last executing test programs: 2m36.146331503s ago: executing program 3 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m35.767071241s ago: executing program 3 (id=60): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, r1, 0x0) setpriority(0x1, 0x0, 0x0) 2m35.33738508s ago: executing program 3 (id=63): mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000007ffff"], 0x13) write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000400ec"], 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 2m35.177090919s ago: executing program 3 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) 2m35.035106158s ago: executing program 3 (id=66): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r1, &(0x7f0000000140)="e0", 0x1) 2m34.684672817s ago: executing program 3 (id=69): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) 2m34.376212715s ago: executing program 32 (id=69): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) 2m16.303955331s ago: executing program 2 (id=179): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x10000) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecd, 0xffffffff00003f00}, 0x8}], 0x1, 0x2002, 0x0) syz_usb_connect(0x4, 0x3f, 0x0, 0x0) 2m13.027756397s ago: executing program 2 (id=204): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x801c) dup2(r1, r0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 2m12.724815847s ago: executing program 2 (id=208): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x31) r2 = io_uring_setup(0x1d7f, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0xd, 0x0, 0x0) 2m12.517249965s ago: executing program 2 (id=211): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) fallocate(r0, 0x10, 0x0, 0x2000) 2m12.027665793s ago: executing program 2 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) 2m10.704733408s ago: executing program 2 (id=221): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x0) 2m10.292582607s ago: executing program 33 (id=221): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x0) 1m5.53260315s ago: executing program 6 (id=766): syz_mount_image$hfs(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x1, 0x2a8, &(0x7f0000000540)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/54, 0x36) getdents(r0, 0x0, 0x58) 1m5.339256179s ago: executing program 6 (id=768): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m2.988691889s ago: executing program 6 (id=785): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000001040)=[{&(0x7f0000001080)="ff", 0x4000}], 0x1, 0x5412, 0x0, 0x10) 1m2.099284506s ago: executing program 6 (id=794): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) 1m1.632898774s ago: executing program 6 (id=797): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lremovexattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000380)=@known='trusted.overlay.origin\x00') 1m1.156078871s ago: executing program 6 (id=806): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/54, 0x36) r1 = fanotify_init(0x1, 0x2) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x641, 0x800101b, r2, 0x0) 1m0.78900446s ago: executing program 34 (id=806): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/54, 0x36) r1 = fanotify_init(0x1, 0x2) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x641, 0x800101b, r2, 0x0) 41.524095321s ago: executing program 0 (id=944): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) r1 = fanotify_init(0x1, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x20) 41.3497091s ago: executing program 0 (id=946): r0 = syz_io_uring_setup(0x345b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$dri(&(0x7f0000000d40), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x12, 0x0, 0x0, 0xffffffff, &(0x7f00000001c0)=[r3], 0x4250}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 41.140780619s ago: executing program 0 (id=949): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 40.935406228s ago: executing program 0 (id=953): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x200003, &(0x7f0000000000)=ANY=[], 0x21, 0x1cf, &(0x7f0000000740)="$eJzsVU+rElEU/x1nHK1Fto6gRRK2SGfGinYZRPQB2kaJTiaN/XGEUoSmld8jAr9Gi/ZtghZBG1tU0MJoGxP33jPjnd5b6HuKPLg/0N+5598998zl3MfRiwgA/i6nHbQg4eAMvhDBBnCBlO5OSfFPR3Gd199txZdZ/5Y5YUTjyZN2GAbDLQlJkrz+33S4d0EVgk32kJVzXGr6tLxf2TTPDgTaXeYjNConiCuwzcKSyvrOt2/t86PkhAeW6uN2Ev7Z93GG9vHCxSBY2/kdcheAhGCtHy4FOmhaLW++KeCXvOmfl9OOEB7ylBK6rvqR7iO+5gfN55wtf2QhyXzEzSeISVNCYzR43ojGkyv9QbsX9IKnvt+87l513Wt+41E/DFz1T9oW6YgS3JJJgFOavQjgKw/Y09DwQ2y7Ko3tpMeK9ic8pGsXkUNBi7WYCe+zWA6DaME9XEIZwMuYNG1VZrEhj3QXBIsXHpcLyvYqS0O98yzszkCgNGwOO8vhLVCUC2dVo7I0b8SpasZcZS4yz5kXzOmblb5FtszwjVe1WJT4qj0aDT3nI4d44tWTOt9Jrf7ZWG+Y2PW3kz/c+RIMDAwMDAwMDE4Y/gUAAP//ruxR0w==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 40.796100288s ago: executing program 0 (id=954): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB=',\n2'], 0x23) 40.277016626s ago: executing program 0 (id=959): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x2}, 0x8) 40.029179765s ago: executing program 35 (id=959): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x2}, 0x8) 20.278091823s ago: executing program 4 (id=1050): syz_open_dev$sndmidi(0x0, 0xffffffffffff741d, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1, &(0x7f00000003c0)=""/42, 0x2a}, 0x1ff}], 0xffc, 0x40000102, 0x0) 20.048818043s ago: executing program 4 (id=1051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0x1041) 19.921269442s ago: executing program 4 (id=1053): r0 = socket$inet(0x2, 0x2000000000003, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r0, &(0x7f0000001cc0)={0x2, 0x0, @multicast2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 19.765405321s ago: executing program 4 (id=1054): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 19.27419788s ago: executing program 4 (id=1057): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x9, r2, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) 18.216707515s ago: executing program 4 (id=1067): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) recvmsg(r1, &(0x7f0000000040)={0x0, 0x4f, 0x0}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) 17.678346313s ago: executing program 36 (id=1067): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) recvmsg(r1, &(0x7f0000000040)={0x0, 0x4f, 0x0}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) 6.393339026s ago: executing program 8 (id=1136): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@usrquota}, {@largeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000}]) 4.218789417s ago: executing program 8 (id=1149): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x10, {0x10, 0x0, "822500c302e9ce27a24b0fa6591d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.120590007s ago: executing program 9 (id=1150): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[], 0x0) 3.788772525s ago: executing program 9 (id=1153): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0) 3.332262074s ago: executing program 1 (id=1155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file1', [{0x20, '(*c:,-'}], 0xa, "d161050000000000000074bdca9720dfcc73de5b223a3c160f225bcf4c83ef6cefab8104649d48cdb9a6c7669fce915c6e7588a6259b6eb774f58cd31674f96d061a0a52557ef17ec0c8dd11d285470d6593ad67b8abeffaefcf36c8627e38b8b9bcee53e0ced78be7cb5a48f0c547029cac"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 3.265599833s ago: executing program 9 (id=1156): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x44b}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.060893482s ago: executing program 1 (id=1157): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="530000000700004600c7693672b58ade"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 2.947226942s ago: executing program 1 (id=1159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {{{}, {0xb4c}, @device_a, @device_b, @random="5253f024da72"}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2.736777771s ago: executing program 1 (id=1160): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036812e0ff64120200475400f6a13bb1000000080088474820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.5077291s ago: executing program 1 (id=1162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000080)) 1.876824638s ago: executing program 7 (id=1166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001000000", @ANYRESOCT=r0]) 1.638371707s ago: executing program 7 (id=1169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 1.527712686s ago: executing program 1 (id=1170): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001400000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.526984526s ago: executing program 7 (id=1171): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x100084, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000380)={0xa, 0x4e22, 0xffffffff, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd8a}}], 0x1, 0x40002103, 0x0) 1.352077936s ago: executing program 5 (id=1173): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) r3 = eventfd2(0x936, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x22, 0x0, 0x5, 0x0, 0x0, 0xb}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.349324256s ago: executing program 7 (id=1174): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\x15+\xbcA\x8a\xda)\xb6Po\xfa\xab\x98\xcb:9w\xaf\xae\x1cn\xad\x15\xd2Y\x92\x04\x00i\x9b\xc0|\xbf\x15\x11YP\xf1\\a\xfd\x02\x1b;\xe8\xc4^\xac\x94+\x03\r^:\x96\xcd\xce\x02\xd8\xfb\xfa\xc0\x0fPs\xf5wl\x87b\x86\x14\xba\x89Y-\xd8<\x93\x8e8^\x03U\"0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.184735665s ago: executing program 9 (id=1176): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 1.130719025s ago: executing program 5 (id=1177): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0xfffd, @local}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) 1.005977165s ago: executing program 8 (id=1178): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) dup3(r1, r0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000000200)={0x2}, 0x20) 998.972524ms ago: executing program 9 (id=1179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x44}}, 0x0) 915.379254ms ago: executing program 7 (id=1180): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@user_xattr}]}, 0x1, 0x5e3, &(0x7f00000009c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) fchown(r0, 0x0, 0xee01) 915.007684ms ago: executing program 5 (id=1181): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 871.883663ms ago: executing program 8 (id=1182): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYRES8], 0x11, 0x2e1, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300), 0x1000a) 746.944193ms ago: executing program 9 (id=1183): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1f00) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000004}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) 641.066183ms ago: executing program 5 (id=1184): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0xe) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x5) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x28) read$dsp(r0, &(0x7f00000001c0)=""/173, 0xad) 507.797252ms ago: executing program 8 (id=1185): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004010}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 368.560121ms ago: executing program 7 (id=1186): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 347.354691ms ago: executing program 5 (id=1187): unshare(0x22000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 5 (id=1188): r0 = socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 7 [ 147.830626][ T4253] syz-executor: attempt to access beyond end of device [ 147.830626][ T4253] loop0: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 147.867677][ T4253] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 148.323062][ T6963] loop6: detected capacity change from 0 to 128 [ 148.349802][ T6958] loop1: detected capacity change from 0 to 40427 [ 148.410100][ T6963] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 148.432646][ T6958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.447036][ T6954] loop4: detected capacity change from 0 to 40427 [ 148.480289][ T6954] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 148.489793][ T6954] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.541696][ T6963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.554727][ T6954] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.614916][ T6958] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 148.623412][ T6963] UDF-fs: error (device loop6): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 96) [ 148.630940][ T6958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.677081][ T6954] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 148.718208][ T6954] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 148.769557][ T26] audit: type=1800 audit(1734356225.505:52): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.676" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 148.786729][ T6973] loop5: detected capacity change from 0 to 4096 [ 148.797470][ T4252] syz-executor: attempt to access beyond end of device [ 148.797470][ T4252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.841352][ T26] audit: type=1800 audit(1734356225.535:53): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.676" name="file1" dev="loop4" ino=14 res=0 errno=0 [ 148.889578][ T6973] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 148.985148][ T6973] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 149.309332][ T4658] ntfs3: loop5: ntfs3_write_inode r=5 failed, -22. [ 149.328346][ T4585] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 149.530217][ T6986] loop5: detected capacity change from 0 to 512 [ 149.563757][ T6986] EXT4-fs: Ignoring removed nobh option [ 149.593657][ T6986] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.663580][ T6986] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 149.676183][ T6992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.689'. [ 149.724482][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'. [ 150.207827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.381614][ T26] audit: type=1800 audit(1734356227.115:54): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.687" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 150.458738][ T7001] loop1: detected capacity change from 0 to 32768 [ 150.486155][ T7001] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.692 (7001) [ 150.499379][ T4585] EXT4-fs (loop5): unmounting filesystem. [ 150.575551][ T7001] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 150.594158][ T7001] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 150.644960][ T7001] BTRFS info (device loop1): turning off barriers [ 150.674842][ T7001] BTRFS info (device loop1): setting nodatasum [ 150.701396][ T7001] BTRFS info (device loop1): enabling auto defrag [ 150.721643][ T7001] BTRFS info (device loop1): force zlib compression, level 3 [ 150.745135][ T7001] BTRFS info (device loop1): doing ref verification [ 150.751768][ T7001] BTRFS info (device loop1): using free space tree [ 150.779065][ T7013] loop6: detected capacity change from 0 to 128 [ 150.812940][ T7013] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.856895][ T7013] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.889918][ T6999] loop4: detected capacity change from 0 to 32768 [ 150.894919][ T4918] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 151.002987][ T6999] XFS (loop4): Mounting V5 Filesystem [ 151.061525][ T6999] XFS (loop4): Ending clean mount [ 151.084969][ T6999] XFS (loop4): Quotacheck needed: Please wait. [ 151.101379][ T4918] usb 