last executing test programs: 1m13.792038648s ago: executing program 3 (id=173): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00002a4000/0x4000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) 1m13.408460163s ago: executing program 3 (id=178): r0 = socket(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r0, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0}, 0x10}], 0x2f, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) 1m12.612584282s ago: executing program 3 (id=182): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 1m9.440479098s ago: executing program 3 (id=201): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc16, &(0x7f0000001940)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x1400) 1m8.134301154s ago: executing program 3 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000feffffff2e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340001010101010100001000490008ac0f00"], 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m7.372591543s ago: executing program 3 (id=223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 1m7.162167965s ago: executing program 32 (id=223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 9.110519426s ago: executing program 4 (id=801): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x80000000, 0x227, 0xd, 0x8001, 0x9}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7f, 0x4, 0x0, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) 6.328724438s ago: executing program 0 (id=834): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x70bd28, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021b0002000000000904250000ff0116000904", @ANYRES32], 0x0) 6.245924499s ago: executing program 4 (id=836): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5786dd6c370c8900082b0000000000000000000023000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0) 6.117477751s ago: executing program 4 (id=837): ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x343, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x3a793092580d796d, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x7, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20082d0000002d05836c9a54dc962e2c6e6b894c2b90e29f9f166895b97db3"], 0x0, 0x0, 0x0, 0x0}, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.478854189s ago: executing program 0 (id=844): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x5598, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000700)={0x6, 0x7, 0xa}) 4.017646734s ago: executing program 4 (id=849): r0 = io_uring_setup(0x730c, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x100000, 0x2}) close(r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.107331394s ago: executing program 2 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000fcdbdf25410000000e0001006e657464657673496d0000000f0002007369"], 0x34}}, 0x24000040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) 2.938974306s ago: executing program 2 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2.889341967s ago: executing program 0 (id=866): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) close(0x3) 2.780047949s ago: executing program 5 (id=868): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.700500199s ago: executing program 2 (id=869): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x40000001, 0x0, 0x0, 0x8, 0x0, 0x2}, {0x0, 0x6, 0x6}, {0x40000000, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x1008, 0x6, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) 2.65219495s ago: executing program 5 (id=871): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.432438813s ago: executing program 2 (id=872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) 2.367908383s ago: executing program 2 (id=873): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x48, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x4, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x1, 0x8, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x2, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.260715645s ago: executing program 0 (id=874): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000880)={0x4, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000600)={0x2, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}}, 0x108) 2.187812675s ago: executing program 0 (id=875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x16) 2.032216607s ago: executing program 0 (id=877): memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cpuacct.usage_all\x00', 0x26e1, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000003c0)={"3d116fe273bc3862a8a1cab61efc97c97374398e23f6c079caedd29d9a5b5fc4", r2}) 1.204538807s ago: executing program 1 (id=885): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000bc0)={{0x0, 0x7, 0x0, 0x8, 0x5, 0x8, 0x9, 0x1, 0x7f, 0xd87ae91, 0x4, 0x6b1, 0x5, 0x3a23aef, 0x8}}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x4}) 1.187961557s ago: executing program 5 (id=886): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x7}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) 1.157641917s ago: executing program 1 (id=887): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f6, &(0x7f0000000340)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000bc0)='./cgroup\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 980.508299ms ago: executing program 1 (id=888): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 980.049139ms ago: executing program 5 (id=889): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x4, 0x2, 0x200, 0x100, 0x1, 0x6, 0x20000001000, 0xf64, 0xffeffffd}) syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000001140)='./file6\x00', 0x8b, &(0x7f0000000040), 0x1, 0x10f2, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2x/WmCNgrmxiySEDUxcDxPLDszMvMfDvlfgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDeSfK1JGdNUndZk6QkXXczu0vS7fKHn9smJa/fzhYv3k9fLrbL0mdNSr9rM69Xj2ud1mm9qs/Prp/UxYeP79pByZIut+vl/PTVatSr9LXbUU8EAACA++H7P5scuT4AAADwO6M1EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+1oP9sO4GTZKSdN3N7C5Jd6RPAwAAAMZR0uTN5FC+bQPsPcuXSUkZ9Au+lX7NZT4d2A8AAAD8mTL4H3+a0zwa5Oc5ycXFdv7zldV10ia5/OWc2/VyvnnOl/PyPy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/YgWMBAAAAAGH+1ml0bAAAAAAAAAAAAAAAAABTBQAA//9/udIP") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 866.520291ms ago: executing program 4 (id=890): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xa, &(0x7f0000000080)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x61) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 321.867957ms ago: executing program 2 (id=891): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xd890) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x0, 0x5, &(0x7f0000000340)={0x51, "732a5473c2bf273690bb713bd646baab088d08b240d1e9ee96e13c49e155462c86"}}) 76.580779ms ago: executing program 1 (id=892): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 336.66µs ago: executing program 4 (id=893): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f0000000440)={[{@nodots}, {@fat=@errors_continue}, {@fat=@umask={'umask', 0x3d, 0x2}}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@nfs_stale_rw}, {}, {@dots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 0s ago: executing program 1 (id=894): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@umask={'umask', 0x3d, 0xec}}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x8}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {}]}, 0x1, 0x151f, &(0x7f0000000500)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000000880)=""/198, 0xc6) kernel console output (not intermixed with test programs): 038-01-19 (0x7fffffff) [ 70.870666][ T4347] loop3: detected capacity change from 0 to 512 [ 70.968845][ T4354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.37'. [ 71.008859][ T4347] EXT4-fs (loop3): Test dummy encryption mode enabled [ 71.026393][ T4347] EXT4-fs (loop3): Ignoring removed oldalloc option [ 71.087280][ T4347] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 71.119927][ T4361] netlink: 36 bytes leftover after parsing attributes in process `syz.1.39'. [ 71.132733][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.635710][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.644176][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.880829][ T4347] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 72.368823][ T4403] loop3: detected capacity change from 0 to 512 [ 72.510049][ T4403] EXT4-fs (loop3): Ignoring removed nobh option [ 72.557300][ T4403] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.52: corrupted in-inode xattr [ 72.588873][ T4403] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.52: couldn't read orphan inode 15 (err -117) [ 72.616886][ T4403] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,delalloc,debug_want_extra_isize=0x000000000000005a,usrjquota=,nouid32,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 72.634811][ T4377] loop4: detected capacity change from 0 to 40427 [ 72.687316][ T4376] loop0: detected capacity change from 0 to 32768 [ 72.751004][ T4377] F2FS-fs (loop4): invalid crc value [ 72.820264][ T4377] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.056058][ T4385] loop1: detected capacity change from 0 to 32768 [ 73.087705][ T4377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.423718][ T4377] attempt to access beyond end of device [ 73.423718][ T4377] loop4: rw=2049, want=77960, limit=40427 [ 73.611181][ T26] audit: type=1800 audit(1778021977.432:2): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 73.638203][ T4428] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.740830][ T4198] attempt to access beyond end of device [ 73.740830][ T4198] loop4: rw=2049, want=45104, limit=40427 [ 74.221897][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.398252][ T4446] loop1: detected capacity change from 0 to 1024 [ 74.479371][ T4446] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 74.491773][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 74.536074][ T4443] loop2: detected capacity change from 0 to 8192 [ 74.558832][ T4446] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 74.599390][ T4446] EXT4-fs error (device loop1): ext4_get_journal_inode:5187: inode #5: comm syz.1.68: unexpected bad inode w/o EXT4_IGET_BAD [ 74.624026][ T4443] ======================================================= [ 74.624026][ T4443] WARNING: The mand mount option has been deprecated and [ 74.624026][ T4443] and is ignored by this kernel. Remove the mand [ 74.624026][ T4443] option from the mount to silence this warning. [ 74.624026][ T4443] ======================================================= [ 74.646764][ T4446] EXT4-fs (loop1): no journal found [ 74.664991][ T4230] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.673490][ T4448] netlink: 'syz.4.64': attribute type 11 has an invalid length. [ 74.691812][ T4230] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.692917][ T4446] EXT4-fs (loop1): can't get journal size [ 74.721700][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.737636][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 74.740161][ T4230] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 74.759640][ T4446] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 74.803993][ T4443] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 74.891187][ T4443] REISERFS (device loop2): using ordered data mode [ 74.898719][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.971763][ T4443] reiserfs: using flush barriers [ 75.003436][ T4443] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.017572][ T4435] loop0: detected capacity change from 0 to 32768 [ 75.034208][ T4230] usb 4-1: config 0 descriptor?? [ 75.077943][ T4443] REISERFS (device loop2): checking transaction log (loop2) [ 75.167550][ T4443] REISERFS (device loop2): Using r5 hash to sort names [ 75.182197][ T4435] XFS (loop0): Mounting V5 Filesystem [ 75.204855][ T4443] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 75.270901][ T4462] loop4: detected capacity change from 0 to 512 [ 75.309588][ T4443] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 75.368739][ T4465] loop1: detected capacity change from 0 to 512 [ 75.416759][ T4435] XFS (loop0): Ending clean mount [ 75.469007][ T4435] XFS (loop0): Quotacheck needed: Please wait. [ 75.533995][ T4230] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 75.535918][ T4465] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.70: bg 0: block 5: invalid block bitmap [ 75.543382][ T4230] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 75.564268][ T4230] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 75.572277][ T4230] hid-generic 0003:1E71:2009.0001: unknown main item tag 0x0 [ 75.586475][ T4230] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 75.602122][ T4435] XFS (loop0): Quotacheck: Done. [ 75.662909][ T4465] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 75.692012][ T4465] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.70: invalid indirect mapped block 3 (level 2) [ 75.706124][ T4465] EXT4-fs (loop1): 1 orphan inode deleted [ 75.713843][ T4465] EXT4-fs (loop1): 1 truncate cleaned up [ 75.721464][ T4465] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.919353][ T26] audit: type=1800 audit(1778021979.742:3): pid=4465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.70" name="bus" dev="loop1" ino=11 res=0 errno=0 [ 75.988847][ T4189] XFS (loop0): Unmounting Filesystem [ 76.012816][ T4178] usb 4-1: USB disconnect, device number 2 [ 76.090104][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.75'. [ 76.237608][ T4472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.75'. [ 76.733813][ T4502] loop1: detected capacity change from 0 to 64 [ 76.805373][ T4504] loop0: detected capacity change from 0 to 64 [ 76.891341][ T26] audit: type=1800 audit(1778021980.712:4): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.86" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 76.933537][ T4504] MINIX-fs: mounting file system with errors, running fsck is recommended [ 77.025475][ T4203] hfs: node 4:3 still has 1 user(s)! [ 77.058647][ T4513] input: syz1 as /devices/virtual/input/input5 [ 77.064656][ T4504] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 77.120847][ T4516] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 77.221319][ T4522] Zero length message leads to an empty skb [ 77.264088][ T4520] loop1: detected capacity change from 0 to 2048 [ 77.293709][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.95'. [ 77.318574][ T4520] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 77.384132][ T4528] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 77.412047][ T4194] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.419471][ T4528] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.96'. [ 77.431949][ T4182] udevd[4182]: incorrect nilfs2 checksum on /dev/loop1 [ 77.468724][ T4530] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 77.789478][ T4190] syz-executor (4190) used greatest stack depth: 21136 bytes left [ 77.844452][ T3079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.946048][ T3079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.009979][ T4544] capability: warning: `syz.0.105' uses 32-bit capabilities (legacy support in use) [ 78.023216][ T3079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.043748][ T4194] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 78.056935][ T4544] program syz.0.