] usb 1-1: USB disconnect, device number 22 [ 327.030520][ T3631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.046851][ T33] team0 (unregistering): Port device team_slave_0 removed [ 327.094087][ T9490] loop4: detected capacity change from 0 to 128 [ 327.236302][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.358229][ T3653] Bluetooth: hci1: command tx timeout [ 327.576339][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.152269][ T27] audit: type=1326 audit(1727972138.690:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9503 comm="syz.0.1700" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15e717dff9 code=0x0 [ 328.664109][ T33] bond0 (unregistering): Released all slaves [ 328.710562][ T4179] net_ratelimit: 6 callbacks suppressed [ 328.710578][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.858592][ T9371] team0: Port device team_slave_0 added [ 328.959218][ T9508] loop4: detected capacity change from 0 to 512 [ 328.964427][ T9371] team0: Port device team_slave_1 added [ 329.102226][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.130273][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.138722][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.165656][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.178852][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.186491][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.215638][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.247116][ T9508] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 329.292579][ T9508] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038 (0x7fffffff) [ 329.304288][ T9371] device hsr_slave_0 entered promiscuous mode [ 329.357148][ T9371] device hsr_slave_1 entered promiscuous mode [ 329.380464][ T9371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.399295][ T9371] Cannot create hsr debugfs directory [ 329.414914][ T6886] EXT4-fs (loop4): unmounting filesystem. [ 329.430205][ T3653] Bluetooth: hci1: command tx timeout [ 329.756234][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.150363][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.231916][ T9544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.399058][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.470400][ T3834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.771737][ T9552] loop2: detected capacity change from 0 to 8192 [ 330.791911][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.799544][ T9522] loop3: detected capacity change from 0 to 32768 [ 330.818162][ T9552] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 330.840090][ T9552] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 330.864674][ T9552] REISERFS (device loop2): using ordered data mode [ 330.916866][ T9552] reiserfs: using flush barriers [ 330.955472][ T9522] XFS (loop3): Mounting V5 Filesystem [ 330.963894][ T9552] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 330.981498][ T9552] REISERFS (device loop2): checking transaction log (loop2) [ 330.997077][ T9552] REISERFS (device loop2): Using r5 hash to sort names [ 331.032176][ T9552] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 331.096894][ T9371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.111788][ T9522] XFS (loop3): Ending clean mount [ 331.121743][ T9522] XFS (loop3): Quotacheck needed: Please wait. [ 331.131618][ T9371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.165727][ T9371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.167420][ T9552] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 331.190415][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.210320][ T9371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.289426][ T9522] XFS (loop3): Quotacheck: Done. [ 331.345610][ T9529] loop4: detected capacity change from 0 to 32768 [ 331.415044][ T9529] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 331.443726][ T5934] XFS (loop3): Unmounting Filesystem [ 331.452027][ T9529] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 331.525299][ T9529] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 331.530050][ T4179] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 331.547527][ T3834] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 331.564916][ T3834] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 331.657835][ T3834] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 92ms [ 331.675749][ T3834] gfs2: fsid=syz:syz.0: jid=0: Done [ 331.679815][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.685754][ T9529] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 331.830352][ T4179] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 331.841664][ T3631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.850865][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.886679][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.912029][ T4179] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 331.925359][ T9371] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.984396][ T4179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.006175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.022464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.043532][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.045966][ T4179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 332.050930][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.100671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.138115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.157417][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.164703][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.170200][ T4179] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.200534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.211968][ T4179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.236199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.262398][ T4179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 332.262897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.308853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.348278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.380195][ T4179] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.399159][ T4179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.412062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.430867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 332.439308][ T4179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 332.472474][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.485916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.531978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.539095][ T9586] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 332.559689][ T9371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.570192][ T4179] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.581853][ T9371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.589845][ T4179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.602142][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.620969][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.625670][ T4179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 332.730129][ T4179] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.750537][ T3837] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 332.769720][ T4179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.811582][ T4179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 332.890095][ T4179] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 332.909464][ T4179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 332.950260][ T4179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.050176][ T4179] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.069446][ T4179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.090877][ T9580] loop2: detected capacity change from 0 to 32768 [ 333.107602][ T4179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.121145][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.128692][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.142911][ T9580] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1719 (9580) [ 333.160619][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.167828][ T3837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.187206][ T3837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.190437][ T4179] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.197984][ T3837] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 333.215991][ T3837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.227825][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.238508][ T3837] usb 4-1: config 0 descriptor?? [ 333.254787][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.264660][ T4179] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.309009][ T4179] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.346708][ T9580] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 333.358321][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.370078][ T9580] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 333.378828][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.391925][ T9580] BTRFS info (device loop2): using free space tree [ 333.391953][ T9371] device veth0_vlan entered promiscuous mode [ 333.431884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.452176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.506346][ T4179] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 333.516725][ T9371] device veth1_vlan entered promiscuous mode [ 333.533963][ T4179] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 333.560088][ T4179] usb 1-1: Product: syz [ 333.570339][ T4179] usb 1-1: Manufacturer: syz [ 333.578456][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 333.580324][ T4179] usb 1-1: SerialNumber: syz [ 333.601436][ T4179] usb 1-1: config 0 descriptor?? [ 333.618099][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 333.631314][ T9580] BTRFS info (device loop2): enabling ssd optimizations [ 333.644894][ T4179] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 333.664569][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 333.680818][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 333.691887][ T9371] device veth0_macvtap entered promiscuous mode [ 333.702984][ T9371] device veth1_macvtap entered promiscuous mode [ 333.742438][ T3837] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 333.760080][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.768328][ T3837] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 333.791116][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.822583][ T3837] hid-thrustmaster 0003:044F:B65D.0011: Wrong number of endpoints? [ 333.830072][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.851736][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.887477][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.910202][ T4179] net_ratelimit: 6 callbacks suppressed [ 333.910221][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.944515][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.959987][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 333.965738][ T14] usb 1-1: USB disconnect, device number 23 [ 333.982141][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.993797][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.007993][ T14] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 334.026054][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.040015][ C0] hid-thrustmaster 0003:044F:B65D.0011: Unknown packet type 0x0, unable to proceed further with wheel init [ 334.056960][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.085478][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.094480][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.103916][ T5056] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 334.104749][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.127232][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.158588][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.191776][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.220008][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.290423][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.303931][ T9599] loop4: detected capacity change from 0 to 40427 [ 334.329424][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.349187][ T9371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.360494][ T9371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.372256][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.381954][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.391968][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.405478][ T9371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.421779][ T9599] F2FS-fs (loop4): Found nat_bits in checkpoint [ 334.430633][ T9371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.439377][ T9371] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.470085][ T9371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.497037][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.499395][ T4750] usb 4-1: USB disconnect, device number 17 [ 334.620701][ T9599] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 