last executing test programs: 2m35.929248169s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x508, &(0x7f0000000a00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 2m35.594091969s ago: executing program 1 (id=12): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4844, 0xfffffffffffff006}) mlock(&(0x7f0000009000/0x2000)=nil, 0x2000) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mlock(&(0x7f0000007000/0x3000)=nil, 0x3000) 2m33.317655515s ago: executing program 1 (id=40): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000010005a800c000001"], 0x38}}, 0x0) 2m33.213121055s ago: executing program 32 (id=40): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000010005a800c000001"], 0x38}}, 0x0) 1m5.257673496s ago: executing program 5 (id=1051): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./bus\x00', 0x0, &(0x7f0000000080)={[{@ikeep}, {@pquota}]}, 0x1, 0x9867, &(0x7f00000130c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000d00)='./file1\x00', &(0x7f0000000240), &(0x7f0000000bc0)=ANY=[], 0x841, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0xd4, 0x0) 1m3.415924193s ago: executing program 5 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x0, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a00000000000000400000000000405f00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a"], 0x6c}}, 0x0) 1m2.605711617s ago: executing program 5 (id=1074): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 1m2.427826163s ago: executing program 5 (id=1075): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3810082, &(0x7f0000000e40)={[{@gid_ignore}, {@fileset={'fileset', 0x3d, 0x1}}, {@uid_ignore}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x1, 0xc3a, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m1.604239707s ago: executing program 5 (id=1080): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f00000013c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a9, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000380)=""/167, 0xa7) getdents64(r0, 0x0, 0x22) 1m1.014976221s ago: executing program 5 (id=1082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4778, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 1m0.873101694s ago: executing program 33 (id=1082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4778, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 5.170459432s ago: executing program 6 (id=1607): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x29}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x9d}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) 4.835863552s ago: executing program 4 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) io_setup(0x2, &(0x7f0000000640)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1, 0x0, r0, &(0x7f0000000180)}]) 4.179839501s ago: executing program 6 (id=1618): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map={0x1000000000004}}) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)) 3.20840179s ago: executing program 3 (id=1630): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x800) 3.107608499s ago: executing program 3 (id=1631): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(cast6)\x00'}, 0x58) syz_mount_image$btrfs(&(0x7f00000008c0), &(0x7f0000005200)='./file0\x00', 0x100f800, &(0x7f0000000100)={[{@ssd_spread}, {@compress_algo={'compress', 0x3d, 'no'}}, {@subvolid={'subvolid', 0x3d, 0x2}}]}, 0x1, 0x51cd, &(0x7f000000f580)="$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") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0b1c6840a936a0e377c392a7a3b38e1d", 0x1f) 1.788371899s ago: executing program 4 (id=1632): unshare(0x62040200) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x204000, &(0x7f00000001c0)=ANY=[], 0x2, 0xc31, &(0x7f0000000e00)="$eJzs3U9sHNd9B/DfGy3FldJWTOwoTmoX67ZIZcVy9S+mYhXuqqZZBJBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIpgdYokKCB0RRBj0zrAsnFhyKnnogWNoKiB7YIkFOwxcy+FVcUZTOiKFHW52OT393Z92bfm7eeoQm+eQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARPzBqxdOnkoPuxUAwIN0afwrJ0+7/gPAY+Wy//8HAAAAAAAAAAAAAID9LkURT0SKhUsbabJ63lW/2B64cXNiZHT7aodSVfNAVb78qp86febsF18cPtfLi+25D6l/v30uXh+/fKHxyvz1hcWZpaWZ6cbEXHtqfnpmx3vYbf2tjlcHoHH9jRvTV68uNU6/cOa2l28OfTD4iaND54efO/FMr+zEyOjo+GaRen/52j03pOtuMzwORhEnIsXz3/tpakVEEbs/FvUHO/ZbHao6cbzqxMTIaNWR2afyi2O9A1FENPoqNXvHaPuxiNrAg+vAh2pGrJTNLxt8vOze+EJrsXVldqYx1lpcbi+35+fGUre1ZX8aUcS5FLEaEeuDd+5uIIqoRYpvH9lIVyLiQO84fKGaGHz3dhR72McdKNvZGIhYLR6BMdvHBqOI1yLFz949FlP5PFOdaz4f8VqZP4h4u8yXI1L5wTgb8f42nyMeTbUo4i/K8T+/kaar80HvvHLxq40vz12d7yvbO6/8kteHO84UD+n6cGhLPhj7/NxUjyJa1Rl/I937DzsAAAAAAAAAAAAAAAAA3G+HoojPRopX//2Pq3nFUc1LP3J++A+HfrV/zvhTH7GfsuwLEbFS7GxO7sE8MXAsjaX0kOcSP87qUcSf5Pl/33zYjQEAAAAAAAAAAAAAAAAAAHisFfGTSPHSe8fSavSvKd6eu9a43Loy210Vtrf2b2/N9E6n02mkbjZzTuZcybmacy3nes4ocv2czZyTOVdyruZcy7meMw7k+jmbOSdzruRczbmWcz1n1HL9nM2ckzlXcq7mXMu5njP2ydq9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJ0UU8YtI8a2vb6RIEdGMmIxurg0+7NYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXBVMT3Ix3o31aLiFT923Ws/HY2mgfL/FQ0h8t8OZoXcraqrDW/+aAbz64NpCJ+HCkG6+/cGvA8/gPdZ7c+BvH2Nzaffa7WzVsfnKEPBj9x9Mj54dHfeOpuj9N2DTh+sT1342ZjYmR0dLxvcy2/+6f6tg3l9y3uT9eJiKU333qjNTs7s3jvD8qPwC6qP0IPUu1x6akH1YOo7YtmPJy+8xgor//vR4rffe8/ehf87vW/Hr/Sfbb5o+HP/3Tz+v/S1h3t8Ppf21ovX//La/p21/8n+ra9lH8aGahF1JevLwwcjagvvfnWifb11rWZazNzZ0+e/NLw8JfOnBw4GFG/2p6d6Xt0Xw4XAAAAAAAAAAAAAAAAwIOTivj9SNH68UZqRMTNar7W0Pnh5048cyAOVPOtbpu3/fr45QuNV+avLyzOLC3NTDcm5tpT89MzO327ejXda2JkdE8685EO7XH7D9VfmV94c7F97Y+Wt339cP3ClaXlxdZUp9PpbNu+IqLZv+V41eCJkdGq0bPt1ly157FtJ9P/8gZSEf8ZKabONtKzeVue/791hv9t8/9Xtu5oj+b/f7JvW/meKRXx80jxO3/5VDxbtfNw3HHMcrm/ixTHzz0dz343byw229+9r0B3ZmBZ9n8jxT/+4um8zzhYlu3Nh3xis+ypHR3UR0g5/kcixff//Dvxm3nb7fd/2H78D2/d0R6N/5N92w7fdr+CXXedPP4nIsXLT7wTv5W3fdj9P3r33jiWC9+6P8cejf+n+7YN5ff97fvTdQAAAAAAAAAAgEfaQCri7yPFD0dr6cW8bSd//ze9dUd79Pdfn+nbNn1/1iv6yAe7PqgAAAAAsE8MpCJ+EimuLb9zaw717fO/++Z//t7m/M+RtOXV6vd8v1bdN+B+/v6v31B+38nddxsAAAAAAAAAAAAAAAAAAAD2lZSKeDGvpz5Zzeefvut66muR4tX/fj6XS0fLcr114Ieq7/VL83MnLszOzk+1lltXZmca4wutqZmy7pORYuNvn851i2p99d5689013jfXYl+MFKPf7ZXtrsXeW5v8yc2yp8qyn4wU//UPt5ftrWP96c2yp8uyfx0pvvbP25c9uln2TFn2O5HiR19r9MoeLsv27o/6mc2yL0zNF3swKgAAAAAAAAAAAAAAAAAAADxuBlIRfxYp/uf66q25/Hn9/4G+p5W3v9G33v8WN6t1/oeq9f/v9vhe1v+v7iuwcrd3BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj6cURbwVKRYubaS1wfJ5V/1ie+7GzYmR0e2rHUpVzQNV+fKrfur0mbNffHH4XC8/vP799tl4ffzyhcYr89cXFmeWlmamGxNz7an56Zkd72G39bc6Xh2AxvU3bkxfvbrUOP3Cmdtevjn0weAnjg6dH37uxDO9shMjo6PjfWVqA/f87ndId9l+MIr4q0jx/Pd+mn44GFHE7o/FR3x29tqhqhPHq05MjIxWHZltt+aWyxfHegeiiGj0VWr2jtEDGItdaUaslM0vG3y87N74wt90Op3ZmcZYa3G5vdyenxtL3daW/WlEEedSxGpErA/eubuBKOKNSPHtIxvpXwYjDvSOwxcujX/l5Om7t6PYwz7uQNnOxkDEavEIjNk+NhhF/FOk+Nm7x+JfByNq0f2Kz0e8VuYPIt6O7nin8oNxNuL9bT5HPJpqUcT/leN/fiO9O1ieD3rnlYtfbXx57up8X9neeeWRvz48SPv83FSPIn5UnfE30r/57xoAAAAAAAAAAAAAAABgHyni1yPFS+8dS9X84DynuLXYnrvWuNy6Mtud1teb+9ebM93pdDqN1M1mzsmcKzlXc67lXM8ZRa6fs1lmvdOZzM9Xcq7mXMu5njMO5Po5mzknc67kXM25lnM9Z9Ry/ZzNnJM5V3Ku5lzLuZ4z9sncPQAAAAAAAAAAAAAAAAAA4OOlqP5J8a2vb6TOYHd96cno5pr1QD/2/j8AAP//E7f8pA==") r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x78) 1.77364216s ago: executing program 6 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}}]}]}, 0x44}}, 0x0) 1.746370912s ago: executing program 3 (id=1635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x2) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000240)={0x4, r2, 0x1}) 1.672370799s ago: executing program 6 (id=1639): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r3, @ANYRES8=r1, @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') 1.633118282s ago: executing program 3 (id=1641): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @private=0xa010101}, {0x0, @random="ca1597489704"}, 0x8, {0x2, 0x0, @empty}, 'veth0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1.519780213s ago: executing program 0 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000f7a67b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.505455154s ago: executing program 3 (id=1643): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000005b00)=ANY=[@ANYBLOB='nonumtail=0,quiet,uni_xlate=1,uni_xlate=1,nonumtail=1,fmask=01777777777777777777777,utf8=1,rodir,utf8=1,uid=', @ANYRESHEX=r1, @ANYBLOB="2c756e695f786c6174653d312c756e695f786c6174653d312c71756965742c646973636172642c73686f72746e616d653d6d6978656400008d93c3891882b2a1dacab425ab8a7efb02c90a71ca86bbb1f98970461441cd215e5390a67a5b88c87f75a69213cd285da44c349d7126fe160f379b025022eaa1707cf6a4dc3076d0f1ea17842906c5939c5b560b0e63e92cda4f461a125f816e05029dc5c7c5a456ff9bbb78b845379321793bfabc53528ef323d2e5945b6cfd7fa9c372bb000040008d6a2d0ce0"], 0x6, 0x2a5, &(0x7f00000035c0)="$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") lchown(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) 1.379951386s ago: executing program 0 (id=1646): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000020000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.241016918s ago: executing program 2 (id=1648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x40020) 1.10563208s ago: executing program 2 (id=1649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.098872271s ago: executing program 4 (id=1650): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 980.935251ms ago: executing program 4 (id=1651): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000100)=""/154, 0x9a}], 0x1, 0x9f, 0x101) 973.664842ms ago: executing program 2 (id=1662): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 904.956429ms ago: executing program 2 (id=1652): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x3}]}, 0x5c}}, 0x0) 891.50486ms ago: executing program 4 (id=1654): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 771.146921ms ago: executing program 2 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}}}]}]}, 0x44}}, 0x0) 726.959455ms ago: executing program 4 (id=1656): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@intr}, {@dir_resv_level}]}, 0x9, 0x442b, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)) unlink(&(0x7f0000000140)='./file1\x00') 421.021322ms ago: executing program 0 (id=1657): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001600), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 420.852132ms ago: executing program 2 (id=1658): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x2, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 308.377402ms ago: executing program 0 (id=1659): capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c", 0xe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 298.982743ms ago: executing program 6 (id=1660): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) fcntl$setstatus(r0, 0x4, 0x2000) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 136.287368ms ago: executing program 0 (id=1661): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f9ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 115.47352ms ago: executing program 3 (id=1672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 65.030965ms ago: executing program 6 (id=1673): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8}]}}]}, 0x44}}, 0x0) 0s ago: executing program 0 (id=1674): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001480)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57a, &(0x7f0000000f00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(r0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) kernel console output (not intermixed with test programs): 13] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.808315][ T6372] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 119.856422][ T6372] BTRFS info (device loop0): using free space tree [ 119.868032][ T6372] BTRFS info (device loop0): has skinny extents [ 120.202141][ T6372] BTRFS error (device loop0): open_ctree failed [ 120.268300][ T6418] FAT-fs (loop3): Directory bread(block 64) failed [ 120.290762][ T6418] FAT-fs (loop3): Directory bread(block 65) failed [ 120.306879][ T6418] FAT-fs (loop3): Directory bread(block 66) failed [ 120.328358][ T6418] FAT-fs (loop3): Directory bread(block 67) failed [ 120.348505][ T6418] FAT-fs (loop3): Directory bread(block 68) failed [ 120.368873][ T6418] FAT-fs (loop3): Directory bread(block 69) failed [ 120.396308][ T6418] FAT-fs (loop3): Directory bread(block 70) failed [ 120.403356][ T6418] FAT-fs (loop3): Directory bread(block 71) failed [ 120.410367][ T6418] FAT-fs (loop3): Directory bread(block 72) failed [ 120.417542][ T6418] FAT-fs (loop3): Directory bread(block 73) failed [ 120.836897][ T6464] loop5: detected capacity change from 0 to 32768 [ 120.882548][ T6464] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.825 (6464) [ 120.958260][ T6464] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 120.968781][ T6464] BTRFS info (device loop5): setting nodatacow, compression disabled [ 120.989113][ T6464] BTRFS info (device loop5): turning on flush-on-commit [ 120.999136][ T6464] BTRFS info (device loop5): using free space tree [ 121.011553][ T6464] BTRFS info (device loop5): has skinny extents [ 121.092373][ T6464] BTRFS info (device loop5): enabling ssd optimizations [ 121.153760][ T26] audit: type=1800 audit(1730815282.416:91): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.825" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 121.814750][ T6515] netlink: 19 bytes leftover after parsing attributes in process `syz.3.837'. [ 121.873184][ T6518] loop0: detected capacity change from 0 to 1024 [ 122.111841][ T4271] hfsplus: b-tree write err: -5, ino 4 [ 122.240125][ T6538] netlink: 60 bytes leftover after parsing attributes in process `syz.5.848'. [ 123.308310][ T6561] loop0: detected capacity change from 0 to 512 [ 123.349313][ T6561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.514877][ T6548] loop3: detected capacity change from 0 to 32768 [ 123.597139][ T6548] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.853 (6548) [ 123.650195][ T6561] EXT4-fs (loop0): 1 orphan inode deleted [ 123.656080][ T6561] EXT4-fs (loop0): 1 truncate cleaned up [ 123.681170][ T6548] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 123.683479][ T6561] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,data_err=ignore,init_itable,debug_want_extra_isize=0x0000000000000006. Quota mode: none. [ 123.689836][ T6548] BTRFS info (device loop3): using free space tree [ 123.960515][ T6548] BTRFS info (device loop3): has skinny extents [ 124.309428][ T6563] loop4: detected capacity change from 0 to 32768 [ 124.366913][ T6597] netlink: 'syz.2.869': attribute type 4 has an invalid length. [ 124.475799][ T6548] BTRFS info (device loop3): enabling ssd optimizations [ 124.486159][ T6563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.860 (6563) [ 124.556456][ T6611] MTD: Couldn't look up './file0': -15 [ 124.640365][ T6563] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 124.660907][ T6563] BTRFS info (device loop4): setting nodatasum [ 124.701042][ T6563] BTRFS info (device loop4): force zlib compression, level 3 [ 124.721116][ T6563] BTRFS info (device loop4): setting nodatacow [ 124.745553][ T6563] BTRFS info (device loop4): turning on flush-on-commit [ 124.775154][ T6563] BTRFS info (device loop4): allowing degraded mounts [ 124.805481][ T6563] BTRFS info (device loop4): using free space tree [ 124.851450][ T6563] BTRFS info (device loop4): has skinny extents [ 125.018029][ T6621] tmpfs: Bad value for 'mpol' [ 125.349801][ T6603] loop0: detected capacity change from 0 to 32768 [ 125.506785][ T6563] BTRFS info (device loop4): enabling ssd optimizations [ 125.543034][ T6603] XFS (loop0): Mounting V5 Filesystem [ 125.629356][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.884'. [ 125.750919][ T6603] XFS (loop0): Ending clean mount [ 126.091605][ T4165] XFS (loop0): Unmounting Filesystem [ 126.125045][ T6673] loop5: detected capacity change from 0 to 4096 [ 126.173596][ T6673] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 126.305903][ T6673] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 126.345894][ T6673] ntfs3: loop5: Failed to load $LogFile. [ 126.566265][ T6654] loop3: detected capacity change from 0 to 32768 [ 126.711884][ T6654] XFS (loop3): Mounting V5 Filesystem [ 126.892146][ T6654] XFS (loop3): Ending clean mount [ 126.945378][ T6654] XFS (loop3): Quotacheck needed: Please wait. [ 127.146483][ T6654] XFS (loop3): Quotacheck: Done. [ 127.447883][ T4168] XFS (loop3): Unmounting Filesystem [ 127.598957][ T6701] loop0: detected capacity change from 0 to 128 [ 128.975116][ T6746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.918'. [ 129.606598][ T6722] loop5: detected capacity change from 0 to 40427 [ 129.708236][ T6724] loop0: detected capacity change from 0 to 40427 [ 129.716764][ T6722] F2FS-fs (loop5): invalid crc value [ 129.833488][ T6722] F2FS-fs (loop5): Found nat_bits in checkpoint [ 129.853542][ T6724] F2FS-fs (loop0): invalid crc value [ 129.934338][ T6724] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.965962][ T6722] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 130.152705][ T6724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.354051][ T4342] attempt to access beyond end of device [ 130.354051][ T4342] loop5: rw=2049, want=45104, limit=40427 [ 130.365658][ T4165] attempt to access beyond end of device [ 130.365658][ T4165] loop0: rw=2049, want=45104, limit=40427 [ 130.539594][ T6752] loop4: detected capacity change from 0 to 32768 [ 130.850617][ T26] audit: type=1800 audit(1730815292.116:92): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.921" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 131.414939][ T6786] loop3: detected capacity change from 0 to 8 [ 132.079574][ T6778] loop0: detected capacity change from 0 to 32768 [ 132.156721][ T6778] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 132.181077][ T6778] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 132.237222][ T6778] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 132.249055][ T5657] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 132.256508][ T5657] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 132.327441][ T5657] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 70ms [ 132.339718][ T5657] gfs2: fsid=syz:syz.0: jid=0: Done [ 132.351739][ T6778] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 132.629792][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.636348][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.719139][ T6816] loop4: detected capacity change from 0 to 256 [ 132.867449][ T6816] FAT-fs (loop4): Directory bread(block 64) failed [ 132.881580][ T6816] FAT-fs (loop4): Directory bread(block 65) failed [ 132.889902][ T6816] FAT-fs (loop4): Directory bread(block 66) failed [ 132.900217][ T6816] FAT-fs (loop4): Directory bread(block 67) failed [ 132.938805][ T6778] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 132.938805][ T6778] bh = 2049 (type: exp=14, found=8) [ 132.938805][ T6778] function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1406 [ 132.975975][ T6816] FAT-fs (loop4): Directory bread(block 68) failed [ 133.024418][ T6816] FAT-fs (loop4): Directory bread(block 69) failed [ 133.057154][ T6816] FAT-fs (loop4): Directory bread(block 70) failed [ 133.064229][ T6778] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 133.079460][ T6816] FAT-fs (loop4): Directory bread(block 71) failed [ 133.088047][ T6778] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 133.128046][ T6816] FAT-fs (loop4): Directory bread(block 72) failed [ 133.138499][ T6816] FAT-fs (loop4): Directory bread(block 73) failed [ 133.149645][ T6778] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 133.174696][ T6778] gfs2: fsid=syz:syz.0: File system withdrawn [ 133.217097][ T6778] CPU: 0 PID: 6778 Comm: syz.0.925 Not tainted 5.15.170-syzkaller #0 [ 133.225200][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.235259][ T6778] Call Trace: [ 133.238541][ T6778] [ 133.241468][ T6778] dump_stack_lvl+0x1e3/0x2d0 [ 133.246172][ T6778] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 133.251812][ T6778] ? panic+0x860/0x860 [ 133.255889][ T6778] ? do_raw_spin_unlock+0x137/0x8b0 [ 133.261103][ T6778] gfs2_withdraw+0xe9e/0x14e0 [ 133.265799][ T6778] ? gfs2_lm+0x230/0x230 [ 133.270049][ T6778] ? gfs2_meta_ra+0x559/0x5f0 [ 133.274731][ T6778] ? gfs2_meta_buffer+0x410/0x410 [ 133.279768][ T6778] gfs2_metatype_check_ii+0x75/0x90 [ 133.284976][ T6778] gfs2_quota_init+0xe06/0x1110 [ 133.289852][ T6778] ? qd_get+0x5c0/0x5c0 [ 133.294012][ T6778] ? gfs2_end_log_write+0x800/0x800 [ 133.299217][ T6778] ? inode_go_inval+0x25c/0x2c0 [ 133.304072][ T6778] gfs2_make_fs_rw+0x436/0x5b0 [ 133.308848][ T6778] ? gfs2_jdesc_check+0x290/0x290 [ 133.313888][ T6778] ? gfs2_glock_wait+0x137/0x1c0 [ 133.318843][ T6778] gfs2_reconfigure+0x77a/0xcf0 [ 133.323708][ T6778] ? gfs2_get_tree+0x210/0x210 [ 133.328477][ T6778] ? gfs2_freeze_lock+0x52/0xc0 [ 133.333339][ T6778] ? rwsem_write_trylock+0x166/0x210 [ 133.338626][ T6778] ? hook_sb_remount+0x19/0xc0 [ 133.343392][ T6778] ? bpf_lsm_sb_remount+0x5/0x10 [ 133.348333][ T6778] reconfigure_super+0x43a/0x870 [ 133.353275][ T6778] __se_sys_fsconfig+0x98b/0xec0 [ 133.358228][ T6778] ? __x64_sys_fsconfig+0xc0/0xc0 [ 133.363263][ T6778] ? syscall_enter_from_user_mode+0x2e/0x240 [ 133.369244][ T6778] ? lockdep_hardirqs_on+0x94/0x130 [ 133.374442][ T6778] ? __x64_sys_fsconfig+0x1c/0xc0 [ 133.379473][ T6778] do_syscall_64+0x3b/0xb0 [ 133.383894][ T6778] ? clear_bhb_loop+0x15/0x70 [ 133.388581][ T6778] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.394480][ T6778] RIP: 0033:0x7fbd48bbe719 [ 133.398896][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.418512][ T6778] RSP: 002b:00007fbd47036038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 133.426937][ T6778] RAX: ffffffffffffffda RBX: 00007fbd48d75f80 RCX: 00007fbd48bbe719 [ 133.434913][ T6778] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 133.442886][ T6778] RBP: 00007fbd48c3139e R08: 0000000000000000 R09: 0000000000000000 [ 133.450867][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.458834][ T6778] R13: 0000000000000000 R14: 00007fbd48d75f80 R15: 00007fffc0605df8 [ 133.466822][ T6778] [ 133.521391][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.939'. [ 133.735085][ T6842] loop5: detected capacity change from 0 to 512 [ 133.887052][ T5657] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.053770][ T6850] loop4: detected capacity change from 0 to 4096 [ 134.139036][ T6842] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 134.160901][ T5657] usb 4-1: Using ep0 maxpacket: 16 [ 134.197003][ T6842] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.451126][ T5657] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 134.472023][ T5657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.500666][ T5657] usb 4-1: Product: syz [ 134.510782][ T5657] usb 4-1: Manufacturer: syz [ 134.537651][ T5657] usb 4-1: SerialNumber: syz [ 134.551961][ T5657] r8152-cfgselector 4-1: config 0 descriptor?? [ 134.831122][ T5657] r8152-cfgselector 4-1: Unknown version 0x0000 [ 135.091116][ T5657] r8152-cfgselector 4-1: Unknown version 0x0000 [ 135.107777][ T5657] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 135.235768][ T6889] ALSA: mixer_oss: invalid OSS volume '' [ 135.482018][ T6850] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 135.548577][ T6850] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 135.660077][ T6850] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 135.667153][ T6877] loop5: detected capacity change from 0 to 40427 [ 135.687627][ T6850] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 135.753727][ T6850] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 135.783874][ T6850] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 135.825823][ T6850] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 135.855694][ T6910] loop3: detected capacity change from 0 to 128 [ 135.872154][ T6911] loop0: detected capacity change from 0 to 512 [ 135.882174][ T6850] ntfs: volume version 3.1. [ 135.930027][ T6850] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 135.945967][ T6910] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.950616][ T6850] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 135.989096][ T6910] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.001666][ T6850] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 136.036831][ T6850] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 136.110375][ T6850] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 136.185527][ T6850] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value. [ 136.206649][ T6911] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 136.239524][ T6911] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.258673][ T6850] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 136.278396][ T6850] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 136.287466][ T6850] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 136.330585][ T6850] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macinuit. You might want to try to use the mount option nls=utf8. [ 136.967194][ T6938] loop4: detected capacity change from 0 to 128 [ 137.078315][ T6877] F2FS-fs (loop5): invalid crc value [ 137.106886][ T6877] F2FS-fs (loop5): Found nat_bits in checkpoint [ 137.309137][ T6877] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 137.447779][ T4342] attempt to access beyond end of device [ 137.447779][ T4342] loop5: rw=2049, want=45104, limit=40427 [ 137.986921][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.108554][ T6926] loop0: detected capacity change from 0 to 32768 [ 138.125427][ T6939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.192739][ T6926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1003 (6926) [ 138.207339][ T6950] loop5: detected capacity change from 0 to 512 [ 138.278305][ T6926] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 138.313735][ T6926] BTRFS info (device loop0): setting nodatacow, compression disabled [ 138.336947][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 138.411279][ T6950] EXT4-fs error (device loop5): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 138.444568][ T6926] BTRFS info (device loop0): max_inline at 0 [ 138.473883][ T6950] EXT4-fs (loop5): 1 truncate cleaned up [ 138.479545][ T6950] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.503303][ T6926] BTRFS info (device loop0): enabling disk space caching [ 138.532404][ T21] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 138.543687][ T6926] BTRFS info (device loop0): turning off barriers [ 138.546485][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 138.572840][ T6926] BTRFS info (device loop0): turning on flush-on-commit [ 138.603592][ T6926] BTRFS info (device loop0): doing ref verification [ 138.661011][ T6926] BTRFS info (device loop0): force clearing of disk cache [ 138.697863][ T6926] BTRFS info (device loop0): enabling ssd optimizations [ 138.743966][ T6926] BTRFS info (device loop0): max_inline at 4096 [ 138.750242][ T6926] BTRFS info (device loop0): disk space caching is enabled [ 138.809137][ T6926] BTRFS info (device loop0): has skinny extents [ 138.855946][ T21] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 138.868018][ T21] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 138.900148][ T21] usb 4-1: Product: syz [ 138.917639][ T21] usb 4-1: Manufacturer: syz [ 138.942243][ T21] usb 4-1: SerialNumber: syz [ 139.002827][ T21] usb 4-1: config 0 descriptor?? [ 139.069875][ T21] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 139.098277][ T21] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 139.279850][ T1107] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 139.366424][ T5657] usb 4-1: USB disconnect, device number 9 [ 139.382145][ T5657] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 139.677332][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 139.803180][ T6926] BTRFS error (device loop0): open_ctree failed [ 139.887447][ T1107] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 140.058344][ T6954] loop4: detected capacity change from 0 to 1024 [ 140.111328][ T1107] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 140.120395][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.158502][ T1107] usb 6-1: Product: syz [ 140.179081][ T1107] usb 6-1: Manufacturer: syz [ 140.180187][ T6983] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 140.184026][ T1107] usb 6-1: SerialNumber: syz [ 140.210772][ T1107] usb 6-1: config 0 descriptor?? [ 140.251444][ T6959] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 140.280013][ T1107] hub 6-1:0.0: bad descriptor, ignoring hub [ 140.286793][ T1107] hub: probe of 6-1:0.0 failed with error -5 [ 140.330488][ T1107] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input6 [ 140.557105][ T5660] usb 6-1: USB disconnect, device number 2 [ 140.564903][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 140.788329][ T6994] loop3: detected capacity change from 0 to 256 [ 140.869739][ T6994] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 141.709838][ T7017] loop0: detected capacity change from 0 to 4096 [ 141.828321][ T7026] loop4: detected capacity change from 0 to 512 [ 141.841277][ T7017] ntfs3: loop0: ino=3, Correct links count -> 2. [ 141.871738][ T7030] loop3: detected capacity change from 0 to 1024 [ 141.885126][ T7026] EXT4-fs (loop4): Ignoring removed orlov option [ 141.978492][ T7026] EXT4-fs (loop4): 1 orphan inode deleted [ 141.984414][ T7026] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,auto_da_alloc,init_itable,stripe=0x000000000000007b,orlov,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 142.006217][ T7026] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.308222][ T144] hfsplus: b-tree write err: -5, ino 4 [ 142.608522][ T7055] loop3: detected capacity change from 0 to 24 [ 142.636474][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1047'. [ 142.674232][ T7057] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1047'. [ 142.692244][ T7055] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 142.734781][ T7055] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 143.314712][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1058'. [ 143.650283][ T7065] loop5: detected capacity change from 0 to 32768 [ 143.706196][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 143.706210][ T26] audit: type=1326 audit(1730815304.976:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 143.778445][ T7065] XFS: ikeep mount option is deprecated. [ 143.803318][ T6625] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.831386][ T26] audit: type=1326 audit(1730815305.016:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 143.862503][ T26] audit: type=1326 audit(1730815305.016:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 143.927632][ T26] audit: type=1326 audit(1730815305.016:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 143.951748][ T26] audit: type=1326 audit(1730815305.016:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 143.975103][ T26] audit: type=1326 audit(1730815305.016:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 143.997469][ T26] audit: type=1326 audit(1730815305.016:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 144.021305][ T26] audit: type=1326 audit(1730815305.026:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 144.074268][ T7065] XFS (loop5): Mounting V5 Filesystem [ 144.088067][ T26] audit: type=1326 audit(1730815305.026:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 144.100115][ T7104] loop3: detected capacity change from 0 to 1024 [ 144.116353][ T7107] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.147191][ T26] audit: type=1326 audit(1730815305.026:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7089 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 144.333321][ T7119] netlink: 'syz.0.1069': attribute type 4 has an invalid length. [ 144.384664][ T7119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.388359][ T6625] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 144.392438][ T7119] IPv6: NLM_F_CREATE should be set when creating new route [ 144.401183][ T6625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.420387][ T7065] XFS (loop5): Ending clean mount [ 144.427366][ T7065] XFS (loop5): Quotacheck needed: Please wait. [ 144.430777][ T6625] usb 3-1: config 0 has no interface number 0 [ 144.458690][ T7104] EXT4-fs (loop3): Test dummy encryption mode enabled [ 144.458747][ T6625] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 144.499622][ T7104] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 144.515015][ T7065] XFS (loop5): Quotacheck: Done. [ 144.520961][ T7104] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 144.531536][ T6625] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.571089][ T7104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 144.580955][ T4214] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.610714][ T7104] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 144.729015][ T4342] XFS (loop5): Unmounting Filesystem [ 144.830967][ T4214] usb 5-1: Using ep0 maxpacket: 16 [ 144.881046][ T6625] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 144.912044][ T6625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.920061][ T6625] usb 3-1: Product: syz [ 144.959254][ T6625] usb 3-1: Manufacturer: syz [ 144.964275][ T6625] usb 3-1: SerialNumber: syz [ 144.989847][ T6625] usb 3-1: config 0 descriptor?? [ 145.111238][ T4214] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 145.120304][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.149492][ T4214] usb 5-1: Product: syz [ 145.159606][ T4214] usb 5-1: Manufacturer: syz [ 145.169707][ T4214] usb 5-1: SerialNumber: syz [ 145.189423][ T1107] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.190023][ T4214] usb 5-1: config 0 descriptor?? [ 145.348915][ T7131] tipc: Started in network mode [ 145.375514][ T7131] tipc: Node identity :, cluster identity 4711 [ 145.410944][ T7131] tipc: Enabling of bearer rejected, failed to enable media [ 145.567291][ T1107] usb 1-1: Using ep0 maxpacket: 16 [ 145.651544][ T6625] usb 3-1: USB disconnect, device number 8 [ 145.714411][ T4214] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 145.762661][ T1107] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.774360][ T4214] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.785060][ T7135] loop5: detected capacity change from 0 to 2048 [ 145.797648][ T4214] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 145.803175][ T1107] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.814425][ T4214] usb 5-1: media controller created [ 145.836775][ T1107] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.858360][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.859978][ T4214] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.940282][ T1107] usb 1-1: config 0 descriptor?? [ 145.980008][ T7135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.996257][ T7128] syz.3.1073 (7128): drop_caches: 2 [ 146.081235][ T4214] zl10353_read_register: readreg error (reg=127, ret==0) [ 146.104305][ T4214] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 146.145905][ T4214] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 146.176397][ T7135] overlayfs: upper fs needs to support d_type. [ 146.212424][ T7135] overlayfs: cleanup of 'work/#1' failed (-2) [ 146.230486][ T4214] usb 5-1: USB disconnect, device number 6 [ 146.244155][ T7135] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 146.298721][ T7135] overlayfs: failed to set xattr on upper [ 146.316911][ T4214] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 146.338499][ T7135] overlayfs: ...falling back to index=off,metacopy=off. [ 146.479796][ T1107] HID 045e:07da: Invalid code 65791 type 1 [ 146.484970][ T4342] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 146.489425][ T1107] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input8 [ 146.525784][ T4342] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 146.592352][ T1107] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 147.032032][ T4214] usb 1-1: USB disconnect, device number 4 [ 147.096481][ T4271] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.380468][ T4271] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.561363][ T4271] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.747753][ T4271] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.760511][ T7144] loop3: detected capacity change from 0 to 40427 [ 147.871954][ T7144] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (67108865, 24) [ 147.886697][ T7144] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 148.031419][ T7144] F2FS-fs (loop3): invalid crc value [ 148.046762][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 148.094737][ T7144] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.156248][ T7147] loop4: detected capacity change from 0 to 32768 [ 148.205345][ T7178] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 148.262972][ T7156] chnl_net:caif_netlink_parms(): no params data found [ 148.299753][ T7183] loop0: detected capacity change from 0 to 1024 [ 148.378227][ T7144] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 148.443890][ T7183] hfsplus: request for non-existent node 3 in B*Tree [ 148.452300][ T7147] XFS (loop4): Mounting V5 Filesystem [ 148.461170][ T7144] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.473962][ T4271] tipc: Left network mode [ 148.504888][ T7183] hfsplus: request for non-existent node 3 in B*Tree [ 148.569252][ T7169] attempt to access beyond end of device [ 148.569252][ T7169] loop3: rw=2049, want=40976, limit=40427 [ 148.736263][ T7183] hfsplus: b-tree write err: -5, ino 3 [ 148.743119][ T7147] XFS (loop4): Ending clean mount [ 148.765866][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.853852][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.903169][ T7156] device bridge_slave_0 entered promiscuous mode [ 148.953923][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.020321][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.047940][ T4169] XFS (loop4): Unmounting Filesystem [ 149.084999][ T7156] device bridge_slave_1 entered promiscuous mode [ 149.366280][ T7206] ODEBUG: Out of memory. ODEBUG disabled [ 149.483674][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.517618][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.629814][ T7156] team0: Port device team_slave_0 added [ 149.670786][ T7156] team0: Port device team_slave_1 added [ 149.728741][ T4212] Bluetooth: hci2: command 0x0409 tx timeout [ 149.748044][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.784825][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.878725][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.928761][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.946271][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.017395][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.195634][ T7156] device hsr_slave_0 entered promiscuous mode [ 150.218727][ T7156] device hsr_slave_1 entered promiscuous mode [ 150.240049][ T7156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.267007][ T7156] Cannot create hsr debugfs directory [ 150.476655][ T7233] loop0: detected capacity change from 0 to 4096 [ 150.549842][ T7206] syz.2.1097 (7206): drop_caches: 2 [ 150.601251][ T7233] NILFS (loop0): invalid segment: Checksum error in segment payload [ 150.630448][ T7233] NILFS (loop0): trying rollback from an earlier position [ 150.705421][ T7233] NILFS (loop0): recovery complete [ 150.721763][ T7156] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 150.737126][ T7156] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 150.754475][ T7156] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 150.760901][ T7236] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.792476][ T7156] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.055488][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.119705][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.151624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.160329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.189728][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.216812][ T7245] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.237715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.257406][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.264533][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.303871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.349881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.373613][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.380714][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.427172][ T7250] loop3: detected capacity change from 0 to 1024 [ 151.458026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.477010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.502591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.541510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.566174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.592065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.622499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.643833][ T7250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.681749][ T7156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.707413][ T7156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.723156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.757988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.783912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.801096][ T5665] Bluetooth: hci2: command 0x041b tx timeout [ 151.808063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.834123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.879622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.267561][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.318264][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.340641][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.561790][ T7247] loop0: detected capacity change from 0 to 32768 [ 152.650996][ T5664] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.748977][ T7247] XFS (loop0): Mounting V5 Filesystem [ 152.841624][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.859397][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.902219][ T5664] usb 4-1: Using ep0 maxpacket: 8 [ 152.932140][ T7156] device veth0_vlan entered promiscuous mode [ 152.951222][ T7247] XFS (loop0): Ending clean mount [ 152.960714][ T7247] XFS (loop0): Quotacheck needed: Please wait. [ 152.968644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.978377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.003569][ T7156] device veth1_vlan entered promiscuous mode [ 153.014413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.024064][ T5664] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 153.033328][ T5664] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.052467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.060218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.071190][ T5665] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.087522][ T5664] usb 4-1: config 0 has no interface number 0 [ 153.095318][ T5664] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 153.126584][ T5664] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.140175][ T5664] usb 4-1: config 0 interface 52 has no altsetting 0 [ 153.160009][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.178259][ T5664] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 153.179193][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.189548][ T5664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.217888][ T5664] usb 4-1: config 0 descriptor?? [ 153.222231][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.261781][ T7156] device veth0_macvtap entered promiscuous mode [ 153.285162][ T7156] device veth1_macvtap entered promiscuous mode [ 153.302441][ T7247] XFS (loop0): Quotacheck: Done. [ 153.321133][ T5665] usb 5-1: Using ep0 maxpacket: 8 [ 153.362136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.375267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.429018][ T4165] XFS (loop0): Unmounting Filesystem [ 