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.070910][ T4194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.083824][ T4194] usb 5-1: Product: syz [ 78.088243][ T4194] usb 5-1: Manufacturer: syz [ 78.099156][ T4194] usb 5-1: SerialNumber: syz [ 78.141283][ T3079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.193589][ T4194] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 78.854038][ T4572] loop0: detected capacity change from 0 to 256 [ 78.912614][ T4572] exfat: Deprecated parameter 'utf8' [ 78.917982][ T4572] exfat: Deprecated parameter 'utf8' [ 78.932358][ T4572] exfat: Deprecated parameter 'namecase' [ 78.942246][ T4572] exfat: Deprecated parameter 'namecase' [ 78.972200][ T4194] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.986112][ T4551] chnl_net:caif_netlink_parms(): no params data found [ 79.055388][ T4572] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 79.145875][ T4580] loop3: detected capacity change from 0 to 512 [ 79.290451][ T4551] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.299364][ T4551] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.321601][ T4551] device bridge_slave_0 entered promiscuous mode [ 79.332613][ T4580] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.343227][ T4551] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.352408][ T4551] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.360940][ T4551] device bridge_slave_1 entered promiscuous mode [ 79.427511][ T4558] XFS (loop1): Mounting V5 Filesystem [ 79.537107][ T4558] XFS (loop1): Ending clean mount [ 79.544103][ T4580] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.116: iget: bad i_size value: 38620345925642 [ 79.594807][ T4551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.621795][ T4234] usb 5-1: USB disconnect, device number 2 [ 79.636900][ T4580] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.116: couldn't read orphan inode 15 (err -117) [ 79.645553][ T4551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.681341][ T4580] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,max_dir_size_kb=0x0000000000000003,bsddf,quota,bsdgroups,dioread_nolock,,errors=continue. Quota mode: writeback. [ 79.710655][ T4558] syz.1.111 (4558) used greatest stack depth: 20624 bytes left [ 79.785895][ T4203] XFS (loop1): Unmounting Filesystem [ 79.798147][ T4551] team0: Port device team_slave_0 added [ 79.894412][ T4551] team0: Port device team_slave_1 added [ 80.029508][ T4551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.039554][ T4551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.067116][ T4551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.080911][ T4551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.088904][ T4551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.263061][ T4551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.281986][ T4194] usb 5-1: Service connection timeout for: 256 [ 80.300080][ T4194] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 80.369885][ T4194] ath9k_htc: Failed to initialize the device [ 80.402708][ T4234] usb 5-1: ath9k_htc: USB layer deinitialized [ 80.452412][ T4230] Bluetooth: hci1: command 0x0409 tx timeout [ 80.472757][ T4620] set_capacity_and_notify: 1 callbacks suppressed [ 80.472774][ T4620] loop4: detected capacity change from 0 to 256 [ 80.491081][ T4551] device hsr_slave_0 entered promiscuous mode [ 80.533269][ T4600] loop0: detected capacity change from 0 to 32768 [ 80.540576][ T4551] device hsr_slave_1 entered promiscuous mode [ 80.549893][ T4551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.565181][ T4620] exfat: Deprecated parameter 'namecase' [ 80.566426][ T4551] Cannot create hsr debugfs directory [ 80.571804][ T4600] xfs: Unknown parameter 'smackfstransmute' [ 80.585371][ T4623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 80.601986][ T4262] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.693036][ T4620] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 80.837279][ T3079] device hsr_slave_0 left promiscuous mode [ 80.859961][ T3079] device hsr_slave_1 left promiscuous mode [ 80.887060][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.907931][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.938164][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.972019][ T4262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.983360][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.001898][ T4262] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.024079][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.057279][ T3079] device bridge_slave_1 left promiscuous mode [ 81.066264][ T4262] usb 4-1: config 0 descriptor?? [ 81.088034][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.173429][ T3079] device bridge_slave_0 left promiscuous mode [ 81.191750][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.311333][ T4647] loop0: detected capacity change from 0 to 2048 [ 81.339259][ T3079] device veth1_macvtap left promiscuous mode [ 81.380305][ T3079] device veth0_macvtap left promiscuous mode [ 81.386652][ T3079] device veth1_vlan left promiscuous mode [ 81.405651][ T3079] device veth0_vlan left promiscuous mode [ 81.480313][ T4647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.573492][ T4262] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 81.606323][ T4262] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 81.817103][ T4262] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 82.216683][ T4653] loop4: detected capacity change from 0 to 32768 [ 82.302069][ T4651] loop1: detected capacity change from 0 to 32768 [ 82.409085][ T4651] XFS (loop1): Mounting V5 Filesystem [ 82.504490][ T4651] XFS (loop1): Ending clean mount [ 82.531681][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 82.559791][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 82.573690][ T21] usb 4-1: USB disconnect, device number 3 [ 82.627697][ T3079] team0 (unregistering): Port device team_slave_0 removed [ 82.657334][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.691145][ T4203] XFS (loop1): Unmounting Filesystem [ 82.729124][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.740510][ T4670] loop4: detected capacity change from 0 to 1024 [ 83.107609][ T3079] bond0 (unregistering): Released all slaves [ 83.531854][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.622191][ T4690] loop4: detected capacity change from 0 to 64 [ 83.647800][ T4694] loop3: detected capacity change from 0 to 512 [ 83.819015][ T4694] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.899261][ T4198] hfs: request for non-existent node 131072 in B*Tree [ 84.108230][ T4711] loop4: detected capacity change from 0 to 512 [ 84.122092][ T21] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 84.141902][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.180277][ T4711] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.189942][ T21] usb 2-1: Product: syz [ 84.217783][ T21] usb 2-1: Manufacturer: syz [ 84.249990][ T21] usb 2-1: SerialNumber: syz [ 84.262148][ T4711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.145: iget: bad extra_isize 58 (inode size 256) [ 84.313037][ T21] usb 2-1: config 0 descriptor?? [ 84.403489][ T21] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002 [ 84.422463][ T4711] EXT4-fs (loop4): Remounting filesystem read-only [ 84.436541][ T4711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.145: error while reading EA inode 18 err=-117 [ 84.510951][ T4711] EXT4-fs (loop4): Remounting filesystem read-only [ 84.551220][ T4711] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.571415][ T4720] tipc: Started in network mode [ 84.576888][ T4720] tipc: Node identity ac14140f, cluster identity 4711 [ 84.592105][ T4194] Bluetooth: hci1: command 0x040f tx timeout [ 84.602350][ T4720] tipc: New replicast peer: 255.255.255.255 [ 84.612357][ T4711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.145: iget: bad extra_isize 58 (inode size 256) [ 84.614147][ T4720] tipc: Enabled bearer , priority 10 [ 84.681793][ T4711] EXT4-fs (loop4): Remounting filesystem read-only [ 84.688987][ T4711] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.145: error while reading EA inode 11 err=-117 [ 84.742690][ T4711] EXT4-fs (loop4): Remounting filesystem read-only [ 84.749530][ T4711] EXT4-fs (loop4): 1 orphan inode deleted [ 84.814533][ T4711] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none. [ 84.942422][ T4551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.964403][ T4551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.021192][ T4551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.038514][ T4711] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.145: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 85.087423][ T4551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.103792][ T21] i2c i2c-1: connected i2c-tiny-usb device [ 85.224389][ T4711] EXT4-fs (loop4): Remounting filesystem read-only [ 85.351274][ T4178] usb 2-1: USB disconnect, device number 2 [ 85.421915][ T4551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.467273][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.493077][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.516082][ T4551] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.545600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.618329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.657661][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.665330][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.693823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.718131][ T4230] tipc: Node number set to 2886997007 [ 85.750833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.759872][ T4194] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.778338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.792454][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.799621][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.817808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.829050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.864533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.890788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.938121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.991192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.026137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.044862][ T4194] usb 1-1: Using ep0 maxpacket: 8 [ 86.056854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.069305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.100431][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 86.125216][ T4770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 86.151197][ T4770] netlink: 'syz.1.163': attribute type 20 has an invalid length. [ 86.192155][ T4194] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 86.205304][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.229826][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.231677][ T4194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.274817][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.283760][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.305641][ T4194] pvrusb2: Hardware description: Terratec Grabster AV400 [ 86.332269][ T4194] pvrusb2: ********** [ 86.336649][ T4194] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 86.371672][ T4194] pvrusb2: Important functionality might not be entirely working. [ 86.379837][ T4194] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 86.428772][ T4194] pvrusb2: ********** [ 86.484908][ T4788] loop1: detected capacity change from 0 to 128 [ 86.516517][ T2425] pvrusb2: Invalid write control endpoint [ 86.596267][ T4788] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.676191][ T4788] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.682345][ T4194] Bluetooth: hci1: command 0x0419 tx timeout [ 86.712110][ T4230] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.721404][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.753554][ T2425] pvrusb2: Invalid write control endpoint [ 86.768158][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 86.813732][ T4230] usb 4-1: config 0 descriptor?? [ 86.848514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.857425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.866773][ T4230] cp210x 4-1:0.0: cp210x converter detected [ 86.874102][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 86.907655][ T4551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.915130][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 86.923091][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 86.959069][ T2425] pvrusb2: Device being rendered inoperable [ 86.979277][ T4751] pvrusb2: Attempted to execute control transfer when device not ok [ 86.998240][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.010360][ T23] cfg80211: failed to load regulatory.db [ 87.049714][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 87.073239][ T4194] usb 1-1: USB disconnect, device number 2 [ 87.095484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.111722][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 87.115178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.149260][ T4551] device veth0_vlan entered promiscuous mode [ 87.182565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.201880][ T2425] pvrusb2: Attached sub-driver cx25840 [ 87.207676][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.221886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.252740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.272854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.294536][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 87.308958][ T4230] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 87.326327][ T4551] device veth1_vlan entered promiscuous mode [ 87.361949][ T4230] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 87.386086][ T4230] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 87.445863][ T4230] usb 4-1: cp210x converter now attached to ttyUSB0 [ 87.502969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.511109][ T4230] usb 4-1: USB disconnect, device number 4 [ 87.522080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.545620][ T4230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 87.554900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.573684][ T4230] cp210x 4-1:0.0: device disconnected [ 87.580217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.624034][ T4551] device veth0_macvtap entered promiscuous mode [ 87.632266][ T4263] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.684811][ T4551] device veth1_macvtap entered promiscuous mode [ 87.720597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.733189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.790839][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.881760][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.911764][ T4263] usb 2-1: Using ep0 maxpacket: 8 [ 87.928455][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.981759][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.051991][ T4263] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 88.052475][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.106472][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.155565][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.204034][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.220355][ T4829] loop0: detected capacity change from 0 to 256 [ 88.241983][ T4263] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 88.248164][ T4551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.266502][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.278597][ T4263] usb 2-1: Product: syz [ 88.283754][ T4263] usb 2-1: Manufacturer: syz [ 88.323019][ T4829] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.325663][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.353527][ T4263] usb 2-1: SerialNumber: syz [ 88.382667][ T4829] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 88.392351][ T4263] usb 2-1: config 0 descriptor?? [ 88.424959][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.430471][ T4829] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 88.457264][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.473826][ T4263] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 88.499211][ T4263] usb 2-1: setting power ON [ 88.501835][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.525089][ T4837] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 88.532113][ T4263] dvb-usb: bulk message failed: -22 (2/0) [ 88.546070][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.561299][ T4263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.592143][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.628993][ T4551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.642092][ T4263] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 88.651144][ T4263] usb 2-1: media controller created [ 88.661750][ T4551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.687645][ T4806] dvb-usb: bulk message failed: -22 (3/0) [ 88.693094][ T4263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.705277][ T4806] dvb-usb: bulk message failed: -22 (4/0) [ 88.711070][ T4806] cxusb: i2c read failed [ 88.728168][ T4551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.735277][ T4263] usb 2-1: selecting invalid altsetting 6 [ 88.750741][ T4263] usb 2-1: digital interface selection failed (-22) [ 88.761335][ T4806] dvb-usb: bulk message failed: -22 (3/0) [ 88.777842][ T4263] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 88.810085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.830574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.836174][ T4846] loop0: detected capacity change from 0 to 256 [ 88.896002][ T4846] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x246dc941, utbl_chksum : 0xe619d30d) [ 88.908966][ T4263] usb 2-1: setting power OFF [ 88.916237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.925609][ T4263] dvb-usb: bulk message failed: -22 (2/0) [ 88.940250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.948909][ T4263] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 88.973347][ T4263] (NULL device *): no alternate interface [ 88.992679][ T4551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.095145][ T4551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.123979][ T4263] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 89.145538][ T4551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.169209][ T4263] usb 2-1: USB disconnect, device number 3 [ 89.181579][ T4551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.522167][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.549813][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.662051][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.680504][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.131642][ C0] sched: RT throttling activated [ 90.140459][ T26] audit: type=1326 audit(1778021993.912:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 90.166316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.212583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.344904][ T26] audit: type=1326 audit(1778021993.922:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 90.392761][ T4866] program syz.1.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.547127][ T26] audit: type=1326 audit(1778021993.932:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 90.746495][ T26] audit: type=1326 audit(1778021993.932:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 90.835787][ T4872] netlink: 27 bytes leftover after parsing attributes in process `syz.2.189'. [ 90.911708][ T26] audit: type=1326 audit(1778021993.932:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 91.060064][ T4854] loop4: detected capacity change from 0 to 262144 [ 91.102886][ T4857] loop0: detected capacity change from 0 to 4096 [ 91.122711][ T26] audit: type=1326 audit(1778021993.932:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 91.165969][ T4854] F2FS-fs (loop4): invalid crc value [ 91.207570][ T4854] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.271021][ T26] audit: type=1326 audit(1778021993.942:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 91.296149][ T4854] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 91.322009][ T4884] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.336197][ T4882] loop2: detected capacity change from 0 to 8 [ 91.352042][ T26] audit: type=1326 audit(1778021993.942:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 91.418347][ T4852] loop3: detected capacity change from 0 to 40427 [ 91.441174][ T26] audit: type=1326 audit(1778021993.942:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 91.450755][ T4854] F2FS-fs (loop4): inode (7) has corrupted xattr [ 91.466455][ T26] audit: type=1326 audit(1778021993.942:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.186" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 91.542641][ T4852] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 91.587771][ T4852] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 91.608661][ T4882] SQUASHFS error: lzo decompression failed, data probably corrupt [ 91.651083][ T4852] F2FS-fs (loop3): invalid crc value [ 91.653845][ T4882] SQUASHFS error: Failed to read block 0x91: -5 [ 91.659761][ T4889] process 'syz.1.195' launched './file1' with NULL argv: empty string added [ 91.683945][ T4882] SQUASHFS error: Unable to read metadata cache entry [8f] [ 91.730934][ T4852] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 91.758917][ T4882] SQUASHFS error: Unable to read inode 0x11f [ 91.920304][ T4882] netlink: 56 bytes leftover after parsing attributes in process `syz.2.192'. [ 91.998400][ T4852] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 92.026831][ T4852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.287597][ T4904] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.202'. [ 92.331780][ T4902] loop1: detected capacity change from 0 to 4096 [ 92.479203][ T4902] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 92.595475][ T4902] ntfs3: loop1: Failed to load $Extend. [ 92.692644][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'. [ 92.943252][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 92.948525][ T4914] loop3: detected capacity change from 0 to 2048 [ 93.085145][ T4914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.222708][ T4914] overlayfs: upper fs needs to support d_type. [ 93.275999][ T4914] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.322793][ T4914] overlayfs: failed to set xattr on upper [ 93.350879][ T4914] overlayfs: ...falling back to index=off,metacopy=off. [ 93.600572][ T4191] UDF-fs: error (device loop3): udf_read_inode: (ino 1416) failed !bh [ 93.636625][ T4191] UDF-fs: error (device loop3): udf_read_inode: (ino 1416) failed !bh [ 93.948962][ T4942] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 93.992070][ T4943] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 94.022853][ T4940] loop2: detected capacity change from 0 to 8192 [ 94.176216][ T3079] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.194580][ T4949] loop1: detected capacity change from 0 to 256 [ 94.344365][ T3079] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.511398][ T3079] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.634572][ T4958] loop4: detected capacity change from 0 to 1024 [ 94.723267][ T4958] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 94.738790][ T3079] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.767202][ T4958] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 94.811820][ T4958] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: inode #32: comm syz.4.227: iget: special inode unallocated [ 94.870474][ T4958] EXT4-fs (loop4): no journal found [ 94.876249][ T4958] EXT4-fs (loop4): can't get journal size [ 94.896432][ T4966] loop1: detected capacity change from 0 to 512 [ 94.956949][ T4958] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 94.958927][ T4968] loop2: detected capacity change from 0 to 2048 [ 94.984397][ T4958] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.227: iget: special inode unallocated [ 95.004456][ T4958] EXT4-fs (loop4): failed to initialize system zone (-117) [ 95.011385][ T4966] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 95.012158][ T4263] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.033899][ T4966] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.056095][ T4958] EXT4-fs (loop4): mount failed [ 95.068199][ T4968] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.140291][ T4968] NILFS (loop2): mounting unchecked fs [ 95.221409][ T4968] NILFS (loop2): recovery complete [ 95.258138][ T4977] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.332224][ T4263] usb 1-1: Using ep0 maxpacket: 32 [ 95.462107][ T4263] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.493929][ T4263] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 95.555529][ T4263] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 95.588309][ T4263] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 95.722246][ T4263] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.752477][ T4263] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.800884][ T4263] usb 1-1: SerialNumber: syz [ 95.819891][ T4975] chnl_net:caif_netlink_parms(): no params data found [ 95.886071][ T4962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.922005][ T4962] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.972634][ T4263] hub 1-1:1.0: bad descriptor, ignoring hub [ 95.978677][ T4263] hub: probe of 1-1:1.0 failed with error -5 [ 96.002732][ T4263] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 96.119989][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.132393][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.140632][ T4975] device bridge_slave_0 entered promiscuous mode [ 96.149833][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.157128][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.167238][ T4975] device bridge_slave_1 entered promiscuous mode [ 96.183496][ T4263] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 96.223211][ T4263] usb 1-1: USB disconnect, device number 3 [ 96.254531][ T4975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.343971][ T4975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.390002][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 96.390017][ T26] audit: type=1326 audit(1778022000.212:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4978 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 96.451344][ T26] audit: type=1326 audit(1778022000.272:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4978 comm="syz.1.232" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80cd89dd9 code=0x7ffc0000 [ 96.489789][ T4975] team0: Port device team_slave_0 added [ 96.543881][ T4975] team0: Port device team_slave_1 added [ 96.599674][ T5017] device batadv_slave_1 entered promiscuous mode [ 96.627013][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.644804][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.673733][ T4975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.701727][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 96.711095][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.720547][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.750390][ T4975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.777097][ T5016] device batadv_slave_1 left promiscuous mode [ 96.860869][ T4975] device hsr_slave_0 entered promiscuous mode [ 96.917249][ T4975] device hsr_slave_1 entered promiscuous mode [ 97.122076][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.180300][ T23] usb 3-1: config 0 has no interfaces? [ 97.193512][ T4230] Bluetooth: hci2: command 0x0409 tx timeout [ 97.235282][ T3079] device hsr_slave_0 left promiscuous mode [ 97.280299][ T3079] device hsr_slave_1 left promiscuous mode [ 97.288223][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.303523][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.322792][ T3079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.331085][ T3079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.341971][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0714, bcdDevice= 0.00 [ 97.361765][ T23] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 97.370818][ T23] usb 3-1: Product: syz [ 97.391264][ T5035] loop1: detected capacity change from 0 to 4096 [ 97.401948][ T23] usb 3-1: Manufacturer: syz [ 97.439004][ T5040] loop4: detected capacity change from 0 to 4096 [ 97.447111][ T23] usb 3-1: config 0 descriptor?? [ 97.473449][ T3079] device bridge_slave_1 left promiscuous mode [ 97.490760][ T3079] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.510292][ T3079] device bridge_slave_0 left promiscuous mode [ 97.522121][ T5040] EXT4-fs (loop4): Test dummy encryption mode enabled [ 97.557059][ T3079] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.591884][ T3079] device veth1_macvtap left promiscuous mode [ 97.593333][ T5040] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 97.633459][ T3079] device veth0_macvtap left promiscuous mode [ 97.671782][ T3079] device veth1_vlan left promiscuous mode [ 97.678442][ T5040] System zones: 0-5 [ 97.744151][ T3079] device veth0_vlan left promiscuous mode [ 97.753415][ T5040] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000001,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 97.788770][ T23] usb 3-1: USB disconnect, device number 2 [ 98.270373][ T5056] loop1: detected capacity change from 0 to 512 [ 98.304661][ T5056] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 98.381891][ T5056] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 98.394236][ T5056] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.253: bad orphan inode 13 [ 98.531672][ T5056] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback. [ 