last executing test programs: 6m34.631737491s ago: executing program 2 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6m34.514608247s ago: executing program 2 (id=502): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d178", 0x12}, {&(0x7f0000000800)='ik', 0x2}], 0x2}}], 0x2, 0x4004040) 6m34.340546365s ago: executing program 2 (id=505): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x16810, 0x0, 0x20, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) 6m34.099886478s ago: executing program 2 (id=507): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0], 0x1, 0x189, &(0x7f00000027c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./bus\x00', 0x141020, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m33.618640941s ago: executing program 2 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4000004) 6m32.722317786s ago: executing program 2 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 6m32.328432255s ago: executing program 32 (id=518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 5m50.623234442s ago: executing program 3 (id=841): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 5m50.427673532s ago: executing program 3 (id=844): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000044) 5m50.203310903s ago: executing program 3 (id=847): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) 5m49.45266835s ago: executing program 3 (id=852): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 5m48.831054881s ago: executing program 3 (id=855): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000100)) 5m47.896023207s ago: executing program 3 (id=861): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5m47.508378467s ago: executing program 33 (id=861): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5m44.503580436s ago: executing program 4 (id=891): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 5m44.19949659s ago: executing program 4 (id=894): syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa00844, &(0x7f0000000880)=ANY=[@ANYBLOB='fmask=00000000000000000000016,case_sensitive=no,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303033373737373737373737362c646d61736b3d30303030303030303030303030303030303030303030302c636173655f73656e7369746976653d7965732c756d61736b3d30303030303030303030303033373737373737373737372c636173655f73656e7369746976653d6e6f2c6e6c733d6d6163637972696c6c69632c756d61736b3d30303030303030303030303030303030303030303132352c756d61736b3d303030303030303030303030303030fda8c28418d887572c61756469742c666f776e65723e", @ANYRESDEC=0x0, @ANYBLOB=',dont_hash,appraise,smackfstransmute=]:]-)$,\x00'], 0x2, 0x1ee74, &(0x7f00000200c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/49, 0x31) 5m43.40114202s ago: executing program 4 (id=896): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) close(r0) 5m42.940009783s ago: executing program 4 (id=897): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 5m42.565583532s ago: executing program 4 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300003f050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 5m41.461416256s ago: executing program 0 (id=902): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3f}, 0x1c) 5m41.38185634s ago: executing program 0 (id=903): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000540)={[{@shortname_lower}, {@shortname_winnt}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@numtail}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x4e0}}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fat=@nfs_stale_rw}]}, 0x2, 0x371, &(0x7f0000002980)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNhSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0aKWkNfj6H4Zvve2/ee5OX7GSSfXlxOdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egp/kg9u2xS2eMhAQB7rPv6//KhUubNL3eqn7z6A8C+V/z8P79Tnbnx1E9PdI4X9m5cAMDeGXv+/+BI8czor/qnSn8VAADsV8889/yTJ6sRT+f5XMT6W61aqxaPD8tPno9XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8XoxYRH7RqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf6sunIs74qIy+1u/7FeadWm42DR//cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HtS3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAC4A0v5wOJg/5s03L9naWlCeXd/nF77Yn+grd7+QGk2RUq/v/FI7e0sRvYHunV/nlZtKg7c26kDAAAAAAAAAAAAAAAAAADAv0ZzcybqjcbqRnPz4lo5aG80Nw9ERCfz2teffDEf43VuE0wVfZSK8iJ1ca2esn7llI3UKYKs03k/8/GVwYjLdWYHs5g4jNntixqNQw/8+N4wc3/WP/NfwzpZTJ5gdsswysH64d6QBpnp4ZS3vWIniuD4ba7q1ZTSdue59MJ4q6hETP3zT9zOQeoEX1175f8nmkce7WY+Tz0PPbxw9uq7H/66Vm90eu5ofDSz0byZ1urFx5MX2/ZBVlo/leIaVsorYWqn5lujmXr23W/P3vfON7vrPZUzr0+ok/Wm8+lGc7NSfKV0i2Z6QSd3S6v5xplsbCVMT1j8dxZMXGxH3l+uX7n0wy+7PU/pm4SNOgAAAAAAAAAAAAAAAAAA4K4ovVe8ULzZd3qnVo89VQRzezs6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALg7hv//vxRsjWV2E/zZjvGi2dWNZsThez1NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+4/4OAAD//5U3aTg=") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 5m40.922846863s ago: executing program 0 (id=904): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20201}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 5m39.739187502s ago: executing program 0 (id=906): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) 5m39.527370042s ago: executing program 4 (id=908): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x118, 0x4a, 0xe3, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) 5m38.824951527s ago: executing program 34 (id=908): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x118, 0x4a, 0xe3, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) 5m38.810616118s ago: executing program 0 (id=910): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4811}, 0x0) 5m38.599923428s ago: executing program 0 (id=912): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x7}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 5m38.012801437s ago: executing program 35 (id=912): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x7}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 24.838336559s ago: executing program 5 (id=3127): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000080)='2', 0x1, 0x7) ftruncate(r0, 0x9) 24.069707187s ago: executing program 5 (id=3131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000891}, 0x0) 23.581038951s ago: executing program 5 (id=3136): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r0, &(0x7f0000000040)=""/48, 0x30, 0x200087) 23.411530879s ago: executing program 5 (id=3139): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2000002, &(0x7f00000001c0)={[{@shortad}, {@fileset={'fileset', 0x3d, 0x5}}, {@unhide}, {}, {@volume={'volume', 0x3d, 0x401}}, {@gid_ignore}, {@uid_forget}, {@anchor}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {}, {@noadinicb}]}, 0x1, 0xc47, &(0x7f0000001800)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM+KQomxGFCVKeh6b+s3cOefec+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr544taP7//r6+vretwcA2HuX/f8/AAAAAAAAAAAAAADsdymKeDpSzF1cS5PV+676hc7gzVsTo2PbVzuYqpoDVfnyp37y1OkzX3pp5GwvL3RmPqL+/fbZeGP88vnGq7M35ubbCwvtqcbETOfq7FR7x3vYbf2tjlUnoHHjzZtT164tNE69eHrTx7eGPxx66sjwuZHnjz/XKzsxOjY2vlGk3l++ds8N6brbDI8DUcTxSPHC936aWhFRxO7PRf3Bjv1WB6tOHKs6MTE6VnVkutOaWSw/vNQ7EUVEo69Ss3eOth+LqA0+0D7cXTNiqWx+2eBjZffG51rzrSvT7cal1vxiZ7EzO3MpdVtb9qcRRZxNEcsRsTp05+4Go4hapPjO4bV0JSIGeufhi9XE4Lu3o9jDPu5A2c7GYMRy8QiM2T42FEW8Hil+9t7RuJqvM9W15gsRr5f5g4h3ynwlIpVfjDMRH2zzPeLRVIsi/rwc/3Nraaq6HvSuKxe+1vjKzLXZvrK968ovdX94684rxUO6Pxzckg/miPv82lSPIlrVFX8t3ftvdgAAAAAAAAAAAAAAAAC43w5GEZ+JFK/92x9V84qjmpd++NzI7w////45489+zH7Ksi9GxFKxszm5B/IU4kvpUkoPeS7xk6weRfxxnv/3rYfdGAAAAAAAAAAAAAAAAAAAgCdaET+JFC+/fzQtR/+a4p2Z643LrSvT3VVhe2v/9tZMX19fX2+kbjZzTuZcyrmccyXnas4ocv2czZyTOZdyLudcybmaMwZy/ZzNnJM5l3Iu51zJuZozarl+zmbOyZxLOZdzruRczRn7ZO1eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHSRFF/CJSfPsbaylSRDQjJqObK0MPu3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGkoFfH9SNH4g+btbbWISNW/XUfLX85E80CZn4zmSJmvRPN8zlaVtea3HkL72Z3BVMSPI8VQ/d3bA57Hf7D77vbXIN755sa7z9a6OdD7cPjDoaeOHD43MvZrz97tddquAccudGZu3mpMjI6NjUf99uZaPvon+4oO5+MW96vzxMJbb7/Zmp5uz9/7i/IrsIvqj9CLVHtSeupF9SJq+6IZD6fvPAHK+/8HkeK33//33g2/e/+vx//rvrt9h4+f/8nG/f/lrTva4f2/trVevv+X9/Txvs29+//Tfdtezr8bGaxF1BdvzA0eiagvvPX28c6N1vX29fbMmRMnvjwy8uXTJwYPRNSvdabbfa/uy+kCAAAAAAAAAAAAAAAAeHBSEb8bKVo/XkuNiLhVzdcaPjfy/PHnBmKgmm+1ad72G+OXzzdenb0xN99eWGhPNSZmOldnp9o7PVy9mu41MTq2J535WAf3uP0H66/Ozr0137n+h4vbfn6ofv7KwuJ86+r2H8fBKCKa/VuOVQ2eGB2rGj3dac1UVS9tO5n+lzeYiviPSHH1TCN9Pm/L8/+3zvDfNP9/aeuO7sv8/w29+X+f6NtWHjOlIn4eKX7rL56Nz1ftPBR3nLNc7m8ixbGzn8vl4kBZrteG7nMFujMDy7L/Eyn+4Reby/bmQz69Ufbkjk/sI6Ic/8OR4vt/9t349bxt8/Mfth//Q1t3tEfj/0zftkObnlew666Tx/94pHjl6XfjN/K2j3r+R+/ZG0dz4dvP59ij8f9U37bhfNzfvD9dBwAAAAAAAAAAeKQNpiL+NlL8cKyWXsrbdvL3/6a27miP/v7Xp/u2Td2f9Yo+9sWuTyoAAAAA7BODqYifRIrri+/enkO9ef533/zP39mY/zmatnxa/Tnfr1TPDbiff/7Xbzgfd3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mn7rqe+kqkeO2/Xsjl0pGyXG8d+OHq1/rF2Znj56enZ6+2FltXptuN8bnW1XZZ95lIsfbXn8t1i2p99d5689013jfWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PvNZXvrWH9qY7+nyrJ/FSm+/k/blz2yUfZ0Wfa7keJHX2/0yh4qy/aej/rpjbIvXp0t9mBUAAAAAAAAAAAAAAAAAAAAeNIMpiL+NFL8943l23P58/r/g31vK+98s2+9/y1uVev8D1fr/9/t9b2s/189V2DpbkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oi3o4UcxfX0spQ+b6rfqEzc/PWxOjY9tUOpqrmQFW+/KmfPHX6zJdeGjnby4+uf799Jt4Yv3y+8ersjbn59sJCe6oxMdO5OjvV3vEedlt/q2PVCWjcePPm1LVrC41TL57e9PGt4Q+HnjoyfG7k+ePP9cpOjI6NjfeVqQ3e89HvkO6y/UAU8ZeR4oXv/TT9cCiiiN2fi4/57uy1g1UnjlWdmBgdqzoy3WnNLJYfXuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgdunN3g1HEm5HiO4fX0j8PRQz0zsMXL45/9cSpu7ej2MM+7kDZzsZgxHLxUWO2TYfZZCiK+MdI8bP3jsa/DEXUovsTX4h4vcwfRLwT3fFO5RfjTMQHTutjoxZF/G85/ufW0ntD5fWgd1258LXGV2auzfaV7V1XHvn7w4O0z+8n9SjiR9UVfy39q/+uAQAAAAAAAAAAAAAAAPaRIn41Urz8/tFUzQ++Pae4M3O9cbl1Zbo7ra839683Z3p9fX29kbrZzDmZcynncs6VnKs5o8j1czbLrK+vT+b3SzmXc67kXM0ZA7l+zmbOyZxLOZdzruRczRm1XD9nM+dkzqWcyzlXcq7m7E6SfOohjhkAAAAAAAAAAAAAAAAAAPA4Kqp/Unz7G2tpfahaX3qg99mK9UAfe/8XAAD//6Bw/Lo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 22.748491973s ago: executing program 5 (id=3145): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) unshare(0x22020600) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 22.19980051s ago: executing program 5 (id=3151): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x6) 21.747646092s ago: executing program 36 (id=3151): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x6) 3.512337406s ago: executing program 1 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x303, 0x2, 0x25dfdbfe, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050) 3.209262311s ago: executing program 1 (id=3254): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x8000) 3.199222261s ago: executing program 6 (id=3255): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0) 3.001595201s ago: executing program 8 (id=3256): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000"], 0x34}}, 0x0) 2.902928076s ago: executing program 6 (id=3257): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000340)={0xb, 0x1ff, 0x3, 0x2, 0xfb, 0x8, 0x100}, 0xc) 2.82108532s ago: executing program 1 (id=3259): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x80}, &(0x7f0000000340)=0x8) 2.782407102s ago: executing program 8 (id=3260): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) open(&(0x7f0000000140)='./bus\x00', 0x149cc2, 0x1c0) 2.671732968s ago: executing program 6 (id=3261): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfd, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 2.490901167s ago: executing program 8 (id=3262): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x1) 2.467321887s ago: executing program 7 (id=3263): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x38, 0x18, 0x67, 0x0, 0x2, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, {[@generic={0x44, 0x2}]}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.243785159s ago: executing program 8 (id=3264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20) 1.992435701s ago: executing program 8 (id=3265): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x6, 0x0, 0x40}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$cdc_ecm(0x7, 0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015002020000ff2505a1a440000102030109023d000101ee5003090400040302060006072407"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.843592528s ago: executing program 1 (id=3266): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x3d07, 0x7f, 0x9ab, 0xfd, "00000807000000f6150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x8) 1.842147788s ago: executing program 6 (id=3267): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)='N!', 0x2}, {&(0x7f0000000f00)="12", 0x1}], 0x2, 0x0, 0x0, 0x4008820}}], 0x1, 0x40004) 1.571974652s ago: executing program 1 (id=3268): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 1.437684299s ago: executing program 7 (id=3269): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d"], 0x0}, 0x94) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 1.082273986s ago: executing program 1 (id=3270): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009050700000000000009058973"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 883.974676ms ago: executing program 7 (id=3271): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x2, 0x4005, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200040cc) 883.691046ms ago: executing program 6 (id=3272): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100), 0xfc, 0xc1e, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) write$binfmt_format(r0, &(0x7f00000000c0)='1\x00', 0xd801) 688.680436ms ago: executing program 7 (id=3273): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={0xffffffffffffffff, 0x300}, 0x90) 413.02382ms ago: executing program 7 (id=3274): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) recvfrom$inet(r1, 0x0, 0x0, 0x100, 0x0, 0x0) 160.761222ms ago: executing program 7 (id=3275): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}], 0x3c) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) 131.477713ms ago: executing program 6 (id=3276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180)) 0s ago: executing program 8 (id=3277): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05"], 0x20000078}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): ESS_ZSTD (0x10) [ 295.744341][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.765646][T10433] BTRFS info (device loop6): use zstd compression, level 3 [ 295.783265][T10433] BTRFS info (device loop6): disk space caching is enabled [ 295.821636][ T23] usb 6-1: config 0 descriptor?? [ 295.909448][ T5811] usb 2-1: Firmware version (0.0) predates our first public release. [ 295.949488][ T5811] usb 2-1: Please update to version 0.2 or newer [ 295.971071][T10433] BTRFS info (device loop6): enabling ssd optimizations [ 296.006924][T10433] BTRFS info (device loop6): auto enabling async discard [ 296.082835][ T23] hdpvr 6-1:0.0: firmware version 0x0 dated [ 296.093035][T10433] BTRFS info (device loop6): rebuilding free space tree [ 296.095351][ T23] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 296.175155][ T5811] usb 2-1: USB disconnect, device number 22 [ 296.209379][T10433] BTRFS info (device loop6): disabling free space tree [ 296.252959][T10433] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 296.305062][T10433] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 296.579432][ T23] hdpvr 6-1:0.0: Could not setup controls [ 296.609604][ T23] hdpvr 6-1:0.0: registering videodev failed [ 296.650566][ T23] hdpvr: probe of 6-1:0.0 failed with error -71 [ 296.685731][ T23] usb 6-1: USB disconnect, device number 6 [ 296.769183][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 296.914697][ T8388] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 296.979156][T10500] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1441'. [ 297.438891][T10510] loop1: detected capacity change from 0 to 128 [ 299.117547][T10538] loop5: detected capacity change from 0 to 40427 [ 299.125484][ T5825] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 299.135927][T10538] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 299.155403][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 299.164493][T10538] F2FS-fs (loop5): invalid crc value [ 299.174054][T10538] F2FS-fs (loop5): Found nat_bits in checkpoint [ 299.228212][T10538] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 299.297063][ T5814] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 299.315543][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 299.327702][ T5825] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.343233][ T5825] usb 7-1: config 0 has no interfaces? [ 299.349392][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 299.363966][ T23] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 299.374684][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.390815][ T5825] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 299.400660][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.418243][ T23] usb 2-1: Product: syz [ 299.423821][ T8262] syz-executor: attempt to access beyond end of device [ 299.423821][ T8262] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 299.439130][ T23] usb 2-1: Manufacturer: syz [ 299.443790][ T23] usb 2-1: SerialNumber: syz [ 299.455603][ T5825] usb 7-1: Product: syz [ 299.458999][ T8262] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 299.459821][ T5825] usb 7-1: Manufacturer: syz [ 299.475930][ T23] usb 2-1: config 0 descriptor?? [ 299.491293][ T5825] usb 7-1: SerialNumber: syz [ 299.509957][ T5814] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 299.525658][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.544620][ T5814] usb 8-1: Product: syz [ 299.546471][ T5825] usb 7-1: config 0 descriptor?? [ 299.564865][ T5814] usb 8-1: Manufacturer: syz [ 299.576481][ T5814] usb 8-1: SerialNumber: syz [ 299.718951][ T23] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 299.812133][ T5816] usb 7-1: USB disconnect, device number 9 [ 300.206458][T10557] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.247226][ T5814] rtl8150 8-1:1.0: eth17: rtl8150 is detected [ 300.395618][ T23] usb 2-1: reset high-speed USB device number 23 using dummy_hcd [ 300.501798][ T5814] usb 8-1: USB disconnect, device number 7 [ 300.784024][T10572] loop6: detected capacity change from 0 to 4096 [ 300.812355][T10572] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 300.821991][ T23] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 300.840380][ T23] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 301.087224][ T23] usb 2-1: USB disconnect, device number 23 [ 301.912280][T10603] loop5: detected capacity change from 0 to 512 [ 302.001081][T10603] EXT4-fs error (device loop5): ext4_iget_extra_inode:4732: inode #15: comm syz.5.1475: corrupted in-inode xattr: e_value out of bounds [ 302.079568][T10603] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1475: couldn't read orphan inode 15 (err -117) [ 302.160959][T10603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.334094][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.315475][ T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 303.395115][T10643] loop6: detected capacity change from 0 to 64 [ 303.505319][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 303.512927][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 303.544883][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 303.575909][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.596101][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.625960][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.656227][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.897508][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 303.903107][ T23] usbtmc 2-1:16.0: can't read capabilities [ 304.161218][T10651] loop6: detected capacity change from 0 to 512 [ 304.192946][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 304.215170][T10633] usbtmc 2-1:16.0: Unable to send data, error -71 [ 304.242935][ T5811] usb 2-1: USB disconnect, device number 24 [ 304.722702][T10669] bridge_slave_0: default FDB implementation only supports local addresses [ 304.843200][T10667] loop6: detected capacity change from 0 to 4096 [ 304.935713][T10667] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 304.954812][T10667] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 304.964601][T10673] loop5: detected capacity change from 0 to 512 [ 305.027045][T10673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.107105][ T12] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22. [ 305.114632][ T8388] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 305.146419][ T8388] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 305.153460][ T8388] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 305.212689][ T2908] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22. [ 305.305908][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.017309][T10703] loop6: detected capacity change from 0 to 64 [ 306.403458][T10690] loop1: detected capacity change from 0 to 32768 [ 306.497931][T10690] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 306.670847][T10690] XFS (loop1): Ending clean mount [ 306.900807][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 307.961630][T10748] loop6: detected capacity change from 0 to 512 [ 307.983048][T10748] EXT4-fs: Ignoring removed orlov option [ 307.999977][T10748] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.036888][T10748] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.1528: corrupted in-inode xattr: e_value size too large [ 308.053975][T10748] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1528: couldn't read orphan inode 15 (err -117) [ 308.068535][T10748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.247922][ T8388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.390778][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 308.390794][ T28] audit: type=1326 audit(2000000034.520:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.5.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x7fc00000 [ 308.774337][T10750] loop1: detected capacity change from 0 to 32768 [ 308.805359][T10750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1529 (10750) [ 308.852063][T10750] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 308.905543][T10750] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 308.921162][T10750] BTRFS info (device loop1): enabling auto defrag [ 308.935825][T10750] BTRFS info (device loop1): use no compression [ 308.950749][T10750] BTRFS info (device loop1): force clearing of disk cache [ 308.968985][T10750] BTRFS info (device loop1): max_inline at 4096 [ 308.996399][T10750] BTRFS info (device loop1): disabling free space tree [ 309.197517][T10750] BTRFS info (device loop1): enabling ssd optimizations [ 309.235473][T10750] BTRFS info (device loop1): auto enabling async discard [ 309.276260][T10750] BTRFS info (device loop1): rebuilding free space tree [ 309.320854][T10788] IPv6: NLM_F_CREATE should be specified when creating new route [ 309.328505][T10750] BTRFS info (device loop1): disabling free space tree [ 309.328699][T10750] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 309.328756][T10750] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 309.396114][T10788] netlink: 'syz.6.1539': attribute type 1 has an invalid length. [ 309.652298][ T5770] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 309.875780][ T5776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop1 scanned by udevd (5776) [ 309.947530][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1544'. [ 309.970464][T10796] loop6: detected capacity change from 0 to 8192 [ 309.985423][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'. [ 309.994471][T10798] macvlan0: entered allmulticast mode [ 310.035564][T10798] veth1_vlan: entered allmulticast mode [ 311.102169][T10814] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.112538][T10814] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.122133][T10814] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.131303][T10814] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.236190][T10818] loop1: detected capacity change from 0 to 1024 [ 311.255333][ T5814] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 311.450551][ T5814] usb 8-1: config 0 has no interfaces? [ 311.460555][ T5814] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 311.484754][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.517621][ T5814] usb 8-1: config 0 descriptor?? [ 311.784284][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.804191][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.829321][ T5814] usb 8-1: USB disconnect, device number 8 [ 312.130631][T10832] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1559'. [ 312.140405][T10832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1559'. [ 312.203290][T10822] loop6: detected capacity change from 0 to 32768 [ 312.341739][T10826] loop5: detected capacity change from 0 to 32768 [ 312.436724][ T5814] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 312.590530][T10826] read_mapping_page failed! [ 312.608801][T10826] ERROR: (device loop5): txCommit: [ 312.608801][T10826] [ 312.635316][ T5814] usb 8-1: Using ep0 maxpacket: 16 [ 312.682538][ T5814] usb 8-1: config index 0 descriptor too short (expected 54, got 36) [ 312.695462][ T5814] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 312.703726][ T5814] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.755014][ T5814] usb 8-1: config 0 has no interface number 0 [ 312.769549][ T5814] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 312.795611][ T5814] usb 8-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 312.849390][ T5814] usb 8-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=99.d0 [ 312.877158][ T5814] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.910388][ T5814] usb 8-1: Product: syz [ 312.914737][ T5814] usb 8-1: Manufacturer: syz [ 312.935341][ T5814] usb 8-1: SerialNumber: syz [ 312.968107][ T5814] usb 8-1: config 0 descriptor?? [ 312.998010][ T5814] powermate: probe of 8-1:0.117 failed with error -5 [ 313.282929][ T5814] usb 8-1: USB disconnect, device number 9 [ 313.313633][T10850] loop6: detected capacity change from 0 to 4096 [ 313.406439][T10855] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.570950][T10859] loop1: detected capacity change from 0 to 512 [ 313.621432][T10859] EXT4-fs (loop1): 1 truncate cleaned up [ 313.636269][T10859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.670613][T10859] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1567: invalid indirect mapped block 234881024 (level 0) [ 313.854464][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.109023][T10878] program syz.6.