1-1: Using ep0 maxpacket: 32 [ 151.113361][ T4918] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.181897][ T4918] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.227010][ T4918] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.254750][ T4918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.283936][ T4918] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.315788][ T4918] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.344702][ T4918] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.362612][ T4918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.407525][ T4918] usb 1-1: config 0 descriptor?? [ 151.414239][ T6999] XFS (loop4): Quotacheck: Done. [ 151.443740][ T4252] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 151.462756][ T6999] XFS (loop4): User initiated shutdown received. [ 151.479966][ T6999] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 151.543071][ T7015] loop5: detected capacity change from 0 to 32768 [ 151.585088][ T6999] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 151.642642][ T4918] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 151.666904][ T7015] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 151.752392][ T4246] XFS (loop4): Unmounting Filesystem [ 151.868219][ T4585] ocfs2: Unmounting device (7,5) on (node local) [ 151.889425][ C0] usblp0: nonzero read bulk status received: -71 [ 151.914881][ T4415] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 151.914917][ T4843] usb 1-1: USB disconnect, device number 10 [ 152.134274][ T7009] usblp0: removed [ 152.144831][ T4415] usb 7-1: Using ep0 maxpacket: 8 [ 152.152328][ T4415] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.179118][ T4415] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.208734][ T4415] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.252485][ T4415] usb 7-1: config 0 descriptor?? [ 152.350325][ T7063] Sensor A: ================= START STATUS ================= [ 152.371221][ T7063] Sensor A: Test Pattern: 75% Colorbar [ 152.380244][ T7063] Sensor A: Show Information: All [ 152.387231][ T7063] Sensor A: Vertical Flip: false [ 152.392419][ T7063] Sensor A: Horizontal Flip: false [ 152.398430][ T7063] Sensor A: Brightness: 128 [ 152.404387][ T7063] Sensor A: Contrast: 128 [ 152.410028][ T7063] Sensor A: Hue: 0 [ 152.413810][ T7063] Sensor A: Saturation: 128 [ 152.419797][ T7063] Sensor A: ================== END STATUS ================== [ 152.477352][ T4415] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 152.566812][ T4843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 152.769482][ T4843] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.803658][ T4843] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 152.834834][ T4843] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.845294][ T4843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 152.864271][ T7083] loop4: detected capacity change from 0 to 256 [ 152.871724][ T4843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 152.918657][ T26] audit: type=1326 audit(1734356229.655:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee48985d19 code=0x7ffc0000 [ 152.959107][ T4843] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.995104][ T26] audit: type=1326 audit(1734356229.655:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee48984680 code=0x7ffc0000 [ 152.998806][ T4843] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.073735][ T4843] usb 6-1: Product: syz [ 153.081168][ T4843] usb 6-1: Manufacturer: syz [ 153.096948][ T26] audit: type=1326 audit(1734356229.655:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee48985d19 code=0x7ffc0000 [ 153.114595][ T4843] cdc_wdm 6-1:1.0: skipping garbage [ 153.126463][ T4843] cdc_wdm 6-1:1.0: skipping garbage [ 153.152899][ T26] audit: type=1326 audit(1734356229.655:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fee48985d19 code=0x7ffc0000 [ 153.159832][ T4843] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 153.220872][ T4843] cdc_wdm 6-1:1.0: Unknown control protocol [ 153.231316][ T26] audit: type=1326 audit(1734356229.655:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee48985d19 code=0x7ffc0000 [ 153.279611][ T4289] usb 7-1: USB disconnect, device number 6 [ 153.351229][ T4843] usb 6-1: USB disconnect, device number 6 [ 153.444375][ T7097] loop1: detected capacity change from 0 to 2048 [ 153.483248][ T7100] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.523180][ T7097] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 153.561170][ T7097] Remounting filesystem read-only [ 153.613615][ T7102] loop0: detected capacity change from 0 to 512 [ 153.638995][ T7102] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.702317][ T7102] EXT4-fs (loop0): 1 truncate cleaned up [ 153.709180][ T7102] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.818082][ T7093] loop4: detected capacity change from 0 to 32768 [ 153.832217][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 153.848890][ T7093] XFS (loop4): Mounting V5 Filesystem [ 154.040762][ T7093] XFS (loop4): Ending clean mount [ 154.073664][ T7093] XFS (loop4): Quotacheck needed: Please wait. [ 154.132584][ T7127] loop6: detected capacity change from 0 to 256 [ 154.164528][ T7093] XFS (loop4): Quotacheck: Done. [ 154.213780][ T7127] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017bf5, chksum : 0xdbcee88d, utbl_chksum : 0xe619d30d) [ 154.262218][ T7127] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 154.317859][ T4843] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 154.334439][ T4246] XFS (loop4): Unmounting Filesystem [ 154.337226][ T4414] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.499400][ T7137] loop6: detected capacity change from 0 to 4096 [ 154.516315][ T4843] usb 6-1: Using ep0 maxpacket: 8 [ 154.530823][ T4843] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 154.536698][ T7137] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 154.539116][ T4843] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.557988][ T4843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.568055][ T4843] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.578972][ T4843] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.586592][ T4414] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 154.592168][ T4843] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.601337][ T4415] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 154.610152][ T4843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.639961][ T4414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.650301][ T7137] EXT4-fs (loop6): shut down requested (1) [ 154.665494][ T4414] usb 2-1: config 0 descriptor?? [ 154.682146][ T4414] cp210x 2-1:0.0: cp210x converter detected [ 154.699011][ T5247] EXT4-fs (loop6): unmounting filesystem. [ 154.707277][ T4338] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 154.718225][ T4338] Quota error (device loop6): write_blk: dquota write failed [ 154.725993][ T4338] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 154.832846][ T4843] usb 6-1: usb_control_msg returned -32 [ 154.839536][ T4843] usbtmc 6-1:16.0: can't read capabilities [ 154.848936][ T4415] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.869059][ T4415] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.902628][ T4415] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.934102][ T4415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.944064][ T4415] usb 1-1: SerialNumber: syz [ 155.091546][ T4414] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 155.158610][ T4415] usb 1-1: 0:2 : does not exist [ 155.163565][ T4415] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 155.186506][ T4415] usb 1-1: USB disconnect, device number 11 [ 155.204912][ T4843] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 155.306217][ T4414] usb 2-1: cp210x converter now attached to ttyUSB0 [ 155.426035][ T4843] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 155.430868][ T4402] usb 6-1: USB disconnect, device number 7 [ 155.445982][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.449049][ T4843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.470520][ T4843] usb 7-1: Product: syz [ 155.475112][ T4843] usb 7-1: Manufacturer: syz [ 155.479921][ T4843] usb 7-1: SerialNumber: syz [ 155.493856][ T4843] usb 7-1: config 0 descriptor?? [ 155.514522][ T4289] usb 2-1: USB disconnect, device number 4 [ 155.534450][ T4843] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 155.546615][ T4289] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 155.581176][ T4289] cp210x 2-1:0.0: device disconnected [ 156.263768][ T7164] Falling back ldisc for ttyS3. [ 156.280011][ T26] audit: type=1326 audit(1734356233.015:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.1.749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0058385d19 code=0x0 [ 156.532337][ T4843] gspca_sunplus: reg_w_riv err -71 [ 156.537835][ T4843] sunplus: probe of 7-1:0.0 failed with error -71 [ 156.562398][ T4843] usb 7-1: USB disconnect, device number 7 [ 156.612036][ T26] audit: type=1326 audit(1734356233.345:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6eb85d19 code=0x7ffc0000 [ 156.675573][ T26] audit: type=1326 audit(1734356233.345:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7efd6eb85d19 code=0x7ffc0000 [ 156.749156][ T26] audit: type=1326 audit(1734356233.395:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7174 comm="syz.5.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6eb85d19 code=0x7ffc0000 [ 157.180656][ T7193] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 157.226549][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.237074][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.427374][ T7203] loop5: detected capacity change from 0 to 256 [ 157.450422][ T7205] loop6: detected capacity change from 0 to 64 [ 157.478271][ T7203] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x607ca4ac, utbl_chksum : 0xe619d30d) [ 157.617565][ T7203] exFAT-fs (loop5): hint_cluster is invalid (17) [ 157.660281][ T7203] exFAT-fs (loop5): error, broken FAT chain. [ 157.674785][ T7203] exFAT-fs (loop5): Filesystem has been set read-only [ 157.681869][ T7203] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805ac19b60 iblock : 8, err : -5) [ 157.715803][ T7203] exFAT-fs (loop5): error, broken FAT chain. [ 157.720582][ T7209] loop1: detected capacity change from 0 to 2048 [ 157.722229][ T7203] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805ac19b60 iblock : 8, err : -5) [ 157.786763][ T7209] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 157.801442][ T7209] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.814994][ T4843] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 157.896236][ T7199] loop4: detected capacity change from 0 to 32768 [ 157.974948][ T4289] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 157.994952][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 158.000219][ T7199] XFS (loop4): Mounting V5 Filesystem [ 158.055793][ T4843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.090417][ T4843] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 51737, setting to 64 [ 158.118102][ T4843] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.130862][ T4843] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.140351][ T4843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.149257][ T4843] usb 1-1: Product: syz [ 158.153561][ T4843] usb 1-1: Manufacturer: syz [ 158.158615][ T4843] usb 1-1: SerialNumber: syz [ 158.190029][ T7199] XFS (loop4): Ending clean mount [ 158.196547][ T4289] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 158.204149][ T7229] loop5: detected capacity change from 0 to 64 [ 158.207967][ T4289] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 158.224489][ T4289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.228011][ T7199] XFS (loop4): Quotacheck needed: Please wait. [ 158.242674][ T4289] usb 7-1: config 0 descriptor?? [ 158.248654][ T7211] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 158.257758][ T4289] hub 7-1:0.0: USB hub found [ 158.271208][ T7229] hfs: unable to parse mount options [ 158.336883][ T7199] XFS (loop4): Quotacheck: Done. [ 158.467422][ T4289] hub 7-1:0.0: 1 port detected [ 158.492285][ T26] audit: type=1326 audit(1734356235.225:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0058385d19 code=0x7ffc0000 [ 158.565612][ T26] audit: type=1326 audit(1734356235.225:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0058385d19 code=0x7ffc0000 [ 158.604506][ T26] audit: type=1326 audit(1734356235.285:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0058385d19 code=0x7ffc0000 [ 158.635563][ T26] audit: type=1326 audit(1734356235.285:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7234 comm="syz.1.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0058385d19 code=0x7ffc0000 [ 158.688793][ T4246] XFS (loop4): Unmounting Filesystem [ 159.192742][ T4843] cdc_ncm 1-1:1.0: bind() failure [ 159.225065][ T4843] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 159.262032][ T4843] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 159.292002][ T4295] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 159.301828][ T4289] usb 7-1: USB disconnect, device number 8 [ 159.307897][ T4843] usbtest: probe of 1-1:1.1 failed with error -71 [ 159.353739][ T4843] usb 1-1: USB disconnect, device number 12 [ 159.632148][ T7263] loop1: detected capacity change from 0 to 2048 [ 159.651857][ T7245] loop5: detected capacity change from 0 to 32768 [ 159.677568][ T7263] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 159.691602][ T7245] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.776 (7245) [ 159.717664][ T7263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.737063][ T7245] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.766710][ T7245] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 159.810528][ T7245] BTRFS info (device loop5): using free space tree [ 160.064800][ T7245] BTRFS info (device loop5): enabling ssd optimizations [ 160.069887][ T7297] loop6: detected capacity change from 0 to 2048 [ 160.168046][ T7297] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 160.283638][ T7297] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 160.388527][ T7297] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 9 with error 28 [ 160.425996][ T4585] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.429786][ T56] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 160.461449][ T7297] EXT4-fs (loop6): This should not happen!! Data will be lost [ 160.461449][ T7297] [ 160.488795][ T7297] EXT4-fs (loop6): Total free blocks count 0 [ 160.503457][ T7297] EXT4-fs (loop6): Free/Dirty block details [ 160.536806][ T7297] EXT4-fs (loop6): free_blocks=66060288 [ 160.560692][ T7297] EXT4-fs (loop6): dirty_blocks=16 [ 160.589885][ T7297] EXT4-fs (loop6): Block reservation details [ 160.609414][ T7297] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 160.924427][ T5247] EXT4-fs (loop6): unmounting filesystem. [ 161.069764][ T7326] loop5: detected capacity change from 0 to 256 [ 161.081210][ T7320] loop4: detected capacity change from 0 to 4096 [ 161.111151][ T7320] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 161.140965][ T7326] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.190915][ T7332] device pim6reg1 entered promiscuous mode [ 161.421598][ T4246] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 161.469921][ T4246] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 161.496685][ T4246] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 161.549750][ T7337] capability: warning: `syz.5.799' uses deprecated v2 capabilities in a way that may be insecure [ 161.834828][ T4289] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 161.869737][ T4658] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.031310][ T4658] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.041466][ T4289] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.059838][ T4289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.085811][ T4289] usb 1-1: config 0 has no interface number 0 [ 162.106833][ T4289] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 162.116835][ T4289] usb 1-1: config 0 interface 51 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.131955][ T4289] usb 1-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice=7e.68 [ 162.141994][ T4289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.174285][ T4658] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.190194][ T4289] usb 1-1: config 0 descriptor?? [ 162.210647][ T4289] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 162.369140][ T4658] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.484977][ T4755] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 162.679614][ T4260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 162.692434][ T4260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 162.696497][ T4755] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.709605][ T4260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 162.714662][ T4755] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 162.737698][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 162.745569][ T4260] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 162.753276][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.765315][ T4755] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.815842][ T4755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 162.847481][ T4755] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 162.861496][ T4755] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.895330][ T4755] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.903387][ T4755] usb 6-1: Product: syz [ 162.914209][ T4755] usb 6-1: Manufacturer: syz [ 162.974386][ T4755] cdc_wdm 6-1:1.0: skipping garbage [ 162.987442][ T4755] cdc_wdm 6-1:1.0: skipping garbage [ 163.010638][ T4755] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 163.017465][ T4289] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 163.029428][ T4755] cdc_wdm 6-1:1.0: Unknown control protocol [ 163.219996][ T4289] usb 1-1: USB disconnect, device number 13 [ 163.249852][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 163.256488][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 163.265247][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 163.271866][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 163.295905][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 163.302532][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 163.315430][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 163.322051][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 163.332872][ T4236] usb 6-1: USB disconnect, device number 8 [ 163.492075][ T7364] loop1: detected capacity change from 0 to 32768 [ 163.652486][ T7364] JBD2: Ignoring recovery information on journal [ 163.739739][ T7364] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 163.798020][ T7396] sctp: [Deprecated]: syz.4.820 (pid 7396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.798020][ T7396] Use struct sctp_sack_info instead [ 164.000833][ T7365] chnl_net:caif_netlink_parms(): no params data found [ 164.093692][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 164.267757][ T7413] binder: 7412:7413 ioctl c018620b 20000040 returned -14 [ 164.473876][ T7419] loop5: detected capacity change from 0 to 1024 [ 164.554826][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 164.699317][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.714833][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.723078][ T7365] device bridge_slave_0 entered promiscuous mode [ 164.824114][ T4258] Bluetooth: hci1: command 0x0409 tx timeout [ 164.835760][ T33] hfsplus: b-tree write err: -5, ino 4 [ 164.888969][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.902331][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.911187][ T7365] device bridge_slave_1 entered promiscuous mode [ 165.032753][ T7433] loop0: detected capacity change from 0 to 1024 [ 165.039361][ T4658] device hsr_slave_0 left promiscuous mode [ 165.056059][ T4658] device hsr_slave_1 left promiscuous mode [ 165.093679][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.116830][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.144071][ T4658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.169437][ T4658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.194294][ T4658] device bridge_slave_1 left promiscuous mode [ 165.209175][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.239684][ T4302] hfsplus: b-tree write err: -5, ino 4 [ 165.252399][ T4658] device bridge_slave_0 left promiscuous mode [ 165.262147][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.366039][ T4658] device veth1_macvtap left promiscuous mode [ 165.376597][ T4658] device veth0_macvtap left promiscuous mode [ 165.383721][ T7452] loop0: detected capacity change from 0 to 512 [ 165.393649][ T4658] device veth1_vlan left promiscuous mode [ 165.411795][ T4658] device veth0_vlan left promiscuous mode [ 165.477204][ T7452] EXT4-fs (loop0): 1 orphan inode deleted [ 165.484918][ T7452] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 165.507643][ T4302] __quota_error: 10 callbacks suppressed [ 165.507659][ T4302] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 165.509744][ T7452] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.513448][ T4302] EXT4-fs error (device loop0): ext4_release_dquot:6817: comm kworker/u4:5: Failed to release dquot type 1 [ 166.218042][ T26] audit: type=1800 audit(1734356242.945:78): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.836" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 166.395405][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 166.401573][ T33] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 166.409012][ T4658] team0 (unregistering): Port device team_slave_1 removed [ 166.412668][ T33] EXT4-fs error (device loop0): ext4_release_dquot:6817: comm kworker/u4:2: Failed to release dquot type 1 [ 166.521034][ T4658] team0 (unregistering): Port device team_slave_0 removed [ 166.564224][ T4658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.621410][ T4658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.902733][ T4260] Bluetooth: hci1: command 0x041b tx timeout [ 167.100966][ T4658] bond0 (unregistering): Released all slaves [ 167.192037][ T7365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.223425][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'. [ 167.260113][ T7365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.438934][ T7365] team0: Port device team_slave_0 added [ 167.461140][ T7365] team0: Port device team_slave_1 added [ 167.534133][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.611864][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.714259][ T7365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.753711][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.778094][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.800816][ T7478] loop1: detected capacity change from 0 to 4096 [ 167.862034][ T7365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.878804][ T7478] ntfs3: loop1: ino=3, Correct links count -> 2. [ 168.063143][ T7478] ntfs3: loop1: failed to convert "0080" to cp874 [ 168.090692][ T7365] device hsr_slave_0 entered promiscuous mode [ 168.127581][ T7365] device hsr_slave_1 entered promiscuous mode [ 168.214405][ T7490] loop4: detected capacity change from 0 to 256 [ 168.344373][ T7490] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 168.435864][ T7494] netlink: 'syz.1.847': attribute type 4 has an invalid length. [ 168.446466][ T7490] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 168.446466][ T7490] [ 168.464893][ T7490] exFAT-fs (loop4): Filesystem has been set read-only [ 168.558732][ T7490] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 168.558732][ T7490] [ 168.609380][ T7481] loop5: detected capacity change from 0 to 32768 [ 168.615434][ T7490] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805ac194e0 iblock : 0, err : -5) [ 168.626429][ T7481] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.845 (7481) [ 168.684357][ T7365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 168.696886][ T7481] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 168.750256][ T7481] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 168.750406][ T7365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 168.785221][ T7481] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 168.815691][ T7481] BTRFS info (device loop5): use zstd compression, level 3 [ 168.822938][ T7481] BTRFS info (device loop5): using free space tree [ 168.851037][ T7365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 168.896967][ T7365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 168.964998][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 169.234766][ T7481] BTRFS info (device loop5): enabling ssd optimizations [ 169.336548][ T7365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.356141][ T7365] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.371404][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.423370][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.505411][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.557755][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.585765][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.592925][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.685694][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.694526][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.705208][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.710174][ T4585] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 169.712281][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.785195][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.873610][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.916033][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.007357][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.134743][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.156782][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.202787][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.242893][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.253992][ T7542] loop0: detected capacity change from 0 to 256 [ 170.279119][ T7542] exfat: Unknown parameter 'erûPr‰QÇroråÐ{Ös' [ 170.286468][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.324138][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.351736][ T7365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.367267][ T7542] devpts: called with bogus options [ 170.370543][ T7507] loop4: detected capacity change from 0 to 40427 [ 170.424058][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.443419][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.464532][ T7507] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 170.498233][ T7507] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 170.526525][ T7507] F2FS-fs (loop4): invalid crc value [ 170.608376][ T7507] F2FS-fs (loop4): Found nat_bits in checkpoint [ 170.734220][ T7546] loop5: detected capacity change from 0 to 4096 [ 170.781505][ T7507] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 170.825487][ T7507] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.970238][ T7524] loop1: detected capacity change from 0 to 65536 [ 171.005923][ T26] audit: type=1804 audit(1734356247.735:79): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.850" name="/newroot/173/file0/file0" dev="loop4" ino=10 res=1 errno=0 [ 171.046745][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 171.083926][ T7570] loop0: detected capacity change from 0 to 256 [ 171.126196][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.137057][ T7524] XFS (loop1): Mounting V5 Filesystem [ 171.175023][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 171.183173][ T4246] bio_check_eod: 1 callbacks suppressed [ 171.183187][ T4246] syz-executor: attempt to access beyond end of device [ 171.183187][ T4246] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.219694][ T7365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.248303][ T4324] kernel write not supported for file /319/attr/current (pid: 4324 comm: kworker/1:7) [ 171.282988][ T7524] XFS (loop1): Ending clean mount [ 171.321168][ T7524] XFS (loop1): Quotacheck needed: Please wait. [ 171.434053][ T7524] XFS (loop1): Quotacheck: Done. [ 171.678076][ T4252] XFS (loop1): Unmounting Filesystem [ 172.153784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.181281][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.256614][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.291604][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.335199][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.365290][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.392218][ T7365] device veth0_vlan entered promiscuous mode [ 172.443577][ T7365] device veth1_vlan entered promiscuous mode [ 172.535403][ T7365] device veth0_macvtap entered promiscuous mode [ 172.542619][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.565212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.595609][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.625386][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.656271][ T7365] device veth1_macvtap entered promiscuous mode [ 172.673652][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.715381][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.742169][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.773241][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.809455][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.830268][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.851047][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.878699][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.934530][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.955343][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.030671][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.053349][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.082655][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.124123][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.169459][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.217888][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.254747][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.264600][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.331250][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.375771][ T7365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.415719][ T7365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.452566][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.501558][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.511531][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.545073][ T7365] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.576119][ T7365] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.611781][ T7365] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.644816][ T7365] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.864093][ T4658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.916154][ T4658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.996730][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.033829][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.076729][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.122843][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.428943][ T7660] device syzkaller1 entered promiscuous mode [ 175.022951][ T7675] loop1: detected capacity change from 0 to 4096 [ 175.263688][ T7691] loop0: detected capacity change from 0 to 256 [ 175.358496][ T7691] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 175.679049][ T7701] overlayfs: missing 'lowerdir' [ 175.685109][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 175.691160][ T4260] Bluetooth: hci2: command 0x0406 tx timeout [ 175.697927][ T4258] Bluetooth: hci3: command 0x0406 tx timeout [ 175.711116][ T7663] loop4: detected capacity change from 0 to 40427 [ 175.819139][ T7663] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 175.890585][ T7663] F2FS-fs (loop4): invalid crc value [ 175.919708][ T7663] F2FS-fs (loop4): Found nat_bits in checkpoint [ 176.081109][ T7692] loop5: detected capacity change from 0 to 32768 [ 176.135484][ T7692] JBD2: Ignoring recovery information on journal [ 176.224109][ T7714] loop0: detected capacity change from 0 to 8192 [ 176.246733][ T7692] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 176.274921][ T7663] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 176.294810][ T7714] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.350702][ T7714] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 176.361094][ T7714] REISERFS (device loop0): using ordered data mode [ 176.367839][ T7714] reiserfs: using flush barriers [ 176.401708][ T7714] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.427279][ T7714] REISERFS (device loop0): checking transaction log (loop0) [ 176.459889][ T4585] ocfs2: Unmounting device (7,5) on (node local) [ 176.560500][ T4246] syz-executor: attempt to access beyond end of device [ 176.560500][ T4246] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.591376][ T7714] REISERFS (device loop0): Using rupasov hash to sort names [ 176.610286][ T7714] REISERFS (device loop0): using 3.5.x disk format [ 176.621175][ T7714] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.632627][ T7714] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.644125][ T7714] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.671229][ T7714] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 176.730458][ T7714] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.778320][ T7714] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 176.839757][ T7738] vivid-000: disconnect [ 176.882776][ T7737] vivid-000: reconnect [ 177.143581][ T7747] input: syz1 as /devices/virtual/input/input12 [ 177.382148][ T7757] loop4: detected capacity change from 0 to 64 [ 177.464867][ T4414] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 177.477593][ T7757] syz.4.911: attempt to access beyond end of device [ 177.477593][ T7757] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 177.523682][ T7757] Buffer I/O error on dev loop4, logical block 4096, async page read [ 177.544097][ T7757] syz.4.911: attempt to access beyond end of device [ 177.544097][ T7757] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 177.571012][ T7757] Buffer I/O error on dev loop4, logical block 4096, async page read [ 177.664718][ T4414] usb 8-1: Using ep0 maxpacket: 16 [ 177.672344][ T4414] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 177.706691][ T4414] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.718335][ T4294] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 177.744715][ T4414] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.777950][ T4414] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.805069][ T4414] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.826416][ T4414] usb 8-1: Product: syz [ 177.830631][ T4414] usb 8-1: Manufacturer: syz [ 177.847728][ T4414] usb 8-1: SerialNumber: syz [ 177.916554][ T4294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.941120][ T4294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.959583][ T4294] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 177.987630][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.046129][ T4294] usb 1-1: config 0 descriptor?? [ 178.262977][ T4294] usbhid 1-1:0.0: can't add hid device: -71 [ 178.279247][ T4294] usbhid: probe of 1-1:0.0 failed with error -71 [ 178.291861][ T4414] usb 8-1: 0:2 : does not exist [ 178.315545][ T4294] usb 1-1: USB disconnect, device number 14 [ 178.405766][ T7794] loop4: detected capacity change from 0 to 2048 [ 178.454442][ T7796] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.465479][ T4324] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 178.500212][ T26] audit: type=1800 audit(1734356255.235:80): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.922" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 178.678637][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.720586][ T4324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.763634][ T4324] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 178.804125][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.821793][ T4324] usb 2-1: config 0 descriptor?? [ 178.855415][ T7802] loop5: detected capacity change from 0 to 4096 [ 178.914491][ T4414] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 178.963356][ T7809] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.985153][ T4414] usb 8-1: USB disconnect, device number 2 [ 179.270615][ T4324] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 179.278482][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.307307][ T7816] loop5: detected capacity change from 0 to 512 [ 179.313412][ T4324] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 179.325811][ T4324] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 179.348341][ T4324] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 179.368957][ T4324] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 179.384696][ T4324] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0 [ 179.396130][ T4324] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 179.399815][ T7816] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 179.424226][ T7816] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a00ee01c, mo2=0006] [ 179.434522][ T7816] System zones: 0-2, 18-18, 34-35 [ 179.474976][ T4324] usb 2-1: USB disconnect, device number 5 [ 179.506053][ T7816] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 179.616033][ T7816] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 179.662110][ T7832] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 179.673181][ T7832] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a00ee01c, mo2=0006] [ 179.692139][ T7832] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 179.766219][ T4585] EXT4-fs (loop5): unmounting filesystem. [ 180.497203][ T7829] loop0: detected capacity change from 0 to 32768 [ 180.603387][ T7829] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 180.671593][ T7839] loop5: detected capacity change from 0 to 32768 [ 180.882171][ T4253] ocfs2: Unmounting device (7,0) on (node local) [ 180.968888][ T7856] loop4: detected capacity change from 0 to 4096 [ 180.995870][ T7856] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 181.317119][ T7864] loop1: detected capacity change from 0 to 64 [ 181.684111][ T7877] overlayfs: failed to set xattr on upper [ 181.730139][ T7877] overlayfs: ...falling back to index=off,metacopy=off. [ 182.001053][ T7889] loop7: detected capacity change from 0 to 128 [ 182.026577][ T7889] ext4: Unknown parameter 'fowner>00000000000000000000' [ 182.045807][ T7893] loop0: detected capacity change from 0 to 8 [ 182.064753][ T4289] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.142218][ T4253] SQUASHFS error: Corrupted symlink [ 182.160299][ T4253] SQUASHFS error: Corrupted symlink [ 182.265490][ T4289] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 182.274570][ T4289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.294932][ T4289] usb 5-1: Product: syz [ 182.299139][ T4289] usb 5-1: Manufacturer: syz [ 182.303747][ T4289] usb 5-1: SerialNumber: syz [ 182.316398][ T4289] usb 5-1: config 0 descriptor?? [ 182.470169][ T7902] loop7: detected capacity change from 0 to 256 [ 182.518534][ T26] audit: type=1800 audit(1734356259.255:81): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.958" name="file1" dev="loop7" ino=1048634 res=0 errno=0 [ 182.520212][ T7902] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 182.558190][ T7900] loop1: detected capacity change from 0 to 8192 [ 182.579104][ T7902] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 182.614115][ T7900] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 182.641362][ T7902] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 182.655797][ T7900] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 182.662042][ T7904] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 182.665215][ T7900] REISERFS (device loop1): using ordered data mode [ 182.681733][ T7900] reiserfs: using flush barriers [ 182.690787][ T7900] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.697645][ T4302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.707537][ T7900] REISERFS (device loop1): checking transaction log (loop1) [ 182.734761][ T26] audit: type=1800 audit(1734356259.465:82): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.958" name="file1" dev="loop7" ino=1048634 res=0 errno=0 [ 182.764913][ T7900] REISERFS (device loop1): Using r5 hash to sort names [ 182.773078][ T4289] usb 5-1: Firmware version (0.0) predates our first public release. [ 182.784699][ T4289] usb 5-1: Please update to version 0.2 or newer [ 182.791548][ T7900] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 182.833352][ T4289] usb 5-1: Firmware: build [ 182.921464][ T4302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.059687][ T4289] usb 5-1: USB disconnect, device number 7 [ 183.142383][ T4302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.365983][ T4262] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.376456][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.378796][ T4302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.384703][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.405369][ T4262] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.421238][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 183.430467][ T4262] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.039381][ T4302] tipc: Left network mode [ 184.494808][ T4406] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.686998][ T7918] chnl_net:caif_netlink_parms(): no params data found [ 184.726385][ T4406] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.746178][ T4406] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.764669][ T4406] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 184.781602][ T4406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.820510][ T4406] usb 5-1: config 0 descriptor?? [ 184.996251][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.024290][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.058227][ T7918] device bridge_slave_0 entered promiscuous mode [ 185.065142][ T4406] usb 5-1: USB disconnect, device number 8 [ 185.172310][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.183845][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.226448][ T7918] device bridge_slave_1 entered promiscuous mode [ 185.444866][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 185.457703][ T7949] loop5: detected capacity change from 0 to 32768 [ 185.483489][ T7918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.515327][ T7949] XFS: attr2 mount option is deprecated. [ 185.521009][ T7949] XFS: ikeep mount option is deprecated. [ 185.544577][ T7918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.627625][ T7949] XFS: noikeep mount option is deprecated. [ 185.682604][ T7949] XFS (loop5): Mounting V5 Filesystem [ 185.751283][ T7918] team0: Port device team_slave_0 added [ 185.776437][ T7949] XFS (loop5): Ending clean mount [ 185.778373][ T7918] team0: Port device team_slave_1 added [ 185.805661][ T7949] XFS (loop5): Quotacheck needed: Please wait. [ 185.930958][ T7949] XFS (loop5): Quotacheck: Done. [ 186.012289][ T7964] loop1: detected capacity change from 0 to 32768 [ 186.038120][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.048984][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.050364][ T7964] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.977 (7964) [ 186.088031][ T7918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.107865][ T4585] XFS (loop5): Unmounting Filesystem [ 186.146326][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.159004][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.211238][ T7918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.321105][ T7964] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.343270][ T7964] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 186.353836][ T7964] BTRFS info (device loop1): using free space tree [ 186.572881][ T4302] device hsr_slave_0 left promiscuous mode [ 186.611029][ T4302] device hsr_slave_1 left promiscuous mode [ 186.675685][ T7964] BTRFS info (device loop1): enabling ssd optimizations [ 186.694419][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.714015][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.768668][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.811353][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.845835][ T4302] device bridge_slave_1 left promiscuous mode [ 186.874993][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.910739][ T4302] device bridge_slave_0 left promiscuous mode [ 186.943502][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.996995][ T5121] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 187.187421][ T4302] device veth1_macvtap left promiscuous mode [ 187.198659][ T4302] device veth0_macvtap left promiscuous mode [ 187.218558][ T4302] device veth1_vlan left promiscuous mode [ 187.234333][ T4302] device veth0_vlan left promiscuous mode [ 187.241922][ T4252] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.529086][ T4260] Bluetooth: hci3: command 0x041b tx timeout [ 188.137746][ T8042] loop1: detected capacity change from 0 to 40427 [ 188.151109][ T8042] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 188.159213][ T8042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 188.198376][ T8042] F2FS-fs (loop1): invalid crc value [ 188.206268][ T8042] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.322597][ T8042] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.331753][ T8042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.453618][ T4252] syz-executor: attempt to access beyond end of device [ 188.453618][ T4252] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 188.515220][ T4302] team0 (unregistering): Port device team_slave_1 removed [ 188.660277][ T4302] team0 (unregistering): Port device team_slave_0 removed [ 188.772712][ T4302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.842265][ T8052] loop5: detected capacity change from 0 to 32768 [ 188.877013][ T8052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.990 (8052) [ 188.923324][ T4302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.932017][ T8052] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.958976][ T8052] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 188.999432][ T8052] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 189.019689][ T8052] BTRFS info (device loop5): use lzo compression, level 0 [ 189.037947][ T8052] BTRFS info (device loop5): using free space tree [ 189.227645][ T8052] BTRFS info (device loop5): enabling ssd optimizations [ 189.604734][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 190.033718][ T4585] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.754235][ T4302] bond0 (unregistering): Released all slaves [ 190.891743][ T7918] device hsr_slave_0 entered promiscuous mode [ 190.928646][ T7918] device hsr_slave_1 entered promiscuous mode [ 190.994281][ T7918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.005497][ T7918] Cannot create hsr debugfs directory [ 191.426465][ T8100] TCP: TCP_TX_DELAY enabled [ 191.686501][ T4260] Bluetooth: hci3: command 0x0419 tx timeout [ 191.689465][ T7918] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 191.787762][ T7918] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 191.826875][ T7918] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 191.854410][ T7918] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 191.885562][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1001'. [ 191.885618][ T8116] loop4: detected capacity change from 0 to 512 [ 192.011560][ T8116] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 192.025002][ T8116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 192.042393][ T8116] System zones: 0-1, 15-15, 18-18, 34-34 [ 192.049975][ T8116] EXT4-fs (loop4): orphan cleanup on readonly fs [ 192.056592][ T8116] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 192.066068][ T8116] EXT4-fs warning (device loop4): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 192.080817][ T8116] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 192.088093][ T8116] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1002: bad orphan inode 16 [ 192.098482][ T8116] ext4_test_bit(bit=15, block=18) = 1 [ 192.103924][ T8116] is_bad_inode(inode)=0 [ 192.108478][ T8116] NEXT_ORPHAN(inode)=0 [ 192.112605][ T8116] max_ino=32 [ 192.120986][ T8116] i_nlink=2 [ 192.124185][ T8116] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.145294][ T8116] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 192.153900][ T8116] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 192.250200][ T8091] loop1: detected capacity change from 0 to 32768 [ 192.260081][ T4246] EXT4-fs (loop4): unmounting filesystem. [ 192.263305][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.304842][ T8091] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.994 (8091) [ 192.364732][ T8091] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 192.394336][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.401218][ T8091] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 192.413090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.426739][ T8091] BTRFS info (device loop1): force clearing of disk cache [ 192.464938][ T8091] BTRFS info (device loop1): setting nodatasum [ 192.468394][ T7918] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.471399][ T8091] BTRFS info (device loop1): use zlib compression, level 3 [ 192.505579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.526699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.554944][ T8091] BTRFS info (device loop1): allowing degraded mounts [ 192.561757][ T8091] BTRFS info (device loop1): enabling disk space caching [ 192.579785][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.586942][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.624713][ T8091] BTRFS info (device loop1): disk space caching is enabled [ 192.634781][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1006'. [ 192.678140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.710045][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.740795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.783343][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.790560][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.836223][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.952282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.992398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.005116][ T8091] BTRFS info (device loop1): enabling ssd optimizations [ 193.020592][ T8091] BTRFS info (device loop1): rebuilding free space tree [ 193.032263][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.034843][ T4843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 193.054327][ T8091] BTRFS info (device loop1): disabling free space tree [ 193.073656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.083933][ T8091] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.095761][ T8125] loop5: detected capacity change from 0 to 40427 [ 193.100941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.103329][ T8091] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.126693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.136348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.144313][ T8125] F2FS-fs (loop5): invalid crc value [ 193.151407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.160591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.169699][ T8125] F2FS-fs (loop5): Found nat_bits in checkpoint [ 193.193423][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.223154][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.236614][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.283175][ T4843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.307827][ T4843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.382804][ T8125] F2FS-fs (loop5): Start checkpoint disabled! [ 193.405264][ T4843] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.414350][ T4843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.439191][ T8125] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 193.455589][ T4843] usb 5-1: config 0 descriptor?? [ 193.468428][ T4252] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 193.873917][ T4402] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 193.877209][ T4843] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 193.910180][ T4843] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 193.943979][ T4402] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.950335][ T4843] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 193.998460][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.012453][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.033171][ T7918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.057071][ T8185] loop1: detected capacity change from 0 to 736 [ 194.088010][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.094373][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.134710][ T4838] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 194.321222][ T8183] usb 5-1: USB disconnect, device number 9 [ 194.327656][ T8176] hid-generic 0000:0000:0000.000A: pid 8176 passed too short report [ 194.380310][ T4838] usb 8-1: unable to get BOS descriptor or descriptor too short [ 194.417241][ T4838] usb 8-1: no configurations [ 194.421922][ T4838] usb 8-1: can't read configurations, error -22 [ 194.864331][ T8211] loop1: detected capacity change from 0 to 512 [ 194.973402][ T8211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 194.980119][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.990868][ T8211] EXT4-fs (loop1): orphan cleanup on readonly fs [ 195.041392][ T8211] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1017: bg 0: block 328: padding at end of block bitmap is not set [ 195.051428][ T8216] loop5: detected capacity change from 0 to 512 [ 195.064472][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.131913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.134506][ T8220] loop7: detected capacity change from 0 to 2048 [ 195.158604][ T8211] EXT4-fs (loop1): Remounting filesystem read-only [ 195.170860][ T8211] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 195.176620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.181713][ T8211] EXT4-fs (loop1): Remounting filesystem read-only [ 195.200276][ T8220] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 195.206266][ T7918] device veth0_vlan entered promiscuous mode [ 195.215653][ T8211] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1017: invalid indirect mapped block 65280 (level 0) [ 195.236996][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.252323][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.253369][ T8211] EXT4-fs (loop1): Remounting filesystem read-only [ 195.266199][ T7918] device veth1_vlan entered promiscuous mode [ 195.273093][ T8211] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1017: attempt to clear invalid blocks 33619980 len 1 [ 195.292195][ T8216] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 195.304015][ T8211] EXT4-fs (loop1): Remounting filesystem read-only [ 195.313551][ T8216] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 195.317235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 195.330681][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.338900][ T8211] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1017: invalid indirect mapped block 1819239214 (level 0) [ 195.339936][ T8211] EXT4-fs (loop1): Remounting filesystem read-only [ 195.363879][ T8216] System zones: 0-2, 18-18, 34-35 [ 195.364094][ T7918] device veth0_macvtap entered promiscuous mode [ 195.370488][ T8216] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 195.387966][ T7365] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 195.397578][ T8211] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1017: invalid indirect mapped block 1819239214 (level 1) [ 195.418178][ T8211] EXT4-fs (loop1): Remounting filesystem read-only [ 195.426135][ T8211] EXT4-fs (loop1): 1 orphan inode deleted [ 195.432002][ T8211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 195.450261][ T7918] device veth1_macvtap entered promiscuous mode [ 195.495953][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 195.504469][ T7365] EXT4-fs (loop7): unmounting filesystem. [ 195.528440][ T8216] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 3: comm syz.5.1019: path /: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 195.541370][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.567924][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.605674][ T8216] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 12: comm syz.5.1019: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 195.626719][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.638389][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.689769][ T8216] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 13: comm syz.5.1019: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 195.723990][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.724872][ T8216] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 14: comm syz.5.1019: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 195.739257][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.768312][ T8231] loop7: detected capacity change from 0 to 256 [ 195.783933][ T8216] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 15: comm syz.5.1019: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 195.804760][ T8231] exfat: Deprecated parameter 'utf8' [ 195.810100][ T8231] exfat: Deprecated parameter 'namecase' [ 195.824651][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.835738][ T8231] exfat: Deprecated parameter 'utf8' [ 195.855046][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.865358][ T8216] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 16: comm syz.5.1019: path /: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 195.894220][ T8231] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 195.909043][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.935765][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.954800][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.977614][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.028446][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.063080][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.091280][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.119143][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.155874][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.166711][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 196.193343][ T8241] loop4: detected capacity change from 0 to 2048 [ 196.226114][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.288147][ T8247] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.305110][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.327998][ T7918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.341384][ T7918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.354178][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.365278][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.392433][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.402159][ T4585] EXT4-fs (loop5): unmounting filesystem. [ 196.430403][ T7918] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.474817][ T7918] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.534686][ T7918] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.543422][ T7918] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.618276][ T8247] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 196.647513][ T8247] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 196.719243][ T8247] Remounting filesystem read-only [ 196.724375][ T5121] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 196.741790][ T5121] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 196.769716][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.783404][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.799154][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.802148][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.836822][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 196.874813][ T5121] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 196.884781][ T4658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.892320][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.904162][ T5121] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 196.915784][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.921715][ T5121] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 196.950340][ T8243] loop1: detected capacity change from 0 to 32768 [ 196.960539][ T5121] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 196.986931][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.017070][ T8243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1025 (8243) [ 197.050181][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.077591][ T5121] NILFS (loop4): discard dirty page: offset=65536, ino=3 [ 197.110190][ T8243] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.134708][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.143735][ T8243] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 197.184355][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.193414][ T8243] BTRFS info (device loop1): using free space tree [ 197.202329][ T5121] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 197.224645][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.261302][ T5121] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 197.281536][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.319397][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.368935][ T5121] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 197.408554][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.418006][ T5121] NILFS (loop4): discard dirty page: offset=0, ino=18 [ 197.425226][ T5121] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 197.433022][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.443024][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.452864][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.462217][ T5121] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 197.469048][ T5121] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 197.476440][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.494727][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.512932][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.532979][ T8253] loop7: detected capacity change from 0 to 32768 [ 197.560578][ T5121] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 197.567435][ T5121] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 197.575509][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.584389][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.593422][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.602814][ T5121] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 197.610782][ T5121] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 197.618169][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.627200][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.636252][ T5121] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 197.675018][ T4246] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 197.731722][ T4246] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 197.738772][ T8243] BTRFS info (device loop1): enabling ssd optimizations [ 197.779265][ T4246] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 197.826707][ T8253] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 197.855567][ T8253] XFS (loop7): Mounting V5 Filesystem [ 197.862264][ T4246] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 197.915068][ T4246] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 197.996498][ T4246] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 198.068460][ T8253] XFS (loop7): Ending clean mount [ 198.155881][ T8253] XFS (loop7): Quotacheck needed: Please wait. [ 198.195350][ T4252] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.358663][ T8253] XFS (loop7): Quotacheck: Done. [ 198.389046][ T8254] loop5: detected capacity change from 0 to 40427 [ 198.504435][ T8254] F2FS-fs (loop5): invalid crc value [ 198.552367][ T8254] F2FS-fs (loop5): Found nat_bits in checkpoint [ 198.554624][ C0] sched: RT throttling activated [ 198.892943][ T8254] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 199.235645][ T4585] syz-executor: attempt to access beyond end of device [ 199.235645][ T4585] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.388475][ T8285] loop8: detected capacity change from 0 to 262144 [ 199.415144][ T4414] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 199.470758][ T8285] F2FS-fs (loop8): Found nat_bits in checkpoint [ 199.544729][ T8285] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 199.594411][ T7365] XFS (loop7): Unmounting Filesystem [ 199.646616][ T4414] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 199.685949][ T4414] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.709470][ T4414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.724848][ T4414] usb 5-1: SerialNumber: syz [ 200.388661][ T4414] cdc_ether 5-1:1.0 eth17: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 200.592319][ T8340] loop1: detected capacity change from 0 to 256 [ 200.613173][ T8340] exfat: Deprecated parameter 'utf8' [ 200.633971][ T8340] exfat: Deprecated parameter 'namecase' [ 200.652929][ T8340] exfat: Deprecated parameter 'utf8' [ 200.690707][ T8340] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 200.793531][ T4757] usb 5-1: USB disconnect, device number 10 [ 200.819251][ T4757] cdc_ether 5-1:1.0 eth17: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 201.051877][ T8352] input: syz1 as /devices/virtual/input/input13 [ 201.361504][ T8358] input: syz0 as /devices/virtual/input/input14 [ 201.445514][ T8358] input: failed to attach handler leds to device input14, error: -6 [ 201.674955][ T4757] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 201.716872][ T8371] loop4: detected capacity change from 0 to 16 [ 201.761486][ T8371] erofs: (device loop4): mounted with root inode @ nid 36. [ 201.884752][ T4757] usb 6-1: Using ep0 maxpacket: 8 [ 201.897181][ T4757] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 201.952678][ T4757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.988211][ T4757] usb 6-1: Product: syz [ 201.992398][ T4757] usb 6-1: Manufacturer: syz [ 202.004322][ T4757] usb 6-1: SerialNumber: syz [ 202.018523][ T4757] usb 6-1: config 0 descriptor?? [ 202.141994][ T8387] loop4: detected capacity change from 0 to 2048 [ 202.194924][ T8387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 202.237284][ T4757] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 202.330765][ T5121] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 202.357851][ T5121] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 202.374463][ T5121] EXT4-fs (loop4): This should not happen!! Data will be lost [ 202.374463][ T5121] [ 202.405462][ T5121] EXT4-fs (loop4): Total free blocks count 0 [ 202.415342][ T5121] EXT4-fs (loop4): Free/Dirty block details [ 202.421299][ T5121] EXT4-fs (loop4): free_blocks=2415919104 [ 202.435750][ T5121] EXT4-fs (loop4): dirty_blocks=16 [ 202.449622][ T5121] EXT4-fs (loop4): Block reservation details [ 202.464757][ T5121] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 202.473679][ T4246] EXT4-fs (loop4): unmounting filesystem. [ 203.236261][ T8425] loop4: detected capacity change from 0 to 128 [ 203.295663][ T8425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 203.325759][ T8425] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.388428][ T26] audit: type=1800 audit(1734356280.125:83): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1054" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 203.477397][ T4757] usb write operation failed. (-71) [ 203.484788][ T8425] loop4: detected capacity change from 128 to 64 [ 203.507393][ T4757] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.531176][ T4757] dvbdev: DVB: registering new adapter (Terratec H7) [ 203.602954][ T4757] usb 6-1: media controller created [ 203.611869][ T4246] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 203.642336][ T4757] usb read operation failed. (-71) [ 203.652048][ T4757] usb write operation failed. (-71) [ 203.663759][ T4246] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 203.688239][ T4757] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5 [ 203.701804][ T4246] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 203.723080][ T4757] usb 6-1: USB disconnect, device number 9 [ 203.743852][ T4246] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 203.746499][ T4246] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 203.752783][ T4246] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 203.755151][ T4246] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 203.755549][ T4246] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 203.756031][ T4246] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 203.756734][ T4246] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 204.301838][ T7831] EXT4-fs (loop4): unmounting filesystem. [ 204.858245][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.903349][ T8482] loop7: detected capacity change from 0 to 2048 [ 204.983415][ T8485] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.015039][ T26] audit: type=1804 audit(1734356281.735:84): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1068" name="/newroot/42/bus/file1" dev="loop7" ino=15 res=1 errno=0 [ 205.072015][ T8481] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 205.101659][ T8481] Remounting filesystem read-only [ 205.112570][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.202826][ T7365] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 205.218435][ T7365] NILFS (loop7): discard dirty page: offset=0, ino=2 [ 205.234915][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.245391][ T7365] NILFS (loop7): discard dirty block: blocknr=18, size=1024 [ 205.254109][ T7365] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.295637][ T7365] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.334098][ T7365] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.369196][ T7365] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 205.383853][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.403247][ T7365] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.432210][ T7365] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.471042][ T7365] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 205.505520][ T7365] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 205.547663][ T7365] NILFS (loop7): discard dirty page: offset=229376, ino=3 [ 205.586742][ T7365] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.644897][ T7365] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 205.695426][ T7365] NILFS (loop7): discard dirty block: blocknr=50, size=1024 [ 205.702758][ T7365] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 206.268011][ T8519] loop7: detected capacity change from 0 to 256 [ 206.268596][ T4262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.287013][ T4262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.295452][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.303242][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.314060][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.329055][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.330233][ T8519] exFAT-fs (loop7): bogus sector size bits : 0 [ 206.424709][ T8519] exFAT-fs (loop7): failed to read boot sector [ 206.430952][ T8519] exFAT-fs (loop7): failed to recognize exfat type [ 206.460647][ T4401] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 206.530304][ T8519] exFAT-fs (loop7): bogus sector size bits : 0 [ 206.555694][ T8519] exFAT-fs (loop7): failed to read boot sector [ 206.588326][ T8519] exFAT-fs (loop7): failed to recognize exfat type [ 206.663521][ T4401] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 206.683104][ T4401] usb 6-1: config 1 has no interface number 0 [ 206.706141][ T4401] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.737530][ T4401] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 206.762502][ T4401] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.809807][ T4401] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.883144][ T4401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.909766][ T8534] loop1: detected capacity change from 0 to 256 [ 206.952010][ T8534] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.964850][ T4415] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 206.990121][ T4401] usb 6-1: Product: syz [ 206.999164][ T4401] usb 6-1: Manufacturer: syz [ 207.003872][ T4401] usb 6-1: SerialNumber: syz [ 207.147320][ T8516] chnl_net:caif_netlink_parms(): no params data found [ 207.164874][ T4415] usb 9-1: Using ep0 maxpacket: 8 [ 207.171973][ T4415] usb 9-1: config 0 has an invalid interface number: 141 but max is 0 [ 207.190512][ T4415] usb 9-1: config 0 has no interface number 0 [ 207.202539][ T4415] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=ee.8a [ 207.244967][ T4415] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.277397][ T4415] usb 9-1: Product: syz [ 207.281625][ T4415] usb 9-1: Manufacturer: syz [ 207.287254][ T4415] usb 9-1: SerialNumber: syz [ 207.297705][ T4415] usb 9-1: config 0 descriptor?? [ 207.327528][ T4415] gspca_main: sq905-2.14.0 probing 2770:9120 [ 207.466090][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.473611][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.482682][ T8516] device bridge_slave_0 entered promiscuous mode [ 207.500129][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.534952][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.553832][ T8516] device bridge_slave_1 entered promiscuous mode [ 207.760706][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.813716][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.836590][ T4401] cdc_ncm 6-1:1.1: bind() failure [ 207.921744][ T46] device hsr_slave_0 left promiscuous mode [ 207.938384][ T46] device hsr_slave_1 left promiscuous mode [ 207.947321][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.972492][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.991391][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.008234][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.021699][ T46] device bridge_slave_1 left promiscuous mode [ 208.028225][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.038358][ T46] device bridge_slave_0 left promiscuous mode [ 208.044626][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.051378][ T4401] usb 6-1: USB disconnect, device number 10 [ 208.124417][ T46] device veth1_macvtap left promiscuous mode [ 208.130880][ T46] device veth0_macvtap left promiscuous mode [ 208.154279][ T46] device veth1_vlan left promiscuous mode [ 208.175047][ T46] device veth0_vlan left promiscuous mode [ 208.338457][ T4415] gspca_sq905: bulk read fail (-22) len 0/4 [ 208.350562][ T4415] sq905: probe of 9-1:0.141 failed with error -5 [ 208.404870][ T4258] Bluetooth: hci0: command 0x0409 tx timeout [ 208.542062][ T4401] usb 9-1: USB disconnect, device number 2 [ 208.985536][ T4838] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 209.187525][ T4838] usb 6-1: Using ep0 maxpacket: 32 [ 209.199693][ T4838] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 209.227838][ T4838] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 209.258937][ T4838] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 209.282126][ T4838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.324028][ T4838] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 209.344233][ T4838] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 209.363907][ T4838] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 209.374317][ T4838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.391173][ T4838] usb 6-1: config 0 descriptor?? [ 209.611165][ T4838] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 209.768997][ T46] team0 (unregistering): Port device team_slave_1 removed [ 209.830373][ C1] usblp0: nonzero read bulk status received: -71 [ 209.837338][ T4401] usb 6-1: USB disconnect, device number 11 [ 209.892071][ T8589] loop1: detected capacity change from 0 to 40427 [ 209.900727][ T46] team0 (unregistering): Port device team_slave_0 removed [ 209.911679][ T8589] F2FS-fs (loop1): invalid crc value [ 209.961390][ T8589] F2FS-fs (loop1): Found nat_bits in checkpoint [ 210.028609][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.056496][ T8589] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 210.064299][ T8583] usblp0: removed [ 210.074744][ T8589] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 210.147361][ T4252] syz-executor: attempt to access beyond end of device [ 210.147361][ T4252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 210.163701][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.218329][ T8599] loop7: detected capacity change from 0 to 32768 [ 210.407336][ T8599] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 210.416329][ T8599] XFS (loop7): Mounting V5 Filesystem [ 210.501521][ T4258] Bluetooth: hci0: command 0x041b tx timeout [ 210.550629][ T8599] XFS (loop7): Ending clean mount [ 210.562967][ T8599] XFS (loop7): Quotacheck needed: Please wait. [ 210.619979][ T8616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1101'. [ 210.736708][ T8599] XFS (loop7): Quotacheck: Done. [ 210.816267][ T8621] loop5: detected capacity change from 0 to 1024 [ 210.830711][ T8621] EXT4-fs: Ignoring removed bh option [ 210.847641][ T8621] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.980355][ T7365] XFS (loop7): Unmounting Filesystem [ 211.013824][ T8621] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 211.176379][ T8621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.192612][ T8621] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 211.202991][ T8621] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 211.213554][ T8621] EXT4-fs (loop5): can't enable nombcache during remount [ 211.339130][ T4585] EXT4-fs (loop5): unmounting filesystem. [ 211.667316][ T8636] loop7: detected capacity change from 0 to 1024 [ 211.676369][ T46] bond0 (unregistering): Released all slaves [ 211.874502][ T5301] hfsplus: b-tree write err: -5, ino 4 [ 211.979157][ T8516] team0: Port device team_slave_0 added [ 212.002751][ T8647] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 212.020868][ T8516] team0: Port device team_slave_1 added [ 212.222091][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.244739][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.356737][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.381632][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.389665][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.434098][ T8664] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1114'. [ 212.468055][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.583253][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 212.612633][ T8666] loop8: detected capacity change from 0 to 1024 [ 212.625817][ T8666] EXT4-fs: Ignoring removed bh option [ 212.664241][ T8666] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 212.687159][ T8516] device hsr_slave_0 entered promiscuous mode [ 212.715182][ T8516] device hsr_slave_1 entered promiscuous mode [ 212.732342][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.770552][ T8516] Cannot create hsr debugfs directory [ 212.778978][ T8666] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 212.984097][ T8666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.011638][ T8666] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 213.051730][ T8666] EXT4-fs (loop8): changing journal_checksum during remount not supported; ignoring [ 213.099801][ T8666] EXT4-fs (loop8): can't enable nombcache during remount [ 213.333595][ T8658] loop1: detected capacity change from 0 to 32768 [ 213.369384][ T8516] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 213.374968][ T7918] EXT4-fs (loop8): unmounting filesystem. [ 213.421588][ T8516] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 213.432194][ T8516] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 213.453809][ T8516] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 213.526050][ T8658] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 213.540604][ T4838] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 213.543952][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.562770][ T8658] XFS (loop1): Mounting V5 Filesystem [ 213.589859][ T8516] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.607369][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.661665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.717695][ T8658] XFS (loop1): Ending clean mount [ 213.734688][ T4838] usb 8-1: Using ep0 maxpacket: 16 [ 213.741586][ T4838] usb 8-1: config 0 has an invalid interface number: 180 but max is 0 [ 213.775619][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.798087][ T4838] usb 8-1: config 0 has no interface number 0 [ 213.804217][ T4838] usb 8-1: config 0 interface 180 has no altsetting 0 [ 213.837099][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.860037][ T8658] XFS (loop1): Quotacheck needed: Please wait. [ 213.868093][ T4838] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 213.885643][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.892787][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.917904][ T4838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.923457][ T8708] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 213.932159][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.951424][ T4838] usb 8-1: Product: syz [ 213.957737][ T4838] usb 8-1: Manufacturer: syz [ 213.962364][ T4838] usb 8-1: SerialNumber: syz [ 213.972814][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.982946][ T8710] loop8: detected capacity change from 0 to 1024 [ 213.998032][ T4838] usb 8-1: config 0 descriptor?? [ 214.022859][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.032470][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.039635][ T5301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.071420][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.074675][ T8658] XFS (loop1): Quotacheck: Done. [ 214.145131][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.165365][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.231124][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.250979][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.285462][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.321613][ T4252] XFS (loop1): Unmounting Filesystem [ 214.328457][ T8516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.348519][ T8516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.357288][ T8718] loop8: detected capacity change from 0 to 512 [ 214.395196][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.404090][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.416151][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.430205][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.449606][ T4838] viperboard 8-1:0.180: version 0.00 found at bus 008 address 005 [ 214.464033][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.474235][ T8718] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 214.486515][ T8718] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.503239][ T4838] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 214.504544][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.522328][ T4838] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 214.554047][ T4838] usb 8-1: USB disconnect, device number 5 [ 214.578186][ T8718] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.1125: corrupted inode contents [ 214.590546][ T8718] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #2: comm syz.8.1125: mark_inode_dirty error [ 214.614771][ T8718] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.1125: corrupted inode contents [ 214.645904][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 214.672254][ T8718] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.1125: mark_inode_dirty error [ 214.870749][ T7918] EXT4-fs (loop8): unmounting filesystem. [ 214.932286][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.951797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.975901][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.185228][ T8743] netlink: 'syz.7.1130': attribute type 10 has an invalid length. [ 215.193086][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1130'. [ 215.325972][ T8743] team0: Port device geneve0 added [ 215.357754][ T8749] loop1: detected capacity change from 0 to 1024 [ 215.387425][ T8749] EXT4-fs: Ignoring removed i_version option [ 215.409078][ T8749] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.477848][ T8749] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.661583][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 215.853197][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.862919][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.934911][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.950871][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.998059][ T8516] device veth0_vlan entered promiscuous mode [ 216.022517][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.045707][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.082037][ T8516] device veth1_vlan entered promiscuous mode [ 216.159969][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.199364][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.210973][ T8516] device veth0_macvtap entered promiscuous mode [ 216.237751][ T8516] device veth1_macvtap entered promiscuous mode [ 216.291194][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.344842][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.374760][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.404480][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.440131][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.451663][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.475856][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.502049][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.552975][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.564295][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.589430][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.600207][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.617913][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.639146][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.667888][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.687042][ T8788] loop1: detected capacity change from 0 to 2048 [ 216.698549][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.752882][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.773107][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.818280][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.828452][ T8795] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.859568][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.884961][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.910041][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.930481][ T8795] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 216.972542][ T8795] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 216.989756][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.026034][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.035188][ T8795] Remounting filesystem read-only [ 217.042390][ T8516] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.061629][ T8516] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.092091][ T8516] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.120031][ T8516] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.161445][ T8788] NILFS (loop1): the device already has a read-only mount. [ 217.303058][ T4252] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 217.334519][ T4252] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 217.354499][ T5301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.365007][ T4252] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 217.372343][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.401118][ T5301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.438877][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.439553][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.455382][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.464361][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.477616][ T4252] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 217.489795][ T4252] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 217.494764][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.501703][ T4252] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 217.524059][ T4252] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 217.546419][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.561080][ T4252] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 217.569311][ T4252] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 217.611571][ T4252] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 217.639350][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.671597][ T8783] loop5: detected capacity change from 0 to 32768 [ 217.678359][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.722344][ T8783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1139 (8783) [ 217.732823][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.761828][ T4252] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 217.797422][ T4252] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 217.812937][ T8783] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.819107][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.838903][ T8791] loop8: detected capacity change from 0 to 32768 [ 217.848552][ T8783] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 217.852695][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.877739][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.881599][ T8783] BTRFS info (device loop5): max_inline at 0 [ 217.917364][ T4252] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 217.924457][ T4252] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 217.932649][ T8783] BTRFS info (device loop5): use zlib compression, level 3 [ 217.942747][ T8783] BTRFS info (device loop5): enabling ssd optimizations [ 217.956593][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.967355][ T8783] BTRFS info (device loop5): using free space tree [ 217.988581][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.008657][ T8791] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 218.029647][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.039707][ T8791] XFS (loop8): Mounting V5 Filesystem [ 218.049627][ T4252] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 218.059093][ T4252] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 218.086746][ T4252] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 218.103406][ T4252] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 218.110714][ T8791] XFS (loop8): Ending clean mount [ 218.125083][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.138966][ T8791] XFS (loop8): Quotacheck needed: Please wait. [ 218.151604][ T4252] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 218.194737][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.225178][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.243053][ T8791] XFS (loop8): Quotacheck: Done. [ 218.247954][ T4252] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 218.264039][ T4252] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.423362][ T26] audit: type=1800 audit(1734356295.155:85): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1139" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 218.545077][ T26] audit: type=1800 audit(1734356295.195:86): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1139" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 218.778412][ T7918] XFS (loop8): Unmounting Filesystem [ 218.884940][ T4838] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 218.923987][ T4585] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 219.084540][ T8867] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 219.092545][ T4838] usb 8-1: Using ep0 maxpacket: 16 [ 219.102159][ T4838] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 219.123798][ T8867] netlink: 'syz.1.1152': attribute type 4 has an invalid length. [ 219.131681][ T4838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.158950][ T8867] netlink: 14694 bytes leftover after parsing attributes in process `syz.1.1152'. [ 219.175054][ T4838] usb 8-1: Product: syz [ 219.189473][ T4838] usb 8-1: Manufacturer: syz [ 219.194115][ T4838] usb 8-1: SerialNumber: syz [ 219.257071][ T8871] netlink: 'syz.9.1153': attribute