153.435117][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.451148][ T5665] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.470970][ T5665] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.473379][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.491418][ T5665] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.508809][ T5664] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input9 [ 153.534061][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.536156][ T5665] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.566649][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.609339][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.620135][ T5665] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.644013][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.647533][ T5665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.685559][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.708168][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.758267][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.821152][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.835101][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.859316][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.876219][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.890569][ T5658] Bluetooth: hci2: command 0x040f tx timeout [ 153.904620][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.915472][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.931786][ T5665] usb 5-1: GET_CAPABILITIES returned 0 [ 153.937280][ T5665] usbtmc 5-1:16.0: can't read capabilities [ 153.948068][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.978404][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.988623][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.999217][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.009709][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.020554][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.057333][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.067300][ T5660] usb 4-1: USB disconnect, device number 10 [ 154.080327][ T3529] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 154.121270][ T5665] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.154294][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.173754][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.198199][ T7156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.220480][ T7156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.237084][ T7156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.250249][ T5658] usb 5-1: USB disconnect, device number 7 [ 154.268239][ T7156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.403750][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.424086][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.460152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.478055][ T356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.487999][ T5665] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 154.506841][ T5665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.510220][ T356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.520301][ T5665] usb 3-1: config 0 descriptor?? [ 154.561762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.580687][ T5665] cp210x 3-1:0.0: cp210x converter detected [ 155.021496][ T5665] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 155.062812][ T5665] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 155.107944][ T5665] usb 3-1: cp210x converter now attached to ttyUSB0 [ 155.300203][ T5665] usb 3-1: USB disconnect, device number 9 [ 155.349790][ T5665] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 155.398807][ T5665] cp210x 3-1:0.0: device disconnected [ 155.697784][ T4212] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 155.714671][ T5660] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.906500][ T7352] input: syz0 as /devices/virtual/input/input10 [ 155.961382][ T5657] Bluetooth: hci2: command 0x0419 tx timeout [ 156.088166][ T4212] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 156.096978][ T5660] usb 5-1: config 0 has no interfaces? [ 156.103924][ T5660] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 156.144602][ T5660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.168838][ T5660] usb 5-1: config 0 descriptor?? [ 156.296269][ T7368] sock: sock_timestamping_bind_phc: sock not bind to device [ 156.446901][ T4214] usb 5-1: USB disconnect, device number 8 [ 156.861334][ T4212] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 156.870403][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.245732][ T7403] loop4: detected capacity change from 0 to 512 [ 157.372548][ T7408] loop0: detected capacity change from 0 to 256 [ 157.411641][ T4212] usb 7-1: Found UVC 0.00 device (046d:08c1) [ 157.418575][ T4212] usb 7-1: No valid video chain found. [ 157.442102][ T7408] exfat: Deprecated parameter 'utf8' [ 157.453726][ T7403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1168: inode #1: comm syz.4.1168: iget: illegal inode # [ 157.477696][ T7403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1168: error while reading EA inode 1 err=-117 [ 157.510353][ T7408] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 157.551083][ T7403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1168: inode #1: comm syz.4.1168: iget: illegal inode # [ 157.616392][ T7403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1168: error while reading EA inode 1 err=-117 [ 157.624432][ T4212] usb 7-1: USB disconnect, device number 2 [ 157.655325][ T7403] EXT4-fs (loop4): 1 orphan inode deleted [ 157.681644][ T7403] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 157.682779][ T7384] loop3: detected capacity change from 0 to 32768 [ 157.706633][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.773395][ T7403] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1168: invalid indirect mapped block 234881024 (level 0) [ 157.811498][ T7384] XFS (loop3): Mounting V5 Filesystem [ 157.977888][ T7384] XFS (loop3): Ending clean mount [ 158.004003][ T7384] XFS (loop3): Quotacheck needed: Please wait. [ 158.116624][ T7384] XFS (loop3): Quotacheck: Done. [ 158.244959][ T4168] XFS (loop3): Unmounting Filesystem [ 158.541016][ T6630] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 158.692526][ T7445] loop0: detected capacity change from 0 to 16 [ 158.765946][ T7445] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.131271][ T6630] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 159.147436][ T6630] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.187533][ T6630] usb 7-1: Product: syz [ 159.200749][ T6630] usb 7-1: Manufacturer: syz [ 159.215650][ T6630] usb 7-1: SerialNumber: syz [ 159.235569][ T6630] usb 7-1: config 0 descriptor?? [ 159.605152][ T6630] usb 7-1: USB disconnect, device number 3 [ 160.277672][ T5665] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.609636][ T5665] usb 1-1: Using ep0 maxpacket: 16 [ 160.798210][ T5665] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.841359][ T5665] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.894942][ T5665] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.923706][ T5665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.955362][ T5665] usb 1-1: config 0 descriptor?? [ 161.163133][ T7511] program syz.2.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.317596][ T7477] loop4: detected capacity change from 0 to 40427 [ 161.398418][ T7487] loop3: detected capacity change from 0 to 32768 [ 161.438880][ T7477] F2FS-fs (loop4): Found nat_bits in checkpoint [ 161.495937][ T7487] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 161.513900][ T7477] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.542246][ T5665] usbhid 1-1:0.0: can't add hid device: -71 [ 161.548237][ T5665] usbhid: probe of 1-1:0.0 failed with error -71 [ 161.584679][ T5665] usb 1-1: USB disconnect, device number 5 [ 161.602122][ T7487] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 161.643005][ T4212] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.693685][ T7487] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 161.734274][ T7487] OCFS2: File system is now read-only. [ 161.751888][ T4169] attempt to access beyond end of device [ 161.751888][ T4169] loop4: rw=2049, want=45104, limit=40427 [ 161.781015][ T7487] (syz.3.1201,7487,1):ocfs2_search_one_group:1684 ERROR: status = -30 [ 161.814153][ T7487] (syz.3.1201,7487,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 161.829799][ T7487] (syz.3.1201,7487,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 161.872465][ T7487] (syz.3.1201,7487,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 161.894276][ T7487] (syz.3.1201,7487,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 161.916725][ T4212] usb 3-1: Using ep0 maxpacket: 16 [ 161.917342][ T7487] (syz.3.1201,7487,0):ocfs2_mknod_locked:637 ERROR: status = -30 [ 161.942398][ T7487] (syz.3.1201,7487,0):ocfs2_mknod:383 ERROR: status = -30 [ 161.942526][ T7487] (syz.3.1201,7487,0):ocfs2_mknod:500 ERROR: status = -30 [ 162.000944][ T7487] (syz.3.1201,7487,0):ocfs2_create:674 ERROR: status = -30 [ 162.061106][ T4212] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 162.075585][ T4212] usb 3-1: config 0 has no interface number 0 [ 162.105798][ T7533] loop6: detected capacity change from 0 to 256 [ 162.120136][ T4212] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 162.148615][ T4212] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 162.165356][ T26] audit: type=1326 audit(1730815323.436:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7534 comm="syz.0.1221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd48bbe719 code=0x0 [ 162.240606][ T7533] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 162.339331][ T4168] ocfs2: Unmounting device (7,3) on (node local) [ 162.361592][ T4212] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 162.380446][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.410257][ T4212] usb 3-1: Product: syz [ 162.422405][ T4212] usb 3-1: Manufacturer: syz [ 162.437456][ T4212] usb 3-1: SerialNumber: syz [ 162.466921][ T4212] usb 3-1: config 0 descriptor?? [ 162.511328][ T7515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.521241][ T7515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.758731][ T7515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.778306][ T7515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 162.869919][ T7546] loop3: detected capacity change from 0 to 256 [ 163.120081][ T7546] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 163.226721][ T7540] loop4: detected capacity change from 0 to 32768 [ 163.235301][ T4212] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 163.257519][ T4212] asix: probe of 3-1:0.251 failed with error -524 [ 163.382211][ T7540] XFS (loop4): Mounting V5 Filesystem [ 163.484267][ T5657] usb 3-1: USB disconnect, device number 10 [ 163.516721][ T7540] XFS (loop4): Ending clean mount [ 163.649836][ T7550] loop0: detected capacity change from 0 to 32768 [ 163.684322][ T4169] XFS (loop4): Unmounting Filesystem [ 163.760442][ T7550] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 163.875483][ T7550] (syz.0.1227,7550,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 163.979116][ T4165] ocfs2: Unmounting device (7,0) on (node local) [ 164.067743][ T4212] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 164.170881][ T7568] damon: kdamond (7568) starts [ 164.380972][ T4212] usb 7-1: Using ep0 maxpacket: 32 [ 164.507582][ T4212] usb 7-1: config index 0 descriptor too short (expected 164, got 36) [ 164.526014][ T4212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.567422][ T4212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.587556][ T4212] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 164.607876][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.635547][ T4212] usb 7-1: config 0 descriptor?? [ 164.877728][ T7575] loop3: detected capacity change from 0 to 32768 [ 164.887619][ T7572] loop4: detected capacity change from 0 to 32768 [ 164.991173][ T7575] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 165.121256][ T4212] logitech 0003:046D:C29C.0006: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0 [ 165.144297][ T4168] ocfs2: Unmounting device (7,3) on (node local) [ 165.144771][ T7579] device sit0 entered promiscuous mode [ 165.196647][ T7579] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 165.243089][ T7579] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1235'. [ 165.300115][ T4271] device hsr_slave_0 left promiscuous mode [ 165.324967][ T4271] device hsr_slave_1 left promiscuous mode [ 165.344199][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.361980][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.405200][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.421187][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.445000][ T4271] device bridge_slave_1 left promiscuous mode [ 165.463440][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.484299][ T4271] device bridge_slave_0 left promiscuous mode [ 165.490558][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.537644][ T4212] logitech 0003:046D:C29C.0006: no inputs found [ 165.555673][ T4212] usb 7-1: USB disconnect, device number 4 [ 165.579892][ T4271] device dummy0 left promiscuous mode [ 165.590571][ T4271] device veth1_vlan left promiscuous mode [ 165.609338][ T4271] device veth0_vlan left promiscuous mode [ 166.065223][ T7595] loop3: detected capacity change from 0 to 2048 [ 166.180171][ T7595] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 166.238959][ T7595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.526828][ T7599] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 166.636074][ T7599] hfsplus: unable to find HFS+ superblock [ 166.815150][ T4271] team0 (unregistering): Port device team_slave_1 removed [ 166.858359][ T4271] team0 (unregistering): Port device team_slave_0 removed [ 166.909556][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.032060][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.070961][ T6630] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.207521][ T4271] bond0 (unregistering): Released all slaves [ 167.460991][ T6630] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.476959][ T6630] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.491333][ T6630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.516014][ T6630] usb 3-1: config 0 descriptor?? [ 167.563765][ T6630] pwc: Askey VC010 type 2 USB webcam detected. [ 167.888326][ T7581] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1230'. [ 167.920071][ T7609] tun0: tun_chr_ioctl cmd 21731 [ 167.995101][ T7614] loop0: detected capacity change from 0 to 16 [ 168.014171][ T6630] pwc: recv_control_msg error -32 req 02 val 2b00 [ 168.100173][ T7612] loop6: detected capacity change from 0 to 4096 [ 168.155529][ T7612] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 168.167725][ T7612] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 168.189814][ T7612] ntfs: volume version 3.1. [ 168.306470][ T6630] pwc: recv_control_msg error -71 req 02 val 2c00 [ 168.341070][ T6630] pwc: recv_control_msg error -71 req 04 val 1000 [ 168.372990][ T6630] pwc: recv_control_msg error -71 req 04 val 1300 [ 168.411178][ T6630] pwc: recv_control_msg error -71 req 04 val 1400 [ 168.432556][ T6630] pwc: recv_control_msg error -71 req 02 val 2000 [ 168.463543][ T6630] pwc: recv_control_msg error -71 req 02 val 2100 [ 168.490974][ T6630] pwc: recv_control_msg error -71 req 04 val 1500 [ 168.532613][ T6630] pwc: recv_control_msg error -71 req 02 val 2500 [ 168.550984][ T4212] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 168.562269][ T6630] pwc: recv_control_msg error -71 req 02 val 2400 [ 168.580979][ T6630] pwc: recv_control_msg error -71 req 02 val 2600 [ 168.601359][ T6630] pwc: recv_control_msg error -71 req 02 val 2900 [ 168.621035][ T6630] pwc: recv_control_msg error -71 req 02 val 2800 [ 168.641309][ T6630] pwc: recv_control_msg error -71 req 04 val 1100 [ 168.662275][ T6630] pwc: recv_control_msg error -71 req 04 val 1200 [ 168.671263][ T21] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 168.690567][ T6630] pwc: Registered as video103. [ 168.698496][ T6630] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 168.720162][ T6630] usb 3-1: USB disconnect, device number 11 [ 168.778599][ T7614] erofs: (device loop0): mounted with root inode @ nid 36. [ 168.808150][ T4212] usb 4-1: Using ep0 maxpacket: 8 [ 168.838452][ T7614] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 168.891011][ T7614] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851] [ 168.923238][ T7614] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 168.924877][ T7632] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 168.941123][ T4212] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 168.950912][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 168.961228][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1256'. [ 169.062075][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 169.088400][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 169.110915][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.122303][ T7632] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.135302][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.157736][ T21] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 169.171120][ T4212] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 169.180428][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.194616][ T4212] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 169.210450][ T21] usb 7-1: config 0 descriptor?? [ 169.216315][ T4212] usb 4-1: Product: syz [ 169.220479][ T4212] usb 4-1: Manufacturer: syz [ 169.221787][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 169.226292][ T4212] usb 4-1: SerialNumber: syz [ 169.262176][ T21] hub 7-1:0.0: USB hub found [ 169.275913][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 169.292628][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 169.313900][ T7632] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.331401][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 169.345726][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 169.359727][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 169.373044][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 169.390591][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 169.401241][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 169.410636][ T7632] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 169.427243][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 169.438347][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 169.455095][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 169.471052][ T7632] attempt to access beyond end of device [ 169.471052][ T7632] loop0: rw=524288, want=848, limit=16 [ 169.490287][ T7632] attempt to access beyond end of device [ 169.490287][ T7632] loop0: rw=524288, want=13478624104, limit=16 [ 169.510652][ T7632] attempt to access beyond end of device [ 169.510652][ T7632] loop0: rw=524288, want=13478624080, limit=16 [ 169.533915][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 169.550131][ T4212] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 169.561101][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 169.570187][ T4212] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 169.586288][ T21] hub 7-1:0.0: config failed, can't read hub descriptor (err -90) [ 169.586680][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 169.597335][ T4212] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 169.620098][ T7632] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 169.630050][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 169.646725][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 169.657990][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 169.673784][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 169.689547][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 169.702199][ T7632] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.716644][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 169.730690][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 169.745748][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 169.760277][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 169.774605][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 169.787087][ T4212] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 169.802510][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 169.815210][ T4212] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 169.826479][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 169.847010][ T4212] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 169.861559][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 169.878679][ T4212] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 169.888712][ T7632] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 169.901191][ T21] usbhid 7-1:0.0: can't add hid device: -71 [ 169.911335][ T21] usbhid: probe of 7-1:0.0 failed with error -71 [ 169.925810][ T4212] usb 4-1: USB disconnect, device number 11 [ 169.943487][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 169.967018][ T4212] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 169.991670][ T21] usb 7-1: USB disconnect, device number 5 [ 169.998753][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 170.036198][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 170.054759][ T4212] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 170.082283][ T4212] visor 4-1:1.0: device disconnected [ 170.097876][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 170.131954][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 170.148358][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 170.159564][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 170.176534][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 170.187237][ T7632] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 170.217729][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 170.254712][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 170.285308][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 170.314950][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 170.346100][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 170.386532][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 170.407918][ T7646] loop6: detected capacity change from 0 to 64 [ 170.429441][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 170.463041][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 170.492756][ T7632] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 170.521145][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 170.539734][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 170.549882][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 170.568889][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 170.585324][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 170.621532][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 170.651664][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 170.676100][ T7663] loop3: detected capacity change from 0 to 512 [ 170.681246][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 170.708973][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 170.739954][ T7632] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36 [ 170.760246][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 170.769753][ T7663] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 170.769753][ T7663] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 170.769753][ T7663] [ 170.797634][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 170.818097][ T7663] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.836630][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 170.854547][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 170.865672][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 170.879313][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 170.889503][ T7663] EXT4-fs (loop3): orphan cleanup on readonly fs [ 170.896094][ T7632] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 170.906797][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 170.915955][ T7632] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 170.926172][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 170.935337][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 170.945018][ T7632] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 170.956151][ T7632] attempt to access beyond end of device [ 170.956151][ T7632] loop0: rw=524288, want=56, limit=16 [ 170.970887][ T7663] EXT4-fs (loop3): 1 orphan inode deleted [ 170.976794][ T7632] attempt to access beyond end of device [ 170.976794][ T7632] loop0: rw=524288, want=40, limit=16 [ 171.005208][ T7663] EXT4-fs (loop3): 1 truncate cleaned up [ 171.011143][ T7663] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 171.020137][ T7632] attempt to access beyond end of device [ 171.020137][ T7632] loop0: rw=524288, want=96, limit=16 [ 171.067135][ T7663] EXT4-fs (loop3): shut down requested (2) [ 171.102517][ T7632] attempt to access beyond end of device [ 171.102517][ T7632] loop0: rw=524288, want=32, limit=16 [ 171.459371][ T7705] loop3: detected capacity change from 0 to 64 [ 171.615491][ T7713] loop4: detected capacity change from 0 to 2048 [ 171.728640][ T7713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.971127][ T6630] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 172.555366][ T6630] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 172.589401][ T7757] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 172.600359][ T6630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.614411][ T6630] usb 1-1: Product: syz [ 172.618588][ T6630] usb 1-1: Manufacturer: syz [ 172.629205][ T6630] usb 1-1: SerialNumber: syz [ 172.643336][ T6630] usb 1-1: config 0 descriptor?? [ 172.682081][ T6630] ch341 1-1:0.0: ch341-uart converter detected [ 172.869347][ T7774] loop3: detected capacity change from 0 to 1024 [ 173.115995][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 173.218178][ T4212] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 173.469896][ T7774] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 173.546966][ T6630] usb 1-1: failed to send control message: -71 [ 173.553382][ T6630] ch341-uart: probe of ttyUSB0 failed with error -71 [ 173.594649][ T6630] usb 1-1: USB disconnect, device number 6 [ 173.614736][ T6630] ch341 1-1:0.0: device disconnected [ 173.635766][ T7774] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,inode_readahead_blks=0x0000000008000000,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 173.728287][ T4212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.749434][ T4212] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.795226][ T4212] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 173.830786][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.847969][ T4212] usb 7-1: config 0 descriptor?? [ 174.009386][ T7793] loop3: detected capacity change from 0 to 512 [ 174.262439][ T7805] loop0: detected capacity change from 0 to 256 [ 174.383802][ T4212] hid-generic 0003:1038:12B6.0007: unbalanced delimiter at end of report description [ 174.404782][ T4212] hid-generic: probe of 0003:1038:12B6.0007 failed with error -22 [ 174.439069][ T7805] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 174.609185][ T5665] usb 7-1: USB disconnect, device number 6 [ 174.926691][ T7793] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.998818][ T7793] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.136325][ T7793] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on [ 175.536302][ T7829] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1335'. [ 175.568655][ T7829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1335'. [ 176.134788][ T7861] loop3: detected capacity change from 0 to 64 [ 176.190883][ T4212] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.696888][ T4212] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 176.710864][ T4212] usb 5-1: config 0 has no interface number 0 [ 176.920938][ T4212] usb 5-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=e4.e6 [ 176.930001][ T4212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.952932][ T4212] usb 5-1: Product: syz [ 176.957120][ T4212] usb 5-1: Manufacturer: syz [ 176.962070][ T4212] usb 5-1: SerialNumber: syz [ 176.991771][ T4212] usb 5-1: config 0 descriptor?? [ 177.517171][ T6630] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 177.859980][ T7887] loop0: detected capacity change from 0 to 32768 [ 177.905712][ T4212] asix 5-1:0.128 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 177.927856][ T4212] asix 5-1:0.128 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 177.999906][ T7923] Zero length message leads to an empty skb [ 178.095068][ T6630] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.117713][ T6630] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 178.144214][ T4212] asix 5-1:0.128 eth9: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 178.162012][ T6630] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.204687][ T6630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.232028][ T4212] usb 5-1: USB disconnect, device number 9 [ 178.238174][ T4212] asix 5-1:0.128 eth9: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet [ 178.295933][ T7896] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 178.594225][ T5665] usb 7-1: USB disconnect, device number 7 [ 179.007610][ T7945] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 179.101579][ T7887] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1372 (7887) [ 179.225088][ T7887] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 179.248163][ T7887] BTRFS info (device loop0): using free space tree [ 179.270867][ T7887] BTRFS info (device loop0): has skinny extents [ 179.281588][ T7958] loop3: detected capacity change from 0 to 512 [ 179.600909][ T7887] BTRFS info (device loop0): enabling ssd optimizations [ 179.732392][ T7990] loop6: detected capacity change from 0 to 64 [ 180.459155][ T8007] input: syz0 as /devices/virtual/input/input12 [ 180.630075][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1420'. [ 180.783683][ T7958] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1403: inode #1: comm syz.3.1403: iget: illegal inode # [ 180.827518][ T7958] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1403: error while reading EA inode 1 err=-117 [ 180.842118][ T2237] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.887599][ T7958] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1403: inode #1: comm syz.3.1403: iget: illegal inode # [ 180.948292][ T7958] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1403: error while reading EA inode 1 err=-117 [ 181.005872][ T7958] EXT4-fs (loop3): 1 orphan inode deleted [ 181.020651][ T7958] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 181.051839][ T5659] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 181.109894][ T8033] loop6: detected capacity change from 0 to 8192 [ 181.335169][ T8035] loop3: detected capacity change from 0 to 4096 [ 181.384871][ T2237] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 181.411779][ T2237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.417139][ T8035] NILFS (loop3): invalid segment: Checksum error in segment payload [ 181.421635][ T2237] usb 1-1: Product: syz [ 181.432566][ T5659] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 181.441721][ T5659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.444494][ T8035] NILFS (loop3): trying rollback from an earlier position [ 181.449979][ T2237] usb 1-1: Manufacturer: syz [ 181.468751][ T2237] usb 1-1: SerialNumber: syz [ 181.474862][ T5659] usb 3-1: config 0 descriptor?? [ 181.492076][ T2237] usb 1-1: config 0 descriptor?? [ 181.509145][ T8035] NILFS (loop3): recovery complete [ 181.522069][ T8036] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.545118][ T2237] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 181.612516][ T26] audit: type=1326 audit(1730815342.876:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 181.676313][ T26] audit: type=1326 audit(1730815342.876:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.4.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fc27ffc2719 code=0x7ffc0000 [ 181.961160][ T5659] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 182.195660][ T8033] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 182.229627][ T8033] REISERFS (device loop6): using ordered data mode [ 182.236480][ T8033] reiserfs: using flush barriers [ 182.261086][ T8033] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.283450][ T8033] REISERFS (device loop6): checking transaction log (loop6) [ 182.390995][ T5659] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 32: -71 [ 182.409218][ T5659] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense firmware info: -71 [ 182.487724][ T5659] playstation 0003:054C:0DF2.0008: Failed to get firmware info from DualSense [ 182.498641][ T1107] usb 1-1: USB disconnect, device number 7 [ 182.507822][ T8033] REISERFS (device loop6): Using tea hash to sort names [ 182.517196][ T5659] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 182.524152][ T8033] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 182.534602][ T8042] loop4: detected capacity change from 0 to 1024 [ 182.567652][ T5659] playstation: probe of 0003:054C:0DF2.0008 failed with error -71 [ 182.578080][ T5659] usb 3-1: USB disconnect, device number 12 [ 183.010739][ T8047] loop6: detected capacity change from 0 to 128 [ 183.302601][ T8068] loop4: detected capacity change from 0 to 64 [ 183.791091][ T5659] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 184.042548][ T5659] usb 4-1: Using ep0 maxpacket: 16 [ 184.161055][ T5659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.184002][ T5659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.194301][ T5659] usb 4-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 184.203923][ T5659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.237235][ T5659] usb 4-1: config 0 descriptor?? [ 184.303802][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1457'. [ 184.328382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 184.346605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 184.359177][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 184.363557][ T8099] netlink: 'syz.6.1457': attribute type 18 has an invalid length. [ 184.386278][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 184.396400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 184.400909][ T4214] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 184.423220][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 184.441613][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1457'. [ 184.460842][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 184.501874][ T8085] loop3: detected capacity change from 0 to 8 [ 184.515472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 184.554496][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 184.610268][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 184.623856][ T8105] loop6: detected capacity change from 0 to 1024 [ 184.716793][ T8105] hfsplus: failed to load catalog file [ 184.744356][ T8107] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1461'. [ 184.766191][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 184.803468][ T4214] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12592, setting to 1024 [ 184.820201][ T4214] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 184.873369][ T4214] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.986411][ T4214] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.011225][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 185.029774][ T4214] usb 5-1: SerialNumber: syz [ 185.071305][ T8093] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 185.104696][ T8103] loop0: detected capacity change from 0 to 32768 [ 185.324133][ T8093] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 185.791905][ T4214] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 185.816195][ T8085] SQUASHFS error: zlib decompression failed, data probably corrupt [ 185.839824][ T8085] SQUASHFS error: Failed to read block 0x9b: -5 [ 185.861191][ T8085] SQUASHFS error: Unable to read metadata cache entry [99] [ 185.868427][ T8085] SQUASHFS error: Unable to read inode 0x127 [ 186.019160][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 186.055688][ T4212] usb 5-1: USB disconnect, device number 10 [ 186.120724][ T8122] loop6: detected capacity change from 0 to 40427 [ 186.192979][ T8122] F2FS-fs (loop6): invalid crc value [ 186.193628][ T8103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1458 (8103) [ 186.279520][ T8122] F2FS-fs (loop6): Found nat_bits in checkpoint [ 186.400878][ T8122] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 186.431590][ T4214] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 186.487869][ T8122] attempt to access beyond end of device [ 186.487869][ T8122] loop6: rw=2049, want=53488, limit=40427 [ 186.801162][ T4214] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.825693][ T4214] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.887863][ T4214] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.900903][ T4370] udevd[4370]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.957592][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.041306][ T8137] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 187.250913][ T1107] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 187.376320][ T21] usb 3-1: USB disconnect, device number 13 [ 187.497650][ T4157] udevd[4157]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.531103][ T5659] usbhid 4-1:0.0: can't add hid device: -71 [ 187.537393][ T5659] usbhid: probe of 4-1:0.0 failed with error -71 [ 187.608303][ T5659] usb 4-1: USB disconnect, device number 12 [ 187.846088][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.869826][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.912077][ T1107] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 187.942397][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.972036][ T1107] usb 5-1: config 0 descriptor?? [ 187.988402][ T8163] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 188.028891][ T8163] team0: Port device batadv1 added [ 188.064504][ T8103] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 188.082521][ T8103] BTRFS info (device loop0): using free space tree [ 188.090031][ T8103] BTRFS info (device loop0): has skinny extents [ 188.534270][ T8103] BTRFS error (device loop0): open_ctree failed [ 188.542308][ T5455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5455) [ 188.737138][ T1107] hid-led: probe of 0003:27B8:01ED.0009 failed with error -71 [ 188.816713][ T1107] usb 5-1: USB disconnect, device number 11 [ 189.046668][ T8205] input: syz1 as /devices/virtual/input/input13 [ 189.112740][ T8203] loop6: detected capacity change from 0 to 2048 [ 189.251402][ T8155] loop3: detected capacity change from 0 to 40427 [ 189.271012][ T5666] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 189.373396][ T8212] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 189.502109][ T8214] loop4: detected capacity change from 0 to 4096 [ 189.559519][ T8214] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 189.631155][ T5666] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 189.648437][ T5666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.678875][ T5666] usb 3-1: config 0 descriptor?? [ 189.776393][ T8214] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 189.808514][ T8214] ntfs3: loop4: Failed to load $Extend. [ 189.809808][ T8216] loop0: detected capacity change from 0 to 32768 [ 189.864870][ T8216] XFS (loop0): Mounting V5 Filesystem [ 189.925997][ T8216] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 189.944848][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 189.979752][ T8216] XFS (loop0): Starting recovery (logdev: internal) [ 190.025348][ T8228] program syz.4.1503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.058029][ T8216] XFS (loop0): Ending recovery (logdev: internal) [ 190.171012][ T5666] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 190.217590][ T4165] XFS (loop0): Unmounting Filesystem [ 190.299950][ T8203] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2) [ 190.314332][ T8155] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 190.345746][ T8155] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 190.398531][ T8155] F2FS-fs (loop3): invalid crc value [ 190.433304][ T8155] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.606978][ T5666] usb 3-1: USB disconnect, device number 14 [ 190.752410][ T8249] loop4: detected capacity change from 0 to 16 [ 191.220249][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1515'. [ 191.225516][ T8253] program syz.2.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.060634][ T8249] erofs: (device loop4): mounted with root inode @ nid 36. [ 192.128323][ T8249] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 192.193302][ T8249] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -23 in[64, 4032] out[1851] [ 192.279079][ T8249] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 192.597059][ T8266] loop3: detected capacity change from 0 to 32768 [ 193.290218][ T8293] loop6: detected capacity change from 0 to 64 [ 193.535014][ T8300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 193.542047][ T5666] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 193.565968][ T8300] team0: Port device batadv1 added [ 193.602397][ T6625] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.801077][ T5666] usb 4-1: Using ep0 maxpacket: 16 [ 193.921088][ T5666] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.948938][ T6625] usb 5-1: Using ep0 maxpacket: 8 [ 193.950890][ T5666] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.007319][ T5666] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 194.043745][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.050074][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.058383][ T5666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.106335][ T5666] usb 4-1: config 0 descriptor?? [ 194.324459][ T8302] loop0: detected capacity change from 0 to 32768 [ 194.346649][ T6625] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 194.361643][ T6625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.381358][ T6625] usb 5-1: Product: syz [ 194.385542][ T6625] usb 5-1: Manufacturer: syz [ 194.406200][ T6625] usb 5-1: SerialNumber: syz [ 194.418787][ T6625] usb 5-1: config 0 descriptor?? [ 194.525307][ T6625] gspca_main: se401-2.14.0 probing 047d:5003 [ 194.635525][ T5666] kye 0003:0458:5015.000A: unbalanced collection at end of report description [ 194.669819][ T5666] kye 0003:0458:5015.000A: parse failed [ 194.679288][ T5666] kye: probe of 0003:0458:5015.000A failed with error -22 [ 194.732472][ T8295] udc-core: couldn't find an available UDC or it's busy [ 194.739441][ T8295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 194.865748][ T5666] usb 4-1: USB disconnect, device number 13 [ 195.045320][ T6625] gspca_se401: ExtraFeatures: 85 [ 195.050291][ T6625] gspca_se401: Frame size: 0x0 1/16th janggu [ 195.094349][ T6625] gspca_se401: Frame size: 256x521 bayer [ 195.111066][ T6625] gspca_se401: Frame size: 36x1 bayer [ 195.116465][ T6625] gspca_se401: Frame size: 0x2304 bayer [ 195.253547][ T6625] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 195.317658][ T6625] usb 5-1: USB disconnect, device number 12 [ 195.767894][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 195.809011][ T8329] team0: Port device batadv1 added [ 195.916987][ T8337] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1550'. [ 195.956529][ T8337] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1550'. [ 196.490528][ T8357] loop3: detected capacity change from 0 to 2048 [ 196.586297][ T8357] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 196.802319][ T21] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 196.884208][ T8331] loop6: detected capacity change from 0 to 32768 [ 197.111104][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 197.161407][ T6625] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 197.411774][ T21] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 197.431327][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.439408][ T21] usb 1-1: Product: syz [ 197.454414][ T21] usb 1-1: Manufacturer: syz [ 197.459031][ T21] usb 1-1: SerialNumber: syz [ 197.503072][ T21] usb 1-1: config 0 descriptor?? [ 197.561219][ T6625] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 197.573558][ T21] gspca_main: se401-2.14.0 probing 047d:5003 [ 197.588657][ T6625] usb 5-1: config 0 has no interface number 0 [ 197.595749][ T6625] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.617133][ T6625] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.638417][ T6625] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 197.658703][ T6625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.672196][ T6625] usb 5-1: config 0 descriptor?? [ 197.702930][ T8369] loop3: detected capacity change from 0 to 32768 [ 197.775358][ T8361] udc-core: couldn't find an available UDC or it's busy [ 197.802818][ T8361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 197.820220][ T8369] XFS (loop3): Mounting V5 Filesystem [ 197.875535][ T8369] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 197.914732][ T8369] XFS (loop3): Starting recovery (logdev: internal) [ 197.949338][ T8369] XFS (loop3): Ending recovery (logdev: internal) [ 198.018626][ T4168] XFS (loop3): Unmounting Filesystem [ 198.067179][ T21] gspca_se401: ExtraFeatures: 85 [ 198.072491][ T21] gspca_se401: Frame size: 0x0 1/16th janggu [ 198.078525][ T21] gspca_se401: Frame size: 256x521 bayer [ 198.084858][ T21] gspca_se401: Frame size: 36x1 bayer [ 198.090235][ T21] gspca_se401: Frame size: 0x2304 bayer [ 198.157149][ T6625] logitech-djreceiver 0003:046D:C71B.000B: unknown main item tag 0x0 [ 198.176995][ T6625] logitech-djreceiver 0003:046D:C71B.000B: unknown main item tag 0x0 [ 198.189063][ T6625] logitech-djreceiver 0003:046D:C71B.000B: unknown main item tag 0x0 [ 198.198044][ T6625] logitech-djreceiver 0003:046D:C71B.000B: unknown main item tag 0x0 [ 198.216693][ T6625] logitech-djreceiver 0003:046D:C71B.000B: unknown main item tag 0x0 [ 198.225217][ T6625] logitech-djreceiver 0003:046D:C71B.000B: unknown main item tag 0x0 [ 198.233768][ T6625] logitech-djreceiver 0003:046D:C71B.000B: unknown main item tag 0x0 [ 198.254481][ T6625] logitech-djreceiver 0003:046D:C71B.000B: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input32 [ 198.308466][ T21] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 198.351963][ T21] usb 1-1: USB disconnect, device number 8 [ 198.382825][ T8391] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1568'. [ 198.400404][ T4214] usb 5-1: USB disconnect, device number 13 [ 198.447400][ T8391] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1568'. [ 198.951198][ T4212] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 199.031415][ T8407] damon: kdamond (8407) starts [ 199.223460][ T4212] usb 7-1: Using ep0 maxpacket: 16 [ 199.371144][ T4212] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.383686][ T4212] usb 7-1: config 0 has no interface number 0 [ 199.398963][ T4212] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.433729][ T4212] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.456001][ T4212] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 199.483771][ T4212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.513788][ T4212] usb 7-1: config 0 descriptor?? [ 199.699675][ T4214] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 200.005978][ T4214] usb 5-1: Using ep0 maxpacket: 8 [ 200.096791][ T8431] loop0: detected capacity change from 0 to 2048 [ 200.156051][ T8431] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 200.169180][ T4214] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.184791][ T4214] usb 5-1: config 0 has no interface number 0 [ 200.201205][ T4212] uclogic 0003:28BD:0071.000C: pen parameters not found [ 200.219369][ T4212] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 200.301146][ T8433] loop3: detected capacity change from 0 to 256 [ 200.353183][ T8435] loop0: detected capacity change from 0 to 2048 [ 200.375749][ T4214] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 200.387497][ T8435] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 200.395702][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.420473][ T8435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.423502][ T4214] usb 5-1: Product: syz [ 200.462554][ T4214] usb 5-1: Manufacturer: syz [ 200.467172][ T4214] usb 5-1: SerialNumber: syz [ 200.493397][ T4214] usb 5-1: config 0 descriptor?? [ 200.503153][ T5663] usb 7-1: USB disconnect, device number 8 [ 200.541802][ T4214] usb 5-1: selecting invalid altsetting 2 [ 200.547571][ T4214] i2c-cp2615: probe of 5-1:0.1 failed with error -22 [ 200.623482][ T8440] damon: kdamond (8440) starts [ 200.744770][ T8444] netlink: 'syz.0.1595': attribute type 2 has an invalid length. [ 200.772270][ T8444] netlink: 'syz.0.1595': attribute type 2 has an invalid length. [ 200.821125][ T4212] usb 5-1: USB disconnect, device number 14 [ 201.334583][ T6630] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 201.527413][ T8457] loop6: detected capacity change from 0 to 32768 [ 201.621077][ T6630] usb 1-1: Using ep0 maxpacket: 16 [ 201.741161][ T6630] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.752585][ T6630] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.776688][ T6630] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 201.796927][ T6630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.818889][ T6630] usb 1-1: config 0 descriptor?? [ 202.023475][ T8461] loop4: detected capacity change from 0 to 40427 [ 202.065928][ T8461] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 202.080932][ T8461] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 202.101290][ T8461] F2FS-fs (loop4): invalid crc value [ 202.111148][ T8461] F2FS-fs (loop4): Found nat_bits in checkpoint [ 202.153339][ T8461] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 202.160699][ T8461] F2FS-fs (loop4): Start checkpoint disabled! [ 202.184620][ T8461] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 202.198497][ T8461] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 202.318178][ T154] attempt to access beyond end of device [ 202.318178][ T154] loop4: rw=2049, want=40976, limit=40427 [ 202.344710][ T6630] kye 0003:0458:5015.000D: unbalanced collection at end of report description [ 202.364606][ T6630] kye 0003:0458:5015.000D: parse failed [ 202.370359][ T6630] kye: probe of 0003:0458:5015.000D failed with error -22 [ 202.400852][ T8468] damon: kdamond (8468) starts [ 202.581059][ T8457] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 202.649608][ T4214] usb 1-1: USB disconnect, device number 9 [ 202.761611][ T8457] (syz.6.1601,8457,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 203.032352][ T7156] ocfs2: Unmounting device (7,6) on (node local) [ 203.142833][ T8486] loop6: detected capacity change from 0 to 512 [ 203.320179][ T8486] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000029,minixdf,,errors=continue. Quota mode: writeback. [ 203.414874][ T8486] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.601137][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.701684][ T8501] loop3: detected capacity change from 0 to 8192 [ 203.779906][ T8501] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 203.811070][ T8501] REISERFS (device loop3): using ordered data mode [ 203.817602][ T8501] reiserfs: using flush barriers [ 203.827752][ T8501] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 203.845012][ T8501] REISERFS (device loop3): checking transaction log (loop3) [ 203.872614][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 204.011181][ T21] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.033188][ T21] usb 1-1: config 0 has no interface number 0 [ 204.042165][ T21] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.057760][ T8501] REISERFS (device loop3): Using tea hash to sort names [ 204.065165][ T8501] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 204.080198][ T21] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.090366][ T21] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 204.100520][ T8501] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 204.109886][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.137933][ T21] usb 1-1: config 0 descriptor?? [ 204.219534][ T8501] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 204.462882][ T8518] netlink: 'syz.2.1625': attribute type 2 has an invalid length. [ 204.483313][ T8518] netlink: 'syz.2.1625': attribute type 2 has an invalid length. [ 204.749119][ T8526] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 204.851425][ T21] uclogic 0003:28BD:0071.000E: pen parameters not found [ 204.858404][ T21] uclogic 0003:28BD:0071.000E: interface is invalid, ignoring [ 205.088966][ T21] usb 1-1: USB disconnect, device number 10 [ 205.485114][ T8536] loop3: detected capacity change from 0 to 32768 [ 206.458496][ T8550] loop4: detected capacity change from 0 to 2048 [ 206.469190][ T8555] loop6: detected capacity change from 0 to 256 [ 206.632303][ T8564] loop3: detected capacity change from 0 to 256 [ 206.637238][ T8550] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 207.204504][ T8582] netlink: 'syz.4.1654': attribute type 10 has an invalid length. [ 207.685745][ T8555] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 208.059535][ T8602] loop0: detected capacity change from 0 to 1024 [ 208.171433][ T8588] loop4: detected capacity change from 0 to 32768 [ 208.216418][ T8602] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 208.286804][ T8602] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,inode_readahead_blks=0x0000000008000000,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 208.691964][ T8588] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 208.930662][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 255.484153][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.490465][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.410810][ T5663] Bluetooth: hci2: command 0x0406 tx timeout [ 316.937088][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.943640][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.375032][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.381491][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.901544][ T4152] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 388.921169][ T4152] CPU: 0 PID: 4152 Comm: syz-executor Not tainted 5.15.170-syzkaller #0 [ 388.929520][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 388.939585][ T4152] Call Trace: [ 388.942864][ T4152] [ 388.945796][ T4152] dump_stack_lvl+0x1e3/0x2d0 [ 388.950481][ T4152] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 388.956112][ T4152] ? panic+0x860/0x860 [ 388.960187][ T4152] ? local_lock_release+0x170/0x170 [ 388.965396][ T4152] dump_header+0xd4/0x940 [ 388.969727][ T4152] oom_kill_process+0xef/0x3d0 [ 388.974490][ T4152] out_of_memory+0xfbd/0x1280 [ 388.979181][ T4152] ? rcu_lock_release+0x20/0x20 [ 388.984037][ T4152] ? unregister_oom_notifier+0x20/0x20 [ 388.989500][ T4152] ? cpumask_next+0xc3/0xf0 [ 388.994011][ T4152] __alloc_pages_slowpath+0x20ed/0x2790 [ 388.999593][ T4152] ? get_page_from_freelist+0x33c0/0x33c0 [ 389.005319][ T4152] ? __next_zones_zonelist+0xa4/0x130 [ 389.010706][ T4152] __alloc_pages+0x45a/0x700 [ 389.015298][ T4152] ? __rmqueue_pcplist+0x2030/0x2030 [ 389.020578][ T4152] ? lockdep_hardirqs_off+0x70/0x100 [ 389.025878][ T4152] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 389.031776][ T4152] ? alloc_pages+0x458/0x570 [ 389.036369][ T4152] __get_free_pages+0x8/0x30 [ 389.040959][ T4152] __pollwait+0x22d/0x400 [ 389.045290][ T4152] ? poll_initwait+0x150/0x150 [ 389.050054][ T4152] pipe_poll+0xe3/0x4a0 [ 389.054209][ T4152] ? pipe_write+0x1b90/0x1b90 [ 389.058889][ T4152] do_select+0xe8e/0x17f0 [ 389.063250][ T4152] ? core_sys_select+0x8b0/0x8b0 [ 389.068188][ T4152] ? poll_initwait+0x150/0x150 [ 389.072956][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.078937][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.084923][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.090908][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.096894][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.102878][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.108866][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.114848][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.120836][ T4152] ? __x64_compat_sys_ppoll_time64+0xc0/0xc0 [ 389.126835][ T4152] ? __might_fault+0xb4/0x110 [ 389.131525][ T4152] core_sys_select+0x699/0x8b0 [ 389.136303][ T4152] ? poll_select_set_timeout+0x150/0x150 [ 389.141938][ T4152] ? ktime_get_ts64+0x113/0x4a0 [ 389.146791][ T4152] ? seqcount_lockdep_reader_access+0x153/0x220 [ 389.153055][ T4152] ? sigprocmask+0x280/0x280 [ 389.157645][ T4152] ? __context_tracking_exit+0x4c/0x80 [ 389.163104][ T4152] ? __lock_acquire+0x1ff0/0x1ff0 [ 389.168134][ T4152] __se_sys_pselect6+0x37f/0x470 [ 389.173085][ T4152] ? __x64_sys_pselect6+0xf0/0xf0 [ 389.178119][ T4152] ? syscall_enter_from_user_mode+0x2e/0x240 [ 389.184102][ T4152] ? lockdep_hardirqs_on+0x94/0x130 [ 389.189304][ T4152] ? __x64_sys_pselect6+0x1d/0xf0 [ 389.194331][ T4152] do_syscall_64+0x3b/0xb0 [ 389.198749][ T4152] ? clear_bhb_loop+0x15/0x70 [ 389.203426][ T4152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.209322][ T4152] RIP: 0033:0x7f0e647f44dc [ 389.213742][ T4152] Code: 29 44 24 30 80 3d 7b f0 18 00 00 4c 89 4c 24 40 4c 8d 4c 24 40 48 c7 44 24 48 08 00 00 00 74 2e 4c 89 ea b8 0e 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7c 48 8b 54 24 58 64 48 2b 14 25 28 00 00 00 [ 389.233345][ T4152] RSP: 002b:00007ffe0bb471e0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 389.241759][ T4152] RAX: ffffffffffffffda RBX: 00007ffe0bb47310 RCX: 00007f0e647f44dc [ 389.249737][ T4152] RDX: 0000000000000000 RSI: 00007ffe0bb47310 RDI: 0000000000000025 [ 389.257705][ T4152] RBP: 00007ffe0bb47760 R08: 00007ffe0bb47210 R09: 00007ffe0bb47220 [ 389.265677][ T4152] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe0bb475b0 [ 389.273644][ T4152] R13: 0000000000000000 R14: 00007ffe0bb47630 R15: 00007ffe0bb473a0 [ 389.281630][ T4152] [ 389.300831][ T4152] Mem-Info: [ 389.303980][ T4152] active_anon:389 inactive_anon:3800 