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.236415][T10880] loop6: detected capacity change from 0 to 1024 [ 314.431209][ T4561] hfsplus: b-tree write err: -5, ino 25 [ 314.446054][ T4561] hfsplus: b-tree write err: -5, ino 4 [ 314.458939][ T4561] hfsplus: b-tree write err: -5, ino 2 [ 314.468511][ T4561] hfsplus: b-tree write err: -5, ino 26 [ 314.474712][ T4561] hfsplus: b-tree write err: -5, ino 27 [ 314.744131][T10892] loop5: detected capacity change from 0 to 128 [ 314.783031][T10892] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.804115][T10892] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.982300][ T8262] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.494846][T10916] loop5: detected capacity change from 0 to 512 [ 315.511524][T10916] EXT4-fs: Ignoring removed oldalloc option [ 315.568960][T10916] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1592: invalid indirect mapped block 4294967295 (level 1) [ 315.595336][ T5811] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 315.634290][T10916] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1592: invalid indirect mapped block 4294967295 (level 1) [ 315.658100][T10916] EXT4-fs (loop5): 2 truncates cleaned up [ 315.665787][T10916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.777702][ T5811] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.797336][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.821493][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.836661][ T5811] usb 2-1: config 0 descriptor?? [ 315.847187][ T5811] cp210x 2-1:0.0: cp210x converter detected [ 316.012516][T10927] loop5: detected capacity change from 0 to 128 [ 316.052922][T10927] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 316.095542][T10927] hpfs: filesystem error: improperly stopped [ 316.101703][T10927] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 316.127834][T10927] hpfs: You really don't want any checks? You are crazy... [ 316.151779][T10927] hpfs: hpfs_map_sector(): read error [ 316.161376][T10927] hpfs: code page support is disabled [ 316.175643][T10927] hpfs: hpfs_map_4sectors(): unaligned read [ 316.199062][T10927] hpfs: hpfs_map_4sectors(): unaligned read [ 316.217755][T10927] hpfs: filesystem error: unable to find root dir [ 316.302287][T10927] hpfs: hpfs_map_4sectors(): unaligned read [ 316.331382][T10927] hpfs: hpfs_map_sector(): read error [ 316.461850][ T5811] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 316.497543][ T5811] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 316.528874][ T5811] usb 2-1: cp210x converter now attached to ttyUSB0 [ 316.570611][ T5811] usb 2-1: USB disconnect, device number 25 [ 316.597805][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 316.616498][ T5811] cp210x 2-1:0.0: device disconnected [ 317.136279][T10944] loop5: detected capacity change from 0 to 8192 [ 317.188910][T10944] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 317.244181][T10944] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 317.263718][T10944] REISERFS (device loop5): using ordered data mode [ 317.272302][T10944] reiserfs: using flush barriers [ 317.284513][T10944] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 317.306550][T10944] REISERFS (device loop5): checking transaction log (loop5) [ 317.533440][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.540167][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.653113][T10944] REISERFS (device loop5): Using tea hash to sort names [ 317.707636][T10944] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 317.728813][ T33] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.794102][ T33] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.954013][ T33] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.992853][ T33] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.181684][ T33] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.214079][ T33] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.813230][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.839498][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.852500][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.891815][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.902973][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 318.912714][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.130674][ T33] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.165783][ T33] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.262087][T10978] loop1: detected capacity change from 0 to 1024 [ 319.574256][T10971] loop5: detected capacity change from 0 to 32768 [ 319.618553][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 319.694919][T10987] loop1: detected capacity change from 0 to 128 [ 319.741882][T10971] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 320.152601][ T5776] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 320.371919][T10973] chnl_net:caif_netlink_parms(): no params data found [ 320.531903][T11013] input: syz1 as /devices/virtual/input/input12 [ 320.904098][T11024] netlink: 'syz.7.1632': attribute type 19 has an invalid length. [ 320.966912][ T5775] Bluetooth: hci1: command tx timeout [ 321.239090][T11036] loop5: detected capacity change from 0 to 128 [ 321.340604][T11036] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 321.372211][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.388127][T11036] hpfs: filesystem error: improperly stopped [ 321.394218][T11036] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 321.425442][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.435749][T11036] hpfs: You really don't want any checks? You are crazy... [ 321.443520][T11036] hpfs: hpfs_map_sector(): read error [ 321.457491][T10973] bridge_slave_0: entered allmulticast mode [ 321.465078][T10973] bridge_slave_0: entered promiscuous mode [ 321.503191][T11036] hpfs: code page support is disabled [ 321.522688][T11036] hpfs: hpfs_map_4sectors(): unaligned read [ 321.548117][T11036] hpfs: hpfs_map_4sectors(): unaligned read [ 321.554197][T11036] hpfs: filesystem error: unable to find root dir [ 321.625424][T10973] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.645496][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.665509][T10973] bridge_slave_1: entered allmulticast mode [ 321.728537][T10973] bridge_slave_1: entered promiscuous mode [ 321.924601][T11051] loop5: detected capacity change from 0 to 2048 [ 321.941931][T10973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.027249][T10973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.038298][T11055] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.210759][T11057] loop1: detected capacity change from 0 to 128 [ 322.224662][T11057] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.309849][T10973] team0: Port device team_slave_0 added [ 322.465954][T10973] team0: Port device team_slave_1 added [ 322.592164][T10973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.611051][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.676981][T10973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.832432][T10973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.842119][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.878608][T10973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.961639][ T33] hsr_slave_0: left promiscuous mode [ 322.994433][ T33] hsr_slave_1: left promiscuous mode [ 323.025758][ T5856] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 323.050565][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.055620][ T5775] Bluetooth: hci1: command tx timeout [ 323.075357][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.106246][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.131210][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.159789][ T33] bridge_slave_1: left allmulticast mode [ 323.175364][ T33] bridge_slave_1: left promiscuous mode [ 323.194278][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.210805][ T33] bridge_slave_0: left allmulticast mode [ 323.231139][ T33] bridge_slave_0: left promiscuous mode [ 323.248153][ T5856] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 323.256517][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.286082][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.322205][ T5856] usb 2-1: config 0 descriptor?? [ 323.357392][ T5856] cp210x 2-1:0.0: cp210x converter detected [ 323.426573][ T33] veth1_macvtap: left promiscuous mode [ 323.432212][ T33] veth0_macvtap: left promiscuous mode [ 323.448398][ T33] veth1_vlan: left promiscuous mode [ 323.454063][ T33] veth0_vlan: left promiscuous mode [ 323.793988][ T5856] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 323.847530][ T5856] usb 2-1: cp210x converter now attached to ttyUSB0 [ 324.100132][ T5757] usb 2-1: USB disconnect, device number 26 [ 324.132698][ T5757] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.235899][ T5757] cp210x 2-1:0.0: device disconnected [ 324.401042][T11079] loop5: detected capacity change from 0 to 40427 [ 324.439475][T11079] F2FS-fs (loop5): invalid crc value [ 324.487112][T11079] F2FS-fs (loop5): Found nat_bits in checkpoint [ 324.631992][T11079] F2FS-fs (loop5): Start checkpoint disabled! [ 324.708715][T11079] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 325.075480][ T23] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 325.108047][ T49] kworker/u4:3: attempt to access beyond end of device [ 325.108047][ T49] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 325.128392][ T5775] Bluetooth: hci1: command tx timeout [ 325.134705][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 325.142443][ T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 325.295471][ T23] usb 8-1: Using ep0 maxpacket: 16 [ 325.348675][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.368971][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.404268][ T23] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.419569][ T23] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.429078][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.458758][ T23] usb 8-1: config 0 descriptor?? [ 325.572143][T11104] loop1: detected capacity change from 0 to 128 [ 325.594487][T11104] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 325.652570][T11104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.900256][ T23] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 325.932760][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 325.941259][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 325.949226][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 325.962700][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 325.974677][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 325.984306][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 326.023354][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 326.042107][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 326.072155][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 326.105805][ T23] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 326.161288][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.000D/input/input13 [ 326.339290][ T33] team0 (unregistering): Port device team_slave_1 removed [ 326.349711][ T23] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 326.433001][ T23] usb 8-1: USB disconnect, device number 10 [ 326.518427][T11115] fido_id[11115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 326.601191][ T33] team0 (unregistering): Port device team_slave_0 removed [ 326.651420][T11117] loop1: detected capacity change from 0 to 128 [ 326.678652][T11117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.705909][T11117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.718116][T11117] EXT4-fs (loop1): Test dummy encryption mode enabled [ 326.757265][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.759843][T11117] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.780222][T11117] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.989718][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.000068][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.205659][ T5775] Bluetooth: hci1: command tx timeout [ 327.397191][T11125] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1667'. [ 327.848185][ T33] bond0 (unregistering): Released all slaves [ 328.232177][T10973] hsr_slave_0: entered promiscuous mode [ 328.261944][T10973] hsr_slave_1: entered promiscuous mode [ 328.282894][ T5811] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 328.479134][ T5811] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 328.492281][ T5811] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 328.505303][ T5811] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 328.517714][ T5811] usb 8-1: config 220 has no interface number 2 [ 328.524209][ T5811] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 328.543989][ T5811] usb 8-1: config 220 interface 0 has no altsetting 0 [ 328.552526][ T5811] usb 8-1: config 220 interface 76 has no altsetting 0 [ 328.565948][ T5811] usb 8-1: config 220 interface 1 has no altsetting 0 [ 328.579276][ T5811] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 328.598493][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.609523][ T5811] usb 8-1: Product: syz [ 328.614520][ T5811] usb 8-1: Manufacturer: syz [ 328.619730][ T5811] usb 8-1: SerialNumber: syz [ 328.863605][ T5811] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 328.870400][ T5811] usb 8-1: No valid video chain found. [ 328.883359][ T5811] usb 8-1: selecting invalid altsetting 0 [ 328.929164][ T5811] usb 8-1: selecting invalid altsetting 0 [ 328.935131][ T5811] usbtest: probe of 8-1:220.1 failed with error -22 [ 328.950079][ T5811] usb 8-1: USB disconnect, device number 11 [ 329.472250][ T23] kernel write not supported for file /dsp (pid: 23 comm: kworker/1:0) [ 329.986786][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 329.995175][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.004652][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.012699][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.020742][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.028787][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.036849][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.044928][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.052951][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.060960][T11167] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 330.781337][T11192] loop5: detected capacity change from 0 to 512 [ 330.897378][T10973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 330.948964][T10973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.017401][T10973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.061552][T10973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.338919][T10973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.409250][T10973] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.444941][ T4561] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.452178][ T4561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.492681][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.500028][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.601917][T11210] loop1: detected capacity change from 0 to 128 [ 331.624989][T10973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.642273][T11210] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.724907][T11210] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.943504][ T33] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.377979][T10973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.360151][T10973] veth0_vlan: entered promiscuous mode [ 333.404339][T10973] veth1_vlan: entered promiscuous mode [ 333.509347][T10973] veth0_macvtap: entered promiscuous mode [ 333.568351][T10973] veth1_macvtap: entered promiscuous mode [ 333.642359][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.655660][ T5816] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 333.693304][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.735346][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.772792][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.793121][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.818576][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.850964][T10973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.876118][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 333.883750][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 333.898745][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.928236][ T5816] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 333.938362][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.942435][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.966811][ T5816] usb 2-1: Product: syz [ 333.976661][ T5816] usb 2-1: Manufacturer: syz [ 333.985459][T10973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.991904][ T5816] usb 2-1: SerialNumber: syz [ 334.012911][ T5816] usb 2-1: config 0 descriptor?? [ 334.025361][T10973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.037275][ T5816] hub 2-1:0.0: bad descriptor, ignoring hub [ 334.051788][ T5816] hub: probe of 2-1:0.0 failed with error -5 [ 334.070640][T10973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.082570][ T5816] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 334.113866][T10973] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.139447][ T5811] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 334.157577][T10973] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.197892][T10973] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.220236][T10973] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.391323][ T5811] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 334.411243][ T5811] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 334.461988][ T5811] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 334.493408][ T5811] usb 6-1: config 220 has no interface number 2 [ 334.521854][ T5825] usb 2-1: USB disconnect, device number 27 [ 334.530835][ T5811] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 334.553684][ T5811] usb 6-1: config 220 interface 0 has no altsetting 0 [ 334.570505][ T5811] usb 6-1: config 220 interface 76 has no altsetting 0 [ 334.580000][ T5811] usb 6-1: config 220 interface 1 has no altsetting 0 [ 334.598700][ T5811] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 334.619942][ T2197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.630287][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.648932][ T2197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.672154][ T5811] usb 6-1: Product: syz [ 334.683745][ T5811] usb 6-1: Manufacturer: syz [ 334.706386][ T5811] usb 6-1: SerialNumber: syz [ 334.790113][ T2197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.805827][ T2197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.989599][ T5811] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 335.010898][ T5811] usb 6-1: No valid video chain found. [ 335.040093][ T5811] usb 6-1: selecting invalid altsetting 0 [ 335.066641][ T5811] usb 6-1: selecting invalid altsetting 0 [ 335.093387][ T5811] usbtest: probe of 6-1:220.1 failed with error -22 [ 335.136118][ T5811] usb 6-1: USB disconnect, device number 7 [ 335.222395][T11289] loop6: detected capacity change from 0 to 16 [ 335.249350][T11289] erofs: (device loop6): mounted with root inode @ nid 36. [ 335.852647][T11310] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1720'. [ 335.903873][T11308] kvm: user requested TSC rate below hardware speed [ 336.459591][T11325] : renamed from vlan0 (while UP) [ 337.403440][T11319] loop1: detected capacity change from 0 to 40427 [ 337.479627][T11319] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 337.515559][T11319] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 337.567754][T11319] F2FS-fs (loop1): invalid crc value [ 337.626773][T11319] F2FS-fs (loop1): Found nat_bits in checkpoint [ 337.816200][T11319] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 337.823338][T11319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 338.235807][ T5770] syz-executor: attempt to access beyond end of device [ 338.235807][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 338.290058][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 338.704245][T11365] loop5: detected capacity change from 0 to 4096 [ 338.764978][T11365] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 339.892825][T11394] netlink: 'syz.7.1743': attribute type 2 has an invalid length. [ 339.955652][T11394] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1743'. [ 340.245204][ C0] sched: RT throttling activated [ 340.450903][T11384] loop5: detected capacity change from 0 to 131072 [ 340.463245][T11384] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 340.471498][T11384] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 340.487013][T11384] F2FS-fs (loop5): invalid crc value [ 340.539005][T11384] F2FS-fs (loop5): Found nat_bits in checkpoint [ 340.616932][T11384] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 340.624057][T11384] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 341.985404][ T5811] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 342.195291][ T5811] usb 7-1: Using ep0 maxpacket: 16 [ 342.204949][ T5811] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.215456][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.245406][ T5811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.265738][ T5811] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 342.285274][ T5811] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.311020][ T5811] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.345295][ T5811] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.356730][T11422] loop1: detected capacity change from 0 to 40427 [ 342.373944][ T5811] usb 7-1: Manufacturer: syz [ 342.381943][ T5811] usb 7-1: config 0 descriptor?? [ 342.409730][T11422] F2FS-fs (loop1): invalid crc value [ 342.428891][T11422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 342.564720][T11422] F2FS-fs (loop1): Start checkpoint disabled! [ 342.579454][T11422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 342.795364][ T5811] rc_core: IR keymap rc-hauppauge not found [ 342.810467][ T5811] Registered IR keymap rc-empty [ 342.825919][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 342.834809][T11433] loop5: detected capacity change from 0 to 4096 [ 342.875447][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 342.920102][T11433] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 342.928327][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 342.975526][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 343.009132][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.029557][T11433] ntfs3: loop5: Failed to load $Extend (-22). [ 343.049466][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.055662][T11433] ntfs3: loop5: Failed to initialize $Extend. [ 343.073715][ T33] kworker/u4:2: attempt to access beyond end of device [ 343.073715][ T33] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 343.099481][ T33] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 343.116995][ T33] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 343.132526][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.185570][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.212801][ T28] audit: type=1800 audit(2000000069.340:84): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1756" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 343.235694][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.291809][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.326799][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.375793][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.423949][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.478969][ T5811] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 343.535710][ T5811] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 343.554081][ T5811] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 343.587362][ T5811] usb 7-1: USB disconnect, device number 10 [ 343.876521][T11448] loop5: detected capacity change from 0 to 128 [ 343.929667][T11448] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 