334.694783][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.718002][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.759499][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 334.784746][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.817112][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.850952][ T6886] syz-executor: attempt to access beyond end of device [ 334.850952][ T6886] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 334.857520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 334.960827][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.129496][ T9645] loop1: detected capacity change from 0 to 512 [ 335.213860][ T9645] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 335.300509][ T9645] EXT4-fs (loop1): 1 truncate cleaned up [ 335.307145][ T9645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 335.338243][ T9645] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 131099 (only 1 groups) [ 335.511404][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.559670][ T9371] EXT4-fs (loop1): unmounting filesystem. [ 335.990723][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.282873][ T9650] loop0: detected capacity change from 0 to 32768 [ 336.340089][ T9642] loop2: detected capacity change from 0 to 32768 [ 336.424949][ T9642] JBD2: Ignoring recovery information on journal [ 336.447527][ T9650] XFS (loop0): Mounting V5 Filesystem [ 336.470801][ T4750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.562685][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.587269][ T9642] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 336.630366][ T4750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.640558][ T9650] XFS (loop0): Ending clean mount [ 336.668009][ T9650] XFS (loop0): Quotacheck needed: Please wait. [ 336.780964][ T9657] loop3: detected capacity change from 0 to 32768 [ 336.799953][ T9650] XFS (loop0): Quotacheck: Done. [ 336.805955][ T9657] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1728 (9657) [ 336.870436][ T3833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.900216][ T9657] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 336.923094][ T5056] ocfs2: Unmounting device (7,2) on (node local) [ 336.941857][ T9657] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 336.974581][ T9657] BTRFS info (device loop3): setting nodatacow, compression disabled [ 336.992742][ T9688] loop4: detected capacity change from 0 to 1024 [ 337.014444][ T9657] BTRFS info (device loop3): turning on flush-on-commit [ 337.034479][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.080035][ T9657] BTRFS info (device loop3): enabling auto defrag [ 337.121338][ T9657] BTRFS info (device loop3): max_inline at 0 [ 337.181291][ T9657] BTRFS info (device loop3): using free space tree [ 337.312319][ T3640] XFS (loop0): Unmounting Filesystem [ 337.341450][ T4593] hfsplus: b-tree write err: -5, ino 4 [ 337.544774][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1732'. [ 337.650088][ T9657] BTRFS info (device loop3): enabling ssd optimizations [ 337.757328][ T9724] netlink: 'syz.2.1737': attribute type 1 has an invalid length. [ 337.780281][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 338.187798][ T9731] loop1: detected capacity change from 0 to 1024 [ 338.223149][ T5934] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 339.114924][ T3687] net_ratelimit: 5 callbacks suppressed [ 339.114944][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.199346][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 339.242552][ T9758] device bridge_slave_1 left promiscuous mode [ 339.249023][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.280092][ T3717] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 339.283752][ T27] audit: type=1326 audit(1727972149.840:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34637dff9 code=0x7ffc0000 [ 339.313044][ T9758] device bridge_slave_0 left promiscuous mode [ 339.339688][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.355215][ T27] audit: type=1326 audit(1727972149.880:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34637dff9 code=0x7ffc0000 [ 339.408469][ T27] audit: type=1326 audit(1727972149.880:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=175 compat=0 ip=0x7fe34637dff9 code=0x7ffc0000 [ 339.446426][ T9767] loop1: detected capacity change from 0 to 8 [ 339.469606][ T27] audit: type=1326 audit(1727972149.880:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34637dff9 code=0x7ffc0000 [ 339.509806][ T27] audit: type=1326 audit(1727972149.880:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34637dff9 code=0x7ffc0000 [ 339.579520][ T9764] can0: slcan on ptm0. [ 339.599915][ T3653] Bluetooth: hci2: command 0x0406 tx timeout [ 339.608579][ T3717] usb 5-1: Using ep0 maxpacket: 32 [ 339.670638][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.678828][ T3729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.701541][ T9763] can0 (unregistered): slcan off ptm0. [ 339.750279][ T3717] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 339.759383][ T3717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.836536][ T3717] usb 5-1: config 0 descriptor?? [ 339.907806][ T3717] gspca_main: sunplus-2.14.0 probing 041e:400b [ 340.150566][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.640317][ T4750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.727733][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.790262][ T3717] gspca_sunplus: reg_r err -71 [ 340.795136][ T3717] sunplus: probe of 5-1:0.0 failed with error -71 [ 340.834662][ T3717] usb 5-1: USB disconnect, device number 17 [ 341.190152][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.245443][ T9824] loop2: detected capacity change from 0 to 16 [ 341.303568][ T9824] erofs: (device loop2): mounted with root inode @ nid 36. [ 341.750247][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.803464][ T9848] device ipvlan2 entered promiscuous mode [ 342.215234][ T9860] loop4: detected capacity change from 0 to 256 [ 342.230430][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.275332][ T9860] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009b275e, utbl_chksum : 0x7319d30d) [ 342.310402][ T4179] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 342.369094][ T9865] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.434891][ T9865] F2FS-fs (loop1): Unable to read 1th superblock [ 342.501553][ T9865] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.548935][ T9865] F2FS-fs (loop1): Unable to read 2th superblock [ 342.581803][ T9867] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.591302][ T4179] usb 2-1: Using ep0 maxpacket: 8 [ 342.660165][ T9867] F2FS-fs (loop1): Unable to read 1th superblock [ 342.677261][ T9867] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 342.720349][ T3729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.734694][ T9867] F2FS-fs (loop1): Unable to read 2th superblock [ 342.870226][ T4179] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=23.a2 [ 342.900001][ T4179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.928397][ T4179] usb 2-1: Product: syz [ 342.933132][ T4179] usb 2-1: Manufacturer: syz [ 342.938047][ T4179] usb 2-1: SerialNumber: syz [ 342.960897][ T4179] usb 2-1: config 0 descriptor?? [ 343.022966][ T4179] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 343.090094][ T4179] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 343.120316][ T4179] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 343.125465][ T9842] loop3: detected capacity change from 0 to 40427 [ 343.216545][ T9878] loop2: detected capacity change from 0 to 8192 [ 343.242612][ T9842] F2FS-fs (loop3): Found nat_bits in checkpoint [ 343.256162][ T4179] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 343.263041][ T4179] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 343.278880][ T9878] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 343.309253][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 343.324674][ T9878] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 343.340171][ T4179] usb 2-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state [ 343.349776][ T9878] REISERFS (device loop2): using ordered data mode [ 343.358711][ T4179] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 343.370454][ T4179] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4) [ 343.377855][ T4179] usb 2-1: media controller created [ 343.384281][ T4179] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 343.392480][ T4179] usb 2-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00 [ 343.398439][ T9842] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 343.417020][ T4179] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.430409][ T9891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1799'. [ 343.441471][ T9878] reiserfs: using flush barriers [ 343.472715][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 343.480752][ T9878] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 343.509263][ T9878] REISERFS (device loop2): checking transaction log (loop2) [ 343.510984][ T9895] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 343.518425][ T9878] REISERFS (device loop2): Using r5 hash to sort names [ 343.553036][ T9878] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 343.590406][ T5934] syz-executor: attempt to access beyond end of device [ 343.590406][ T5934] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 343.734591][ T27] audit: type=1804 audit(1727972154.290:56): pid=9878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1795" name="/newroot/314/file0/file0" dev="loop2" ino=2 res=1 errno=0 [ 343.997577][ T9903] fuse: Invalid group_id [ 344.139764][ T9905] net_ratelimit: 5 callbacks suppressed [ 344.139784][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.241588][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.310201][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.311668][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.358174][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.473742][ T9904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.739831][ T9898] loop0: detected capacity change from 0 to 40427 [ 344.811380][ T9898] F2FS-fs (loop0): Found nat_bits in checkpoint [ 344.830700][ T9919] program syz.3.1809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.870364][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.904014][ T9898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 344.946682][ T27] audit: type=1800 audit(1727972155.500:57): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1802" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 344.959005][ T9898] syz.0.1802: attempt to access beyond end of device [ 344.959005][ T9898] loop0: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 345.086431][ T9898] syz.0.1802: attempt to access beyond end of device [ 345.086431][ T9898] loop0: rw=0, sector=53256, nr_sectors = 8 limit=40427 [ 345.137590][ T3729] usb 2-1: USB disconnect, device number 19 [ 345.206645][ T9907] loop4: detected capacity change from 0 to 32768 [ 345.350434][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.352980][ T9907] read_mapping_page failed! [ 345.432284][ T9932] loop2: detected capacity change from 0 to 256 [ 345.750233][ T3729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.918015][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.505362][ T9955] netlink: 'syz.1.1825': attribute type 12 has an invalid length. [ 346.533865][ T9955] netlink: 'syz.1.1825': attribute type 29 has an invalid length. [ 346.556815][ T9955] netlink: 'syz.1.1825': attribute type 2 has an invalid length. [ 346.610113][ T9955] netlink: 'syz.1.1825': attribute type 2 has an invalid length. [ 346.630940][ T9955] netlink: 'syz.1.1825': attribute type 1 has an invalid length. [ 346.710395][ T9955] netlink: 'syz.1.1825': attribute type 37 has an invalid length. [ 346.720944][ T9955] netlink: 'syz.1.1825': attribute type 2 has an invalid length. [ 346.762407][ T9964] loop2: detected capacity change from 0 to 1024 [ 346.772818][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.798284][ T9955] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1825'. [ 346.823520][ T9964] hfsplus: catalog searching failed [ 346.910320][ T11] hfsplus: b-tree write err: -5, ino 4 [ 347.165624][ T9977] rose0: tun_chr_ioctl cmd 2147767519 [ 347.747658][T10007] loop1: detected capacity change from 0 to 16 [ 347.804758][T10007] erofs: (device loop1): mounted with root inode @ nid 36. [ 347.825759][T10007] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 347.853741][T10007] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 347.889766][T10007] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 348.086161][T10012] loop0: detected capacity change from 0 to 1024 [ 349.072559][T10041] input: syz1 as /devices/virtual/input/input24 [ 349.241290][T10049] loop4: detected capacity change from 0 to 512 [ 349.296441][T10049] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1866: inode #1: comm syz.4.1866: iget: illegal inode # [ 349.371499][T10053] loop0: detected capacity change from 0 to 128 [ 349.379645][T10053] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 