isolated_anon:0 [ 389.303980][ T4152] active_file:2290 inactive_file:2275 isolated_file:0 [ 389.303980][ T4152] unevictable:768 dirty:0 writeback:0 [ 389.303980][ T4152] slab_reclaimable:18112 slab_unreclaimable:1511581 [ 389.303980][ T4152] mapped:20727 shmem:1432 pagetables:543 bounce:0 [ 389.303980][ T4152] kernel_misc_reclaimable:0 [ 389.303980][ T4152] free:30604 free_pcp:2418 free_cma:0 [ 389.450157][ T4152] Node 0 active_anon:1556kB inactive_anon:15188kB active_file:9060kB inactive_file:9100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82908kB dirty:0kB writeback:0kB shmem:4180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10672kB pagetables:2172kB all_unreclaimable? no [ 389.530817][ T4152] Node 1 active_anon:0kB inactive_anon:12kB active_file:100kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? yes [ 389.630241][ T4152] Node 0 DMA free:10260kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.708792][ T4152] lowmem_reserve[]: 0 2533 2533 2533 2533 [ 389.714634][ T4152] Node 0 DMA32 free:84272kB min:112892kB low:121576kB high:130260kB reserved_highatomic:26624KB active_anon:1556kB inactive_anon:15180kB active_file:9060kB inactive_file:9100kB unevictable:1536kB writepending:0kB present:3129332kB managed:2600788kB mlocked:0kB bounce:0kB free_pcp:4848kB local_pcp:2260kB free_cma:0kB [ 389.780840][ T4152] lowmem_reserve[]: 0 0 0 0 0 [ 389.785628][ T4152] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.868870][ T4152] lowmem_reserve[]: 0 0 0 0 0 [ 389.873737][ T4152] Node 1 Normal free:452880kB min:55164kB low:68952kB high:82740kB reserved_highatomic:0KB active_anon:0kB inactive_anon:12kB active_file:100kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:48536kB local_pcp:30452kB free_cma:0kB [ 389.958996][ T4152] lowmem_reserve[]: 0 0 0 0 0 [ 389.980536][ T4152] Node 0 DMA: 11*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10260kB [ 390.018809][ T4152] Node 0 DMA32: 1348*4kB (UMEH) 828*8kB (UMEH) 542*16kB (UMEH) 363*32kB (MEH) 210*64kB (MEH) 79*128kB (UME) 11*256kB (MEH) 4*512kB (UMH) 1*1024kB (U) 1*2048kB (M) 5*4096kB (UM) = 84272kB [ 390.079314][ T4152] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 390.119443][ T4152] Node 1 Normal: 1876*4kB (UM) 354*8kB (UME) 134*16kB (UME) 403*32kB (UME) 327*64kB (UME) 231*128kB (UME) 198*256kB (UM) 162*512kB (U) 75*1024kB (U) 55*2048kB (UM) 62*4096kB (UM) = 652896kB [ 390.190565][ T4152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.200344][ T4152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.218885][ T4152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.228515][ T4152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.245509][ T4152] 5963 total pagecache pages [ 390.250103][ T4152] 11 pages in swap cache [ 390.257366][ T4152] Swap cache stats: add 1036, delete 1025, find 2/5 [ 390.269545][ T4152] Free swap = 121384kB [ 390.276955][ T4152] Total swap = 124996kB [ 390.288586][ T4152] 2097051 pages RAM [ 390.296827][ T4152] 0 pages HighMem/MovableOnly [ 390.306884][ T4152] 413096 pages reserved [ 390.314421][ T4152] 0 pages cma reserved [ 390.318624][ T4152] Unreclaimable slab info: [ 390.329610][ T4152] Name Used Total [ 390.339320][ T4152] pid_3 3KB 3KB [ 390.366006][ T4152] pid_2 60KB 60KB [ 390.389353][ T4152] btrfs_end_io_wq 11KB 11KB [ 390.395522][ T4152] btrfs_delayed_extent_op 7KB 7KB [ 390.421015][ T4152] btrfs_delayed_data_ref 3KB 3KB [ 390.427544][ T4152] btrfs_delayed_tree_ref 7KB 7KB [ 390.453219][ T4152] btrfs_delayed_ref_head 23KB 23KB [ 390.459747][ T4152] btrfs_delayed_node 15KB 15KB [ 390.499304][ T4152] btrfs_ordered_extent 15KB 15KB [ 390.515037][ T4152] btrfs_extent_map 7KB 7KB [ 390.529455][ T4152] btrfs_extent_state 27KB 27KB [ 390.540802][ T4152] bio-320 23KB 23KB [ 390.546883][ T4152] btrfs_extent_buffer 31KB 31KB [ 390.570793][ T4152] btrfs_free_space 7KB 7KB [ 390.577154][ T4152] btrfs_path 27KB 27KB [ 390.590833][ T4152] zswap_entry 79KB 79KB [ 390.596915][ T4152] AF_VSOCK 31KB 31KB [ 390.610814][ T4152] batadv_tt_change_cache 8KB 8KB [ 390.617611][ T4152] batadv_tl_cache 8KB 8KB [ 390.640799][ T4152] IEEE-802.15.4-MAC 31KB 31KB [ 390.646880][ T4152] IEEE-802.15.4-RAW 31KB 31KB [ 390.663875][ T4152] p9_req_t 8KB 8KB [ 390.669967][ T4152] SMC 59KB 59KB [ 390.700804][ T4152] TIPC 63KB 63KB [ 390.706910][ T4152] RDS 62KB 62KB [ 390.760798][ T4152] rds_connection 3KB 3KB [ 390.766901][ T4152] SCTPv6 63KB 63KB [ 390.790809][ T4152] SCTP 61KB 61KB [ 390.796898][ T4152] sctp_chunk 33KB 33KB [ 390.826370][ T4152] sctp_bind_bucket 8KB 8KB [ 390.857200][ T4152] DCCPv6 59KB 59KB [ 390.863328][ T4152] DCCP 61KB 61KB [ 390.869418][ T4152] dccp_bind_bucket 4KB 4KB [ 390.900792][ T4152] PNPIPE 62KB 62KB [ 390.906889][ T4152] L2TP/IPv6 61KB 61KB [ 390.939624][ T4152] L2TP/IP 61KB 61KB [ 390.958901][ T4152] KCM 61KB 61KB [ 390.971598][ T4152] kcm_mux_cache 31KB 31KB [ 390.977678][ T4152] RXRPC 61KB 61KB [ 391.007332][ T4152] rxrpc_call_jar 157KB 157KB [ 391.029191][ T4152] can_receiver 7KB 7KB [ 391.050821][ T4152] bridge_fdb_cache 11KB 11KB [ 391.056909][ T4152] nf-frags 15KB 15KB [ 391.090953][ T4152] MPTCPv6 60KB 60KB [ 391.097047][ T4152] ip6-frags 7KB 7KB [ 391.118905][ T4152] fib6_nodes 196KB 196KB [ 391.140778][ T4152] ip6_dst_cache 192KB 378KB [ 391.146865][ T4152] ip6_mrt_cache 8KB 8KB [ 391.160873][ T4152] PINGv6 61KB 61KB [ 391.166947][ T4152] RAWv6 154KB 154KB [ 391.181972][ T4152] UDPLITEv6 64KB 64KB [ 391.188047][ T4152] UDPv6 96KB 96KB [ 391.210787][ T4152] tw_sock_TCPv6 7KB 7KB [ 391.216871][ T4152] request_sock_TCPv6 7KB 7KB [ 391.240787][ T4152] TCPv6 63KB 63KB [ 391.246957][ T4152] nf_conntrack 47KB 47KB [ 391.253081][ T4152] ashmem_area_cache 15KB 15KB [ 391.268035][ T4152] wg_peer 91KB 91KB [ 391.277064][ T4152] allowedips_node 15KB 15KB [ 391.300544][ T4152] t10_alua_lu_gp_cache 3KB 3KB [ 391.307015][ T4152] sd_ext_cdb 3KB 3KB [ 391.320809][ T4152] scsi_sense_cache 1092KB 1092KB [ 391.326886][ T4152] virtio_scsi_cmd 16KB 16KB [ 391.340845][ T4152] bio-136 110KB 132KB [ 391.346956][ T4152] sgpool-128 29KB 29KB [ 391.370896][ T4152] sgpool-64 63KB 63KB [ 391.376976][ T4152] sgpool-32 157KB 157KB [ 391.392319][ T4152] sgpool-16 22KB 22KB [ 391.398402][ T4152] sgpool-8 22KB 22KB [ 391.420803][ T4152] io_kiocb 26KB 26KB [ 391.426940][ T4152] bio-224 3KB 3KB [ 391.449838][ T4152] mqueue_inode_cache 60KB 60KB [ 391.456121][ T4152] f2fs_bio_post_read_ctx 16KB 16KB [ 391.470842][ T4152] gfs2_rgrpd 7KB 7KB [ 391.476920][ T4152] gfs2_glock(aspace) 31KB 31KB [ 391.493362][ T4152] nilfs2_btree_path_cache 95KB 95KB [ 391.499993][ T4152] xfs_dqtrx 23KB 23KB [ 391.520804][ T4152] xfs_dquot 31KB 31KB [ 391.540008][ T4152] xfs_rui_item 31KB 31KB [ 391.546127][ T4152] xfs_rud_item 7KB 7KB [ 391.561487][ T4152] xfs_efi_item 15KB 15KB [ 391.567729][ T4152] xfs_efd_item 15KB 15KB [ 391.580782][ T4152] xfs_buf_item 19KB 19KB [ 391.586901][ T4152] xfs_trans 22KB 22KB [ 391.600802][ T4152] xfs_ifork 7KB 7KB [ 391.606919][ T4152] xfs_da_state 7KB 7KB [ 391.618261][ T4152] xfs_btree_cur 19KB 19KB [ 391.630814][ T4152] xfs_bmap_free_item 7KB 7KB [ 391.637022][ T4152] xfs_log_ticket 15KB 15KB [ 391.650337][ T4152] jfs_mp 34KB 34KB [ 391.661154][ T4152] fuse_request 7KB 7KB [ 391.680916][ T4152] ntfs_name_cache 7KB 7KB [ 391.687046][ T4152] ntfs_attr_ctx_cache 12KB 12KB [ 391.693344][ T4152] cifs_small_rq 16KB 16KB [ 391.699451][ T4152] cifs_request 67KB 67KB [ 391.722381][ T4152] cifs_mpx_ids 4KB 4KB [ 391.728599][ T4152] nfs_commit_data 15KB 15KB [ 391.734747][ T4152] nfs_write_data 47KB 47KB [ 391.750817][ T4152] hfs_inode_cache 61KB 61KB [ 391.756982][ T4152] hfsplus_attr_cache 62KB 62KB [ 391.770787][ T4152] hfsplus_icache 60KB 60KB [ 391.790832][ T4152] jbd2_inode 7KB 7KB [ 391.796910][ T4152] ext4_system_zone 7KB 7KB [ 391.803169][ T4152] ext4_io_end_vec 7KB 7KB [ 391.809430][ T4152] ext4_bio_post_read_ctx 15KB 15KB [ 391.832437][ T4152] kioctx 31KB 31KB [ 391.838529][ T4152] aio_kiocb 7KB 7KB [ 391.860439][ T4152] userfaultfd_ctx_cache 16KB 16KB [ 391.870828][ T4152] fanotify_path_event 3KB 3KB [ 391.877130][ T4152] fanotify_fid_event 3KB 3KB [ 391.890837][ T4152] fsnotify_mark 7KB 7KB [ 391.896964][ T4152] dnotify_mark 3KB 3KB [ 391.918657][ T4152] dnotify_struct 3KB 3KB [ 391.924792][ T4152] dio 15KB 15KB [ 391.942340][ T4152] fasync_cache 7KB 7KB [ 391.948734][ T4152] pid_namespace 7KB 7KB [ 391.961431][ T4152] posix_timers_cache 7KB 7KB [ 391.967607][ T4152] kvm_vcpu 44KB 77KB [ 391.990822][ T4152] x86_emulator 60KB 60KB [ 391.996949][ T4152] x86_fpu 90KB 90KB [ 392.010810][ T4152] rpc_buffers 31KB 31KB [ 392.016926][ T4152] rpc_tasks 3KB 3KB [ 392.030837][ T4152] UNIX-STREAM 192KB 192KB [ 392.036913][ T4152] UNIX 368KB 544KB [ 392.052490][ T4152] ip4-frags 15KB 15KB [ 392.058577][ T4152] UDP-Lite 61KB 61KB [ 392.080803][ T4152] MPTCP 63KB 63KB [ 392.086895][ T4152] tcp_bind_bucket 8KB 8KB [ 392.100795][ T4152] inet_peer_cache 8KB 8KB [ 392.106871][ T4152] xfrm_dst_cache 15KB 15KB [ 392.130806][ T4152] xfrm_state 16KB 16KB [ 392.136891][ T4152] ip_fib_trie 32KB 32KB [ 392.150844][ T4152] ip_fib_alias 110KB 110KB [ 392.157221][ T4152] ip_dst_cache 334257KB 334276KB [ 392.200794][ T4152] PING 61KB 61KB [ 392.206890][ T4152] RAW 61KB 61KB [ 392.230812][ T4152] UDP 92KB 92KB [ 392.236906][ T4152] request_sock_TCP 15KB 15KB [ 392.272314][ T4152] TCP 60KB 60KB [ 392.278414][ T4152] hugetlbfs_inode_cache 61KB 61KB [ 392.309252][ T4152] fscache_cookie_jar 15KB 15KB [ 392.325253][ T4152] bio-256 11KB 11KB [ 392.346748][ T4152] ep_head 16KB 16KB [ 392.352869][ T4152] eventpoll_pwq 35KB 35KB [ 392.372978][ T4152] eventpoll_epi 66KB 66KB [ 392.379071][ T4152] inotify_inode_mark 85KB 85KB [ 392.401822][ T4152] bio_crypt_ctx 7KB 7KB [ 392.407906][ T4152] request_queue 612KB 798KB [ 392.430788][ T4152] blkdev_ioc 26KB 26KB [ 392.436906][ T4152] bio-200 85KB 116KB [ 392.465621][ T4152] biovec-max 369KB 743KB [ 392.496002][ T4152] biovec-128 63KB 63KB [ 392.502131][ T4152] biovec-64 157KB 157KB [ 392.508193][ T4152] biovec-16 22KB 22KB [ 392.543583][ T4152] bio_integrity_payload 7KB 7KB [ 392.550029][ T4152] khugepaged_mm_slot 7KB 7KB [ 392.574317][ T4152] ksm_mm_slot 8KB 8KB [ 392.580421][ T4152] uid_cache 7KB 7KB [ 392.603021][ T4152] dmaengine-unmap-256 30KB 30KB [ 392.609278][ T4152] dmaengine-unmap-128 15KB 15KB [ 392.632538][ T4152] dmaengine-unmap-16 4KB 4KB [ 392.638717][ T4152] dmaengine-unmap-2 4KB 4KB [ 392.668622][ T4152] QIPCRTR 31KB 31KB [ 392.686239][ T4152] audit_buffer 7KB 7KB [ 392.692384][ T4152] skbuff_ext_cache 44KB 44KB [ 392.698456][ T4152] skbuff_fclone_cache 22KB 52KB [ 392.726719][ T4152] skbuff_head_cache 396072KB 396112KB [ 392.743911][ T4152] configfs_dir_cache 8KB 8KB [ 392.750081][ T4152] file_lock_cache 55KB 70KB [ 392.774304][ T4152] file_lock_ctx 15KB 15KB [ 392.780393][ T4152] fsnotify_mark_connector 56KB 56KB [ 392.831553][ T4152] taskstats 100KB 100KB [ 392.837659][ T4152] proc_dir_entry 679KB 712KB [ 392.870265][ T4152] pde_opener 15KB 15KB [ 392.900765][ T4152] seq_file 78KB 93KB [ 392.906861][ T4152] sigqueue 82KB 82KB [ 392.935764][ T4152] shmem_inode_cache 6975KB 7649KB [ 392.941891][ T4152] kernfs_iattrs_cache 7KB 7KB [ 392.948164][ T4152] kernfs_node_cache 25670KB 26240KB [ 392.982073][ T4152] mnt_cache 149KB 149KB [ 392.988177][ T4152] filp 294KB 990KB [ 393.013277][ T4152] names_cache 178KB 386KB [ 393.019362][ T4152] net_namespace 79KB 79KB [ 393.032617][ T4152] iint_cache 45KB 45KB [ 393.038709][ T4152] lsm_inode_cache 1842KB 2115KB [ 393.061269][ T4152] lsm_file_cache 144KB 315KB [ 393.067345][ T4152] key_jar 15KB 15KB [ 393.101312][ T4152] uts_namespace 15KB 15KB [ 393.107407][ T4152] nsproxy 7KB 7KB [ 393.119124][ T4152] vm_area_struct 446KB 707KB [ 393.130915][ T4152] fs_cache 54KB 72KB [ 393.136987][ T4152] files_cache 185KB 318KB [ 393.166785][ T4152] signal_cache 814KB 2006KB [ 393.189804][ T4152] sighand_cache 931KB 931KB [ 393.212603][ T4152] task_struct 2603KB 4194KB [ 393.218701][ T4152] cred_jar 163KB 412KB [ 393.230712][ T4152] anon_vma_chain 238KB 346KB [ 393.236861][ T4152] anon_vma 270KB 294KB [ 393.265013][ T4152] pid 148KB 311KB [ 393.271162][ T4152] Acpi-Operand 210KB 245KB [ 393.277224][ T4152] Acpi-ParseExt 23KB 23KB [ 393.313382][ T4152] Acpi-Parse 126KB 126KB [ 393.319486][ T4152] Acpi-State 78KB 114KB [ 393.339277][ T4152] Acpi-Namespace 28KB 28KB [ 393.363061][ T4152] shared_policy_node 8KB 8KB [ 393.369232][ T4152] numa_policy 7KB 7KB [ 393.375317][ T4152] perf_event 31KB 31KB [ 393.392771][ T4152] trace_event_file 432KB 432KB [ 393.398854][ T4152] ftrace_event_field 548KB 548KB [ 393.423303][ T4152] pool_workqueue 248KB 320KB [ 393.429394][ T4152] task_group 30KB 30KB [ 393.465226][ T4152] mm_struct 337KB 598KB [ 393.482494][ T4152] vmap_area 324KB 378KB [ 393.488901][ T4152] debug_objects_cache 1789KB 2427KB [ 393.523939][ T4152] page->ptl 126KB 200KB [ 393.530066][ T4152] kmalloc-cg-8k 1440KB 1568KB [ 393.536161][ T4152] kmalloc-cg-4k 3400KB 4608KB [ 393.549903][ T4152] kmalloc-cg-2k 792KB 1056KB [ 393.572594][ T4152] kmalloc-cg-1k 614KB 864KB [ 393.578683][ T4152] kmalloc-cg-512 1246KB 1952KB [ 393.584775][ T4152] kmalloc-cg-256 24KB 24KB [ 393.614067][ T4152] kmalloc-cg-192 112KB 112KB [ 393.620162][ T4152] kmalloc-cg-128 94KB 108KB [ 393.656329][ T4152] kmalloc-cg-96 60KB 60KB [ 393.670071][ T4152] kmalloc-cg-64 40KB 40KB [ 393.710354][ T4152] kmalloc-cg-32 48KB 48KB [ 393.718738][ T4152] kmalloc-cg-16 70KB 176KB [ 393.749273][ T4152] kmalloc-cg-8 11KB 11KB [ 393.755441][ T4152] kmalloc-8k 7456KB 8032KB [ 393.800870][ T4152] kmalloc-4k 439528KB 439736KB [ 393.807133][ T4152] kmalloc-2k 19172KB 23072KB [ 393.830871][ T4152] kmalloc-1k 1907490KB 1907556KB [ 393.837034][ T4152] kmalloc-512 16191KB 21840KB [ 393.870808][ T4152] kmalloc-256 4267KB 4552KB [ 393.876937][ T4152] kmalloc-192 1096KB 1656KB [ 393.900814][ T4152] kmalloc-128 1328KB 1584KB [ 393.906918][ T4152] kmalloc-96 765KB 936KB [ 393.930830][ T4152] kmalloc-64 2924KB 3652KB [ 393.936925][ T4152] kmalloc-32 724KB 936KB [ 393.945871][ T4152] kmalloc-16 234KB 336KB [ 393.952023][ T4152] kmalloc-8 476KB 549KB [ 393.958084][ T4152] kmem_cache_node 207KB 212KB [ 393.964242][ T4152] kmem_cache 176KB 176KB [ 393.975000][ T4152] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor,pid=4152,uid=0 [ 394.002038][ T4152] Out of memory (oom_kill_allocating_task): Killed process 4152 (syz-executor) total-vm:140904kB, anon-rss:1544kB, file-rss:5668kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 396.579200][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.688722][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.224429][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.783156][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0