343.961821][T11448] hpfs: filesystem error: improperly stopped [ 344.007057][T11448] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 344.014885][T11448] hpfs: You really don't want any checks? You are crazy... [ 344.095330][T11448] hpfs: Code page index out of array [ 344.100728][T11448] hpfs: code page support is disabled [ 344.134870][T11448] hpfs: hpfs_map_4sectors(): unaligned read [ 344.154241][T11448] hpfs: hpfs_map_4sectors(): unaligned read [ 344.175541][T11448] hpfs: filesystem error: unable to find root dir [ 344.498099][T11452] syz.1.1765 (11452) used greatest stack depth: 16688 bytes left [ 344.741797][T11467] loop5: detected capacity change from 0 to 128 [ 345.489871][T11465] loop6: detected capacity change from 0 to 32768 [ 345.563764][T11465] overlayfs: upper fs needs to support d_type. [ 345.582237][T11465] overlayfs: upper fs does not support tmpfile. [ 345.609831][T11465] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 345.636989][T11465] ERROR: (device loop6): dbAlloc: the hint is outside the map [ 345.636989][T11465] [ 345.653125][T11465] ERROR: (device loop6): remounting filesystem as read-only [ 345.662176][T11465] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null. [ 346.330743][ T23] kernel read not supported for file /dsp (pid: 23 comm: kworker/1:0) [ 346.808747][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 346.928716][T11510] loop6: detected capacity change from 0 to 32768 [ 347.010317][T11510] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 347.035591][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 347.055951][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.097154][ T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 347.113324][T11510] JBD2: Ignoring recovery information on journal [ 347.152569][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 347.191470][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 347.231409][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.247468][T11510] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 347.258334][ T9] usb 2-1: Product: syz [ 347.272960][ T9] usb 2-1: Manufacturer: syz [ 347.305399][ T9] usb 2-1: SerialNumber: syz [ 347.357779][ T9] usb 2-1: config 0 descriptor?? [ 347.721392][T10973] ocfs2: Unmounting device (7,6) on (node local) [ 347.813847][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 347.945827][ T5816] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 348.120828][T11543] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1803'. [ 348.158908][ T5816] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 348.174760][ T5816] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.190774][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 348.200236][ T5816] usb 6-1: SerialNumber: syz [ 348.216143][ T9] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 348.258429][ T9] gs_usb: probe of 2-1:0.0 failed with error -71 [ 348.270100][T11548] overlayfs: upper fs does not support tmpfile. [ 348.280183][ T9] usb 2-1: USB disconnect, device number 28 [ 348.412422][T11550] loop6: detected capacity change from 0 to 256 [ 348.473735][T11550] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 348.770805][T11555] process 'syz.6.1808' launched './file1' with NULL argv: empty string added [ 348.874489][ T5816] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 349.110928][ T5816] usb 6-1: USB disconnect, device number 8 [ 350.208506][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1823'. [ 350.289488][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1823'. [ 350.588562][T11594] loop6: detected capacity change from 0 to 64 [ 350.770845][T11594] syz.6.1825: attempt to access beyond end of device [ 350.770845][T11594] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 350.823237][T11594] Buffer I/O error on dev loop6, logical block 134217734, lost async page write [ 351.011204][T11600] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 351.420379][T11598] loop1: detected capacity change from 0 to 32768 [ 351.467185][T11598] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 351.500217][T11598] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 351.528172][T11598] BTRFS info (device loop1): setting nodatacow, compression disabled [ 351.561966][T11598] BTRFS info (device loop1): force clearing of disk cache [ 351.588026][T11598] BTRFS info (device loop1): enabling ssd optimizations [ 351.617080][T11598] BTRFS info (device loop1): using spread ssd allocation scheme [ 351.624835][T11598] BTRFS info (device loop1): turning off barriers [ 351.658155][T11598] BTRFS info (device loop1): disabling free space tree [ 351.665132][T11598] BTRFS info (device loop1): not using ssd optimizations [ 351.705288][T11598] BTRFS info (device loop1): not using spread ssd allocation scheme [ 351.853263][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1831'. [ 351.856662][T11598] BTRFS info (device loop1): rebuilding free space tree [ 351.930238][T11598] BTRFS info (device loop1): disabling free space tree [ 351.954415][T11598] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 352.015701][T11598] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 352.408543][ T5770] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 353.762822][T11655] loop1: detected capacity change from 0 to 128 [ 353.806362][T11655] EXT4-fs: Ignoring removed nobh option [ 353.946791][T11655] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.016830][T11655] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.101396][T11655] fscrypt (loop1, inode 12): Reserved bits set in encryption policy [ 354.186727][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.549722][T11656] loop5: detected capacity change from 0 to 32768 [ 354.625686][T11656] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 354.762754][T11656] XFS (loop5): Ending clean mount [ 354.941250][T11658] loop6: detected capacity change from 0 to 32768 [ 355.004985][ T8262] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 355.091129][T11658] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 355.104670][T11658] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 355.375715][T11658] XFS (loop6): Ending clean mount [ 355.556985][T10973] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 357.071657][T11732] loop5: detected capacity change from 0 to 16 [ 357.090962][T11732] erofs: (device loop5): mounted with root inode @ nid 36. [ 357.146270][T11726] loop6: detected capacity change from 0 to 32768 [ 357.185453][T11726] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1869 (11726) [ 357.249201][T11726] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 357.272207][T11726] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 357.298025][T11726] BTRFS info (device loop6): using free space tree [ 357.427806][T11748] trusted_key: syz.7.1875 sent an empty control message without MSG_MORE. [ 357.495591][T11726] BTRFS info (device loop6): enabling ssd optimizations [ 357.502649][T11726] BTRFS info (device loop6): auto enabling async discard [ 357.602021][T11755] loop1: detected capacity change from 0 to 4096 [ 357.707265][T11760] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.091804][ T33] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 358.441561][T10973] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.783778][T11769] loop1: detected capacity change from 0 to 8192 [ 358.809826][T11769] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 358.834911][T11769] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 358.857598][T11769] REISERFS (device loop1): using ordered data mode [ 358.914697][T11769] reiserfs: using flush barriers [ 358.954459][T11769] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 359.019473][T11769] REISERFS (device loop1): checking transaction log (loop1) [ 359.255510][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 359.434934][T11769] REISERFS (device loop1): Using tea hash to sort names [ 359.455702][T11769] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 359.460680][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.509614][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.554266][ T9] usb 7-1: config 0 descriptor?? [ 359.568045][ T9] cp210x 7-1:0.0: cp210x converter detected [ 360.097497][T11794] loop1: detected capacity change from 0 to 128 [ 360.127315][T11794] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 360.151262][T11794] hpfs: filesystem error: improperly stopped [ 360.160990][T11794] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 360.172991][T11794] hpfs: You really don't want any checks? You are crazy... [ 360.192769][ T9] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 360.208817][T11794] hpfs: hpfs_map_sector(): read error [ 360.214273][T11794] hpfs: code page support is disabled [ 360.221006][T11794] hpfs: hpfs_map_4sectors(): unaligned read [ 360.229273][ T9] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 360.248173][T11794] hpfs: hpfs_map_4sectors(): unaligned read [ 360.257949][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 360.264709][T11794] hpfs: filesystem error: unable to find root dir [ 360.280488][ T9] usb 7-1: USB disconnect, device number 11 [ 360.322747][T11794] hpfs: hpfs_map_4sectors(): unaligned read [ 360.329555][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 360.349443][ T9] cp210x 7-1:0.0: device disconnected [ 360.361778][T11794] hpfs: hpfs_map_sector(): read error [ 361.238428][T11812] loop5: detected capacity change from 0 to 1024 [ 361.271119][T11812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.369564][T11812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.468392][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.081980][T11840] loop6: detected capacity change from 0 to 64 [ 362.169910][ T28] audit: type=1800 audit(2000000088.290:85): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1906" name="file2" dev="loop6" ino=21 res=0 errno=0 [ 362.429655][T11847] loop1: detected capacity change from 0 to 128 [ 362.521184][T11847] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.622158][T11847] ext4 filesystem being mounted at /491/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.705127][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.015065][T11842] loop5: detected capacity change from 0 to 32768 [ 363.034962][T11842] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1908 (11842) [ 363.125713][T11842] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 363.166819][T11864] loop1: detected capacity change from 0 to 1024 [ 363.174891][T11842] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 363.195688][T11842] BTRFS info (device loop5): enabling auto defrag [ 363.202208][T11842] BTRFS info (device loop5): use no compression [ 363.265848][T11842] BTRFS info (device loop5): force clearing of disk cache [ 363.305982][T11842] BTRFS info (device loop5): max_inline at 4096 [ 363.324910][T11842] BTRFS info (device loop5): disabling free space tree [ 363.343536][ T11] hfsplus: b-tree write err: -5, ino 25 [ 363.360219][ T11] hfsplus: b-tree write err: -5, ino 4 [ 363.376704][ T11] hfsplus: b-tree write err: -5, ino 2 [ 363.386516][ T23] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 363.396921][ T11] hfsplus: b-tree write err: -5, ino 26 [ 363.402634][ T11] hfsplus: b-tree write err: -5, ino 27 [ 363.543633][T11842] BTRFS info (device loop5): enabling ssd optimizations [ 363.565588][T11842] BTRFS info (device loop5): auto enabling async discard [ 363.576497][T11842] BTRFS info (device loop5): rebuilding free space tree [ 363.589072][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 363.595632][ T5825] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 363.615595][ T23] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 363.624872][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.649385][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 363.656766][ T23] pvrusb2: ********** [ 363.661082][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 363.672955][ T23] pvrusb2: Important functionality might not be entirely working. [ 363.682132][T11842] BTRFS info (device loop5): disabling free space tree [ 363.697104][T11842] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 363.709816][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 363.729529][T11842] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 363.740382][ T23] pvrusb2: ********** [ 363.785360][ T5825] usb 8-1: Using ep0 maxpacket: 16 [ 363.794437][ T5825] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 363.807347][ T5825] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 363.816963][ T5825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.825112][ T5825] usb 8-1: Product: syz [ 363.830361][ T5825] usb 8-1: Manufacturer: syz [ 363.838485][ T5825] usb 8-1: SerialNumber: syz [ 363.859275][ T5825] usb 8-1: config 0 descriptor?? [ 363.878405][ T2319] pvrusb2: Invalid write control endpoint [ 363.896196][ T5825] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 363.929432][ T5825] usb 8-1: Detected FT232R [ 364.024192][ T2319] pvrusb2: Invalid write control endpoint [ 364.033046][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 364.048158][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 364.064172][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 364.103585][ T2319] pvrusb2: Device being rendered inoperable [ 364.109810][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 364.130033][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 364.149883][ T5825] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 364.165526][ T2319] pvrusb2: Attached sub-driver cx25840 [ 364.179359][T11862] pvrusb2: Attempted to execute control transfer when device not ok [ 364.182899][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 364.203587][ T23] usb 7-1: USB disconnect, device number 12 [ 364.241463][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 364.282449][ T8262] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 364.457167][ T5825] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 364.613322][ T5856] usb 8-1: USB disconnect, device number 12 [ 364.691684][ T5856] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 364.738177][ T5856] ftdi_sio 8-1:0.0: device disconnected [ 364.988083][T11893] netlink: 'syz.6.1923': attribute type 19 has an invalid length. [ 365.160496][T11897] input: syz1 as /devices/virtual/input/input15 [ 366.009681][T11921] loop5: detected capacity change from 0 to 1024 [ 366.029553][T11921] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 366.074375][T11921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.185711][T11921] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1936: missing EA_INODE flag [ 366.285642][T11921] EXT4-fs (loop5): Remounting filesystem read-only [ 366.439845][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.727091][T11939] loop1: detected capacity change from 0 to 256 [ 367.446162][ T5775] Bluetooth: hci1: command tx timeout [ 367.485349][ T5851] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 367.549413][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 367.592691][T11960] loop6: detected capacity change from 0 to 1024 [ 367.675440][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 367.686805][ T5851] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 367.703085][ T5851] usb 2-1: config 0 interface 0 has no altsetting 0 [ 367.715890][ T5851] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 367.725002][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.737325][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.755990][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 367.770267][ T9] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 367.780709][ T5851] usb 2-1: config 0 descriptor?? [ 367.790765][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.812190][ T9] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 367.823578][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.831155][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.857239][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.865067][ T9] usb 6-1: config 220 has no interface number 2 [ 367.865365][ T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 367.889731][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.897370][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 367.904359][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 367.912329][ T9] usb 6-1: config 220 interface 1 has no altsetting 0 [ 367.923591][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.931751][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.942547][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 367.951776][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.965856][ T9] usb 6-1: Product: syz [ 367.973690][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 367.976690][ T9] usb 6-1: Manufacturer: syz [ 367.986273][ T9] usb 6-1: SerialNumber: syz [ 368.008569][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 368.029009][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 368.036965][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 368.051842][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 368.059645][T11960] hfsplus: request for non-existent node 33554434 in B*Tree [ 368.071411][ T28] audit: type=1800 audit(2000000094.200:86): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1953" name="file1" dev="loop6" ino=19 res=0 errno=0 [ 368.258514][ T9] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 368.265050][ T9] usb 6-1: No valid video chain found. [ 368.271152][ T9] usb 6-1: selecting invalid altsetting 0 [ 368.289623][ T9] usb 6-1: selecting invalid altsetting 0 [ 368.295601][ T9] usbtest: probe of 6-1:220.1 failed with error -22 [ 368.308335][ T9] usb 6-1: USB disconnect, device number 9 [ 368.593845][ T5851] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 368.605341][ T5851] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 368.623189][ T5851] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 368.639885][ T5851] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 368.658054][ T5851] corsair-cpro 0003:1B1C:0C10.000E: unknown main item tag 0x0 [ 368.689828][ T5851] corsair-cpro 0003:1B1C:0C10.000E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 369.107648][ T5851] corsair-cpro: probe of 0003:1B1C:0C10.000E failed with error -110 [ 369.145123][ T5851] usb 2-1: USB disconnect, device number 29 [ 369.344053][T11979] netlink: 'syz.6.1958': attribute type 1 has an invalid length. [ 370.363253][T11989] loop6: detected capacity change from 0 to 32768 [ 370.405652][T11989] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1963 (11989) [ 370.451983][T11989] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 370.475476][T11989] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 370.495419][T11989] BTRFS info (device loop6): enabling auto defrag [ 370.522258][T11989] BTRFS info (device loop6): use no compression [ 370.547572][T11989] BTRFS info (device loop6): force clearing of disk cache [ 370.577640][T11989] BTRFS info (device loop6): max_inline at 4096 [ 370.583994][T11989] BTRFS info (device loop6): disabling free space tree [ 370.795443][T11989] BTRFS info (device loop6): enabling ssd optimizations [ 370.816092][T11989] BTRFS info (device loop6): auto enabling async discard [ 370.847044][T11989] BTRFS info (device loop6): rebuilding free space tree [ 370.911422][T11989] BTRFS info (device loop6): disabling free space tree [ 370.925475][T11989] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 370.946322][T11989] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 371.240340][T10973] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 371.354718][T12005] loop5: detected capacity change from 0 to 32768 [ 371.426178][T12005] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.1969 (12005) [ 371.699715][ T5776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (5776) [ 372.685128][T12032] loop1: detected capacity change from 0 to 32768 [ 372.730698][T12032] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1976 (12032) [ 372.782692][T12032] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 372.801292][T12032] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 372.815973][T12050] net_ratelimit: 44 callbacks suppressed [ 372.815991][T12050] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.829309][T12050] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 372.844729][T12032] BTRFS info (device loop1): enabling disk space caching [ 372.854017][T12032] BTRFS info (device loop1): force clearing of disk cache [ 372.867659][T12032] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 372.902882][T12032] BTRFS info (device loop1): use zstd compression, level 3 [ 372.935267][T12032] BTRFS info (device loop1): disk space caching is enabled [ 373.085073][T12032] BTRFS info (device loop1): enabling ssd optimizations [ 373.110468][T12032] BTRFS info (device loop1): auto enabling async discard [ 373.130500][T12032] BTRFS info (device loop1): rebuilding free space tree [ 373.153799][T12032] BTRFS info (device loop1): disabling free space tree [ 373.161465][T12032] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 373.171604][T12032] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 373.621280][ T5770] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 373.864855][T12082] program syz.7.1985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.013481][T12084] loop6: detected capacity change from 0 to 2048 [ 374.087162][T12089] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.324520][ T28] audit: type=1800 audit(2000000100.450:87): pid=12084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1987" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 374.635603][T12099] loop5: detected capacity change from 0 to 512 [ 374.666207][T12099] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 374.715157][T12099] EXT4-fs (loop5): orphan cleanup on readonly fs [ 374.732555][T12099] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:512: comm syz.5.1995: Block bitmap for bg 0 marked uninitialized [ 374.798456][T12099] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 374.874271][T12104] loop6: detected capacity change from 0 to 1024 [ 374.918417][T12099] EXT4-fs (loop5): 1 orphan inode deleted [ 374.944814][T12104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 374.958253][T12099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 375.040774][T12104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.056423][T12113] loop1: detected capacity change from 0 to 64 [ 375.065436][T12099] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 375.106337][T12099] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 375.116031][T12104] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.1997: missing EA_INODE flag [ 375.138536][T12099] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:512: comm syz.5.1995: Block bitmap for bg 0 marked uninitialized [ 375.157769][T12104] EXT4-fs (loop6): Remounting filesystem read-only [ 375.317010][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.426320][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.883349][T12136] loop1: detected capacity change from 0 to 512 [ 375.954552][T12136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.009064][T12136] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.214976][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.284400][T12146] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2013'. [ 376.712368][T12162] netlink: 'syz.5.2020': attribute type 2 has an invalid length. [ 376.733500][T12162] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2020'. [ 376.959275][T12173] loop5: detected capacity change from 0 to 512 [ 376.978466][T12173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 377.008316][T12173] EXT4-fs (loop5): 1 truncate cleaned up [ 377.016186][T12173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.056239][T12173] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.2024: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 377.107752][T12173] EXT4-fs (loop5): Remounting filesystem read-only [ 377.252284][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.795638][ T5825] kernel read not supported for file /dsp (pid: 5825 comm: kworker/1:5) [ 377.966789][T12184] loop6: detected capacity change from 0 to 8 [ 378.059715][T12188] loop5: detected capacity change from 0 to 1024 [ 378.173136][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.229105][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.268134][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.299853][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.315103][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.323356][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.382962][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.391504][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.419272][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.427890][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.440775][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.449832][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.469382][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.477357][T12188] hfsplus: request for non-existent node 33554434 in B*Tree [ 378.504594][ T28] audit: type=1800 audit(2000000104.630:88): pid=12188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2027" name="file1" dev="loop5" ino=19 