type 11 has an invalid length. [ 219.284777][ T8871] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.1153'. [ 219.854990][ T4757] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 219.892557][ T8890] 9pnet: p9_errstr2errno: server reported unknown error Çi6rµŠÞ [ 219.994908][ T4842] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 220.073928][ T4757] usb 9-1: Using ep0 maxpacket: 16 [ 220.075254][ T4838] snd-usb-audio: probe of 8-1:222.0 failed with error -2 [ 220.108501][ T4757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.131345][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.137483][ T4757] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.187501][ T4842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.198974][ T4757] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 220.209156][ T4842] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.239528][ T4842] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.249475][ T4757] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.270325][ T4842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.315626][ T4757] usb 9-1: config 0 descriptor?? [ 220.323920][ T4842] usb 10-1: config 0 descriptor?? [ 220.331545][ T22] usb 8-1: USB disconnect, device number 6 [ 220.732458][ T4757] hid-multitouch 0003:1FD2:6007.000C: unknown main item tag 0x1 [ 220.752838][ T4757] hid-multitouch 0003:1FD2:6007.000C: unknown main item tag 0x0 [ 220.764167][ T4842] hid (null): bogus close delimiter [ 220.772405][ T4757] hid-multitouch 0003:1FD2:6007.000C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 220.873445][ T8919] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.964310][ T4842] usb 10-1: string descriptor 0 read error: -22 [ 221.045424][ T4917] usb 9-1: USB disconnect, device number 3 [ 221.166158][ T4842] uclogic 0003:256C:006D.000D: interface is invalid, ignoring [ 221.186757][ T4842] usb 10-1: USB disconnect, device number 2 [ 221.722784][ T8952] loop7: detected capacity change from 0 to 2048 [ 221.755270][ T8952] EXT4-fs: Ignoring removed orlov option [ 221.792555][ T4414] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 221.895816][ T8952] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 222.004886][ T4414] usb 2-1: Using ep0 maxpacket: 32 [ 222.018691][ T4414] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 222.045065][ T7365] EXT4-fs (loop7): unmounting filesystem. [ 222.068259][ T4414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.098766][ T4414] usb 2-1: Product: syz [ 222.102973][ T4414] usb 2-1: Manufacturer: syz [ 222.144761][ T4414] usb 2-1: SerialNumber: syz [ 222.152063][ T8972] loop8: detected capacity change from 0 to 64 [ 222.211809][ T4414] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 222.279193][ T8974] loop7: detected capacity change from 0 to 1024 [ 222.360759][ T8974] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 222.410227][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.410227][ T33] loop8: rw=1, sector=167, nr_sectors = 1 limit=64 [ 222.454251][ T33] Buffer I/O error on dev loop8, logical block 167, lost async page write [ 222.520384][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.520384][ T33] loop8: rw=1, sector=169, nr_sectors = 1 limit=64 [ 222.545918][ T7365] EXT4-fs (loop7): unmounting filesystem. [ 222.565025][ T33] Buffer I/O error on dev loop8, logical block 169, lost async page write [ 222.573601][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.573601][ T33] loop8: rw=1, sector=171, nr_sectors = 1 limit=64 [ 222.689888][ T33] Buffer I/O error on dev loop8, logical block 171, lost async page write [ 222.704463][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.704463][ T33] loop8: rw=1, sector=172, nr_sectors = 1 limit=64 [ 222.732822][ T33] Buffer I/O error on dev loop8, logical block 172, lost async page write [ 222.747858][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.747858][ T33] loop8: rw=1, sector=173, nr_sectors = 1 limit=64 [ 222.772496][ T33] Buffer I/O error on dev loop8, logical block 173, lost async page write [ 222.781334][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.781334][ T33] loop8: rw=1, sector=174, nr_sectors = 1 limit=64 [ 222.814659][ T33] Buffer I/O error on dev loop8, logical block 174, lost async page write [ 222.833977][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.833977][ T33] loop8: rw=1, sector=175, nr_sectors = 1 limit=64 [ 222.864727][ T33] Buffer I/O error on dev loop8, logical block 175, lost async page write [ 222.873767][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.873767][ T33] loop8: rw=1, sector=176, nr_sectors = 1 limit=64 [ 222.903367][ T33] Buffer I/O error on dev loop8, logical block 176, lost async page write [ 222.929268][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.929268][ T33] loop8: rw=1, sector=177, nr_sectors = 1 limit=64 [ 222.951203][ T33] Buffer I/O error on dev loop8, logical block 177, lost async page write [ 222.964350][ T33] kworker/u4:2: attempt to access beyond end of device [ 222.964350][ T33] loop8: rw=1, sector=179, nr_sectors = 1 limit=64 [ 222.985044][ T4757] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 222.989910][ T33] Buffer I/O error on dev loop8, logical block 179, lost async page write [ 223.071132][ T9000] [ 223.073490][ T9000] ====================================================== [ 223.080505][ T9000] WARNING: possible circular locking dependency detected [ 223.087517][ T9000] 6.1.120-syzkaller-00773-g52f863f820fd #0 Tainted: G W [ 223.095857][ T9000] ------------------------------------------------------ [ 223.102875][ T9000] syz.5.1188/9000 is trying to acquire lock: [ 223.108843][ T9000] ffff88807c5697d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 223.118499][ T9000] [ 223.118499][ T9000] but task is already holding lock: [ 223.125851][ T9000] ffff888076ab8290 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 223.136723][ T9000] [ 223.136723][ T9000] which lock already depends on the new lock. [ 223.136723][ T9000] [ 223.149124][ T9000] [ 223.149124][ T9000] the existing dependency chain (in reverse order) is: [ 223.158134][ T9000] [ 223.158134][ T9000] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 223.166866][ T9000] lock_acquire+0x1f8/0x5a0 [ 223.171890][ T9000] down_write+0x36/0x60 [ 223.176558][ T9000] process_measurement+0x446/0x21b0 [ 223.182270][ T9000] ima_file_mmap+0x121/0x1c0 [ 223.187370][ T9000] __se_sys_remap_file_pages+0x67a/0x8b0 [ 223.193513][ T9000] do_syscall_64+0x3b/0xb0 [ 223.198440][ T9000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.204844][ T9000] [ 223.204844][ T9000] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 223.212394][ T9000] validate_chain+0x1661/0x5950 [ 223.217752][ T9000] __lock_acquire+0x125b/0x1f80 [ 223.223116][ T9000] lock_acquire+0x1f8/0x5a0 [ 223.228135][ T9000] down_read_killable+0xc6/0xd10 [ 223.233580][ T9000] mmap_read_lock_killable+0x1d/0x60 [ 223.239378][ T9000] lock_mm_and_find_vma+0x2a7/0x2e0 [ 223.245114][ T9000] exc_page_fault+0x169/0x620 [ 223.250322][ T9000] asm_exc_page_fault+0x22/0x30 [ 223.255697][ T9000] fault_in_readable+0x1c8/0x340 [ 223.261146][ T9000] fault_in_iov_iter_readable+0xdb/0x270 [ 223.267288][ T9000] generic_perform_write+0x207/0x5e0 [ 223.273169][ T9000] __generic_file_write_iter+0x176/0x400 [ 223.279308][ T9000] generic_file_write_iter+0xab/0x310 [ 223.285188][ T9000] vfs_write+0x857/0xbc0 [ 223.289944][ T9000] ksys_write+0x19c/0x2c0 [ 223.294779][ T9000] do_syscall_64+0x3b/0xb0 [ 223.299708][ T9000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.306115][ T9000] [ 223.306115][ T9000] other info that might help us debug this: [ 223.306115][ T9000] [ 223.316326][ T9000] Possible unsafe locking scenario: [ 223.316326][ T9000] [ 223.323754][ T9000] CPU0 CPU1 [ 223.329108][ T9000] ---- ---- [ 223.334454][ T9000] lock(&sb->s_type->i_mutex_key#12); [ 223.339909][ T9000] lock(&mm->mmap_lock); [ 223.346758][ T9000] lock(&sb->s_type->i_mutex_key#12); [ 223.354745][ T9000] lock(&mm->mmap_lock); [ 223.359107][ T9000] [ 223.359107][ T9000] *** DEADLOCK *** [ 223.359107][ T9000] [ 223.367236][ T9000] 3 locks held by syz.5.1188/9000: [ 223.372342][ T9000] #0: ffff88805ba63268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360 [ 223.381565][ T9000] #1: ffff888053aba460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 223.390435][ T9000] #2: ffff888076ab8290 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 223.401737][ T9000] [ 223.401737][ T9000] stack backtrace: [ 223.407633][ T9000] CPU: 0 PID: 9000 Comm: syz.5.1188 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 223.418905][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 223.428956][ T9000] Call Trace: [ 223.432229][ T9000] [ 223.435150][ T9000] dump_stack_lvl+0x1e3/0x2cb [ 223.439824][ T9000] ? nf_tcp_handle_invalid+0x642/0x642 [ 223.445306][ T9000] ? print_circular_bug+0x12b/0x1a0 [ 223.450497][ T9000] check_noncircular+0x2fa/0x3b0 [ 223.455425][ T9000] ? mark_lock+0x9a/0x340 [ 223.459755][ T9000] ? add_chain_block+0x850/0x850 [ 223.464678][ T9000] ? lockdep_lock+0x11f/0x2a0 [ 223.469352][ T9000] ? reacquire_held_locks+0x660/0x660 [ 223.474709][ T9000] ? _find_first_zero_bit+0xd0/0x100 [ 223.479992][ T9000] validate_chain+0x1661/0x5950 [ 223.484833][ T9000] ? reacquire_held_locks+0x660/0x660 [ 223.490196][ T9000] ? reacquire_held_locks+0x660/0x660 [ 223.495556][ T9000] ? mark_lock+0x9a/0x340 [ 223.499877][ T9000] ? reacquire_held_locks+0x660/0x660 [ 223.505235][ T9000] ? mark_lock+0x9a/0x340 [ 223.509561][ T9000] ? reacquire_held_locks+0x660/0x660 [ 223.514918][ T9000] ? __lock_acquire+0x125b/0x1f80 [ 223.519934][ T9000] ? mark_lock+0x9a/0x340 [ 223.524257][ T9000] __lock_acquire+0x125b/0x1f80 [ 223.529107][ T9000] lock_acquire+0x1f8/0x5a0 [ 223.533599][ T9000] ? mmap_read_lock_killable+0x1d/0x60 [ 223.539053][ T9000] ? read_lock_is_recursive+0x10/0x10 [ 223.544420][ T9000] ? __might_sleep+0xb0/0xb0 [ 223.549006][ T9000] down_read_killable+0xc6/0xd10 [ 223.553930][ T9000] ? mmap_read_lock_killable+0x1d/0x60 [ 223.559377][ T9000] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 223.565351][ T9000] ? cmp_ex_search+0x70/0x90 [ 223.569924][ T9000] ? mmap_read_lock_killable+0x1d/0x60 [ 223.575374][ T9000] ? bsearch+0x8e/0xb0 [ 223.579432][ T9000] ? down_read_interruptible+0xc40/0xc40 [ 223.585051][ T9000] ? search_extable+0xaf/0xf0 [ 223.589714][ T9000] ? trim_init_extable+0x3c0/0x3c0 [ 223.594816][ T9000] ? fault_in_readable+0x1c8/0x340 [ 223.599916][ T9000] ? __init_rwsem+0x160/0x160 [ 223.604586][ T9000] ? print_irqtrace_events+0x210/0x210 [ 223.610039][ T9000] mmap_read_lock_killable+0x1d/0x60 [ 223.615314][ T9000] lock_mm_and_find_vma+0x2a7/0x2e0 [ 223.620501][ T9000] exc_page_fault+0x169/0x620 [ 223.625171][ T9000] asm_exc_page_fault+0x22/0x30 [ 223.630187][ T9000] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 223.635894][ T9000] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 d2 b1 bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 223.655489][ T9000] RSP: 0018:ffffc900035079e0 EFLAGS: 00050287 [ 223.661543][ T9000] RAX: ffffffff81caea9e RBX: 00000000202a6000 RCX: 0000000000080000 [ 223.669503][ T9000] RDX: ffffc9001c400000 RSI: 0000000000043c44 RDI: 0000000000043c45 [ 223.677462][ T9000] RBP: ffffc90003507a98 R08: ffffffff81caea36 R09: ffffffff844210c5 [ 223.685418][ T9000] R10: 0000000000000002 R11: ffff88807dc01dc0 R12: 0000000000001000 [ 223.693373][ T9000] R13: dffffc0000000000 R14: 00000000202a7000 R15: 1ffff920006a0f44 [ 223.701336][ T9000] ? fault_in_iov_iter_readable+0x45/0x270 [ 223.707131][ T9000] ? fault_in_readable+0x156/0x340 [ 223.712228][ T9000] ? fault_in_readable+0x1be/0x340 [ 223.717330][ T9000] ? fault_in_safe_writeable+0x250/0x250 [ 223.722956][ T9000] ? inode_to_bdi+0x65/0xd0 [ 223.727453][ T9000] fault_in_iov_iter_readable+0xdb/0x270 [ 223.733075][ T9000] generic_perform_write+0x207/0x5e0 [ 223.738350][ T9000] ? generic_file_direct_write+0x460/0x460 [ 223.744144][ T9000] ? __file_remove_privs+0x640/0x640 [ 223.749420][ T9000] ? generic_write_checks+0x138/0x1c0 [ 223.754788][ T9000] ? clear_nonspinnable+0x60/0x60 [ 223.759805][ T9000] __generic_file_write_iter+0x176/0x400 [ 223.765426][ T9000] generic_file_write_iter+0xab/0x310 [ 223.770789][ T9000] vfs_write+0x857/0xbc0 [ 223.775018][ T9000] ? file_end_write+0x250/0x250 [ 223.779854][ T9000] ? __fget_files+0x28/0x4a0 [ 223.784429][ T9000] ? __fget_files+0x435/0x4a0 [ 223.789093][ T9000] ? __fdget_pos+0x2ba/0x360 [ 223.793670][ T9000] ? ksys_write+0x77/0x2c0 [ 223.798072][ T9000] ksys_write+0x19c/0x2c0 [ 223.802389][ T9000] ? print_irqtrace_events+0x210/0x210 [ 223.807840][ T9000] ? __ia32_sys_read+0x80/0x80 [ 223.812589][ T9000] ? syscall_enter_from_user_mode+0x2e/0x230 [ 223.818556][ T9000] ? lockdep_hardirqs_on+0x94/0x130 [ 223.823754][ T9000] ? syscall_enter_from_user_mode+0x2e/0x230 [ 223.829746][ T9000] do_syscall_64+0x3b/0xb0 [ 223.834162][ T9000] ? clear_bhb_loop+0x45/0xa0 [ 223.838826][ T9000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.844719][ T9000] RIP: 0033:0x7efd6eb85d19 [ 223.849130][ T9000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.868809][ T9000] RSP: 002b:00007efd6f8d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.877390][ T9000] RAX: ffffffffffffffda RBX: 00007efd6ed75fa0 RCX: 00007efd6eb85d19 [ 223.885350][ T9000] RDX: 000000006db6e559 RSI: 00000000200000c0 RDI: 0000000000000004 [ 223.893313][ T9000] RBP: 00007efd6ec01a20 R08: 0000000000000000 R09: 0000000000000000 [ 223.901271][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.909229][ T9000] R13: 0000000000000000 R14: 00007efd6ed75fa0 R15: 00007ffc24a13f58 [ 223.917214][ T9000] [ 223.922548][ T4414] gspca_stk1135: reg_w 0x7 err -110 [ 223.930229][ T4414] gspca_stk1135: serial bus timeout: status=0x00 [ 223.936767][ T4414] gspca_stk1135: Sensor write failed [ 223.951411][ T4414] gspca_stk1135: serial bus timeout: status=0x00 [ 223.963679][ T4414] gspca_stk1135: Sensor write failed [ 223.973608][ T4414] gspca_stk1135: serial bus timeout: status=0x00 [ 223.993446][ T4414] gspca_stk1135: Sensor read failed [ 224.006404][ T4414] gspca_stk1135: serial bus timeout: status=0x00 [ 224.024902][ T4757] usb 8-1: Using ep0 maxpacket: 16 [ 224.031356][ T4414] gspca_stk1135: Sensor read failed [ 224.038401][ T4757] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.049453][ T4414] gspca_stk1135: Detected sensor type unknown (0x0) [ 224.056440][ T4757] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.079471][ T4414] gspca_stk1135: serial bus timeout: status=0x00 [ 224.086718][ T4414] gspca_stk1135: Sensor read failed [ 224.092471][ T4757] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 224.102210][ T4414] gspca_stk1135: serial bus timeout: status=0x00 [ 224.109455][ T4414] gspca_stk1135: Sensor read failed [ 224.115007][ T4757] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.123263][ T4414] gspca_stk1135: serial bus timeout: status=0x00 [ 224.130540][ T4414] gspca_stk1135: Sensor write failed [ 224.137854][ T4757] usb 8-1: config 0 descriptor?? [ 224.143051][ T4414] gspca_stk1135: serial bus timeout: status=0x00 [ 224.153104][ T4414] gspca_stk1135: Sensor write failed [ 224.166551][ T4414] stk1135: probe of 2-1:64.0 failed with error -110 [ 224.180319][ T4414] usb 2-1: USB disconnect, device number 6 [ 224.559879][ T4757] HID 045e:07da: Invalid code 65791 type 1 [ 224.571240][ T4757] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.000E/input/input15 [ 224.589556][ T4757] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 225.373495][ T4414] usb 8-1: USB disconnect, device number 7