349.399347][T10049] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1866: error while reading EA inode 1 err=-117 [ 349.422304][T10049] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1866: inode #1: comm syz.4.1866: iget: illegal inode # [ 349.444491][T10053] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 349.466743][T10049] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1866: error while reading EA inode 1 err=-117 [ 349.500974][T10049] EXT4-fs (loop4): 1 orphan inode deleted [ 349.506780][T10049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.510364][ T3689] net_ratelimit: 10 callbacks suppressed [ 349.510381][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.538971][T10053] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.1867: checksumming directory block 0 [ 349.557898][ T27] audit: type=1326 audit(1727972416.105:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 349.654650][ T27] audit: type=1326 audit(1727972416.145:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 349.700736][ T3640] EXT4-fs (loop0): unmounting filesystem. [ 349.750458][ T47] wlan0: Trigger new scan to find an IBSS to join [ 349.764498][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.764812][ T27] audit: type=1326 audit(1727972416.145:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 349.786853][ T6886] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 349.929779][ T27] audit: type=1326 audit(1727972416.145:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 349.938781][ T6886] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 350.017106][T10068] loop1: detected capacity change from 0 to 128 [ 350.035546][ T6886] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 350.070222][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.078572][ T27] audit: type=1326 audit(1727972416.145:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 350.174921][ T27] audit: type=1326 audit(1727972416.145:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 350.190514][T10074] autofs4:pid:10074:autofs_fill_super: could not open pipe file descriptor [ 350.205385][ T27] audit: type=1326 audit(1727972416.145:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 350.299995][ T27] audit: type=1326 audit(1727972416.145:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 350.419959][ T27] audit: type=1326 audit(1727972416.145:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 350.465002][ T27] audit: type=1326 audit(1727972416.145:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10057 comm="syz.3.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41b77dff9 code=0x7ffc0000 [ 350.550264][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.597968][ T6886] EXT4-fs (loop4): unmounting filesystem. [ 350.770026][T10085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.845648][T10085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.856639][T10085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.954090][ T102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.110338][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.133078][ T102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.177251][T10066] loop0: detected capacity change from 0 to 32768 [ 351.206660][T10066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1873 (10066) [ 351.213215][T10093] device netdevsim0 entered promiscuous mode [ 351.228872][T10066] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.245498][T10093] device macsec1 entered promiscuous mode [ 351.253558][T10066] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 351.272776][T10066] BTRFS info (device loop0): using free space tree [ 351.282690][T10093] device netdevsim0 left promiscuous mode [ 351.423916][ T102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.567785][T10066] BTRFS info (device loop0): enabling ssd optimizations [ 351.590962][ T3687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.657508][ T102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.817502][ T3640] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 351.835764][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.981251][ T3657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.007329][ T3657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.016885][ T3657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.026048][ T3657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.036179][ T3657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 352.049665][ T3657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.222442][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 352.381007][T10138] loop3: detected capacity change from 0 to 2048 [ 352.455302][T10138] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 352.466769][T10138] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038 (0x7fffffff) [ 352.476226][T10143] loop1: detected capacity change from 0 to 512 [ 352.492019][T10138] fs-verity: sha512 using implementation "sha512-avx2" [ 352.513808][T10138] fs-verity (loop3, inode 13): fs-verity keyring is empty, rejecting signed file! [ 352.706379][ T5934] EXT4-fs (loop3): unmounting filesystem. [ 353.643017][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1912'. [ 353.653893][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1912'. [ 353.676697][T10174] loop2: detected capacity change from 0 to 2048 [ 353.818559][T10182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 354.156258][ T3657] Bluetooth: hci2: command tx timeout [ 354.174572][T10188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.227150][T10188] device batadv_slave_1 entered promiscuous mode [ 354.494908][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1918'. [ 354.514578][T10199] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1920'. [ 354.583667][T10204] loop2: detected capacity change from 0 to 128 [ 354.630203][T10127] chnl_net:caif_netlink_parms(): no params data found [ 354.662385][T10204] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 354.662644][T10207] loop0: detected capacity change from 0 to 256 [ 354.710816][ T47] wlan0: Trigger new scan to find an IBSS to join [ 354.745079][ T3721] net_ratelimit: 6 callbacks suppressed [ 354.745095][ T3721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.759810][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.773915][T10207] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 354.807963][T10207] FAT-fs (loop0): Filesystem has been set read-only [ 354.829608][T10204] syz.2.1921: attempt to access beyond end of device [ 