res=0 errno=0 [ 378.759774][T12201] program syz.5.2034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 378.951284][T12206] loop6: detected capacity change from 0 to 4096 [ 378.971444][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.978161][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.073393][T12206] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 379.111280][T12206] ntfs3: loop6: Failed to load $Extend (-22). [ 379.135385][T12206] ntfs3: loop6: Failed to initialize $Extend. [ 379.190801][ T28] audit: type=1800 audit(2000000105.320:89): pid=12206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2038" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 379.225295][ T5825] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 379.427315][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 379.455892][ T5825] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 379.492091][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 379.505622][ T5825] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 379.533869][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.564044][ T5825] usb 6-1: config 0 descriptor?? [ 379.915305][T12227] loop1: detected capacity change from 0 to 1024 [ 380.028131][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.045640][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.070604][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.117682][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.147661][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.158959][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.189593][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.197215][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.234558][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.245570][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.276483][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.284767][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.304561][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.312795][T12227] hfsplus: request for non-existent node 33554434 in B*Tree [ 380.365556][ T28] audit: type=1800 audit(2000000106.480:90): pid=12227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2045" name="file1" dev="loop1" ino=19 res=0 errno=0 [ 380.401983][T12240] loop6: detected capacity change from 0 to 256 [ 380.422460][ T5825] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 380.434889][T12240] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 380.473988][ T5825] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 380.509629][ T5825] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 380.535935][ T5825] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 380.557157][ T5825] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 380.611879][ T5825] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 380.975542][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 381.038427][ T5825] corsair-cpro: probe of 0003:1B1C:0C10.000F failed with error -110 [ 381.074854][ T5825] usb 6-1: USB disconnect, device number 10 [ 381.179436][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 381.222423][ T9] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 381.245360][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.266471][ T9] usb 2-1: Product: syz [ 381.270825][ T9] usb 2-1: Manufacturer: syz [ 381.285386][ T9] usb 2-1: SerialNumber: syz [ 381.551021][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 381.665458][ T9] usb 2-1: USB disconnect, device number 30 [ 382.540777][T12270] loop6: detected capacity change from 0 to 1024 [ 382.589531][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.599125][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.630455][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.647357][T12262] loop5: detected capacity change from 0 to 32768 [ 382.661088][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.681844][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.714744][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.749206][T12262] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 382.757623][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.795538][T12262] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 382.822117][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.831442][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.840921][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.851114][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.858762][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.873609][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.881506][T12270] hfsplus: request for non-existent node 33554434 in B*Tree [ 382.890241][ T28] audit: type=1800 audit(2000000109.020:91): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2064" name="file1" dev="loop6" ino=19 res=0 errno=0 [ 382.958052][T12259] overlayfs: failed to resolve './file0': -2 [ 382.992283][T12262] XFS (loop5): Ending clean mount [ 383.054168][T12262] XFS (loop5): Quotacheck needed: Please wait. [ 383.151510][ T5851] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 383.187477][ T5851] XFS (loop5): Unmount and run xfs_repair [ 383.194077][ T5851] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 383.217471][ T5851] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 383.242598][ T5851] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 383.270237][ T5851] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 383.286715][ T5851] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 383.311301][T12266] loop1: detected capacity change from 0 to 32768 [ 383.325358][ T5811] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 383.333449][ T5851] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 383.346041][T12266] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2071 (12266) [ 383.356674][ T5851] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 383.385516][ T5851] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.394455][ T5851] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.415955][ T4561] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 383.431066][T12266] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 383.460462][T12262] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 383.490735][T12266] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 383.514939][T12266] BTRFS info (device loop1): using free space tree [ 383.545521][ T5811] usb 8-1: Using ep0 maxpacket: 32 [ 383.554973][ T5811] usb 8-1: config 0 has an invalid interface number: 20 but max is 0 [ 383.583628][ T5811] usb 8-1: config 0 has no interface number 0 [ 383.611359][ T9] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 383.623370][ T5811] usb 8-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 383.634317][ T9] XFS (loop5): Unmount and run xfs_repair [ 383.642693][ T5811] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.652961][ T9] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 383.660902][ T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 383.672443][ T5811] usb 8-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 383.682809][ T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 383.710809][ T5811] usb 8-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 383.726429][ T9] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 383.737058][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.745134][ T5811] usb 8-1: Product: syz [ 383.750972][ T9] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 383.760743][ T5811] usb 8-1: Manufacturer: syz [ 383.765899][ T9] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 383.775021][ T5811] usb 8-1: SerialNumber: syz [ 383.785505][ T9] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 383.794426][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.810637][ T5811] usb 8-1: config 0 descriptor?? [ 383.815679][T12266] BTRFS info (device loop1): enabling ssd optimizations [ 383.815703][T12266] BTRFS info (device loop1): auto enabling async discard [ 383.892664][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.916604][T12281] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 383.946948][T12262] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 383.985347][ T5856] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 384.016681][T12262] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 384.031875][T12262] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 384.132566][ T12] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 384.152074][ T8262] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 384.195468][ T5856] usb 7-1: Using ep0 maxpacket: 32 [ 384.226343][ T5811] usb-storage 8-1:0.20: USB Mass Storage device detected [ 384.257748][ T5856] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 384.282246][ T5811] usb-storage 8-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 384.309165][ T5856] usb 7-1: config 0 interface 0 has no altsetting 0 [ 384.329055][ T5856] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 384.342735][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.370423][ T5770] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.384975][ T5856] usb 7-1: config 0 descriptor?? [ 384.497181][ T5811] scsi host1: usb-storage 8-1:0.20 [ 384.704356][ T5825] usb 8-1: USB disconnect, device number 13 [ 384.798393][T12311] loop5: detected capacity change from 0 to 2048 [ 384.856364][T12312] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.974194][ T28] audit: type=1800 audit(2000000111.100:92): pid=12311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2069" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 385.260835][ T5856] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 385.290601][ T5856] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 385.311837][ T5856] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 385.320795][ T5856] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 385.330832][ T5856] corsair-cpro 0003:1B1C:0C10.0010: unknown main item tag 0x0 [ 385.351379][ T5856] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 385.575577][ T5825] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 385.755541][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 385.771051][ T5825] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 385.783865][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.792623][ T5825] usb 6-1: Product: syz [ 385.797108][ T5856] corsair-cpro: probe of 0003:1B1C:0C10.0010 failed with error -110 [ 385.802952][ T5825] usb 6-1: Manufacturer: syz [ 385.812122][ T5825] usb 6-1: SerialNumber: syz [ 385.830767][ T5825] usb 6-1: config 0 descriptor?? [ 385.836400][ T5856] usb 7-1: USB disconnect, device number 13 [ 385.857925][ T5825] gspca_main: se401-2.14.0 probing 047d:5003 [ 386.262259][ T5825] gspca_se401: Frame size: 0x0 1/16th janggu [ 386.282254][ T5825] gspca_se401: Frame size: 0x0 1/16th janggu [ 386.305328][ T5825] gspca_se401: Frame size: 0x0 1/16th janggu [ 386.483686][ T5825] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 386.626932][ T5825] usb 6-1: USB disconnect, device number 11 [ 387.084574][T12370] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 387.195861][T12374] sd 0:0:1:0: device reset [ 388.072670][T12398] sd 0:0:1:0: device reset [ 388.643953][T12410] loop1: detected capacity change from 0 to 1024 [ 388.747149][T12410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 389.101293][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 389.284251][T12424] loop1: detected capacity change from 0 to 1024 [ 389.570826][ T49] hfsplus: found bad thread record in catalog [ 389.806129][T12419] loop6: detected capacity change from 0 to 32768 [ 389.893458][T12419] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 389.955654][T12419] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 390.101815][T12419] XFS (loop6): Ending clean mount [ 390.155034][T12419] XFS (loop6): Quotacheck needed: Please wait. [ 390.248636][ T5856] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 390.271019][ T5856] XFS (loop6): Unmount and run xfs_repair [ 390.278801][ T5856] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 390.297944][ T5856] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 390.311852][ T5856] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 390.322822][ T5856] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 390.342778][ T5856] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 390.355109][ T5856] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 390.370743][ T5856] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 390.382429][ T5856] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 390.398616][ T5856] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 390.422086][ T2197] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 390.473281][T12419] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 390.566209][ T5825] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 390.625672][T12419] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 390.665572][T12419] XFS (loop6): Unmount and run xfs_repair [ 390.692876][T12419] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 390.705231][T12419] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 390.735337][T12419] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 390.755384][T12419] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 390.767934][T12419] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 390.768966][ T5825] usb 6-1: unable to get BOS descriptor or descriptor too short [ 390.789899][T12419] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 390.801303][ T5825] usb 6-1: not running at top speed; connect to a high speed hub [ 390.827142][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.837343][T12419] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 390.837440][T12419] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 390.837458][T12419] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 390.837485][T12419] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 390.887767][ T5825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.918464][T12419] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 390.933264][T12419] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 390.942727][ T5825] usb 6-1: string descriptor 0 read error: -22 [ 390.960295][ T5825] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.990027][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.025141][ T5825] usb 6-1: 0:2 : does not exist [ 391.062235][T10973] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.772938][T12469] loop1: detected capacity change from 0 to 40427 [ 391.807513][T12469] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 391.834740][T12469] F2FS-fs (loop1): invalid crc value [ 391.877629][T12469] F2FS-fs (loop1): Found nat_bits in checkpoint [ 391.909847][ T5825] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 391.925367][ T5851] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 391.972190][ T5825] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 392.059254][ T5825] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 392.089472][T12469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 392.105607][ T5825] usb 6-1: USB disconnect, device number 12 [ 392.132160][ T5851] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.157791][ T5851] usb 8-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 392.174767][ T5851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.199082][ T5851] usb 8-1: config 0 descriptor?? [ 392.241692][ T5851] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 392.296363][ T5770] syz-executor: attempt to access beyond end of device [ 392.296363][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 392.327111][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 392.403035][T12479] loop6: detected capacity change from 0 to 32768 [ 392.444144][T12479] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2136 (12479) [ 392.486852][ T5856] usb 8-1: USB disconnect, device number 14 [ 392.548575][T12479] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 392.563665][T12479] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 392.585636][T12479] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 392.602679][T12479] BTRFS info (device loop6): trying to use backup root at mount time [ 392.611695][T12479] BTRFS info (device loop6): setting nodatasum [ 392.623815][T12479] BTRFS info (device loop6): enabling ssd optimizations [ 392.632448][T12479] BTRFS info (device loop6): using spread ssd allocation scheme [ 392.647841][T12479] BTRFS info (device loop6): turning on flush-on-commit [ 392.654877][T12479] BTRFS info (device loop6): force zlib compression, level 3 [ 392.691079][T12479] BTRFS info (device loop6): using free space tree [ 393.230444][T12511] loop5: detected capacity change from 0 to 1024 [ 393.244661][T12479] BTRFS info (device loop6): scrub: started on devid 1 [ 393.362935][T12479] BTRFS info (device loop6): scrub: finished on devid 1 with status: 0 [ 393.407644][ T28] audit: type=1800 audit(2000000119.540:93): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2142" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 393.726765][T10973] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.257560][ T28] audit: type=1326 audit(2000000120.390:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 394.355254][ T28] audit: type=1326 audit(2000000120.390:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 394.485275][ T28] audit: type=1326 audit(2000000120.430:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 394.608926][ T28] audit: type=1326 audit(2000000120.430:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 394.705414][ T28] audit: type=1326 audit(2000000120.430:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 394.797615][ T28] audit: type=1326 audit(2000000120.430:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 394.885666][ T28] audit: type=1326 audit(2000000120.430:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 394.955477][ T28] audit: type=1326 audit(2000000120.430:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 395.019681][ T28] audit: type=1326 audit(2000000120.430:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fb8d0d9c799 code=0x7ffc0000 [ 395.087619][T12553] loop5: detected capacity change from 0 to 4096 [ 395.191401][T12561] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.840469][T12572] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2167'. [ 395.870939][T12572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.958476][T12574] loop1: detected capacity change from 0 to 8192 [ 396.875608][ T5811] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 397.096737][ T5811] usb 8-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 397.116974][ T5811] usb 8-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 397.155487][ T5811] usb 8-1: config 1 interface 0 has no altsetting 0 [ 397.177703][ T5811] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.187083][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.195114][ T5811] usb 8-1: Product: syz [ 397.209670][ T5811] usb 8-1: Manufacturer: syz [ 397.214344][ T5811] usb 8-1: SerialNumber: syz [ 397.226862][T12589] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 397.234491][T12589] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 397.510082][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.553692][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.588438][ T5775] Bluetooth: hci3: Unknown advertising packet type: 0x30 [ 397.588557][ T5775] Bluetooth: hci3: adv larger than maximum supported [ 397.597574][ T5775] Bluetooth: hci3: Malformed LE Event: 0x0d [ 397.613603][ T5811] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 397.664646][ T5811] usb 8-1: USB disconnect, device number 15 [ 398.956966][T12647] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 398.967605][T12647] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 399.144769][T12655] loop1: detected capacity change from 0 to 512 [ 399.196405][T12655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.370215][T12655] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 399.433018][T12660] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 399.649770][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.875129][T12653] loop6: detected capacity change from 0 to 32768 [ 399.904006][T12653] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.2200 (12653) [ 399.957468][T12653] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 399.993917][T12653] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 400.015139][T12653] BTRFS info (device loop6): enabling disk space caching [ 400.065459][T12653] BTRFS info (device loop6): force clearing of disk cache [ 400.086158][T12653] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 400.125905][T12653] BTRFS info (device loop6): use zstd compression, level 3 [ 400.156456][T12653] BTRFS info (device loop6): disk space caching is enabled [ 400.291185][T12653] BTRFS info (device loop6): enabling ssd optimizations [ 400.318555][T12686] loop5: detected capacity change from 0 to 2048 [ 400.330718][T12653] BTRFS info (device loop6): auto enabling async discard [ 400.351149][T12653] BTRFS info (device loop6): rebuilding free space tree [ 400.426633][T12686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.438349][T12653] BTRFS info (device loop6): disabling free space tree [ 400.450123][T12653] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 400.472336][T12653] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 401.119518][T10973] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 401.150103][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.175518][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.193306][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.237494][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.274423][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.293585][T12700] loop1: detected capacity change from 0 to 4096 [ 401.300796][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.313402][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.353113][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.363399][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.401732][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.437892][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.463584][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.504808][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.541076][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 401.541091][ T28] audit: type=1800 audit(2000000127.670:105): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2212" name="file1" dev="loop1" ino=0 res=0 errno=0 [ 401.560832][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.650731][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.693115][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.711301][ T5825] hid-generic 000A:0004:0009.0011: unknown main item tag 0x0 [ 401.818654][ T5825] hid-generic 000A:0004:0009.0011: hidraw0: HID v0.04 Device [syz1] on syz0 [ 402.111653][T12710] fido_id[12710]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 402.242071][T12697] loop5: detected capacity change from 0 to 32768 [ 402.395795][ T5851] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 402.580586][T12724] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2222'. [ 402.593405][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 402.611871][ T5851] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 402.624511][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.663258][ T5851] usb 2-1: config 0 descriptor?? [ 402.685391][T12713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 403.023030][T12733] netlink: 178584 bytes leftover after parsing attributes in process `syz.5.2219'. [ 403.038274][T12733] netlink: zone id is out of range [ 403.043471][T12733] netlink: zone id is out of range [ 403.059421][T12733] netlink: zone id is out of range [ 403.064677][T12733] netlink: zone id is out of range [ 403.083356][T12733] netlink: zone id is out of range [ 403.091391][T12733] netlink: zone id is out of range [ 403.103192][T12733] netlink: zone id is out of range [ 403.110244][T12733] netlink: zone id is out of range [ 403.119182][T12733] netlink: zone id is out of range [ 403.124463][T12733] netlink: zone id is out of range [ 403.130401][ T5851] hid (null): unknown global tag 0xd [ 403.145579][ T5851] hid (null): invalid report_size 10679 [ 403.154572][T12737] "syz.6.2227" (12737) uses obsolete ecb(arc4) skcipher [ 403.155925][ T5851] hid (null): unknown global tag 0xe [ 403.181301][ T5851] uclogic 0003:5543:0064.0012: unknown main item tag 0x0 [ 403.215282][ T5851] uclogic 0003:5543:0064.0012: unknown main item tag 0x0 [ 403.241173][ T5851] uclogic 0003:5543:0064.0012: unknown main item tag 0x0 [ 403.253510][ T5851] uclogic 0003:5543:0064.0012: unknown main item tag 0x0 [ 403.270968][ T5851] uclogic 0003:5543:0064.0012: unknown main item tag 0x0 [ 403.288532][ T5851] uclogic 0003:5543:0064.0012: unknown main item tag 0x0 [ 403.308421][ T5851] uclogic 0003:5543:0064.0012: unexpected long global item [ 403.328132][ T5851] uclogic 0003:5543:0064.0012: parse failed [ 403.349134][ T5851] uclogic: probe of 0003:5543:0064.0012 failed with error -22 [ 403.377893][ T5851] usb 2-1: USB disconnect, device number 31 [ 403.545670][ T23] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 403.614030][T12750] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.720265][T12751] loop6: detected capacity change from 0 to 8192 [ 403.735331][ T23] usb 8-1: Using ep0 maxpacket: 8 [ 403.743747][ T23] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 403.753555][T12751] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 403.768776][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.778997][T12751] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 403.790211][T12751] REISERFS (device loop6): using ordered data mode [ 403.802692][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 403.811825][ T23] pvrusb2: ********** [ 403.816251][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 403.827050][ T23] pvrusb2: Important functionality might not be entirely working. [ 403.834927][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 403.838095][T12751] reiserfs: using flush barriers [ 403.846481][ T23] pvrusb2: ********** [ 403.888489][T12751] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 403.924113][T12751] REISERFS (device loop6): checking transaction log (loop6) [ 403.974148][T12751] REISERFS (device loop6): Using tea hash to sort names [ 404.011478][T12756] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2236'. [ 404.021877][T12751] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 404.060657][ T2319] pvrusb2: Invalid write control endpoint [ 404.205998][ T2319] pvrusb2: Invalid write control endpoint [ 404.224071][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 404.244177][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 404.262765][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 404.302020][ T2319] pvrusb2: Device being rendered inoperable [ 404.312593][ T5811] usb 8-1: USB disconnect, device number 16 [ 404.322197][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 404.334748][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 404.356912][ T2319] pvrusb2: Attached sub-driver cx25840 [ 404.362452][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 404.408119][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 405.477321][T12800] hugetlbfs: syz.5.2256 (12800): Using mlock ulimits for SHM_HUGETLB is obsolete [ 405.491155][T12801] loop6: detected capacity change from 0 to 512 [ 405.552817][T12801] EXT4-fs (loop6): orphan cleanup on readonly fs [ 405.586053][T12801] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 405.619336][T12801] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 405.643549][T12801] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.2257: attempt to clear invalid blocks 2 len 1 [ 405.675606][T12801] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2257: invalid indirect mapped block 1819239214 (level 0) [ 405.730512][T12801] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2257: invalid indirect mapped block 1819239214 (level 1) [ 405.765105][T12801] EXT4-fs (loop6): 1 truncate cleaned up [ 405.772881][T12801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.857882][T12801] EXT4-fs (loop6): shut down requested (2) [ 405.924501][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.115345][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 406.325377][ T5811] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 406.345402][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 406.368833][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.385590][ T9] usb 6-1: config 0 has no interface number 0 [ 406.397327][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.433002][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 406.457117][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.482812][ T9] usb 6-1: config 0 descriptor?? [ 406.504588][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 406.515880][ T5811] usb 8-1: Using ep0 maxpacket: 16 [ 406.562769][ T5811] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.594746][ T5811] usb 8-1: config 0 interface 0 has no altsetting 0 [ 406.631304][ T5811] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 406.654513][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.675898][ T5811] usb 8-1: config 0 descriptor?? [ 406.719763][ T9] usb 6-1: USB disconnect, device number 13 [ 406.801578][T12818] loop6: detected capacity change from 0 to 32768 [ 406.833281][T12818] [ 406.833281][T12818] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 406.833281][T12818] [ 406.919766][T12818] read_mapping_page failed! [ 406.924873][T12818] ERROR: (device loop6): txCommit: [ 406.924873][T12818] [ 406.956255][T12818] read_mapping_page failed! [ 406.960918][T12818] ERROR: (device loop6): txCommit: [ 406.960918][T12818] [ 407.028591][T10973] [ 407.028591][T10973] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 407.028591][T10973] [ 407.040727][T10973] [ 407.040727][T10973] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 407.040727][T10973] [ 407.119382][ T5811] mcp2221 0003:04D8:00DD.0013: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 407.235845][T12828] loop1: detected capacity change from 0 to 32768 [ 407.289582][T12828] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.2270 (12828) [ 407.368424][T12828] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 407.402944][T12828] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 407.420969][T12828] BTRFS info (device loop1): using free space tree [ 407.588308][T12828] BTRFS info (device loop1): enabling ssd optimizations [ 407.590080][T12847] loop6: detected capacity change from 0 to 2048 [ 407.603887][T12828] BTRFS info (device loop1): auto enabling async discard [ 407.621835][T12847] EXT4-fs: Ignoring removed oldalloc option [ 407.649482][ T5851] usb 8-1: USB disconnect, device number 17 [ 407.742101][T12847] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 407.776795][T12847] System zones: 0-7 [ 407.803715][T12847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.859495][T12847] EXT4-fs error (device loop6): ext4_find_extent:936: inode #2: comm syz.6.2273: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 407.935271][T12847] EXT4-fs (loop6): Remounting filesystem read-only [ 407.993798][ T5770] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 408.087181][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.395121][T12878] loop1: detected capacity change from 0 to 256 [ 409.426378][T12878] exfat: Deprecated parameter 'utf8' [ 409.502798][T12878] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 409.541164][T12869] loop5: detected capacity change from 0 to 40427 [ 409.557997][T12869] F2FS-fs (loop5): invalid crc value [ 409.577695][T12869] F2FS-fs (loop5): Found nat_bits in checkpoint [ 409.607694][T12878] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2284'. [ 409.696479][T12869] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 410.615976][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 410.758162][T12891] loop6: detected capacity change from 0 to 32768 [ 410.841461][T12891] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 410.885360][T12891] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 410.932793][T12891] BTRFS info (device loop6): setting nodatacow, compression disabled [ 410.977781][T12891] BTRFS info (device loop6): setting datasum, datacow enabled [ 410.993312][T12903] loop1: detected capacity change from 0 to 4096 [ 411.007146][T12891] BTRFS info (device loop6): force clearing of disk cache [ 411.025911][T12891] BTRFS info (device loop6): enabling ssd optimizations [ 411.032941][T12891] BTRFS info (device loop6): using spread ssd allocation scheme [ 411.127620][T12891] BTRFS info (device loop6): turning on sync discard [ 411.134402][T12891] BTRFS info (device loop6): turning off barriers [ 411.159696][T12906] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 411.188184][T12891] BTRFS info (device loop6): enabling auto defrag [ 411.225260][T12891] BTRFS info (device loop6): not using ssd optimizations [ 411.232365][T12891] BTRFS info (device loop6): not using spread ssd allocation scheme [ 411.270043][T12891] BTRFS info (device loop6): using free space tree [ 411.514204][T12924] loop1: detected capacity change from 0 to 512 [ 411.574506][T12891] BTRFS info (device loop6): rebuilding free space tree [ 411.608314][T12924] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.2296: inode has both inline data and extents flags [ 411.696104][T12924] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.2296: couldn't read orphan inode 15 (err -117) [ 411.751000][T12924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.898070][ T28] audit: type=1800 audit(2000000138.020:106): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2287" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 412.006018][T12891] BTRFS info (device loop6): balance: start -sconvert=dup,soft,limit=25769803780 [ 412.055450][T12891] BTRFS info (device loop6): balance: ended with status: 0 [ 412.083659][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.297932][T10973] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 412.622650][T12950] loop6: detected capacity change from 0 to 512 [ 412.667032][T12950] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 412.771638][T12950] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2305: invalid indirect mapped block 6684672 (level 2) [ 412.807185][T12950] EXT4-fs (loop6): 1 truncate cleaned up [ 412.814233][T12950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.983272][T12950] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.2305: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 413.045056][T12950] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 413.077782][T12958] vlan0: entered promiscuous mode [ 413.115427][T12958] bond0: entered promiscuous mode [ 413.120556][T12958] bond_slave_0: entered promiscuous mode [ 413.168579][T12958] bond_slave_1: entered promiscuous mode [ 413.332547][T12963] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2311'. [ 413.364105][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.630596][T12969] loop6: detected capacity change from 0 to 256 [ 413.672469][T12969] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 413.748288][T12969] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 413.811734][T12969] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 414.133535][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 414.282975][T12983] vlan3: entered promiscuous mode [ 414.315387][T12983] bond0: entered promiscuous mode [ 414.345976][T12983] bond_slave_0: entered promiscuous mode [ 414.358838][T12983] bond_slave_1: entered promiscuous mode [ 415.385693][T12991] loop5: detected capacity change from 0 to 32768 [ 415.477955][T12991] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 415.494304][T13020] netlink: 'syz.6.2335': attribute type 10 has an invalid length. [ 415.532797][T13020] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2335'. [ 415.725489][T12991] XFS (loop5): Ending clean mount [ 415.770666][T12991] XFS (loop5): Quotacheck needed: Please wait. [ 415.992155][T12991] XFS (loop5): Quotacheck: Done. [ 416.291354][ T8262] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 416.713815][T13052] loop5: detected capacity change from 0 to 1024 [ 417.135294][ T5825] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 417.256423][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2356'. [ 417.270389][T13067] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2356'. [ 417.315613][ T5825] usb 7-1: Using ep0 maxpacket: 8 [ 417.340718][ T5825] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.356326][ T5825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.380772][ T5825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 417.420640][ T5825] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.446677][ T5825] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.475321][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.705335][ T5825] usb 7-1: GET_CAPABILITIES returned 0 [ 417.715330][ T5825] usbtmc 7-1:16.0: can't read capabilities [ 417.740886][T13065] loop5: detected capacity change from 0 to 32768 [ 417.755397][ T5811] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 417.917207][T13056] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32 [ 417.957527][ T5811] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 417.966393][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.968444][ T5825] usb 7-1: USB disconnect, device number 14 [ 418.002234][ T5811] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.029776][ T5811] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 418.045356][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.073869][ T5811] usb 2-1: Product: syz [ 418.094181][ T5811] usb 2-1: Manufacturer: syz [ 418.104574][ T5811] usb 2-1: SerialNumber: syz [ 418.127435][ T5811] usb 2-1: config 0 descriptor?? [ 418.343581][ T9] usb 2-1: USB disconnect, device number 32 [ 418.638137][T13081] loop6: detected capacity change from 0 to 512 [ 418.659229][T13081] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 418.711448][T13081] EXT4-fs (loop6): 1 truncate cleaned up [ 418.738787][T13081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.864912][ T28] audit: type=1800 audit(2000000144.990:107): pid=13081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2363" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 419.067310][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.438737][T13101] program syz.5.2372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.295275][T13128] loop5: detected capacity change from 0 to 32768 [ 421.355596][T13128] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2380 (13128) [ 421.438164][T13128] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 421.476317][T13128] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 421.516303][T13128] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 421.553520][T13128] BTRFS info (device loop5): use zstd compression, level 3 [ 421.580878][T13128] BTRFS info (device loop5): using free space tree [ 421.665793][T13163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2389'. [ 421.809104][T13128] BTRFS info (device loop5): enabling ssd optimizations [ 421.865284][T13128] BTRFS info (device loop5): auto enabling async discard [ 422.184162][ T8262] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 422.240107][T13185] autofs4:pid:13185:autofs_fill_super: called with bogus options [ 422.415611][T11764] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (11764) [ 422.558639][T13192] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 422.594803][T13192] netlink: 'syz.1.2393': attribute type 2 has an invalid length. [ 422.729840][T13192] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 422.745699][T13192] netlink: 'syz.1.2393': attribute type 2 has an invalid length. [ 422.777220][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2395'. [ 422.895276][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2395'. [ 424.003602][T13215] loop6: detected capacity change from 0 to 8 [ 424.034827][T13215] squashfs image failed sanity check [ 424.163973][T13202] loop5: detected capacity change from 0 to 32768 [ 424.191990][ T5856] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 424.213017][ T5856] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 424.249917][ T5856] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 424.298074][ T5856] hid-generic 0006:0004:0009.0014: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 424.584789][T13221] fido_id[13221]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 425.314650][T13237] netem: change failed [ 425.554778][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2414'. [ 425.589309][T13247] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2415'. [ 425.911423][T13257] overlayfs: workdir and upperdir must reside under the same mount [ 426.704702][T13260] loop5: detected capacity change from 0 to 32768 [ 426.728354][T13260] (syz.5.2422,13260,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 426.773764][T13260] (syz.5.2422,13260,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 426.917009][T13260] JBD2: Ignoring recovery information on journal [ 427.026826][T13260] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 427.056940][ T5851] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 427.273211][ T5851] usb 8-1: Using ep0 maxpacket: 32 [ 427.290741][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.322290][ T5851] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.340174][T13287] loop1: detected capacity change from 0 to 8192 [ 427.355765][ T5851] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 427.379486][ T5851] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 427.390491][T13287] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 427.413923][ T5851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.422299][T13287] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 427.435497][T13287] REISERFS (device loop1): using ordered data mode [ 427.442895][ T5851] usb 8-1: config 0 descriptor?? [ 427.471763][T13287] reiserfs: using flush barriers [ 427.481722][T13287] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 427.499309][T13287] REISERFS (device loop1): checking transaction log (loop1) [ 427.663559][ T28] audit: type=1800 audit(2000000153.790:108): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2422" name="file1" dev="loop5" ino=16979 res=0 errno=0 [ 427.705354][T13287] REISERFS (device loop1): Using tea hash to sort names [ 427.713161][T13287] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 427.894291][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.945684][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.977963][T13273] loop6: detected capacity change from 0 to 32768 [ 428.055878][ T8262] ocfs2: Unmounting device (7,5) on (node local) [ 428.079983][ T5851] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.0015/input/input18 [ 428.226353][ T5851] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.0015/input/input19 [ 428.470734][ T5851] kye 0003:0458:5011.0015: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 428.545896][ T5851] usb 8-1: USB disconnect, device number 18 [ 428.734671][T13291] fido_id[13291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 429.169837][T13304] loop6: detected capacity change from 0 to 512 [ 429.275300][ T5851] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 429.315684][ T5811] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 429.465445][ T5851] usb 8-1: Using ep0 maxpacket: 16 [ 429.472718][T13310] kvm: kvm [13309]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 429.473045][ T5851] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.496124][ T5851] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.511777][ T5851] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 429.519994][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 429.528877][ T5851] usb 8-1: config 0 interface 0 has no altsetting 0 [ 429.548805][ T5851] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 429.564160][ T5851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.564199][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 429.601742][ T5851] usb 8-1: config 0 descriptor?? [ 429.613457][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 429.630053][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 429.671209][ T5811] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 429.698930][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.710140][ T5811] usb 6-1: Product: syz [ 429.714874][ T5811] usb 6-1: Manufacturer: syz [ 429.722315][ T5811] usb 6-1: SerialNumber: syz [ 429.732250][ T5811] usb 6-1: config 0 descriptor?? [ 429.974239][ T5811] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 430.225576][ T9] usb 6-1: USB disconnect, device number 14 [ 430.379944][ T5811] usb 8-1: USB disconnect, device number 19 [ 430.586903][T13334] autofs4:pid:13334:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32766.2895), cmd(0xc018937c) [ 430.601492][T13334] autofs4:pid:13334:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937c) [ 430.715330][ T5856] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 430.854066][T13341] loop5: detected capacity change from 0 to 512 [ 430.862299][T13341] EXT4-fs: Ignoring removed i_version option [ 430.889166][T13341] EXT4-fs: Ignoring removed bh option [ 430.906054][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 430.932222][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.947223][ T5856] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 430.956422][T13343] loop6: detected capacity change from 0 to 256 [ 430.972987][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.983912][T13343] exfat: Deprecated parameter 'utf8' [ 430.995854][T13343] exfat: Deprecated parameter 'utf8' [ 431.016486][T13341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.054820][T13341] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.066883][ T5856] usb 2-1: config 0 descriptor?? [ 431.118784][T13343] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 431.281083][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.348573][ T5856] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 431.421997][T13352] loop6: detected capacity change from 0 to 1024 [ 431.446735][T13352] EXT4-fs: Ignoring removed nobh option [ 431.466807][T13352] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 431.505766][T13352] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.2461: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 431.561903][T13352] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.2461: couldn't read orphan inode 11 (err -117) [ 431.591194][T13352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.594573][ T5856] usb 2-1: USB disconnect, device number 33 [ 431.646275][T13352] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm syz.6.2461: Invalid block bitmap block 0 in block_group 0 [ 431.683193][T13352] Quota error (device loop6): write_blk: dquota write failed [ 431.716241][T13352] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 431.789980][T13352] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.2461: Failed to acquire dquot type 0 [ 431.828987][T13359] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.2461: Invalid inode bitmap blk 137438953472 in block_group 0 [ 431.919567][ T12] EXT4-fs error (device loop6): __ext4_get_inode_loc:4489: comm kworker/u4:1: Invalid inode table block 8589934593 in block_group 0 [ 431.979323][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.346516][T13381] loop1: detected capacity change from 0 to 256 [ 432.973190][T13399] overlayfs: missing 'lowerdir' [ 433.015724][ T5856] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 433.236403][ T5856] usb 7-1: Using ep0 maxpacket: 32 [ 433.243824][ T5856] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 433.255272][ T5856] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 433.267669][T13409] loop1: detected capacity change from 0 to 1024 [ 433.276219][ T5856] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 433.302133][T13409] EXT4-fs: Ignoring removed oldalloc option [ 433.305369][ T5856] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 433.353017][T13409] EXT4-fs: Ignoring removed bh option [ 433.355419][ T5856] usb 7-1: config 0 interface 0 has no altsetting 0 [ 433.378585][ T5856] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 433.397473][ T5856] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 433.413666][T13409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 433.427487][ T5856] usb 7-1: Product: syz [ 433.431729][ T5856] usb 7-1: Manufacturer: syz [ 433.444825][ T5856] usb 7-1: SerialNumber: syz [ 433.461092][T13409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.477422][ T5856] usb 7-1: config 0 descriptor?? [ 433.491089][ T5856] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 433.514956][ T5856] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 433.651226][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.023077][ T5825] usb 7-1: USB disconnect, device number 15 [ 434.044398][ T5825] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 434.106097][ T5811] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 434.324970][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 434.344009][ T5811] usb 2-1: not running at top speed; connect to a high speed hub [ 434.357101][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.375612][ T5811] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.396779][ T5811] usb 2-1: string descriptor 0 read error: -22 [ 434.403156][ T5811] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 434.412883][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.440124][ T5811] usb 2-1: 0:2 : does not exist [ 434.733785][T13432] loop5: detected capacity change from 0 to 64 [ 434.773513][T13432] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 434.915659][T13435] loop6: detected capacity change from 0 to 256 [ 435.303039][ T5811] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 435.327204][ T5811] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 435.362306][ T5811] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 435.410743][ T5811] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 435.445953][ T5811] usb 2-1: USB disconnect, device number 34 [ 