98.576990][ T5056] EXT4-fs (loop1): shut down requested (2) [ 98.598208][ T5056] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 98.725997][ T3079] team0 (unregistering): Port device team_slave_1 removed [ 98.741841][ T3079] team0 (unregistering): Port device team_slave_0 removed [ 98.768250][ T3079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.794565][ T3079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.831726][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 98.877616][ T3079] bond0 (unregistering): Released all slaves [ 98.961933][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.081842][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 99.191231][ T4975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.202097][ T13] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 99.213849][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.231255][ T4975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.232513][ T13] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 99.238678][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 99.260920][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.285898][ T13] usb 1-1: config 0 descriptor?? [ 99.294031][ T4975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.321326][ T4975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.344874][ T4231] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.399300][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.432347][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.467969][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.497562][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.558433][ T5065] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.591874][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 99.606067][ T4975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.639485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.661319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.705650][ T4975] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.712037][ T4231] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 99.727986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.749089][ T4231] usb 3-1: config 0 has no interface number 0 [ 99.801129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.840512][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.848101][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.886873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.918138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.945310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.952019][ T4231] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 99.985630][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.991967][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.993022][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.025245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.045275][ T4231] usb 3-1: Product: syz [ 100.049510][ T4231] usb 3-1: Manufacturer: syz [ 100.075731][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.090681][ T4231] usb 3-1: SerialNumber: syz [ 100.129494][ T4231] usb 3-1: config 0 descriptor?? [ 100.138945][ T13] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 100.157930][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.171385][ T13] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 100.201252][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.222669][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.223053][ T13] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 100.233386][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.244359][ T4231] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 100.248239][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.265172][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.279959][ T13] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 100.288098][ T4975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.309920][ T13] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0 [ 100.323051][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.341022][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.341131][ T13] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 100.353075][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.379878][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.475783][ T4231] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 100.537838][ T4231] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 100.681073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.699765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.734522][ T4975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.791733][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 112 [ 100.797930][ T4194] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.809684][ T13] corsair-cpro: probe of 0003:1B1C:0C10.0003 failed with error -110 [ 100.848652][ T13] usb 1-1: USB disconnect, device number 4 [ 101.003164][ T1107] usb 3-1: USB disconnect, device number 3 [ 101.011759][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 101.031876][ T5120] fido_id[5120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 101.047176][ T1107] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 101.114320][ T1107] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 101.139704][ T1107] quatech2 3-1:0.51: device disconnected [ 101.191955][ T4194] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 101.201245][ T4194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.255602][ T4194] usb 5-1: config 0 descriptor?? [ 101.326108][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 101.348590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.377859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.451872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.460368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.471293][ T23] usb 2-1: USB disconnect, device number 4 [ 101.503758][ T4975] device veth0_vlan entered promiscuous mode [ 101.544811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.561250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.629593][ T4975] device veth1_vlan entered promiscuous mode [ 101.757826][ T4194] hackrf 5-1:0.0: Board ID: 00 [ 101.768829][ T4194] hackrf 5-1:0.0: Firmware version: [ 101.781368][ T4975] device veth0_macvtap entered promiscuous mode [ 101.814557][ T4194] hackrf 5-1:0.0: Registered as swradio24 [ 101.836571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.837897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.838524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.839127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.839729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.848095][ T4975] device veth1_macvtap entered promiscuous mode [ 101.874070][ T4194] hackrf 5-1:0.0: Registered as swradio25 [ 101.874096][ T4194] hackrf 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 101.943165][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.943191][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.943202][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.943215][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.943224][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.943236][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.943246][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.943257][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.955821][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.956911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.957617][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.958211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.984441][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.984467][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.984495][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.984508][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.984519][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.984532][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.984544][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.984558][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.992271][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.992417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.993140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.004231][ T4975] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.004271][ T4975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.004300][ T4975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.004327][ T4975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.033360][ T4233] usb 5-1: USB disconnect, device number 3 [ 102.211075][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.211098][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.211335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.221778][ T13] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.352822][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.352846][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.354331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.711879][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 102.745334][ T5161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.276'. [ 102.832011][ T13] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 102.857369][ T13] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 102.897760][ T13] usb 3-1: config 6 has no interface number 0 [ 102.904578][ T13] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.082249][ T13] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 103.098596][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.121748][ T13] usb 3-1: Product: syz [ 103.126924][ T13] usb 3-1: Manufacturer: syz [ 103.140516][ T13] usb 3-1: SerialNumber: syz [ 103.205429][ T13] hso 3-1:6.2: Failed to find INT IN ep [ 103.419725][ T4194] Bluetooth: hci2: command 0x0419 tx timeout [ 103.642042][ T4231] usb 3-1: USB disconnect, device number 4 [ 103.811871][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.864456][ T5204] loop0: detected capacity change from 0 to 512 [ 103.942312][ T5204] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.013330][ T5204] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.171973][ T13] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.174202][ T5204] EXT4-fs (loop0): 1 truncate cleaned up [ 104.191738][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.213669][ T13] usb 5-1: config 0 descriptor?? [ 104.271171][ T13] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 104.276349][ T5204] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000008,stripe=0x0000000000000007,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 104.510595][ T5204] EXT4-fs warning (device loop0): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 104.651763][ T4262] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.701920][ T13] gspca_cpia1: usb_control_msg 03, error -32 [ 104.734805][ T5233] loop0: detected capacity change from 0 to 164 [ 104.741803][ T13] gspca_cpia1: usb_control_msg 03, error -71 [ 104.761817][ T13] gspca_cpia1: usb_control_msg 01, error -71 [ 104.768158][ T13] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 104.815142][ T13] usb 5-1: USB disconnect, device number 4 [ 104.901742][ T4262] usb 6-1: Using ep0 maxpacket: 32 [ 105.022005][ T4262] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.031380][ T5239] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 105.051020][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.107897][ T4262] usb 6-1: config 0 descriptor?? [ 105.401888][ T4262] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 105.431701][ T4262] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.455159][ T5227] loop1: detected capacity change from 0 to 32768 [ 105.506928][ T4262] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 105.544150][ T4262] usb 6-1: media controller created [ 105.620029][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.631861][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.739331][ T5256] loop4: detected capacity change from 0 to 1024 [ 105.881881][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 106.001914][ T13] usb 3-1: config 0 has no interfaces? [ 106.007858][ T13] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 106.051846][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.104750][ T13] usb 3-1: config 0 descriptor?? [ 106.221930][ T4262] az6027: usb out operation failed. (-71) [ 106.239169][ T4262] stb0899_attach: Driver disabled by Kconfig [ 106.272949][ T4262] az6027: no front-end attached [ 106.272949][ T4262] [ 106.313148][ T4262] az6027: usb out operation failed. (-71) [ 106.319034][ T4262] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 106.325653][ T5243] loop0: detected capacity change from 0 to 32768 [ 106.356897][ T5272] loop4: detected capacity change from 0 to 256 [ 106.380633][ T4262] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 106.430310][ T4262] dvb-usb: schedule remote query interval to 400 msecs. [ 106.448828][ T4262] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 106.469651][ T5243] XFS (loop0): Mounting V5 Filesystem [ 106.471904][ T4262] usb 6-1: USB disconnect, device number 2 [ 106.684041][ T4262] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 106.728187][ T5243] XFS (loop0): Ending clean mount [ 106.793723][ T5286] loop1: detected capacity change from 0 to 256 [ 106.897616][ T5289] program syz.5.309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.020945][ T4189] XFS (loop0): Unmounting Filesystem [ 107.044318][ T5286] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 107.137978][ T5286] FAT-fs (loop1): Filesystem has been set read-only [ 108.262710][ T4230] usb 3-1: USB disconnect, device number 5 [ 108.627462][ T5347] program syz.2.327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.727228][ T5345] loop4: detected capacity change from 0 to 4096 [ 109.478493][ T5375] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.337'. [ 109.621753][ T13] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 109.992113][ T13] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 110.000661][ T13] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 110.017020][ T5386] loop1: detected capacity change from 0 to 8192 [ 110.035353][ T5352] loop2: detected capacity change from 0 to 40427 [ 110.053630][ T13] usb 6-1: config 150 has no interface number 0 [ 110.070149][ T13] usb 6-1: config 150 interface 204 has no altsetting 0 [ 110.076382][ T5386] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 110.153078][ T5352] F2FS-fs (loop2): invalid crc value [ 110.153405][ T5386] REISERFS (device loop1): using ordered data mode [ 110.213503][ T5352] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.225787][ T5386] reiserfs: using flush barriers [ 110.241956][ T13] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 110.260271][ T5386] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.261722][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.335968][ T13] usb 6-1: Product: syz [ 110.344753][ T13] usb 6-1: Manufacturer: syz [ 110.358848][ T13] usb 6-1: SerialNumber: syz [ 110.366600][ T5352] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.370060][ T5386] REISERFS (device loop1): checking transaction log (loop1) [ 110.459935][ T5386] REISERFS (device loop1): Using r5 hash to sort names [ 110.488567][ T5386] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 110.563336][ T5376] loop4: detected capacity change from 0 to 32768 [ 110.629812][ T4551] attempt to access beyond end of device [ 110.629812][ T4551] loop2: rw=2049, want=45112, limit=40427 [ 110.653990][ T13] xr_serial 6-1:150.204: skipping garbage [ 110.660282][ T13] xr_serial 6-1:150.204: xr_serial converter detected [ 110.697935][ T5376] JBD2: Ignoring recovery information on journal [ 110.934463][ T5376] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 111.312601][ T13] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 111.331720][ T13] xr_serial: probe of ttyUSB0 failed with error -71 [ 111.370830][ T13] usb 6-1: USB disconnect, device number 3 [ 111.437308][ T13] xr_serial 6-1:150.204: device disconnected [ 111.576938][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 112.241823][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.299269][ T5430] loop2: detected capacity change from 0 to 40427 [ 112.350777][ T5430] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 112.358376][ T5430] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.491747][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 112.572216][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.612016][ T1107] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.633955][ T1107] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.662348][ T1107] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 112.686005][ T1107] usb 2-1: config 0 interface 0 has no altsetting 0 [ 112.706314][ T1107] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 112.715927][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.770670][ T1107] usb 2-1: config 0 descriptor?? [ 112.789970][ T5452] loop2: detected capacity change from 0 to 512 [ 112.861786][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 112.981899][ T13] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 112.997621][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.050353][ T13] usb 5-1: config 0 descriptor?? [ 113.076348][ T5457] loop0: detected capacity change from 0 to 4096 [ 113.101173][ T5452] EXT4-fs (loop2): Test dummy encryption mode enabled [ 113.121429][ T5452] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.221128][ T5452] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.364: bad orphan inode 131083 [ 113.278332][ T1107] hid (null): unknown global tag 0xd [ 113.290262][ T5469] loop5: detected capacity change from 0 to 512 [ 113.306878][ T5452] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 113.322009][ T13] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 113.366961][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.379346][ T1107] hid (null): unknown global tag 0xd [ 113.391994][ T1107] hid (null): nested delimiters [ 113.432044][ T13] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 113.439646][ T13] usb 5-1: media controller created [ 113.471328][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.516559][ T4262] usb 2-1: USB disconnect, device number 5 [ 113.533017][ T13] az6027: usb out operation failed. (-71) [ 113.571962][ T13] az6027: usb out operation failed. (-71) [ 113.578550][ T13] stb0899_attach: Driver disabled by Kconfig [ 113.580772][ T5469] FAT-fs (loop5): error, clusters badly computed (0 != 1) [ 113.601890][ T13] az6027: no front-end attached [ 113.601890][ T13] [ 113.622391][ T4189] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 113.660299][ T5472] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 51) [ 113.669451][ T4189] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 113.691171][ T13] az6027: usb out operation failed. (-71) [ 113.729356][ T13] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 113.756431][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 113.846174][ T13] dvb-usb: schedule remote query interval to 400 msecs. [ 113.867291][ T5474] loop2: detected capacity change from 0 to 512 [ 113.881434][ T13] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 113.920720][ T13] usb 5-1: USB disconnect, device number 5 [ 114.029863][ T5474] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 114.045675][ T13] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 114.076008][ T5474] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.261383][ T5480] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 114.348053][ T5491] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.376'. [ 114.360675][ T5491] bridge_slave_1: default FDB implementation only supports local addresses [ 114.383151][ T5492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.377'. [ 114.437406][ T5491] netlink: 830 bytes leftover after parsing attributes in process `syz.4.376'. [ 114.786931][ T5510] loop1: detected capacity change from 0 to 128 [ 114.995603][ T5521] loop5: detected capacity change from 0 to 1024 [ 115.004442][ T5524] netlink: 'syz.2.390': attribute type 11 has an invalid length. [ 115.020286][ T5510] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 115.053820][ T5510] hpfs: filesystem error: improperly stopped [ 115.070517][ T5510] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 115.111770][ T5510] hpfs: You really don't want any checks? You are crazy... [ 115.151300][ T5510] hpfs: hpfs_map_sector(): read error [ 115.209643][ T5510] hpfs: code page support is disabled [ 115.229947][ T5530] loop4: detected capacity change from 0 to 1024 [ 115.247484][ T5510] hpfs: hpfs_map_4sectors(): unaligned read [ 115.270181][ T5510] hpfs: hpfs_map_4sectors(): unaligned read [ 115.303695][ T5510] hpfs: filesystem error: unable to find root dir [ 115.324262][ T5530] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 115.324262][ T5530] [ 115.407328][ T5530] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 115.491174][ T5530] netlink: 244 bytes leftover after parsing attributes in process `syz.4.393'. [ 115.826341][ T5544] loop0: detected capacity change from 0 to 128 [ 116.122491][ T5544] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 116.176546][ T5544] hpfs: filesystem error: improperly stopped [ 116.199181][ T5544] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 116.263607][ T5544] hpfs: You really don't want any checks? You are crazy... [ 116.301715][ T1107] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 116.304070][ T5544] hpfs: hpfs_map_sector(): read error [ 116.335740][ T5544] hpfs: code page support is disabled [ 116.342189][ T5544] hpfs: hpfs_map_4sectors(): unaligned read [ 116.373013][ T5544] hpfs: hpfs_map_4sectors(): unaligned read [ 116.379362][ T5544] hpfs: filesystem error: unable to find root dir [ 116.488957][ T5544] hpfs: hpfs_map_4sectors(): unaligned read [ 116.558515][ T5544] hpfs: hpfs_map_sector(): read error [ 116.561728][ T1107] usb 6-1: Using ep0 maxpacket: 16 [ 116.574527][ T5544] hpfs: hpfs_map_sector(): read error [ 116.759720][ T5531] loop2: detected capacity change from 0 to 32768 [ 116.842050][ T1107] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 116.852141][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.882227][ T5531] XFS (loop2): Mounting V5 Filesystem [ 116.907868][ T1107] usb 6-1: Product: syz [ 116.923135][ T1107] usb 6-1: Manufacturer: syz [ 116.931052][ T1107] usb 6-1: SerialNumber: syz [ 116.941061][ T1107] usb 6-1: config 0 descriptor?? [ 116.974269][ T5531] XFS (loop2): Ending clean mount [ 116.985506][ T1107] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 117.027165][ T5531] XFS (loop2): Quotacheck needed: Please wait. [ 117.066938][ T5586] program syz.0.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.137464][ T5531] XFS (loop2): Quotacheck: Done. [ 117.142207][ T5590] loop4: detected capacity change from 0 to 1024 [ 117.157225][ T5590] EXT4-fs (loop4): Ignoring removed orlov option [ 117.166422][ T5590] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 117.252697][ T5590] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 117.445152][ T4551] XFS (loop2): Unmounting Filesystem [ 117.652779][ T1107] ssu100: probe of 6-1:0.0 failed with error -71 [ 117.688021][ T1107] usb 6-1: USB disconnect, device number 4 [ 117.697316][ T5612] program syz.4.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.897042][ T5618] loop4: detected capacity change from 0 to 4096 [ 117.962023][ T5618] EXT4-fs (loop4): inline encryption not supported [ 117.975401][ T5618] EXT4-fs (loop4): Test dummy encryption mode enabled [ 118.004409][ T5618] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 118.077971][ T5618] System zones: 0-5 [ 118.147946][ T5618] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 118.177278][ T5626] bridge0: port 1(bridge_slave_0) entered listening state [ 118.348700][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.358337][ T5633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.420'. [ 118.393010][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 118.757118][ T5645] loop0: detected capacity change from 0 to 64 [ 118.933843][ T5614] loop1: detected capacity change from 0 to 32768 [ 119.022929][ T5614] JBD2: Ignoring recovery information on journal [ 119.066849][ T5652] loop5: detected capacity change from 0 to 128 [ 119.177594][ T5652] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 119.241180][ T5614] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 119.296755][ T5652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.577697][ T5670] input: syz1 as /devices/virtual/input/input9 [ 119.618707][ T5672] loop5: detected capacity change from 0 to 128 [ 119.710741][ T5672] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 119.728489][ T4203] ocfs2: Unmounting device (7,1) on (node local) [ 119.777490][ T5672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.826425][ T5681] loop0: detected capacity change from 0 to 512 [ 119.995795][ T5681] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 120.047005][ T5681] System zones: 0-2, 18-18, 34-34 [ 120.218334][ T5681] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 120.335912][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.379564][ T5681] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.438: corrupted inode contents [ 120.417839][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.427767][ T5681] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #16: comm syz.0.438: mark_inode_dirty error [ 120.487340][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.509173][ T5681] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.438: corrupted inode contents [ 120.544807][ T5708] program syz.4.446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.562141][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.565289][ T5707] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.570015][ T5681] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.438: mark_inode_dirty error [ 120.606568][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.623233][ T5681] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.438: corrupted inode contents [ 120.649424][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.691763][ T4234] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.699079][ T5681] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.438: mark_inode_dirty error [ 120.718609][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.723516][ T5713] netlink: 'syz.4.447': attribute type 12 has an invalid length. [ 120.726080][ T5681] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.438: corrupted inode contents [ 120.751767][ T5713] netlink: 'syz.4.447': attribute type 29 has an invalid length. [ 120.770365][ T5713] netlink: 148 bytes leftover after parsing attributes in process `syz.4.447'. [ 120.799925][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.817015][ T5681] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 120.887255][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.904406][ T5681] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #16: comm syz.0.438: corrupted inode contents [ 120.942855][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 120.962775][ T5681] EXT4-fs error (device loop0): ext4_truncate:4286: inode #16: comm syz.0.438: mark_inode_dirty error [ 121.008153][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 121.022039][ T5681] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 121.051461][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 121.062013][ T4234] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 121.087355][ T4234] usb 3-1: config 0 has no interface number 0 [ 121.094503][ T5681] EXT4-fs (loop0): 1 truncate cleaned up [ 121.114400][ T5681] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,debug,. Quota mode: writeback. [ 121.126645][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.134381][ T4234] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 121.162036][ T5681] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.172983][ T4234] usb 3-1: config 0 interface 216 altsetting 4 has an invalid endpoint with address 0xDB, skipping [ 121.201709][ T4234] usb 3-1: config 0 interface 216 has no altsetting 0 [ 121.226392][ T4234] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 121.256040][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.327836][ T4234] usb 3-1: config 0 descriptor?? [ 121.350606][ T5696] set_capacity_and_notify: 1 callbacks suppressed [ 121.350623][ T5696] loop5: detected capacity change from 0 to 32768 [ 121.365117][ T5704] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.379180][ T5681] EXT4-fs error (device loop0): ext4_readdir:263: inode #12: block 13: comm syz.0.438: path /102/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=0, rec_len=0, size=4096 fake=1 [ 121.379371][ T5704] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.417213][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 121.502653][ T4234] usb 3-1: NFC: intf ffff888062e4b000 id ffffffff8cb52700 [ 121.513902][ T5681] EXT4-fs (loop0): Remounting filesystem read-only [ 121.552529][ T13] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 121.560974][ T13] usb 2-1: config 0 has no interface number 0 [ 121.589163][ T13] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 121.612755][ T5696] XFS (loop5): Mounting V5 Filesystem [ 121.671098][ T5696] XFS (loop5): Ending clean mount [ 121.761960][ T13] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 121.771267][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.788242][ T13] usb 2-1: Product: syz [ 121.792014][ T5696] XFS (loop5): Quotacheck needed: Please wait. [ 121.792693][ T13] usb 2-1: Manufacturer: syz [ 121.804647][ T13] usb 2-1: SerialNumber: syz [ 121.810508][ T4234] usb 3-1: USB disconnect, device number 6 [ 121.825955][ T13] usb 2-1: config 0 descriptor?? [ 121.842247][ T5718] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.884772][ T5763] loop4: detected capacity change from 0 to 1024 [ 121.890667][ T5696] XFS (loop5): Quotacheck: Done. [ 122.003176][ T5763] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,errors=remount-ro,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,nouid32,dioread_lock,. Quota mode: none. [ 122.078004][ T5718] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.078820][ T5763] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.186964][ T4975] XFS (loop5): Unmounting Filesystem [ 122.499776][ T5787] loop4: detected capacity change from 0 to 512 [ 122.625823][ T5787] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.645384][ T5787] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 122.645384][ T5787] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 122.645384][ T5787] [ 122.681726][ T5787] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.752681][ T5787] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.463: bad orphan inode 131083 [ 122.781800][ T13] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 122.798657][ T13] asix: probe of 2-1:0.188 failed with error -71 [ 122.808567][ T13] usb 2-1: USB disconnect, device number 6 [ 122.820518][ T5787] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,nouser_xattr,,errors=continue. Quota mode: none. [ 123.306908][ T5822] loop5: detected capacity change from 0 to 2048 [ 123.309789][ T5821] loop4: detected capacity change from 0 to 1024 [ 123.413065][ T5822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.197422][ T5857] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.485'. [ 124.821754][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.919850][ T5839] loop1: detected capacity change from 0 to 32768 [ 124.957983][ T5844] loop2: detected capacity change from 0 to 32768 [ 125.026174][ T5839] JBD2: Ignoring recovery information on journal [ 125.082022][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 125.147718][ T5839] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 125.238234][ T5844] XFS (loop2): Mounting V5 Filesystem [ 125.334721][ T5867] loop0: detected capacity change from 0 to 32768 [ 125.365027][ T5844] XFS (loop2): Ending clean mount [ 125.381947][ T13] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.411814][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.422186][ T13] usb 5-1: Product: syz [ 125.426626][ T13] usb 5-1: Manufacturer: syz [ 125.431809][ T13] usb 5-1: SerialNumber: syz [ 125.441401][ T13] usb 5-1: config 0 descriptor?? [ 125.552774][ T5867] XFS (loop0): Mounting V5 Filesystem [ 125.618074][ T4203] ocfs2: Unmounting device (7,1) on (node local) [ 125.730388][ T4551] XFS (loop2): Unmounting Filesystem [ 125.742017][ T13] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.774600][ T5867] XFS (loop0): Ending clean mount [ 126.033831][ T4189] XFS (loop0): Unmounting Filesystem [ 126.259228][ T13] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 126.279166][ T13] usb 5-1: USB disconnect, device number 6 [ 126.709245][ T5926] loop1: detected capacity change from 0 to 128 [ 126.791865][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 127.203265][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 127.251700][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.282315][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 127.318555][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 127.533856][ T23] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 127.544080][ T5948] loop4: detected capacity change from 0 to 8192 [ 127.554240][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.593093][ T23] usb 6-1: Product: syz [ 127.597341][ T23] usb 6-1: Manufacturer: syz [ 127.613090][ T23] usb 6-1: SerialNumber: syz [ 127.630286][ T23] usb 6-1: config 0 descriptor?? [ 127.721502][ T5965] loop1: detected capacity change from 0 to 256 [ 127.735998][ T5957] loop2: detected capacity change from 0 to 4096 [ 127.822282][ T5965] exfat: Deprecated parameter 'utf8' [ 127.869324][ T5965] exfat: Deprecated parameter 'namecase' [ 127.992027][ T23] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 128.001447][ T5965] exFAT-fs (loop1): Invalid exboot-signature(sector = 3): 0x01550000 [ 128.046265][ T5957] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.112072][ T5965] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1921ab27) [ 128.268216][ T5965] exFAT-fs (loop1): invalid boot region [ 128.269833][ T23] usb 6-1: USB disconnect, device number 5 [ 128.374255][ T5965] exFAT-fs (loop1): failed to recognize exfat type [ 128.724079][ T5986] loop4: detected capacity change from 0 to 8192 [ 128.822200][ T5989] loop2: detected capacity change from 0 to 2048 [ 128.974354][ T5994] netlink: 'syz.5.514': attribute type 6 has an invalid length. [ 129.216177][ T5967] loop0: detected capacity change from 0 to 40427 [ 129.289436][ T5989] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 129.371798][ T5989] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 129.424312][ T5989] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.502474][ T5967] F2FS-fs (loop0): invalid crc value [ 129.542528][ T6000] loop4: detected capacity change from 0 to 1024 [ 129.566908][ T5967] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.578650][ T5989] fs-verity (loop2, inode 13): Unknown hash algorithm number: 3 [ 129.758757][ T5967] F2FS-fs (loop0): Start checkpoint disabled! [ 129.890260][ T5967] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 130.153478][ T6017] loop1: detected capacity change from 0 to 8 [ 130.370235][ T5259] attempt to access beyond end of device [ 130.370235][ T5259] loop0: rw=2049, want=40976, limit=40427 [ 130.670413][ T6021] loop4: detected capacity change from 0 to 8192 [ 131.392158][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.537'. [ 131.495447][ T6047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.941344][ T6066] set_capacity_and_notify: 3 callbacks suppressed [ 131.941361][ T6066] loop4: detected capacity change from 0 to 128 [ 132.146949][ T6066] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 132.201997][ T6066] MINIX-fs: bad superblock [ 132.708258][ T6087] loop0: detected capacity change from 0 to 4096 [ 132.920219][ T6098] loop2: detected capacity change from 0 to 4096 [ 133.056577][ T6098] EXT4-fs (loop2): Test dummy encryption mode enabled [ 133.075628][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082346][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.140599][ T6098] EXT4-fs (loop2): Ignoring removed orlov option [ 133.212325][ T6098] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 133.357561][ T6119] loop0: detected capacity change from 0 to 1024 [ 133.499992][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 133.593330][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 133.699890][ T6128] device veth1_virt_wifi entered promiscuous mode [ 133.752314][ T6128] device veth1_virt_wifi left promiscuous mode [ 133.946061][ T26] audit: type=1326 audit(1778022037.772:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.5.579" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc225ad8dd9 code=0x0 [ 134.048318][ T6144] loop4: detected capacity change from 0 to 512 [ 134.109463][ T6144] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 134.247954][ T6144] EXT4-fs (loop4): 1 truncate cleaned up [ 134.290601][ T6144] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noload,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 134.531864][ T4194] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.781742][ T4194] usb 2-1: Using ep0 maxpacket: 16 [ 134.921976][ T4194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.951753][ T4194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.975586][ T4194] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.011781][ T4194] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.029802][ T4194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.061210][ T4194] usb 2-1: config 0 descriptor?? [ 135.191836][ T6169] loop5: detected capacity change from 0 to 2048 [ 135.240439][ T6169] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 135.318884][ T4386] udevd[4386]: incorrect nilfs2 checksum on /dev/loop5 [ 135.331788][ T6172] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.391205][ T6161] loop2: detected capacity change from 0 to 32768 [ 135.504607][ T6169] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12 [ 135.536684][ T6161] XFS (loop2): Mounting V5 Filesystem [ 135.584056][ T4194] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 135.681845][ T6169] Remounting filesystem read-only [ 135.792932][ T6161] XFS (loop2): Ending clean mount [ 135.812059][ T4194] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 135.814688][ T6161] XFS (loop2): Quotacheck needed: Please wait. [ 135.825208][ T4194] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 135.878249][ T4194] microsoft 0003:045E:07DA.0005: no inputs found [ 135.905708][ T4194] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 135.972497][ T4194] usb 2-1: USB disconnect, device number 7 [ 136.063377][ T6161] XFS (loop2): Quotacheck: Done. [ 136.237574][ T6204] loop0: detected capacity change from 0 to 512 [ 136.238584][ T6200] fido_id[6200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.262748][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.603'. [ 136.293771][ T4551] XFS (loop2): Unmounting Filesystem [ 136.759969][ T6226] syz.1.613 uses obsolete (PF_INET,SOCK_PACKET) [ 137.017500][ T1107] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 137.276618][ T1107] usb 6-1: Using ep0 maxpacket: 8 [ 137.314912][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 137.335560][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'. [ 137.349245][ T6240] loop1: detected capacity change from 0 to 8192 [ 137.357026][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 137.391140][ T6240] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 137.412924][ T1107] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 137.431796][ T6240] REISERFS (device loop1): using ordered data mode [ 137.434747][ T1107] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 137.450588][ T6240] reiserfs: using flush barriers [ 137.451249][ T1107] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.478701][ T1107] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.499388][ T1107] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.503976][ T6240] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.513791][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.584658][ T6250] loop4: detected capacity change from 0 to 2048 [ 137.592859][ T6240] REISERFS (device loop1): checking transaction log (loop1) [ 137.604866][ T6240] REISERFS (device loop1): Using r5 hash to sort names [ 137.618044][ T6240] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 137.726594][ T6254] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.791806][ T1107] usb 6-1: GET_CAPABILITIES returned 0 [ 137.797573][ T1107] usbtmc 6-1:16.0: can't read capabilities [ 137.926263][ T6260] loop0: detected capacity change from 0 to 256 [ 138.032169][ T6236] loop2: detected capacity change from 0 to 32768 [ 138.087972][ T6260] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 138.119530][ T6224] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 138.200034][ T13] usb 6-1: USB disconnect, device number 6 [ 138.239298][ T6236] XFS (loop2): Mounting V5 Filesystem [ 138.296038][ T6270] netlink: 'syz.1.629': attribute type 29 has an invalid length. [ 138.306842][ T6270] netlink: 'syz.1.629': attribute type 29 has an invalid length. [ 138.318778][ T6270] netlink: 'syz.1.629': attribute type 29 has an invalid length. [ 138.329046][ T6270] netlink: 'syz.1.629': attribute type 29 has an invalid length. [ 138.410460][ T6236] XFS (loop2): Ending clean mount [ 138.545174][ T4551] XFS (loop2): Unmounting Filesystem [ 138.557695][ T6281] loop0: detected capacity change from 0 to 512 [ 138.850331][ T6290] loop1: detected capacity change from 0 to 512 [ 138.961737][ T6290] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.637: inode has both inline data and extents flags [ 139.014157][ T6290] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.637: couldn't read orphan inode 15 (err -117) [ 139.028809][ T6290] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.423510][ T6306] loop2: detected capacity change from 0 to 4096 [ 139.563649][ T6316] netlink: 1 bytes leftover after parsing attributes in process `syz.1.649'. [ 139.573328][ T6317] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.951905][ T13] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 140.011156][ T6298] loop0: detected capacity change from 0 to 32768 [ 140.148950][ T6329] loop2: detected capacity change from 0 to 4096 [ 140.191573][ T6329] ntfs3: loop2: ino=3, Correct links count -> 2. [ 140.198499][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 140.332042][ T13] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.360876][ T13] usb 6-1: config 0 has no interface number 0 [ 140.392750][ T6329] ntfs3: loop2: failed to convert "0080" to cp874 [ 140.429148][ T6329] ntfs3: loop2: failed to convert name for inode 1e. [ 140.563137][ T13] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 140.625216][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.651509][ T13] usb 6-1: Product: syz [ 140.657717][ T13] usb 6-1: Manufacturer: syz [ 140.664772][ T13] usb 6-1: SerialNumber: syz [ 140.702525][ T13] usb 6-1: config 0 descriptor?? [ 140.748815][ T13] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 140.792199][ T13] usb 6-1: selecting invalid altsetting 1 [ 140.798013][ T13] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 140.877762][ T13] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.926237][ T13] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 140.938720][ T13] usb 6-1: media controller created [ 140.957942][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.081970][ T13] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 141.089882][ T13] zl10353_read_register: readreg error (reg=127, ret==-71) [ 141.141871][ T13] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 141.252554][ T13] usb 6-1: USB disconnect, device number 7 [ 141.381819][ T6348] loop4: detected capacity change from 0 to 128 [ 141.464567][ T6348] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 141.507435][ T6348] hpfs: filesystem error: improperly stopped [ 141.552760][ T6348] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 141.571785][ T6348] hpfs: You really don't want any checks? You are crazy... [ 141.600557][ T6348] hpfs: hpfs_map_sector(): read error [ 141.615267][ T6348] hpfs: code page support is disabled [ 141.620875][ T6348] hpfs: hpfs_map_4sectors(): unaligned read [ 141.676560][ T6348] hpfs: hpfs_map_4sectors(): unaligned read [ 141.691733][ T6348] hpfs: filesystem error: unable to find root dir [ 141.806329][ T6348] hpfs: hpfs_map_4sectors(): unaligned read [ 141.829530][ T6348] hpfs: hpfs_map_sector(): read error [ 141.876450][ T6337] JBD2: Ignoring recovery information on journal [ 141.890553][ T6359] hpfs: hpfs_map_4sectors(): unaligned read [ 142.059240][ T6337] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 142.238767][ T6341] XFS (loop1): Mounting V5 Filesystem [ 142.411274][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.676'. [ 142.437605][ T6341] XFS (loop1): Ending clean mount [ 142.481728][ T6341] XFS (loop1): Quotacheck needed: Please wait. [ 142.501271][ T6389] set_capacity_and_notify: 2 callbacks suppressed [ 142.501290][ T6389] loop5: detected capacity change from 0 to 256 [ 142.564066][ T6391] loop4: detected capacity change from 0 to 128 [ 142.566863][ T6341] XFS (loop1): Quotacheck: Done. [ 142.572952][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 142.632496][ T6389] exfat: Deprecated parameter 'utf8' [ 142.648433][ T6389] exfat: Deprecated parameter 'namecase' [ 142.714093][ T4203] XFS (loop1): Unmounting Filesystem [ 142.730149][ T6389] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 142.789393][ T6391] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.882298][ T6391] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.787506][ T6397] loop0: detected capacity change from 0 to 32768 [ 143.884137][ T6427] netlink: 'syz.1.693': attribute type 5 has an invalid length. [ 143.897538][ T6397] JBD2: Ignoring recovery information on journal [ 144.005654][ T6429] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.060037][ T6397] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 144.168783][ T6438] loop5: detected capacity change from 0 to 512 [ 144.295544][ T6438] attempt to access beyond end of device [ 144.295544][ T6438] loop5: rw=0, want=17179852722, limit=512 [ 144.316698][ T6438] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 144.326001][ T6438] FAT-fs (loop5): Filesystem has been set read-only [ 144.328118][ T6441] loop1: detected capacity change from 0 to 256 [ 144.333594][ T6438] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fffff00) [ 144.387614][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 144.412511][ T6441] exfat: Deprecated parameter 'namecase' [ 144.494672][ T6441] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf974f890, utbl_chksum : 0xe619d30d) [ 144.846258][ T6456] loop1: detected capacity change from 0 to 2048 [ 144.962658][ T6466] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.081725][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 145.092759][ T6468] netlink: 44 bytes leftover after parsing attributes in process `syz.5.710'. [ 145.341934][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 145.361069][ T6479] input: syz1 as /devices/virtual/input/input12 [ 145.461987][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 145.494271][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.538930][ T6481] input: syz1 as /devices/virtual/input/input13 [ 145.552337][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.581761][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.616011][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.645530][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.885377][ T6472] loop1: detected capacity change from 0 to 32768 [ 145.941850][ T13] usb 1-1: GET_CAPABILITIES returned 0 [ 145.947698][ T13] usbtmc 1-1:16.0: can't read capabilities [ 146.025491][ T6463] loop4: detected capacity change from 0 to 40427 [ 146.112048][ T6463] F2FS-fs (loop4): invalid crc value [ 146.150497][ T6463] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.162132][ T6459] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71 [ 146.177122][ T13] usb 1-1: USB disconnect, device number 5 [ 146.321517][ T6463] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.376035][ T6477] loop5: detected capacity change from 0 to 40427 [ 146.519355][ T6477] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 146.540258][ T6477] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 146.565463][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 146.592949][ T6477] F2FS-fs (loop5): invalid crc value [ 146.606979][ T4181] udevd[4181]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 146.663690][ T6477] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 146.945776][ T6477] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 146.972027][ T6477] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 147.094420][ T6526] loop4: detected capacity change from 0 to 64 [ 147.144910][ T4975] attempt to access beyond end of device [ 147.144910][ T4975] loop5: rw=2049, want=45104, limit=40427 [ 147.150714][ T6526] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 147.206832][ T6530] batman_adv: batadv0: Adding interface: gretap1 [ 147.225584][ T6530] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.300586][ T6530] batman_adv: batadv0: Interface activated: gretap1 [ 147.635794][ T6537] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.020654][ T6558] set_capacity_and_notify: 1 callbacks suppressed [ 148.020673][ T6558] loop4: detected capacity change from 0 to 512 [ 148.172805][ T6560] loop0: detected capacity change from 0 to 2048 [ 148.486261][ T26] audit: type=1800 audit(1778022052.312:26): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.749" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 148.656092][ T6567] loop5: detected capacity change from 0 to 4096 [ 148.698599][ T6567] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 148.898536][ T6567] ntfs: volume version 3.1. [ 149.006513][ T6546] loop2: detected capacity change from 0 to 40427 [ 149.067771][ T6546] F2FS-fs (loop2): invalid crc value [ 149.166436][ T6546] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.198954][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.206781][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.346580][ T6592] fuse: Bad value for 'fd' [ 149.351744][ T6546] F2FS-fs (loop2): Start checkpoint disabled! [ 149.385242][ T6546] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 149.397588][ T6592] cgroup: Unexpected value for 'cpuset_v2_mode' [ 149.430863][ T6595] device veth1_macvtap left promiscuous mode [ 149.466953][ T6595] device macsec0 entered promiscuous mode [ 149.562700][ T6598] device veth1_macvtap entered promiscuous mode [ 149.601690][ T6598] device macsec0 left promiscuous mode [ 149.884859][ T144] attempt to access beyond end of device [ 149.884859][ T144] loop2: rw=2049, want=40984, limit=40427 [ 150.005112][ T6604] loop5: detected capacity change from 0 to 8192 [ 150.017508][ T6614] loop4: detected capacity change from 0 to 1024 [ 150.198950][ T6604] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 150.229913][ T6622] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 150.251777][ T6604] REISERFS (device loop5): using ordered data mode [ 150.258406][ T6604] reiserfs: using flush barriers [ 150.323689][ T6604] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.432118][ T6604] REISERFS (device loop5): checking transaction log (loop5) [ 150.449801][ T1173] hfsplus: b-tree write err: -5, ino 25 [ 150.472987][ T1173] hfsplus: b-tree write err: -5, ino 4 [ 150.479095][ T1173] hfsplus: b-tree write err: -5, ino 2 [ 150.738570][ T6636] loop0: detected capacity change from 0 to 136 [ 150.944071][ T6636] rock: directory entry would overflow storage [ 150.959162][ T6604] REISERFS (device loop5): Using tea hash to sort names [ 150.976933][ T6645] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 150.977138][ T6604] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 151.006324][ T6604] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 151.009011][ T6636] rock: sig=0x4f50, size=4, remaining=3 [ 151.017778][ T6645] netlink: 'syz.2.784': attribute type 2 has an invalid length. [ 151.062183][ T6646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.783'. [ 151.071389][ T6646] netlink: 2 bytes leftover after parsing attributes in process `syz.4.783'. [ 151.076817][ T6636] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 151.145279][ T6647] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 151.190079][ T6647] netlink: 'syz.2.784': attribute type 2 has an invalid length. [ 151.348888][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'. [ 151.455783][ T6655] program syz.0.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.485684][ T6657] loop2: detected capacity change from 0 to 64 [ 151.550603][ T6657] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 151.775979][ T6663] loop5: detected capacity change from 0 to 16 [ 151.903856][ T6663] erofs: (device loop5): mounted with root inode @ nid 36. [ 152.308375][ T6651] loop4: detected capacity change from 0 to 32768 [ 153.082723][ T6690] set_capacity_and_notify: 1 callbacks suppressed [ 153.082740][ T6690] loop2: detected capacity change from 0 to 8192 [ 153.112348][ T4233] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 153.178469][ T6690] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 153.214994][ T6690] REISERFS (device loop2): using ordered data mode [ 153.225867][ T6690] reiserfs: using flush barriers [ 153.236403][ T6690] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.322024][ T6690] REISERFS (device loop2): checking transaction log (loop2) [ 153.392105][ T4233] usb 6-1: Using ep0 maxpacket: 16 [ 153.419822][ T6703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.811'. [ 153.517123][ T4233] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.540719][ T4233] usb 6-1: config 0 interface 0 has no altsetting 0 [ 153.558278][ T4233] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 153.579197][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.601273][ T4233] usb 6-1: config 0 descriptor?? [ 153.606776][ T4194] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.651128][ T6690] REISERFS (device loop2): Using tea hash to sort names [ 153.662292][ T6690] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 153.822122][ T6718] device ip6gre1 entered promiscuous mode [ 153.891821][ T4194] usb 5-1: Using ep0 maxpacket: 16 [ 154.032077][ T4194] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.046142][ T4194] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.105098][ T4233] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 154.242005][ T4194] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.270028][ T4194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.286014][ T4194] usb 5-1: Product: syz [ 154.290336][ T4194] usb 5-1: Manufacturer: syz [ 154.296602][ T4194] usb 5-1: SerialNumber: syz [ 154.368390][ T6725] loop2: detected capacity change from 0 to 32768 [ 154.411222][ T6725] jfs_readdir called with invalid offset! [ 154.556167][ T23] usb 6-1: USB disconnect, device number 8 [ 154.761114][ T6737] loop0: detected capacity change from 0 to 64 [ 154.812005][ T4194] usb 5-1: 0:2 : does not exist [ 154.823229][ T6737] MINIX-fs: mounting file system with errors, running fsck is recommended [ 154.825868][ T6735] loop2: detected capacity change from 0 to 4096 [ 154.848646][ T6737] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 154.878194][ T4194] usb 5-1: USB disconnect, device number 7 [ 154.915116][ T6735] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 155.081731][ T4232] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.119720][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.266962][ T6748] tap0: tun_chr_ioctl cmd 1074025677 [ 155.277531][ T6748] tap0: linktype set to 804 [ 155.352502][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 155.389695][ T6753] loop2: detected capacity change from 0 to 256 [ 155.448012][ T6753] FAT-fs (loop2): Directory bread(block 64) failed [ 155.466418][ T6753] FAT-fs (loop2): Directory bread(block 65) failed [ 155.483883][ T6753] FAT-fs (loop2): Directory bread(block 66) failed [ 155.496666][ T6753] FAT-fs (loop2): Directory bread(block 67) failed [ 155.512300][ T6753] FAT-fs (loop2): Directory bread(block 68) failed [ 155.516662][ T4232] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 155.526213][ T6753] FAT-fs (loop2): Directory bread(block 69) failed [ 155.535117][ T6753] FAT-fs (loop2): Directory bread(block 70) failed [ 155.535768][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.542838][ T6753] FAT-fs (loop2): Directory bread(block 71) failed [ 155.557616][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.559019][ T6753] FAT-fs (loop2): Directory bread(block 72) failed [ 155.569196][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.576652][ T6753] FAT-fs (loop2): Directory bread(block 73) failed [ 155.592002][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.611750][ T4262] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 155.611769][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 155.651797][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.793010][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.841755][ T4194] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 155.889718][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 155.936977][ T4232] usb 2-1: GET_CAPABILITIES returned 0 [ 155.943929][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 155.988180][ T4262] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 156.013612][ T4262] usb 1-1: config 0 has an invalid interface number: 255 but max is 1 [ 156.032049][ T4262] usb 1-1: config 0 has no interface number 0 [ 156.041860][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 156.047105][ T4262] usb 1-1: config 0 has no interface number 1 [ 156.053330][ T4262] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 156.081967][ T4262] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 156.095490][ T4262] usb 1-1: config 0 interface 255 has no altsetting 0 [ 156.161976][ T13] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.164823][ T4232] usb 2-1: USB disconnect, device number 8 [ 156.181984][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.188813][ T13] usb 5-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.00 [ 156.216744][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.232690][ T13] usb 5-1: config 0 descriptor?? [ 156.261893][ T4262] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 156.271441][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.291662][ T4262] usb 1-1: Product: syz [ 156.295902][ T4262] usb 1-1: Manufacturer: syz [ 156.300506][ T4262] usb 1-1: SerialNumber: syz [ 156.323627][ T4262] usb 1-1: config 0 descriptor?? [ 156.441901][ T4194] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 156.451015][ T4194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.472905][ T4194] usb 6-1: Product: syz [ 156.477249][ T4194] usb 6-1: Manufacturer: syz [ 156.501752][ T4194] usb 6-1: SerialNumber: syz [ 156.597199][ T1107] usb 1-1: USB disconnect, device number 6 [ 156.727658][ T13] wacom 0003:056A:0343.0007: ignoring exceeding usage max [ 156.751095][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.769008][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.781736][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.788690][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.812113][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.830407][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.837710][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.855160][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.865299][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.881739][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.889009][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.910010][ T13] wacom 0003:056A:0343.0007: unknown main item tag 0x0 [ 156.933174][ T13] wacom 0003:056A:0343.0007: hidraw0: USB HID v0.0a Device [HID 056a:0343] on usb-dummy_hcd.4-1/input0 [ 156.971812][ T13] usb 5-1: USB disconnect, device number 8 [ 157.111260][ T6770] fido_id[6770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 158.051208][ T6772] loop0: detected capacity change from 0 to 40427 [ 158.093265][ T6772] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 158.128624][ T6772] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 158.191163][ T6772] F2FS-fs (loop0): invalid crc value [ 158.209142][ T6794] loop5: detected capacity change from 0 to 1024 [ 158.235266][ T6772] F2FS-fs (loop0): Found nat_bits in checkpoint [ 158.326453][ T6794] hfsplus: bad catalog entry type [ 158.374681][ T6801] kvm [6800]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x7, nop [ 158.425045][ T4252] hfsplus: b-tree write err: -5, ino 25 [ 158.430960][ T4252] hfsplus: b-tree write err: -5, ino 4 [ 158.432073][ T6772] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 158.460759][ T4252] hfsplus: b-tree write err: -5, ino 2 [ 158.470303][ T6772] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.055032][ T4194] rtl8150 6-1:1.0: couldn't reset the device [ 159.061297][ T4194] rtl8150: probe of 6-1:1.0 failed with error -5 [ 159.097297][ T4194] usb 6-1: USB disconnect, device number 9 [ 159.500420][ T6842] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 159.586473][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.881726][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.973402][ T4232] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.992078][ T4232] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 160.009981][ T6865] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.880'. [ 160.011716][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.028560][ T6865] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.880'. [ 160.040615][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 160.067515][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 160.178436][ T6872] loop5: detected capacity change from 0 to 24 [ 160.212548][ T6872] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 160.247307][ T4232] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.251931][ T13] usb 1-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 160.263808][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.275867][ T6872] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 160.276927][ T4232] usb 3-1: Product: syz [ 160.289404][ T4232] usb 3-1: Manufacturer: syz [ 160.307916][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.348965][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.349048][ T4232] cdc_wdm 3-1:1.0: skipping garbage [ 160.383231][ T4232] cdc_wdm 3-1:1.0: skipping garbage [ 160.405767][ T4232] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 160.419706][ T4232] cdc_wdm 3-1:1.0: Unknown control protocol [ 160.522188][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.531323][ T13] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 160.553235][ T13] usb 1-1: Product: syz [ 160.557485][ T13] usb 1-1: SerialNumber: syz [ 160.622940][ T13] cdc_ncm 1-1:1.0: skipping garbage [ 160.628510][ T13] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 160.662996][ T13] cdc_ncm 1-1:1.0: bind() failure [ 160.772851][ T4233] usb 3-1: USB disconnect, device number 7 [ 161.157567][ T4233] usb 1-1: USB disconnect, device number 7 [ 161.298374][ T6894] loop5: detected capacity change from 0 to 32768 [ 161.590186][ T6894] (syz.5.889,6894,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.611890][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 161.649033][ T6894] (syz.5.889,6894,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 161.716201][ T6909] loop4: detected capacity change from 0 to 512 [ 161.717098][ T6894] JBD2: Ignoring recovery information on journal [ 161.794750][ T6894] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 161.837243][ T6909] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 162.087082][ T6894] [ 162.089565][ T6894] ====================================================== [ 162.096782][ T6894] WARNING: possible circular locking dependency detected [ 162.104138][ T6894] syzkaller #0 Not tainted [ 162.108544][ T6894] ------------------------------------------------------ [ 162.115858][ T6894] syz.5.889/6894 is trying to acquire lock: [ 162.121838][ T6894] ffff88805c9a1538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770 [ 162.131549][ T6894] [ 162.131549][ T6894] but task is already holding lock: [ 162.139541][ T6894] ffff888020ae5ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 162.149897][ T6894] [ 162.149897][ T6894] which lock already depends on the new lock. [ 162.149897][ T6894] [ 162.160502][ T6894] [ 162.160502][ T6894] the existing dependency chain (in reverse order) is: [ 162.169614][ T6894] [ 162.169614][ T6894] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 162.178131][ T6894] down_read+0x44/0x2e0 [ 162.182942][ T6894] ocfs2_start_trans+0x3a6/0x6f0 [ 162.188451][ T6894] ocfs2_shutdown_local_alloc+0x1f8/0xaa0 [ 162.194790][ T6894] ocfs2_dismount_volume+0x1e1/0x8a0 [ 162.201122][ T6894] generic_shutdown_super+0x130/0x300 [ 162.207026][ T6894] kill_block_super+0x7c/0xe0 [ 162.212329][ T6894] deactivate_locked_super+0x93/0xf0 [ 162.218326][ T6894] cleanup_mnt+0x42d/0x4e0 [ 162.223496][ T6894] task_work_run+0x125/0x1a0 [ 162.228631][ T6894] exit_to_user_mode_loop+0x10f/0x130 [ 162.234570][ T6894] exit_to_user_mode_prepare+0xee/0x180 [ 162.240756][ T6894] syscall_exit_to_user_mode+0x16/0x40 [ 162.246921][ T6894] do_syscall_64+0x58/0xa0 [ 162.252318][ T6894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.258751][ T6894] [ 162.258751][ T6894] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 162.266361][ T6894] ocfs2_start_trans+0x2a7/0x6f0 [ 162.272012][ T6894] ocfs2_truncate_file+0x62d/0x1460 [ 162.277917][ T6894] ocfs2_setattr+0x14dd/0x1ad0 [ 162.283304][ T6894] notify_change+0xbcd/0xee0 [ 162.288442][ T6894] do_truncate+0x1ac/0x240 [ 162.293841][ T6894] path_openat+0x2922/0x2fa0 [ 162.298946][ T6894] do_filp_open+0x1e2/0x410 [ 162.304052][ T6894] do_sys_openat2+0x150/0x4b0 [ 162.309664][ T6894] __x64_sys_openat+0x135/0x160 [ 162.315123][ T6894] do_syscall_64+0x4c/0xa0 [ 162.320810][ T6894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.327321][ T6894] [ 162.327321][ T6894] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 162.336357][ T6894] down_write+0x38/0x60 [ 162.341404][ T6894] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 162.348293][ T6894] ocfs2_truncate_file+0xe03/0x1460 [ 162.354110][ T6894] ocfs2_setattr+0x14dd/0x1ad0 [ 162.359576][ T6894] notify_change+0xbcd/0xee0 [ 162.365123][ T6894] do_truncate+0x1ac/0x240 [ 162.370360][ T6894] path_openat+0x2922/0x2fa0 [ 162.375667][ T6894] do_filp_open+0x1e2/0x410 [ 162.380797][ T6894] do_sys_openat2+0x150/0x4b0 [ 162.386126][ T6894] __x64_sys_openat+0x135/0x160 [ 162.391520][ T6894] do_syscall_64+0x4c/0xa0 [ 162.396896][ T6894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.403328][ T6894] [ 162.403328][ T6894] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 162.411244][ T6894] __lock_acquire+0x2c42/0x7d10 [ 162.416940][ T6894] lock_acquire+0x19e/0x400 [ 162.422062][ T6894] down_read+0x44/0x2e0 [ 162.426859][ T6894] ocfs2_init_acl+0x307/0x770 [ 162.432078][ T6894] ocfs2_mknod+0x15cb/0x2510 [ 162.437336][ T6894] ocfs2_create+0x192/0x420 [ 162.442464][ T6894] path_openat+0x11db/0x2fa0 [ 162.447586][ T6894] do_filp_open+0x1e2/0x410 [ 162.452638][ T6894] do_sys_openat2+0x150/0x4b0 [ 162.457946][ T6894] __x64_sys_openat+0x135/0x160 [ 162.463593][ T6894] do_syscall_64+0x4c/0xa0 [ 162.468725][ T6894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.475726][ T6894] [ 162.475726][ T6894] other info that might help us debug this: [ 162.475726][ T6894] [ 162.486529][ T6894] Chain exists of: [ 162.486529][ T6894] &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier [ 162.486529][ T6894] [ 162.501117][ T6894] Possible unsafe locking scenario: [ 162.501117][ T6894] [ 162.508670][ T6894] CPU0 CPU1 [ 162.514062][ T6894] ---- ---- [ 162.519611][ T6894] lock(&journal->j_trans_barrier); [ 162.525146][ T6894] lock(sb_internal#4); [ 162.532245][ T6894] lock(&journal->j_trans_barrier); [ 162.540367][ T6894] lock(&oi->ip_xattr_sem); [ 162.545047][ T6894] [ 162.545047][ T6894] *** DEADLOCK *** [ 162.545047][ T6894] [ 162.553200][ T6894] 8 locks held by syz.5.889/6894: [ 162.558220][ T6894] #0: ffff88801b5c0460 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 162.567712][ T6894] #1: ffff88805c9a1808 (&type->i_mutex_dir_key#19){++++}-{3:3}, at: path_openat+0x803/0x2fa0 [ 162.578822][ T6894] #2: ffff88805ca809c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 162.592779][ T6894] #3: ffff88805c92c2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 162.607181][ T6894] #4: ffff88805ca82648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 162.622088][ T6894] #5: ffff88801b5c0650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xf5a/0x2510 [ 162.631599][ T6894] #6: ffff888020ae5ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 162.642585][ T6894] #7: ffff88807d500990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x134c/0x15c0 [ 162.652235][ T6894] [ 162.652235][ T6894] stack backtrace: [ 162.658302][ T6894] CPU: 0 PID: 6894 Comm: syz.5.889 Not tainted syzkaller #0 [ 162.665586][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.675638][ T6894] Call Trace: [ 162.678929][ T6894] [ 162.681902][ T6894] dump_stack_lvl+0x188/0x250 [ 162.686806][ T6894] ? load_image+0x400/0x400 [ 162.691335][ T6894] ? show_regs_print_info+0x20/0x20 [ 162.696629][ T6894] ? print_circular_bug+0x12b/0x1a0 [ 162.701843][ T6894] check_noncircular+0x296/0x330 [ 162.706969][ T6894] ? add_chain_block+0x940/0x940 [ 162.712009][ T6894] ? _find_first_zero_bit+0xce/0xf0 [ 162.717318][ T6894] ? add_lock_to_list+0x18d/0x280 [ 162.722484][ T6894] __lock_acquire+0x2c42/0x7d10 [ 162.727349][ T6894] ? verify_lock_unused+0x140/0x140 [ 162.732563][ T6894] ? __lock_acquire+0x7d10/0x7d10 [ 162.737605][ T6894] ? do_raw_spin_lock+0x128/0x2f0 [ 162.742820][ T6894] lock_acquire+0x19e/0x400 [ 162.747578][ T6894] ? ocfs2_init_acl+0x307/0x770 [ 162.752552][ T6894] ? __might_sleep+0xf0/0xf0 [ 162.757155][ T6894] ? read_lock_is_recursive+0x10/0x10 [ 162.762564][ T6894] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 162.769382][ T6894] ? rcu_lock_release+0x5/0x20 [ 162.774348][ T6894] down_read+0x44/0x2e0 [ 162.778618][ T6894] ? ocfs2_init_acl+0x307/0x770 [ 162.783565][ T6894] ocfs2_init_acl+0x307/0x770 [ 162.788297][ T6894] ? ocfs2_mknod_locked+0x155/0x290 [ 162.793752][ T6894] ? ocfs2_acl_chmod+0x330/0x330 [ 162.798800][ T6894] ? dquot_alloc_inode+0x82e/0x9c0 [ 162.804141][ T6894] ? ocfs2_block_signals+0x97/0xe0 [ 162.809322][ T6894] ? ocfs2_init_security_get+0x135/0x1a0 [ 162.814998][ T6894] ocfs2_mknod+0x15cb/0x2510 [ 162.819760][ T6894] ? ocfs2_mkdir+0x420/0x420 [ 162.824460][ T6894] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 162.830440][ T6894] ? __wake_up_common+0x5b/0x4e0 [ 162.835386][ T6894] ? ocfs2_inode_unlock+0xa1/0x140 [ 162.840622][ T6894] ? __lock_acquire+0x7d10/0x7d10 [ 162.845751][ T6894] ? __rwlock_init+0x140/0x140 [ 162.850531][ T6894] ? _raw_spin_unlock+0x24/0x40 [ 162.855567][ T6894] ? do_raw_spin_unlock+0x11d/0x230 [ 162.860773][ T6894] ? rcu_is_watching+0x11/0xa0 [ 162.865539][ T6894] ? ocfs2_lookup+0x490/0x950 [ 162.870221][ T6894] ocfs2_create+0x192/0x420 [ 162.874897][ T6894] ? ocfs2_update_inode_fsync_trans+0x200/0x200 [ 162.881159][ T6894] ? ocfs2_lookup+0x950/0x950 [ 162.885936][ T6894] ? inode_permission+0xef/0x480 [ 162.891058][ T6894] ? bpf_lsm_inode_create+0x5/0x10 [ 162.896430][ T6894] ? security_inode_create+0xb3/0x100 [ 162.901795][ T6894] ? ocfs2_lookup+0x950/0x950 [ 162.906466][ T6894] path_openat+0x11db/0x2fa0 [ 162.911158][ T6894] ? do_filp_open+0x410/0x410 [ 162.915828][ T6894] do_filp_open+0x1e2/0x410 [ 162.920391][ T6894] ? vfs_tmpfile+0x300/0x300 [ 162.925380][ T6894] ? _raw_spin_unlock+0x24/0x40 [ 162.930355][ T6894] ? alloc_fd+0x598/0x630 [ 162.934789][ T6894] do_sys_openat2+0x150/0x4b0 [ 162.939469][ T6894] ? __lock_acquire+0x7d10/0x7d10 [ 162.944499][ T6894] ? do_sys_open+0xe0/0xe0 [ 162.948913][ T6894] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 162.955226][ T6894] ? lock_chain_count+0x20/0x20 [ 162.960535][ T6894] ? vtime_user_exit+0x2c8/0x3e0 [ 162.965682][ T6894] __x64_sys_openat+0x135/0x160 [ 162.970599][ T6894] do_syscall_64+0x4c/0xa0 [ 162.975263][ T6894] ? clear_bhb_loop+0x30/0x80 [ 162.980123][ T6894] ? clear_bhb_loop+0x30/0x80 [ 162.985336][ T6894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.991648][ T6894] RIP: 0033:0x7fc225ad8dd9 [ 162.996297][ T6894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.016332][ T6894] RSP: 002b:00007fc223d32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 163.025282][ T6894] RAX: ffffffffffffffda RBX: 00007fc225d51fa0 RCX: 00007fc225ad8dd9 [ 163.033543][ T6894] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 163.041893][ T6894] RBP: 00007fc225b6ed69 R08: 0000000000000000 R09: 0000000000000000 [ 163.050139][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.058328][ T6894] R13: 00007fc225d52038 R14: 00007fc225d51fa0 R15: 00007fffbf903a08 [ 163.066345][ T6894] [ 163.091237][ T4975] ocfs2: Unmounting device (7,5) on (node local) [ 163.111970][ T13] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 163.121412][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.129551][ T13] usb 3-1: Product: syz [ 163.134268][ T13] usb 3-1: Manufacturer: syz [ 163.139513][ T13] usb 3-1: SerialNumber: syz [ 163.145680][ T13] usb 3-1: config 0 descriptor?? [ 163.184530][ T13] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 163.198779][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.222062][ T13] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 163.231525][ T13] usb 3-1: media controller created [ 163.242584][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.266291][ T13] DVB: Unable to find symbol mt352_attach() [ 163.283581][ T13] DVB: Unable to find symbol nxt6000_attach() [ 163.289781][ T13] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 163.332711][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 163.346297][ T13] dvb-usb: schedule remote query interval to 1000 msecs. [ 163.353846][ T13] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 163.364357][ T13] dvb-usb: bulk message failed: -22 (7/0) [ 163.370777][ T13] dvb-usb: bulk message failed: -22 (7/0) [ 163.428783][ T6903] dvb-usb: bulk message failed: -22 (7/0) [ 163.438004][ T13] usb 3-1: USB disconnect, device number 8 [ 163.457290][ T13] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.