354.829608][T10204] loop2: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 354.870234][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.883205][T10204] Buffer I/O error on dev loop2, logical block 2066843070, lost async page write [ 355.069650][ T5056] sysv_free_block: trying to free block not in datazone [ 355.127390][ T5056] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 355.414950][T10224] loop2: detected capacity change from 0 to 164 [ 355.511373][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.518541][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.525707][T10224] isofs: isofs_export_get_parent(): child directory not normalized! [ 355.553125][T10127] device bridge_slave_0 entered promiscuous mode [ 355.615005][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.622375][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.641935][T10127] device bridge_slave_1 entered promiscuous mode [ 355.687150][ T33] wlan0: Creating new IBSS network, BSSID 22:ce:3f:41:90:e4 [ 355.729979][ T4173] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 355.781055][ T3721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.830136][ T3837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.830584][ T4179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.924171][T10209] loop3: detected capacity change from 0 to 40427 [ 356.003085][T10209] F2FS-fs (loop3): Found nat_bits in checkpoint [ 356.103874][ T3837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.132267][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.140387][ T4173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.179993][ T4173] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 356.189043][ T4173] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 356.217335][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.231383][ T3657] Bluetooth: hci2: command tx timeout [ 356.237173][T10209] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 356.280961][ T102] device hsr_slave_0 left promiscuous mode [ 356.307351][ T4173] usb 1-1: config 0 descriptor?? [ 356.322758][ T102] device hsr_slave_1 left promiscuous mode [ 356.336124][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.354032][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.370551][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.382223][ T4173] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 356.390797][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.409974][ T4173] dvb-usb: bulk message failed: -22 (3/0) [ 356.410938][T10228] loop1: detected capacity change from 0 to 32768 [ 356.430674][ T102] device bridge_slave_1 left promiscuous mode [ 356.441554][ T4173] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 356.441559][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.457957][ T5934] syz-executor: attempt to access beyond end of device [ 356.457957][ T5934] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 356.479477][ T102] device bridge_slave_0 left promiscuous mode [ 356.480542][ T4173] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 356.492868][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.519688][ T4173] usb 1-1: media controller created [ 356.529742][T10228] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 356.586200][T10226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.598401][ T4173] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.628263][T10228] [ 356.630654][T10228] ====================================================== [ 356.637781][T10228] WARNING: possible circular locking dependency detected [ 356.644823][T10228] 6.1.112-syzkaller #0 Not tainted [ 356.650043][T10228] ------------------------------------------------------ [ 356.657082][T10228] syz.1.1929/10228 is trying to acquire lock: [ 356.663168][T10228] ffff8880524a89c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_xattr_set+0xe96/0x1930 [ 356.675711][T10228] [ 356.675711][T10228] but task is already holding lock: [ 356.683349][T10228] ffff888072a6bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 356.692981][T10228] [ 356.692981][T10228] which lock already depends on the new lock. [ 356.692981][T10228] [ 356.703410][T10228] [ 356.703410][T10228] the existing dependency chain (in reverse order) is: [ 356.712440][T10228] [ 356.712440][T10228] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 356.720312][T10228] lock_acquire+0x1f8/0x5a0 [ 356.725372][T10228] down_read+0xad/0xa30 [ 356.730108][T10228] ocfs2_init_acl+0x398/0x930 [ 356.735434][T10228] ocfs2_mknod+0x1f75/0x2e20 [ 356.740572][T10228] vfs_mknod+0x444/0x4d0 [ 356.745360][T10228] do_mknodat+0x3f8/0x5a0 [ 356.750309][T10228] __x64_sys_mknod+0x8a/0xa0 [ 356.755436][T10228] do_syscall_64+0x3b/0xb0 [ 356.760377][T10228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.766952][T10228] [ 356.766952][T10228] -> #1 (jbd2_handle){++++}-{0:0}: [ 356.774380][T10228] lock_acquire+0x1f8/0x5a0 [ 356.779538][T10228] jbd2_journal_lock_updates+0xa6/0x380 [ 356.785623][T10228] __ocfs2_flush_truncate_log+0x2ef/0x12a0 [ 356.792058][T10228] ocfs2_flush_truncate_log+0x4b/0x60 [ 356.797954][T10228] ocfs2_sync_fs+0x121/0x380 [ 356.803088][T10228] sync_filesystem+0x1bc/0x220 [ 356.808466][T10228] generic_shutdown_super+0x6b/0x340 [ 356.814283][T10228] kill_block_super+0x7a/0xe0 [ 356.819487][T10228] deactivate_locked_super+0xa0/0x110 [ 356.825387][T10228] cleanup_mnt+0x490/0x520 [ 356.830333][T10228] task_work_run+0x246/0x300 [ 356.835453][T10228] exit_to_user_mode_loop+0xde/0x100 [ 356.841262][T10228] exit_to_user_mode_prepare+0xb1/0x140 [ 356.847702][T10228] syscall_exit_to_user_mode+0x60/0x270 [ 356.853969][T10228] do_syscall_64+0x47/0xb0 [ 356.858918][T10228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.865458][T10228] [ 356.865458][T10228] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 356.876079][T10228] validate_chain+0x1661/0x5950 [ 356.881515][T10228] __lock_acquire+0x125b/0x1f80 [ 356.887543][T10228] lock_acquire+0x1f8/0x5a0 [ 356.892586][T10228] down_write+0x36/0x60 [ 356.897265][T10228] ocfs2_xattr_set+0xe96/0x1930 [ 356.902737][T10228] __vfs_setxattr+0x3e7/0x420 [ 356.907960][T10228] __vfs_setxattr_noperm+0x12a/0x5e0 [ 356.913778][T10228] vfs_setxattr+0x21d/0x420 [ 356.918802][T10228] setxattr+0x250/0x2b0 [ 356.923829][T10228] path_setxattr+0x1bc/0x2a0 [ 356.928970][T10228] __x64_sys_lsetxattr+0xb4/0xd0 [ 356.934467][T10228] do_syscall_64+0x3b/0xb0 [ 356.939417][T10228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.946025][T10228] [ 356.946025][T10228] other info that might help us debug this: [ 356.946025][T10228] [ 356.956347][T10228] Chain exists of: [ 