435.946565][T13451] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2502'. [ 435.956577][T13451] bridge_slave_0: left allmulticast mode [ 435.962590][T13451] bridge_slave_0: left promiscuous mode [ 435.971552][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.055698][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2503'. [ 436.493064][T13463] loop6: detected capacity change from 0 to 8192 [ 436.545383][T13463] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 436.594687][T13463] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 436.635536][T13463] REISERFS (device loop6): using ordered data mode [ 436.642123][T13463] reiserfs: using flush barriers [ 436.698179][T13463] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 436.732810][T13470] loop5: detected capacity change from 0 to 164 [ 436.784332][T13463] REISERFS (device loop6): checking transaction log (loop6) [ 437.040648][T13473] loop5: detected capacity change from 0 to 1024 [ 437.123945][T13473] hfsplus: bad catalog entry type [ 437.129541][T13463] REISERFS (device loop6): Using tea hash to sort names [ 437.166138][T13463] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 437.230343][ T12] hfsplus: b-tree write err: -5, ino 25 [ 437.262984][ T12] hfsplus: b-tree write err: -5, ino 4 [ 437.289262][ T12] hfsplus: b-tree write err: -5, ino 2 [ 437.317527][ T12] hfsplus: b-tree write err: -5, ino 26 [ 437.592842][T13476] loop5: detected capacity change from 0 to 4096 [ 438.021305][ T5811] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 438.238446][ T5811] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 438.258301][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.296057][ T5811] usb 2-1: config 0 descriptor?? [ 438.314127][ T5811] cp210x 2-1:0.0: cp210x converter detected [ 438.558655][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2520'. [ 438.575866][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2520'. [ 438.655528][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 438.729666][ T5811] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 438.740078][ T5811] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 438.768658][ T5811] usb 2-1: cp210x converter now attached to ttyUSB0 [ 438.846009][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 438.853812][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 438.863191][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.886909][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 438.912132][ T9] pvrusb2: ********** [ 438.926989][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 438.938835][ T9] pvrusb2: Important functionality might not be entirely working. [ 438.947438][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 438.959239][ T9] pvrusb2: ********** [ 438.991242][ T23] usb 2-1: USB disconnect, device number 35 [ 439.011034][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 439.035996][ T23] cp210x 2-1:0.0: device disconnected [ 439.116023][ T2319] pvrusb2: Invalid write control endpoint [ 439.226639][ T2319] pvrusb2: Invalid write control endpoint [ 439.232636][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 439.242959][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 439.250661][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 439.261097][ T2319] pvrusb2: Device being rendered inoperable [ 439.277731][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 439.302471][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 439.333015][ T2319] pvrusb2: Attached sub-driver cx25840 [ 439.347723][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 439.375288][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 439.389250][T13488] pvrusb2: Attempted to execute control transfer when device not ok [ 439.408829][ T23] usb 7-1: USB disconnect, device number 16 [ 440.203481][T13517] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input20 [ 440.413455][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.420194][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.808631][T13512] loop5: detected capacity change from 0 to 40427 [ 440.844840][T13512] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 440.858356][T13512] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 440.884322][T13512] F2FS-fs (loop5): invalid crc value [ 440.939443][T13512] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 441.077471][T13512] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 441.093627][T13512] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 441.390446][T13524] loop6: detected capacity change from 0 to 32768 [ 441.807680][T13543] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffe [ 442.491860][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 442.683598][T13566] loop1: detected capacity change from 0 to 64 [ 442.928052][T13568] loop5: detected capacity change from 0 to 64 [ 443.283734][T13558] loop6: detected capacity change from 0 to 32768 [ 443.408808][T13558] JBD2: Ignoring recovery information on journal [ 443.467496][T13558] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 444.053999][T10973] ocfs2: Unmounting device (7,6) on (node local) [ 444.223786][T13599] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2565'. [ 444.566500][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2567'. [ 445.575433][T13617] loop5: detected capacity change from 0 to 32768 [ 445.666502][T13611] loop1: detected capacity change from 0 to 40427 [ 445.675732][T13615] loop6: detected capacity change from 0 to 32768 [ 445.703990][T13611] F2FS-fs (loop1): heap/no_heap options were deprecated [ 445.717153][T13611] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 445.735684][T13611] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x77e8c [ 445.771473][T13615] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 445.789042][T13611] F2FS-fs (loop1): invalid crc value [ 445.828604][T13611] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 445.883789][T13611] F2FS-fs (loop1): Found nat_bits in checkpoint [ 446.010533][T13615] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 446.029723][T13611] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 446.115512][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 446.146158][T13615] XFS (loop6): Starting recovery (logdev: internal) [ 446.235414][T13611] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 446.254231][T13615] XFS (loop6): Ending recovery (logdev: internal) [ 446.471892][T13611] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 446.610732][T10973] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 446.658930][ T5770] syz-executor: attempt to access beyond end of device [ 446.658930][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 446.715486][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 447.700937][T13643] loop5: detected capacity change from 0 to 40427 [ 447.733498][T13643] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 447.756168][T13643] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 447.764928][T13655] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.784636][T13643] F2FS-fs (loop5): invalid crc value [ 447.811485][T13643] F2FS-fs (loop5): Found nat_bits in checkpoint [ 447.913369][T13667] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.920876][T13667] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.962645][T13643] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 447.991537][T13643] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 448.160095][T13655] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.205022][T13672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2590'. [ 448.354673][T13655] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.571103][T13655] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.873784][T13655] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.929456][T13655] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.979357][T13655] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.017618][T13655] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.608452][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2597'. [ 449.945488][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 450.146030][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 450.155716][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.171319][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.192183][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.203314][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.226108][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.252133][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.261985][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.272643][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.284911][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.293698][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.304715][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.317434][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.326612][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.336453][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.357538][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.369152][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.381869][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.393590][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.402735][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.412405][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.438054][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.447074][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.463479][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.479676][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 450.510108][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 450.523895][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 450.537137][ T9] usb 2-1: Product: syz [ 450.548067][ T9] usb 2-1: Manufacturer: syz [ 450.556747][ T9] usb 2-1: SerialNumber: syz [ 450.577253][ T9] usb 2-1: config 0 descriptor?? [ 450.588348][ T9] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 450.865953][T13713] netlink: 'syz.5.2606': attribute type 9 has an invalid length. [ 450.964075][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 450.982678][ T5811] usb 2-1: USB disconnect, device number 36 [ 451.004058][ T5811] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 451.180325][T13720] loop5: detected capacity change from 0 to 512 [ 451.259747][T13720] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 451.280837][T13720] System zones: 0-2, 18-18, 34-35 [ 451.343544][T13720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.400062][T13720] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.618422][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.634383][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 453.421724][T13756] loop1: detected capacity change from 0 to 32768 [ 453.550152][T13756] read_mapping_page failed! [ 453.554803][T13756] ERROR: (device loop1): txCommit: [ 453.554803][T13756] [ 453.808447][T13766] loop5: detected capacity change from 0 to 32768 [ 453.929734][T13766] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 454.052963][T13766] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 454.125449][ T27] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 454.156769][T13766] XFS (loop5): Starting recovery (logdev: internal) [ 454.223873][T13766] XFS (loop5): Ending recovery (logdev: internal) [ 454.338489][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 454.363879][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 454.390397][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 454.409940][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 454.444079][ T27] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 454.457978][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.467848][ T8262] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 454.488239][ T27] usb 7-1: Product: syz [ 454.503252][ T27] usb 7-1: Manufacturer: syz [ 454.525560][ T27] usb 7-1: SerialNumber: syz [ 454.559093][ T27] usb 7-1: config 0 descriptor?? [ 454.809232][ T27] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 454.902292][T13793] loop5: detected capacity change from 0 to 256 [ 454.929280][ T28] audit: type=1800 audit(2000000438.060:109): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2634" name="bus" dev="loop5" ino=1048691 res=0 errno=0 [ 455.003217][T13793] Invalid ELF header magic: != ELF [ 455.060702][T13772] usb 7-1: Couldn't submit interrupt_out_urb -90 [ 455.083086][ T5811] usb 7-1: USB disconnect, device number 17 [ 455.862965][T13814] loop5: detected capacity change from 0 to 256 [ 455.920614][T13814] exfat: Deprecated parameter 'namecase' [ 455.989394][T13814] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 456.355118][ T28] audit: type=1326 audit(2000000439.470:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.5.2648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x0 [ 456.706488][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2650'. [ 456.920149][T13812] loop6: detected capacity change from 0 to 40427 [ 456.965371][T13812] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 456.975945][T13812] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 456.994170][T13812] F2FS-fs (loop6): invalid crc value [ 457.008322][T13812] F2FS-fs (loop6): Found nat_bits in checkpoint [ 457.068654][T13812] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 457.082934][T13812] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 457.486671][T13844] bond1: entered promiscuous mode [ 458.266348][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2662'. [ 458.300752][T13861] netlink: 'syz.7.2662': attribute type 14 has an invalid length. [ 458.319388][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2662'. [ 458.503180][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2664'. [ 458.523183][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2664'. [ 458.558624][T13853] loop5: detected capacity change from 0 to 32768 [ 458.623120][T13853] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 458.625048][ T27] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 458.700865][T13876] loop6: detected capacity change from 0 to 4096 [ 458.775758][T13876] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 458.827839][ T27] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 458.836550][ T27] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 458.855253][ T27] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 458.878414][ T27] usb 2-1: config 220 has no interface number 2 [ 458.884820][ T27] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 458.900241][T13876] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096) [ 458.909863][ T27] usb 2-1: config 220 interface 0 has no altsetting 0 [ 458.909903][ T27] usb 2-1: config 220 interface 76 has no altsetting 0 [ 458.909923][ T27] usb 2-1: config 220 interface 1 has no altsetting 0 [ 458.918405][ T27] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 458.962444][T13882] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.980592][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.989500][ T27] usb 2-1: Product: syz [ 458.993740][ T27] usb 2-1: Manufacturer: syz [ 458.998419][T13853] XFS (loop5): Ending clean mount [ 459.019794][ T27] usb 2-1: SerialNumber: syz [ 459.269828][ T8262] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 459.290139][ T27] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 459.310913][ T27] usb 2-1: No valid video chain found. [ 459.328404][ T27] usb 2-1: selecting invalid altsetting 0 [ 459.386986][ T27] usb 2-1: selecting invalid altsetting 0 [ 459.392860][ T27] usbtest: probe of 2-1:220.1 failed with error -22 [ 459.427057][ T27] usb 2-1: USB disconnect, device number 37 [ 459.593471][T13889] loop6: detected capacity change from 0 to 2364 [ 459.755425][ T5851] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 459.945743][ T5851] usb 8-1: Using ep0 maxpacket: 16 [ 459.953567][ T5851] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 459.989812][ T5851] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.031374][ T5851] usb 8-1: config 0 descriptor?? [ 460.060116][ T5851] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 460.572537][T13913] loop5: detected capacity change from 0 to 512 [ 460.581561][T13913] EXT4-fs: Ignoring removed i_version option [ 460.620178][T13915] program syz.6.2682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.667340][T13913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.744969][T13913] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.871918][ T28] audit: type=1800 audit(2000000444.000:111): pid=13913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2681" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 460.905238][ T5851] gspca_sonixj: reg_r err -71 [ 460.910085][ T5851] sonixj: probe of 8-1:0.0 failed with error -71 [ 460.960946][ T5851] usb 8-1: USB disconnect, device number 20 [ 461.102500][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.403290][T13937] loop1: detected capacity change from 0 to 256 [ 461.421624][T13937] exfat: Deprecated parameter 'namecase' [ 461.451398][T13937] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 462.457466][T13968] bond1: entered promiscuous mode [ 463.029966][T13984] loop1: detected capacity change from 0 to 64 [ 463.804734][T14007] program syz.5.2722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.115332][ T5816] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 464.131556][T13993] loop1: detected capacity change from 0 to 40427 [ 464.177508][T13993] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 464.201475][T13993] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 464.210990][T13993] F2FS-fs (loop1): Image doesn't support compression [ 464.221916][T13993] F2FS-fs (loop1): invalid crc value [ 464.231387][T13993] F2FS-fs (loop1): Found nat_bits in checkpoint [ 464.323464][T14003] loop6: detected capacity change from 0 to 32768 [ 464.335348][ T5816] usb 8-1: Using ep0 maxpacket: 16 [ 464.353672][T13993] F2FS-fs (loop1): Start checkpoint disabled! [ 464.357123][ T5816] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 464.398353][T13993] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 464.398884][ T5816] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 464.464398][ T28] audit: type=1804 audit(2000000447.590:112): pid=13993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2716" name="/newroot/698/bus/file1" dev="loop1" ino=10 res=1 errno=0 [ 464.495612][T14003] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 464.516367][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.577424][ T5816] usb 8-1: Product: syz [ 464.581669][ T5816] usb 8-1: Manufacturer: syz [ 464.595917][ T5816] usb 8-1: SerialNumber: syz [ 464.639492][ T5816] usb 8-1: config 0 descriptor?? [ 464.665105][T14003] XFS (loop6): Ending clean mount [ 464.708635][ T5816] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 464.734279][T14003] XFS (loop6): Quotacheck needed: Please wait. [ 464.777106][ T5816] usb 8-1: Detected FT232R [ 465.001718][T14003] XFS (loop6): Quotacheck: Done. [ 465.030427][ T5816] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 465.287783][ T5816] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 465.315382][ T49] kworker/u4:3: attempt to access beyond end of device [ 465.315382][ T49] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 465.406151][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 465.413108][ T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 465.462484][T10973] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 465.599347][ T5816] usb 8-1: USB disconnect, device number 21 [ 465.642351][ T5816] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 465.695431][ T5816] ftdi_sio 8-1:0.0: device disconnected [ 465.730672][T14021] loop5: detected capacity change from 0 to 131072 [ 465.774649][T14021] F2FS-fs (loop5): invalid crc value [ 465.808971][T14021] F2FS-fs (loop5): Found nat_bits in checkpoint [ 465.865943][T14021] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 465.889539][T14021] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36 [ 467.033893][T14040] loop1: detected capacity change from 0 to 4096 [ 467.387707][T14035] loop5: detected capacity change from 0 to 32768 [ 467.435898][T14035] [ 467.435898][T14035] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 467.435898][T14035] [ 468.032577][ T8262] [ 468.032577][ T8262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 468.032577][ T8262] [ 468.068407][ T8262] [ 468.068407][ T8262] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 468.068407][ T8262] [ 468.522277][T14064] loop5: detected capacity change from 0 to 4096 [ 468.712294][T14072] loop1: detected capacity change from 0 to 512 [ 468.773723][T14072] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 468.839754][T14072] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 468.869695][T14072] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 468.915491][T14072] System zones: 0-2, 18-18, 34-35 [ 468.936573][T14072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.118804][T14072] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 469.200922][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.350893][T14091] loop6: detected capacity change from 0 to 256 [ 469.370964][T14092] loop1: detected capacity change from 0 to 1024 [ 469.378971][T14091] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 469.452107][T14092] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 469.543779][T14092] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 469.580072][T14092] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.2752: Failed to acquire dquot type 0 [ 469.622486][T14092] EXT4-fs error (device loop1): mb_free_blocks:1952: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 469.673082][T14092] EXT4-fs (loop1): 1 truncate cleaned up [ 469.696819][T14092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.720149][T14100] loop6: detected capacity change from 0 to 256 [ 469.747138][T14092] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 469.773724][T14092] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 469.785021][T14100] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.823205][T14092] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.2752: Failed to acquire dquot type 0 [ 469.862720][ T28] audit: type=1800 audit(2000000452.990:113): pid=14100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2757" name="file1" dev="loop6" ino=1048694 res=0 errno=0 [ 469.969236][ T28] audit: type=1800 audit(2000000453.040:114): pid=14100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2757" name="file1" dev="loop6" ino=1048694 res=0 errno=0 [ 470.009548][ T11] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 470.046504][ T11] FAT-fs (loop6): Filesystem has been set read-only [ 470.066960][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.076523][ T11] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 470.107106][T12305] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 470.144415][T12305] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 470.174599][T14102] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.600800][ T5816] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 470.805338][ T5816] usb 6-1: Using ep0 maxpacket: 16 [ 470.812729][ T5816] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 470.824781][ T5816] usb 6-1: config 0 has no interface number 0 [ 470.831174][ T5816] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 470.863200][ T5816] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 470.873535][ T5811] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 470.897547][ T5816] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 470.923089][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 470.947646][ T5816] usb 6-1: Product: syz [ 470.952475][ T5816] usb 6-1: SerialNumber: syz [ 470.973609][ T5816] usb 6-1: config 0 descriptor?? [ 470.983788][ T5816] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 471.013662][ T5816] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input22 [ 471.077629][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.095256][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.114397][ T5811] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 471.148118][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.160866][ T5811] usb 2-1: config 0 descriptor?? [ 471.335582][ T5816] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 471.437637][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.448420][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.455660][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.463334][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.470674][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.477826][ T5856] usb 6-1: USB disconnect, device number 15 [ 471.484984][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 471.491991][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 471.520389][ T5856] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 471.545621][ T5816] usb 7-1: Using ep0 maxpacket: 16 [ 471.567004][ T5816] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.598539][ T5816] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.623940][ T5816] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.635985][ T5811] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 471.642859][ T5811] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 471.658296][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.673442][ T5811] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 471.680757][ T5816] usb 7-1: Product: syz [ 471.685066][ T5816] usb 7-1: Manufacturer: syz [ 471.697980][ T5811] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 471.708016][ T5816] usb 7-1: SerialNumber: syz [ 471.714033][ T5811] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 471.742492][ T5811] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 471.759668][ T5811] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 471.777975][ T5811] arvo 0003:1E7D:30D4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 471.953569][ T5816] usb 7-1: 0:2 : does not exist [ 471.985898][ T5816] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 472.089051][ T5816] usb 7-1: USB disconnect, device number 18 [ 472.173256][T11764] udevd[11764]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.198192][ T5811] usb 2-1: USB disconnect, device number 38 [ 473.728118][ T5816] kernel write not supported for file /input/mouse0 (pid: 5816 comm: kworker/0:5) [ 473.939689][T14171] loop6: detected capacity change from 0 to 4096 [ 474.878315][T14192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 474.915417][T14192] netlink: 'syz.1.2799': attribute type 6 has an invalid length. [ 475.080000][ T5816] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 475.295652][ T5816] usb 7-1: Using ep0 maxpacket: 32 [ 475.307030][ T5816] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 475.325206][ T5816] usb 7-1: config 2 has no interface number 0 [ 475.341730][ T5816] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 475.364077][ T5816] usb 7-1: config 2 interface 88 has no altsetting 0 [ 475.384029][ T5816] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 475.414153][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.424284][ T5816] usb 7-1: Product: syz [ 475.433156][ T5816] usb 7-1: Manufacturer: syz [ 475.448728][ T5816] usb 7-1: SerialNumber: syz [ 475.476421][T14190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 475.754990][T14190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 475.892537][T14196] loop1: detected capacity change from 0 to 40427 [ 475.930831][T14196] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 475.964055][T14196] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 476.005379][T14196] F2FS-fs (loop1): invalid crc value [ 476.037480][T14196] F2FS-fs (loop1): Found nat_bits in checkpoint [ 476.164323][T14196] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 476.185260][T14196] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 476.394636][ T5816] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 476.418527][ T5816] asix: probe of 7-1:2.88 failed with error -71 [ 476.429519][ T5770] syz-executor: attempt to access beyond end of device [ 476.429519][ T5770] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 476.453280][ T5816] usb 7-1: USB disconnect, device number 19 [ 476.481237][ T5770] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 476.661921][T14205] loop5: detected capacity change from 0 to 32768 [ 476.752430][T14205] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 476.870902][T14205] XFS (loop5): Ending clean mount [ 476.881514][T14205] XFS (loop5): Quotacheck needed: Please wait. [ 476.984687][T14205] XFS (loop5): Quotacheck: Done. [ 477.226378][ T8262] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 477.878669][T14242] netlink: 'syz.6.2816': attribute type 29 has an invalid length. [ 477.897292][T14242] netlink: 'syz.6.2816': attribute type 29 has an invalid length. [ 477.925436][T14242] netlink: 'syz.6.2816': attribute type 29 has an invalid length. [ 478.576874][T14238] loop5: detected capacity change from 0 to 32768 [ 478.647335][T14238] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 478.692886][T14236] loop1: detected capacity change from 0 to 32768 [ 478.767739][T14236] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 478.795934][T14238] XFS (loop5): Ending clean mount [ 478.888849][T14238] XFS (loop5): Quotacheck needed: Please wait. [ 479.040241][T14238] XFS (loop5): Quotacheck: Done. [ 479.179116][T14236] XFS (loop1): Ending clean mount [ 479.296698][ T8262] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 479.676044][ T5770] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 480.341651][T14297] loop6: detected capacity change from 0 to 1764 [ 480.462110][T14298] loop1: detected capacity change from 0 to 4096 [ 480.507026][T14298] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.575034][T14298] EXT4-fs (loop1): Test dummy encryption mode enabled [ 480.602731][T14298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.737564][T14307] loop6: detected capacity change from 0 to 512 [ 480.764026][T14288] loop5: detected capacity change from 0 to 32768 [ 480.775335][T14307] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 480.830199][T14288] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 480.847193][T14307] EXT4-fs (loop6): 1 truncate cleaned up [ 480.901916][T14307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.973671][T14298] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 481.011857][T14288] XFS (loop5): Ending clean mount [ 481.062202][T14288] XFS (loop5): Quotacheck needed: Please wait. [ 481.131608][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.284981][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.342342][T14288] XFS (loop5): Quotacheck: Done. [ 481.534393][ T8262] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 481.817562][T14332] loop1: detected capacity change from 0 to 128 [ 481.857629][T14332] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 481.899874][T14332] ext4 filesystem being mounted at /720/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 482.104821][T14332] fscrypt (loop1, inode 12): Unsupported encryption flags (0x10) [ 482.230456][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 482.685243][ T27] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 482.848374][T14357] loop6: detected capacity change from 0 to 1024 [ 482.865369][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 482.886917][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 482.909222][T14357] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 482.909271][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.938476][T14357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.984224][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2852'. [ 483.037087][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 483.057220][T14363] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2851'. [ 483.076263][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 483.097858][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.111262][T14357] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2850: bg 0: block 88: padding at end of block bitmap is not set [ 483.133446][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 483.153147][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.330403][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.414413][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 483.445591][ T27] usbtmc 2-1:16.0: can't read capabilities [ 483.672689][ T27] usb 2-1: USB disconnect, device number 39 [ 483.724701][T14365] loop5: detected capacity change from 0 to 32768 [ 483.788459][T14365] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 483.800461][T14365] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 483.880960][T14365] XFS (loop5): Ending clean mount [ 483.895501][T14365] XFS (loop5): Quotacheck needed: Please wait. [ 483.940340][ T12] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 483.991641][ T12] XFS (loop5): Unmount and run xfs_repair [ 484.013765][ T12] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 484.036736][ T12] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 484.056217][ T12] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 484.075227][ T12] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 484.091728][ T12] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 484.124504][ T12] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 484.145709][ T12] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 484.171432][ T12] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 484.200219][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 484.218048][ T12] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 484.236710][T14365] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 484.415213][ T28] audit: type=1800 audit(2000000467.540:115): pid=14365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2853" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 484.501686][ T28] audit: type=1800 audit(2000000467.540:116): pid=14365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2853" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 484.679798][T14400] loop6: detected capacity change from 0 to 512 [ 484.696553][T14400] EXT4-fs: Ignoring removed nobh option [ 484.718319][ T8262] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 484.809138][T14400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.876345][T14400] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 485.105779][ T5825] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 485.113675][T14400] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.2865: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 485.222494][T14408] loop1: detected capacity change from 0 to 2048 [ 485.270511][T14408] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.299988][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.332328][ T5825] usb 8-1: Using ep0 maxpacket: 8 [ 485.354345][ T5825] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.381504][ T5825] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.445294][ T5825] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.462314][ T5825] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.476912][ T5825] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.527512][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.572622][T14413] loop6: detected capacity change from 0 to 256 [ 485.831907][ T5825] usb 8-1: GET_CAPABILITIES returned 0 [ 485.855256][ T5825] usbtmc 8-1:16.0: can't read capabilities [ 486.073281][ T5825] usb 8-1: USB disconnect, device number 22 [ 486.085424][ T5816] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 486.275732][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 486.283351][ T5816] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.309714][ T5816] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.336096][ T5816] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.365907][ T5816] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.393782][ T5816] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 486.404841][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.674830][ T5816] usb 6-1: GET_CAPABILITIES returned 0 [ 486.691008][ T5816] usbtmc 6-1:16.0: can't read capabilities [ 486.936924][ T5816] usb 6-1: USB disconnect, device number 16 [ 487.562544][T14427] loop1: detected capacity change from 0 to 131072 [ 487.575681][T14427] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 487.582454][T14427] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 487.595724][T14427] F2FS-fs (loop1): invalid crc value [ 487.644815][T14427] F2FS-fs (loop1): Found nat_bits in checkpoint [ 487.746408][T14429] loop6: detected capacity change from 0 to 32768 [ 487.752935][T14427] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 487.760157][T14427] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 488.706592][T14448] loop6: detected capacity change from 0 to 8192 [ 489.058007][T14452] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2887'. [ 489.089124][T14452] netem: unknown loss type 0 [ 489.094781][T14452] netem: change failed [ 489.487336][T14464] loop5: detected capacity change from 0 to 256 [ 489.501141][T14466] bridge_slave_0: default FDB implementation only supports local addresses [ 489.580597][T14464] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 489.929284][T14479] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2896'. [ 490.441284][T14497] loop6: detected capacity change from 0 to 8 [ 490.693366][T14505] dummy0: entered promiscuous mode [ 490.709495][T14505] dummy0: left promiscuous mode [ 491.804356][T14519] loop6: detected capacity change from 0 to 32768 [ 491.835587][T14519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2915 (14519) [ 491.882053][T14519] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 491.906942][T14519] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 491.926394][T14519] BTRFS info (device loop6): using free space tree [ 492.046817][T14519] BTRFS info (device loop6): enabling ssd optimizations [ 492.074233][T14519] BTRFS info (device loop6): auto enabling async discard [ 492.283523][T14543] fs-verity: sha512 using implementation "sha512-avx2" [ 492.299369][T14543] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4) [ 492.534960][T10973] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.413802][T14575] loop1: detected capacity change from 0 to 40427 [ 494.442866][T14575] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 494.467236][T14575] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 494.503244][T14575] F2FS-fs (loop1): invalid crc value [ 494.547078][T14575] F2FS-fs (loop1): Found nat_bits in checkpoint [ 494.732160][T14575] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 494.752094][T14575] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 495.199899][T14579] loop6: detected capacity change from 0 to 40427 [ 495.255391][T14579] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x7ffff [ 495.263804][T14579] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4 [ 495.312640][T14579] F2FS-fs (loop6): invalid crc value [ 495.358523][T14579] F2FS-fs (loop6): Found nat_bits in checkpoint [ 495.473737][T14579] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 495.553931][T14579] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 495.754776][T14579] F2FS-fs (loop6): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 496.004024][T14589] loop5: detected capacity change from 0 to 40427 [ 496.062316][T14589] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x7ffff [ 496.085797][T14589] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0xe4 [ 496.118931][T14589] F2FS-fs (loop5): invalid crc value [ 496.170629][T14589] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 496.267291][T14606] tap0: tun_chr_ioctl cmd 1074025677 [ 496.272851][T14606] tap0: linktype set to 805 [ 496.445837][T14589] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 496.609623][T14589] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910 [ 496.658279][T14589] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 497.006024][ T5856] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 497.102082][T14618] netlink: 'syz.7.2946': attribute type 2 has an invalid length. [ 497.199224][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.214495][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.225571][ T5856] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 497.234763][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.284074][ T5856] usb 2-1: config 0 descriptor?? [ 497.593346][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2952'. [ 497.626055][T14632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2951'. [ 497.737464][ T5856] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 497.744522][ T5856] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 497.780543][ T5856] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 497.791434][ T5856] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 497.801383][ T5856] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 497.814493][ T5856] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 497.832390][ T5856] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 497.873500][ T5856] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 497.892261][T14638] loop5: detected capacity change from 0 to 2048 [ 497.985835][ T5856] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE [ 498.024662][T14638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.186791][ T5856] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 498.214472][ T5856] cp2112: probe of 0003:10C4:EA90.0018 failed with error -71 [ 498.232885][ T5856] usb 2-1: USB disconnect, device number 40 [ 498.410973][T14643] loop6: detected capacity change from 0 to 4096 [ 498.810670][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2961'. [ 499.770398][T14677] pim6reg: tun_chr_ioctl cmd 1074812118 [ 499.835417][ T5856] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 500.037463][ T5856] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 500.046885][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.101742][ T5856] usb 2-1: config 0 descriptor?? [ 500.123221][ T5856] cp210x 2-1:0.0: cp210x converter detected [ 500.141972][T14689] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2978'. [ 500.550934][ T5856] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 500.560740][T14703] loop5: detected capacity change from 0 to 256 [ 500.772293][ T5856] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 500.801738][ T5856] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 500.842613][ T5856] usb 2-1: cp210x converter now attached to ttyUSB0 [ 500.877523][ T5856] usb 2-1: USB disconnect, device number 41 [ 500.917536][ T5856] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 500.946649][ T5856] cp210x 2-1:0.0: device disconnected [ 500.967165][ T28] audit: type=1326 audit(2000000484.080:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14709 comm="syz.5.2988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d9c799 code=0x0 [ 501.853028][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.859581][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.954662][T14735] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3000'. [ 502.392427][T14745] can0: slcan on ptm0. [ 502.646966][T14744] can0 (unregistered): slcan off ptm0. [ 502.729928][ T28] audit: type=1326 audit(2000000485.850:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.3007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f746919c799 code=0x0 [ 502.846121][T14752] loop5: detected capacity change from 0 to 4096 [ 502.871933][T14761] net_ratelimit: 52 callbacks suppressed [ 502.871949][T14761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.622504][T14784] loop5: detected capacity change from 0 to 40427 [ 504.658373][T14784] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 504.693463][T14784] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 504.746572][T14784] F2FS-fs (loop5): Found nat_bits in checkpoint [ 504.937962][T14784] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 504.956826][T14784] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 505.096703][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3022'. [ 505.663153][T14831] pimreg: entered allmulticast mode [ 505.722283][T14831] pimreg: left allmulticast mode [ 505.991681][T14843] program syz.7.3034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.003914][T14845] syz_tun: entered allmulticast mode [ 506.014210][T14842] syz_tun: left allmulticast mode [ 506.210103][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3037'. [ 506.238069][T14849] cgroup: Need name or subsystem set [ 506.247159][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3037'. [ 506.446628][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3040'. [ 506.505470][T14860] program syz.1.3041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 506.572690][T14863] loop5: detected capacity change from 0 to 512 [ 506.692474][T14863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.765533][T14863] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.909947][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.993734][T14874] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 507.057923][T14874] team0: Port device batadv1 added [ 507.355021][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3054'. [ 507.615306][ T5825] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 507.807782][ T5825] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 507.826341][ T5825] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 507.827692][T14878] loop6: detected capacity change from 0 to 40427 [ 507.841900][ T5825] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 507.866357][ T5825] usb 2-1: config 220 has no interface number 2 [ 507.890571][T14878] F2FS-fs (loop6): invalid crc value [ 507.894171][ T5825] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 507.938183][T14878] F2FS-fs (loop6): Found nat_bits in checkpoint [ 507.938334][ T5825] usb 2-1: config 220 interface 0 has no altsetting 0 [ 507.981172][ T5825] usb 2-1: config 220 interface 76 has no altsetting 0 [ 507.999853][ T5825] usb 2-1: config 220 interface 1 has no altsetting 0 [ 508.026453][ T5825] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 508.046549][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.054791][ T5825] usb 2-1: Product: syz [ 508.076955][ T5825] usb 2-1: Manufacturer: syz [ 508.084540][ T5825] usb 2-1: SerialNumber: syz [ 508.129327][T14878] F2FS-fs (loop6): Start checkpoint disabled! [ 508.165295][T14878] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 508.191682][ T5856] IPVS: starting estimator thread 0... [ 508.295857][T14903] IPVS: using max 19 ests per chain, 45600 per kthread [ 508.321497][ T5825] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 508.351383][ T5825] usb 2-1: No valid video chain found. [ 508.371740][ T5825] usb 2-1: selecting invalid altsetting 0 [ 508.419881][ T5825] usb 2-1: selecting invalid altsetting 0 [ 508.433820][ T5825] usbtest: probe of 2-1:220.1 failed with error -22 [ 508.454401][ T5825] usb 2-1: USB disconnect, device number 42 [ 508.527180][ T33] kworker/u4:2: attempt to access beyond end of device [ 508.527180][ T33] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 508.548610][ T33] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 508.566537][ T33] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 509.061631][T14915] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 509.075738][ T5825] IPVS: starting estimator thread 0... [ 509.175441][T14916] IPVS: using max 19 ests per chain, 45600 per kthread [ 509.305488][T14923] netlink: 'syz.6.3067': attribute type 10 has an invalid length. [ 509.329934][T14923] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.351760][T14923] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.359078][T14923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.420029][T14923] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 509.438379][T14927] veth1_vlan: left allmulticast mode [ 509.444531][T14927] macvlan0: entered promiscuous mode [ 509.453546][T14927] macvlan0: left allmulticast mode [ 509.480213][T14927] netlink: 'syz.1.3069': attribute type 1 has an invalid length. [ 509.495655][T14927] netlink: 'syz.1.3069': attribute type 2 has an invalid length. [ 510.216798][T14953] xt_hashlimit: size too large, truncated to 1048576 [ 510.588711][T14960] loop6: detected capacity change from 0 to 2048 [ 510.644811][T14935] loop1: detected capacity change from 0 to 32768 [ 510.673932][T14960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.869793][T14960] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 510.924405][T14960] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 510.961281][T14960] EXT4-fs (loop6): This should not happen!! Data will be lost [ 510.961281][T14960] [ 511.015664][T14960] EXT4-fs (loop6): Total free blocks count 0 [ 511.047419][T14960] EXT4-fs (loop6): Free/Dirty block details [ 511.053645][T14960] EXT4-fs (loop6): free_blocks=2415919504 [ 511.095701][T14960] EXT4-fs (loop6): dirty_blocks=16 [ 511.111256][T14960] EXT4-fs (loop6): Block reservation details [ 511.147516][T14960] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 511.297753][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.341585][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 511.393992][T14970] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3087'. [ 511.714152][T14975] fuse: Unknown parameter ' [ 511.714152][T14975] TracerPid: 0 [ 511.714152][T14975] Uid: 0 0 0 0 [ 511.714152][T14975] Gid: 0 0 0 0 [ 511.714152][T14975] FDSize: 256 [ 511.714152][T14975] Groups: 0 10 [ 511.714152][T14975] NStgid: 1638 [ 511.714152][T14975] NSpid: 1639 [ 511.714152][T14975] NSpgid: 1638 [ 511.714152][T14975] NSsid: 0 [ 511.714152][T14975] Kthread: 0 [ 511.714152][T14975] VmPeak: 104268 kB [ 511.714152][T14975] VmSize: 104268 kB [ 511.714152][T14975] VmLck: 0 kB [ 511.714152][T14975] VmPin: 0 kB [ 511.714152][T14975] VmHWM: 24100 kB [ 511.714152][T14975] VmRSS: 24100 kB [ 511.714152][T14975] RssAnon: 1420 kB [ 511.714152][T14975] RssFile: 22680 kB [ 511.714152][T14975] RssShmem: 0 kB [ 511.714152][T14975] VmData: 36584 kB [ 511.714152][T14975] VmStk: 132 kB [ 511.714152][T14975] VmExe: 1772 kB [ 511.714152][T14975] VmLib: 8 kB [ 511.714152][T14975] VmPTE: 140 kB [ 511.714152][T14975] VmSwap: 0 kB [ 511.714152][T14975] HugetlbPages: 0 kB [ 511.714152][T14975] CoreDumping: 0 [ 511.714152][T14975] THP_enabled: 1 [ 511.714152][T14975] untag_mask: 0xffffffffffffffff [ 511.714152][T14975] Threads: 2 [ 511.714152][T14975] SigQ: 1/13116 [ 511.714152][T14975] SigPnd: 0000000000000000 [ 511.714152][T14975] ShdPnd: 0000000000000000 [ 511.714152][T14975] SigBlk: 0000000000000000 [ 511.714152][T14975] SigIgn: fffffffefffaba35 [ 511.714152][T14975] SigCgt: 0000000100010440 [ 511.714152][T14975] CapInh: 0000000000000000 [ 511.714152][T14975] CapPrm: 000001ffff77ffff [ 511.714152][T14975] CapEff: 000001ffff77ffff [ 511.714152][T14975] CapBnd: 000001ffffffffff [ 511.714152][T14975] CapAmb: 0000000000000000 [ 511.714152][T14975] NoNewPrivs: 0 [ 511.714152][T14975] Seccomp: 0 [ 511.714152][T14975] Seccomp_filters: 0 [ 511.714152][T14975] Speculation_Store_Bypass: thread vulnerable [ 511.714152][T14975] SpeculationIndirectBranch: conditional enabled [ 511.894316][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.061288][T14977] loop6: detected capacity change from 0 to 256 [ 512.082594][T14963] loop5: detected capacity change from 0 to 32768 [ 512.184361][T14977] FAT-fs (loop6): Directory bread(block 64) failed [ 512.198018][T14977] FAT-fs (loop6): Directory bread(block 65) failed [ 512.222560][T14977] FAT-fs (loop6): Directory bread(block 66) failed [ 512.245489][T14977] FAT-fs (loop6): Directory bread(block 67) failed [ 512.262725][T14977] FAT-fs (loop6): Directory bread(block 68) failed [ 512.282858][T14977] FAT-fs (loop6): Directory bread(block 69) failed [ 512.291758][T14977] FAT-fs (loop6): Directory bread(block 70) failed [ 512.304312][T14977] FAT-fs (loop6): Directory bread(block 71) failed [ 512.311436][T14977] FAT-fs (loop6): Directory bread(block 72) failed [ 512.318928][T14977] FAT-fs (loop6): Directory bread(block 73) failed [ 513.167038][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3096'. [ 513.410117][T14996] loop6: detected capacity change from 0 to 512 [ 513.497645][T14996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.524803][T14984] loop1: detected capacity change from 0 to 32768 [ 513.704346][T14984] JBD2: Ignoring recovery information on journal [ 513.717565][T10973] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.887416][T14984] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 514.070867][ T28] audit: type=1800 audit(2000000497.200:119): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3092" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 514.180781][T14990] loop5: detected capacity change from 0 to 32768 [ 514.436185][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 515.042704][T15016] loop5: detected capacity change from 0 to 128 [ 515.058690][T15016] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 515.149278][T15016] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 515.323308][ T33] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 516.384817][T15047] loop1: detected capacity change from 0 to 256 [ 516.545255][T15047] FAT-fs (loop1): Directory bread(block 64) failed [ 516.552444][T15047] FAT-fs (loop1): Directory bread(block 65) failed [ 516.591616][T15047] FAT-fs (loop1): Directory bread(block 66) failed [ 516.620120][T15047] FAT-fs (loop1): Directory bread(block 67) failed [ 516.646314][T15047] FAT-fs (loop1): Directory bread(block 68) failed [ 516.653093][T15047] FAT-fs (loop1): Directory bread(block 69) failed [ 516.705505][T15047] FAT-fs (loop1): Directory bread(block 70) failed [ 516.722202][T15047] FAT-fs (loop1): Directory bread(block 71) failed [ 516.751953][T15047] FAT-fs (loop1): Directory bread(block 72) failed [ 516.764427][T15047] FAT-fs (loop1): Directory bread(block 73) failed [ 516.985390][ T27] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 517.176597][ T27] usb 7-1: Using ep0 maxpacket: 32 [ 517.193428][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.235485][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.265408][ T27] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 517.296111][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.321834][ T27] usb 7-1: config 0 descriptor?? [ 517.332785][ T27] hub 7-1:0.0: USB hub found [ 517.555371][ T27] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 517.875022][T15067] loop5: detected capacity change from 0 to 1024 [ 517.981069][T15067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 518.015625][ T27] hid-generic 0003:046D:C31C.0019: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 518.095329][T15067] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.245727][T15067] EXT4-fs error (device loop5): ext4_free_blocks:6690: comm syz.5.3127: Freeing blocks not in datazone - block = 0, count = 16 [ 518.275836][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3128'. [ 518.470554][ T27] usb 7-1: USB disconnect, device number 20 [ 518.479293][T15077] loop1: detected capacity change from 0 to 64 [ 518.535861][ T49] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 518.620078][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 518.652133][ T49] EXT4-fs (loop5): This should not happen!! Data will be lost [ 518.652133][ T49] [ 518.662529][ T49] EXT4-fs (loop5): Total free blocks count 0 [ 518.700569][ T49] EXT4-fs (loop5): Free/Dirty block details [ 518.707072][ T49] EXT4-fs (loop5): free_blocks=16 [ 518.712305][ T49] EXT4-fs (loop5): dirty_blocks=16 [ 518.729586][ T49] EXT4-fs (loop5): Block reservation details [ 518.745259][ T49] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 518.768005][ T8262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 518.934626][T15085] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 519.207069][T15092] tun0: tun_chr_ioctl cmd 2147767519 [ 519.224540][T15094] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 519.232202][T15094] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 519.273716][T15094] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 519.281282][T15094] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 519.294326][T15094] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 519.303381][T15094] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 519.315255][T15094] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 519.321789][T15094] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 519.324384][T15096] loop5: detected capacity change from 0 to 2048 [ 519.342751][T15094] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 519.352697][T15094] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 519.376113][T15096] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.380352][T15094] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4) [ 519.412435][T15094] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 519.441548][T15094] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 519.464280][T15094] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 519.474408][T15094] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 519.505360][T15094] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 519.554255][T15094] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 519.564115][T15096] overlayfs: upper fs needs to support d_type. [ 519.585607][T15094] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 519.594571][T15094] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 519.618789][T15094] comedi comedi3: 8255: I/O port conflict (0xef,4) [ 519.629959][T15096] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 519.648596][T15096] overlayfs: failed to set xattr on upper [ 519.661976][T15096] overlayfs: ...falling back to redirect_dir=nofollow. [ 519.674266][T15096] overlayfs: ...falling back to index=off. [ 519.691949][T15096] overlayfs: ...falling back to uuid=null. [ 519.770143][T15106] netlink: 'syz.7.3143': attribute type 3 has an invalid length. [ 519.793033][T15106] netlink: 'syz.7.3143': attribute type 3 has an invalid length. [ 519.824582][ T8262] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 519.859152][ T8262] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 520.391238][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.619514][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.766405][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.949048][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.428101][T15135] vxcan1: tx address claim with dest, not broadcast [ 521.741622][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 521.758686][T15142] loop1: detected capacity change from 0 to 512 [ 521.766321][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.785556][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.806304][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.870447][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 521.892146][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.985389][T15142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.306584][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.178660][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.961687][T15139] chnl_net:caif_netlink_parms(): no params data found [ 524.015531][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 524.016571][ T5775] Bluetooth: hci2: command tx timeout [ 524.057466][T15204] loop3: detected capacity change from 0 to 7 [ 524.094395][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.103685][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.197790][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.207069][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.216866][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.226164][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.236940][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.246163][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.256156][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.265411][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.278383][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 524.300778][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.310127][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.320706][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.330010][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.338406][T11764] ldm_validate_partition_table(): Disk read failed. [ 524.353616][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 524.371220][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.380577][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.392058][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.400586][ T9] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 524.401386][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.412607][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.427531][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 524.436793][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 524.452281][T11764] Dev loop3: unable to read RDB block 0 [ 524.471934][ T9] usb 8-1: Product: syz [ 524.515278][T11764] loop3: unable to read partition table [ 524.526674][ T9] usb 8-1: Manufacturer: syz [ 524.537406][T11764] loop3: partition table beyond EOD, truncated [ 524.564279][ T9] usb 8-1: SerialNumber: syz [ 524.587916][ T9] usb 8-1: config 0 descriptor?? [ 524.623175][T15204] ldm_validate_partition_table(): Disk read failed. [ 524.637531][T15192] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 524.644973][T15192] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 524.655337][T15204] Dev loop3: unable to read RDB block 0 [ 524.663565][T15204] loop3: unable to read partition table [ 524.679268][T15204] loop3: partition table beyond EOD, truncated Stopping sshd: [ 524.733918][T15204] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 524.767757][T15139] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.795922][T15139] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.803412][T15139] bridge_slave_0: entered allmulticast mode [ 524.837133][T15139] bridge_slave_0: entered promiscuous mode [ 524.895552][T15139] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.902853][T15139] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.966647][T15192] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 524.989997][T15139] bridge_slave_1: entered allmulticast mode stopped /usr/sbin/sshd (pid 5527) OK [ 525.025608][T15192] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 525.056881][T15139] bridge_slave_1: entered promiscuous mode [ 525.294882][T15139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.344471][T15139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.475504][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 525.524566][ T11] hsr_slave_0: left promiscuous mode [ 525.595553][ T11] hsr_slave_1: left promiscuous mode [ 525.636322][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.675244][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.682890][ T9] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 525.706447][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.733843][ T9] usb 8-1: USB disconnect, device number 23 [ 525.740131][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 Stopping crond: [ 525.807321][ T11] bridge_slave_1: left allmulticast mode [ 525.824493][ T11] bridge_slave_1: left promiscuous mode [ 525.844743][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.891767][ T11] bridge_slave_0: left allmulticast mode [ 525.899969][ T11] bridge_slave_0: left promiscuous mode [ 525.922206][ T11] bridge0: port 1(bridge_slave_0) entered disabled state stopped /usr/sbin/crond (pid 5511) OK [ 526.001693][T15239] loop6: detected capacity change from 0 to 128 [ 526.060779][ T11] veth1_macvtap: left promiscuous mode [ 526.068288][ T11] veth0_macvtap: left promiscuous mode [ 526.085409][ T5775] Bluetooth: hci2: command tx timeout [ 526.096469][T15239] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 526.109004][ T11] veth1_vlan: left promiscuous mode [ 526.119383][T15239] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 526.136859][ T11] veth0_vlan: left promiscuous mode [ 526.366590][T10973] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. Stopping dhcpcd... [ 526.778778][ T11] bond1 (unregistering): Released all slaves stopped /sbin/dhcpcd (pid 5432) [ 526.961990][ C0] vkms_vblank_simulate: vblank timer overrun [ 527.012819][ C0] vkms_vblank_simulate: vblank timer overrun Stopping network[ 527.144846][ C0] vkms_vblank_simulate: vblank timer overrun : [ 528.057150][T15272] loop6: detected capacity change from 0 to 32768 [ 528.167268][ T5775] Bluetooth: hci2: command tx timeout [ 528.520983][ T11] team0 (unregistering): Port device team_slave_1 removed [ 528.634232][ T11] team0 (unregistering): Port device team_slave_0 removed [ 528.750506][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.789192][T15274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.796905][ T11] bond_slave_1 (unregistering): left promiscuous mode [ 528.893215][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.914725][ T11] bond_slave_0 (unregistering): left promiscuous mode [ 529.603290][ T11] bond0 (unregistering): Released all slaves [ 529.855486][T15260] netlink: 'syz.7.3187': attribute type 14 has an invalid length. [ 530.026975][T15139] team0: Port device team_slave_0 added [ 530.077894][T15139] team0: Port device team_slave_1 added [ 530.245377][ T5775] Bluetooth: hci2: command tx timeout [ 530.288493][T15139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.331437][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.404810][T15139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.469921][T15139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.497384][T15139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.534210][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.560679][T15139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active OK [ 531.071745][T15139] hsr_slave_0: entered promiscuous mode [ 531.108240][T15139] hsr_slave_1: entered promiscuous mode [ 531.155677][T15139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.175263][T15139] Cannot create hsr debugfs directory Stopping iptables: OK Stopping system message bus: [ 531.979097][T15139] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 532.236979][T15321] 9pnet_fd: Insufficient options for proto=fd [ 532.248641][T15306] loop6: detected capacity change from 0 to 32768 [ 532.339079][T15139] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 532.411849][T15306] (syz.6.3203,15306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 532.452604][T15139] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 532.497142][T15306] (syz.6.3203,15306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 532.537507][T15139] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 532.603332][T15306] JBD2: Ignoring recovery information on journal [ 532.719232][T15328] loop1: detected capacity change from 0 to 2048 [ 532.753656][T15306] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 532.831013][T15328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.989506][T15328] ext4 filesystem being mounted at /809/file1 supports timestamps until 2038-01-19 (0x7fffffff) done [ 533.043804][T15139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.179846][T15139] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.239221][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.246510][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.279230][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.293540][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.300866][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.540454][T15139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.593337][T10973] ocfs2: Unmounting device (7,6) on (node local) [ 534.468134][T15139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.815526][ T5816] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 534.879037][T15372] loop6: detected capacity change from 0 to 1024 [ 535.021083][ T5816] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 535.041605][ T4183] hfsplus: b-tree write err: -5, ino 25 [ 535.048725][ T5816] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 535.048738][ T4183] hfsplus: b-tree write err: -5, ino 4 [ 535.099866][ T5816] usb 2-1: config 0 has no interface number 0 [ 535.106022][ T4183] hfsplus: b-tree write err: -5, ino 2 [ 535.146733][ T5816] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 535.175539][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.207792][ T5816] usb 2-1: Product: syz [ 535.212098][ T5816] usb 2-1: Manufacturer: syz [ 535.245359][ T5816] usb 2-1: SerialNumber: syz [ 535.271619][ T5816] usb 2-1: config 0 descriptor?? [ 535.632745][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3218'. [ 535.726794][T15139] veth0_vlan: entered promiscuous mode [ 535.749892][ T5816] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 535.765173][ T5816] usb 2-1: No valid video chain found. [ 535.775421][T15139] veth1_vlan: entered promiscuous mode [ 535.908158][T15139] veth0_macvtap: entered promiscuous mode [ 535.933464][T15139] veth1_macvtap: entered promiscuous mode Stopping klogd: [ 535.979954][ T5825] usb 2-1: USB disconnect, device number 43 [ 536.020095][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.046314][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.083504][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.115308][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.147404][T15139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.196768][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.240127][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.293582][T15139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.345412][T15139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! OK [ 536.372433][T15139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.418570][T15139] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.440965][T15139] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.470330][T15139] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.495207][T15139] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.526230][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.566962][T15409] bridge0: port 2(bridge_slave_1) entered disabled state Stopping acpid: [ 536.982664][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.015357][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.086986][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.120305][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.305941][T15430] loop1: detected capacity change from 0 to 2048 [ 537.331651][T15430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.820070][T15448] loop8: detected capacity change from 0 to 2048 [ 537.857524][T15448] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 537.878100][T15448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) OK Stopping syslogd: stopped /sbin/syslogd (pid 5120) OK umount: can't re[ 539.433954][T15495] netlink: 'syz.8.3252': attribute type 5 has an invalid length. mount debugfs read-only[ 539.457622][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3252'. umount: can't remount tmpfs read-only [ 539.530319][T15497] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3253'. [ 539.882733][T15512] loop8: detected capacity change from 0 to 256 [ 540.150271][T15516] loop6: detected capacity change from 0 to 8192 [ 540.182333][T15516] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 540.238697][T15516] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 540.290081][T15516] REISERFS (device loop6): using ordered data mode [ 540.310464][T15516] reiserfs: using flush barriers [ 540.395242][T15516] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 540.439369][T15516] REISERFS (device loop6): checking transaction log (loop6) [ 540.467131][T15516] REISERFS (device loop6): Using r5 hash to sort names [ 540.491256][T15516] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 540.995267][ T5814] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 541.055800][T15530] loop1: detected capacity change from 0 to 128 [ 541.085038][T15530] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 541.141124][T15530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.201392][ T5814] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 541.261114][ T5814] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 541.327888][ T5814] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 541.404397][ T5814] usb 9-1: config 220 has no interface number 2 [ 541.451269][ T5814] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 541.500454][ T5814] usb 9-1: config 220 interface 0 has no altsetting 0 [ 541.538659][ T5814] usb 9-1: config 220 interface 76 has no altsetting 0 [ 541.556374][ T5814] usb 9-1: config 220 interface 1 has no altsetting 0 [ 541.583574][ T5814] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 541.615170][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.634681][ T5814] usb 9-1: Product: syz [ 541.649828][ T5814] usb 9-1: Manufacturer: syz [ 541.654532][ T5814] usb 9-1: SerialNumber: syz [ 541.899572][T15540] loop6: detected capacity change from 0 to 2048 [ 541.908894][ T5814] usb 9-1: selecting invalid altsetting 0 [ 541.934802][ T5814] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 541.978341][ T5814] usb 9-1: No valid video chain found. [ 541.995461][T15540] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 542.006338][ T5825] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 542.017690][ T5814] usb 9-1: selecting invalid altsetting 0 [ 542.032766][T15540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.050443][ T5814] usbtest: probe of 9-1:220.1 failed with error -22 [ 542.096360][ T5814] usb 9-1: USB disconnect, device number 2 [ 542.291548][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 542.316743][ T5825] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 542.335341][ T5825] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 166, changing to 11 [ 542.363703][ T5825] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 9233, setting to 1024 [ 542.394565][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 542.413874][ T5825] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 542.424211][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.434669][ T5825] usb 2-1: Product: syz umount: sysfs busy - remounted read-only[ 542.459227][ T5825] usb 2-1: Manufacturer: syz [ 542.463936][ T5825] usb 2-1: SerialNumber: syz umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only [ 542.506502][ T5825] usb 2-1: config 0 descriptor?? [ 542.515744][T15536] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.49 closed by remote host. [ 542.679589][ T5825] usb 2-1: Can not set alternate setting to 1, error: -71 [ 542.716682][ T5825] synaptics_usb: probe of 2-1:0.0 failed with error -71 [ 542.735439][ T5825] usb 2-1: USB disconnect, device number 44 [ 542.843102][T15548] pim6reg0: tun_chr_ioctl cmd 2147767517 Sent SIGKILL to all processes Requesting system poweroff [ 543.972440][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.101493][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.225572][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.419804][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.865809][T15549] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 544.879554][T15549] ACPI: PM: Preparing to enter system sleep state S5 [ 544.910538][T15549] kvm: exiting hardware virtualization [ 544.920506][T15549] reboot: Power down serialport: VM disconnected.