356.956347][T10228] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem [ 356.956347][T10228] [ 356.972440][T10228] Possible unsafe locking scenario: [ 356.972440][T10228] [ 356.979886][T10228] CPU0 CPU1 [ 356.985255][T10228] ---- ---- [ 356.990613][T10228] lock(&oi->ip_xattr_sem); [ 356.995205][T10228] lock(jbd2_handle); [ 357.001794][T10228] lock(&oi->ip_xattr_sem); [ 357.008904][T10228] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 357.016199][T10228] [ 357.016199][T10228] *** DEADLOCK *** [ 357.016199][T10228] [ 357.024338][T10228] 3 locks held by syz.1.1929/10228: [ 357.029531][T10228] #0: ffff8880541f8460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 357.038882][T10228] #1: ffff888072a6c2c8 (&sb->s_type->i_mutex_key#36){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 357.049426][T10228] #2: ffff888072a6bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 357.059373][T10228] [ 357.059373][T10228] stack backtrace: [ 357.065344][T10228] CPU: 1 PID: 10228 Comm: syz.1.1929 Not tainted 6.1.112-syzkaller #0 [ 357.073529][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.083599][T10228] Call Trace: [ 357.086885][T10228] [ 357.089863][T10228] dump_stack_lvl+0x1e3/0x2cb [ 357.094601][T10228] ? nf_tcp_handle_invalid+0x642/0x642 [ 357.100167][T10228] ? print_circular_bug+0x12b/0x1a0 [ 357.105381][T10228] check_noncircular+0x2fa/0x3b0 [ 357.110324][T10228] ? add_chain_block+0x850/0x850 [ 357.115262][T10228] ? lockdep_lock+0x11f/0x2a0 [ 357.120133][T10228] ? _find_first_zero_bit+0xd0/0x100 [ 357.125432][T10228] validate_chain+0x1661/0x5950 [ 357.130292][T10228] ? kernel_text_address+0x9f/0xd0 [ 357.135520][T10228] ? stack_trace_save+0x113/0x1c0 [ 357.140641][T10228] ? reacquire_held_locks+0x660/0x660 [ 357.146018][T10228] ? stack_trace_snprint+0xe0/0xe0 [ 357.151149][T10228] ? look_up_lock_class+0x77/0x140 [ 357.156277][T10228] ? register_lock_class+0x100/0x990 [ 357.161583][T10228] ? is_dynamic_key+0x260/0x260 [ 357.166694][T10228] ? mark_lock+0x9a/0x340 [ 357.171162][T10228] __lock_acquire+0x125b/0x1f80 [ 357.176044][T10228] lock_acquire+0x1f8/0x5a0 [ 357.180573][T10228] ? ocfs2_xattr_set+0xe96/0x1930 [ 357.185617][T10228] ? read_lock_is_recursive+0x10/0x10 [ 357.191098][T10228] ? __might_sleep+0xb0/0xb0 [ 357.196027][T10228] ? rwsem_write_trylock+0x166/0x210 [ 357.201365][T10228] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 357.206974][T10228] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0 [ 357.212719][T10228] ? ocfs2_xattr_ibody_find+0xc6/0x7c0 [ 357.219637][T10228] down_write+0x36/0x60 [ 357.224362][T10228] ? ocfs2_xattr_set+0xe96/0x1930 [ 357.229776][T10228] ocfs2_xattr_set+0xe96/0x1930 [ 357.234777][T10228] ? finish_task_switch+0x1ca/0x810 [ 357.240008][T10228] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 357.246060][T10228] ? print_irqtrace_events+0x210/0x210 [ 357.251639][T10228] ? mark_lock+0x9a/0x340 [ 357.256113][T10228] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 357.262390][T10228] ? lockdep_hardirqs_on+0x94/0x130 [ 357.267643][T10228] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 357.274009][T10228] ? evm_protected_xattr_common+0x181/0x1a0 [ 357.279924][T10228] ? evm_protect_xattr+0x8b1/0xb10 [ 357.285152][T10228] ? ocfs2_xattr_security_get+0x40/0x40 [ 357.290897][T10228] __vfs_setxattr+0x3e7/0x420 [ 357.295597][T10228] __vfs_setxattr_noperm+0x12a/0x5e0 [ 357.300913][T10228] vfs_setxattr+0x21d/0x420 [ 357.306169][T10228] ? xattr_permission+0x4f0/0x4f0 [ 357.311224][T10228] ? __might_fault+0xbd/0x110 [ 357.315968][T10228] setxattr+0x250/0x2b0 [ 357.320496][T10228] ? path_setxattr+0x2a0/0x2a0 [ 357.325743][T10228] ? __mnt_want_write+0x222/0x2a0 [ 357.331255][T10228] path_setxattr+0x1bc/0x2a0 [ 357.336090][T10228] ? simple_xattr_list_add+0xf0/0xf0 [ 357.341403][T10228] ? syscall_enter_from_user_mode+0x2e/0x230 [ 357.347596][T10228] __x64_sys_lsetxattr+0xb4/0xd0 [ 357.352641][T10228] do_syscall_64+0x3b/0xb0 [ 357.357065][T10228] ? clear_bhb_loop+0x45/0xa0 [ 357.361759][T10228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.367665][T10228] RIP: 0033:0x7fe34637dff9 [ 357.372372][T10228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.393280][T10228] RSP: 002b:00007fe3471f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 357.401888][T10228] RAX: ffffffffffffffda RBX: 00007fe346535f80 RCX: 00007fe34637dff9 [ 357.409866][T10228] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000080 [ 357.417841][T10228] RBP: 00007fe3463f0296 R08: 0000000000000000 R09: 0000000000000000 [ 357.425835][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.433899][T10228] R13: 0000000000000000 R14: 00007fe346535f80 R15: 00007ffddd936558 [ 357.442060][T10228] [ 357.446664][ T3717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.456532][T10226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.465238][ T102] device veth1_macvtap left promiscuous mode [ 357.471707][ T102] device veth0_macvtap left promiscuous mode [ 357.477841][ T102] device veth1_vlan left promiscuous mode [ 357.484279][ T102] device veth0_vlan left promiscuous mode [ 357.504309][ T4173] dvb-usb: bulk message failed: -22 (6/0) [ 357.523771][ T4173] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 357.563014][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.571929][ T3721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.586856][ T9371] ocfs2: Unmounting device (7,1) on (node local) [ 357.601236][ T4173] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 357.642190][ T4173] dvb-usb: schedule remote query interval to 150 msecs. [ 357.659444][ T4173] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 357.688264][ T4173] usb 1-1: USB disconnect, device number 24 [ 357.722404][ T4173] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 358.163162][ T102] team0 (unregistering): Port device team_slave_1 removed [ 358.200129][ T102] team0 (unregistering): Port device team_slave_0 removed [ 358.237640][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.274478][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.322361][ T3657] Bluetooth: hci2: command tx timeout [ 358.411694][ T102] bond0 (unregistering): Released all slaves [ 358.464759][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.549365][T10127] team0: Port device team_slave_0 added [ 358.589483][T10127] team0: Port device team_slave_1 added [ 358.639252][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.669604][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.698812][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.715192][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.723135][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.754043][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.839495][T10127] device hsr_slave_0 entered promiscuous mode [ 358.847604][T10127] device hsr_slave_1 entered promiscuous mode [ 358.854307][T10127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.863303][T10127] Cannot create hsr debugfs directory [ 359.269417][T10127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.284348][T10127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.293969][T10127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.303591][T10127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.366038][T10127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.381494][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.389662][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.402196][T10127] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.412956][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.423198][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.432079][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.439310][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.455497][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.464898][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.473819][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.482979][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.490116][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.497931][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.514173][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.524252][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.533184][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.542346][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.558626][T10127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.570287][T10127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.582606][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.591772][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.601423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.609751][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.619662][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.628313][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.636894][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.798663][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.808574][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.824099][T10127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.045847][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.056151][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.078180][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.088881][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.098393][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.108898][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.118736][T10127] device veth0_vlan entered promiscuous mode [ 360.132694][T10127] device veth1_vlan entered promiscuous mode [ 360.153962][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.170515][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 360.189557][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 360.199664][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 360.213653][T10127] device veth0_macvtap entered promiscuous mode [ 360.224575][T10127] device veth1_macvtap entered promiscuous mode [ 360.243124][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.254395][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.267896][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.280165][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.290520][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.302030][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.314177][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.325342][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.336358][T10127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.345474][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 360.360772][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 360.369829][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 360.381667][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 360.390224][ T3653] Bluetooth: hci2: command tx timeout [ 360.398687][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.409809][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.420321][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.431640][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.441973][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.452950][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.465201][T10127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.475053][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 360.491748][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.503103][T10127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.512922][T10127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.523149][T10127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.532334][T10127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.566478][T10127] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 360.594834][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.605435][T10127] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 360.613647][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.626610][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.651084][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.658959][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.672845][ T1188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.715866][ T3689] net_ratelimit: 6 callbacks suppressed [ 360.715878][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.731614][ T3721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.962521][ T4750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.754064][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.762694][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.771486][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.780641][ T4750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.789290][ T3689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.911409][ T4750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.792891][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.913895][ T4173] net_ratelimit: 8 callbacks suppressed [ 365.913912][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.992061][ T4173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog