last executing test programs: 4.185581844s ago: executing program 4 (id=1743): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f0000001240)=[{0x4}, {0x0, 0x4, 0x1000}], 0x2) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f00000003c0)=0x7f) 3.505039227s ago: executing program 3 (id=1750): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r0, 0x540b, 0x2) 3.283698143s ago: executing program 4 (id=1751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 3.228342855s ago: executing program 4 (id=1753): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x3, 0x1, "f7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x20, 0x13, 0x7, "3325dcd66488a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.646499684s ago: executing program 3 (id=1757): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 2.599351736s ago: executing program 3 (id=1758): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x201, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) 2.546049147s ago: executing program 3 (id=1759): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.153475742s ago: executing program 4 (id=1767): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x8, "3dacf5cc5998"}]}}}}}}}}, 0x0) 1.152473652s ago: executing program 1 (id=1768): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.050907366s ago: executing program 1 (id=1770): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xee01, 0x0, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x9d) fcntl$setstatus(r0, 0x4, 0x42000) 1.036824856s ago: executing program 4 (id=1771): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000340)={{@host, 0x3}, 0x81, 0x3, 0x5, 0x8, 0x16a, 0x9, 0x0, 0x4}) 946.655819ms ago: executing program 0 (id=1772): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f0000001f40)={0x130, 0x0, r1, {0x4, 0x3b6, 0x0, '\x00', {0x411, 0x200, 0x8000000000000000, 0xfffffe00, 0x0, 0x0, 0x4000, '\x00', 0xfffffffffffffff1, 0x8001, 0x3, 0x2, {0x6, 0x9}, {0x7b, 0x40}, {0x6, 0x2}, {0xbb, 0x7fff}, 0x6, 0xfffff800, 0x7, 0xf4}}}, 0x130) 946.008189ms ago: executing program 4 (id=1774): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000180)={0x40, 0x18, 0x3, "b165fb"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 922.27373ms ago: executing program 1 (id=1775): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) 862.207572ms ago: executing program 0 (id=1777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0xfffffffffffffffe}) 832.300993ms ago: executing program 1 (id=1778): r0 = socket$qrtr(0x2a, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x1, 0x0, 0x81, 0x2}) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x5d) 790.261764ms ago: executing program 1 (id=1779): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000380)=0x7fff001d) 763.195855ms ago: executing program 0 (id=1780): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x100}}, {@max_read={'max_read', 0x3d, 0x7fff}}, {@max_read={'max_read', 0x3d, 0x4}}]}}, 0x1, 0x0, 0x0) 720.084676ms ago: executing program 0 (id=1782): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200)=0xffffffffffffffff, 0x12) 651.015539ms ago: executing program 0 (id=1784): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)) fcntl$setlease(r0, 0x400, 0x2) 572.671381ms ago: executing program 0 (id=1785): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000001300)=""/4100, 0x1004}], 0x1, 0x8c0, 0x2bd6) 486.169314ms ago: executing program 2 (id=1787): unshare(0x2a020400) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$FICLONE(r1, 0x40049409, r0) 447.362175ms ago: executing program 2 (id=1788): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) 401.907447ms ago: executing program 2 (id=1789): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{0x0, 0x5d}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 267.573031ms ago: executing program 2 (id=1790): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@ipv6_newroute={0x3c, 0x18, 0xe19, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x6, 0x2, ':\x00'}}}]}, 0x3c}}, 0x0) 185.177484ms ago: executing program 2 (id=1791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x50, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0xfffffffffffffdd4, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 184.852704ms ago: executing program 3 (id=1792): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes256, 0x3, @desc4}) 73.384267ms ago: executing program 2 (id=1793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 144.31µs ago: executing program 1 (id=1794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331c8c5c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 0s ago: executing program 3 (id=1795): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @mcast2, 0x7fffffff}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) kernel console output (not intermixed with test programs): 83.232677][ T4586] loop0: detected capacity change from 0 to 1024 [ 83.355163][ T26] audit: type=1804 audit(1780538160.728:4): pid=4586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.125" name=2F6E6577726F6F742F31362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6532 dev="loop0" ino=21 res=1 errno=0 [ 83.428085][ T4233] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.496279][ T4595] loop4: detected capacity change from 0 to 512 [ 83.614781][ T4595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.818384][ T4233] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 83.826743][ T4233] usb 3-1: config 220 descriptor has 1 excess byte, ignoring [ 83.844207][ T4604] EXT4-fs (loop3): Ignoring removed orlov option [ 83.863368][ T4606] set_capacity_and_notify: 1 callbacks suppressed [ 83.863383][ T4606] loop4: detected capacity change from 0 to 1024 [ 83.884109][ T4233] usb 3-1: config 220 has no interface number 2 [ 83.899537][ T4233] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 83.917009][ T4604] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,nouid32,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 83.957202][ T4233] usb 3-1: config 220 interface 0 has no altsetting 0 [ 83.968171][ T4274] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.048485][ T4233] usb 3-1: config 220 interface 76 has no altsetting 0 [ 84.055417][ T4233] usb 3-1: config 220 interface 1 has no altsetting 0 [ 84.120726][ T4591] loop1: detected capacity change from 0 to 32768 [ 84.189018][ T154] hfsplus: b-tree write err: -5, ino 25 [ 84.195129][ T154] hfsplus: b-tree write err: -5, ino 4 [ 84.217066][ T154] hfsplus: b-tree write err: -5, ino 2 [ 84.258656][ T4274] usb 1-1: Using ep0 maxpacket: 16 [ 84.292412][ T4591] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 84.292412][ T4591] [ 84.308265][ T4233] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 84.317380][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.358222][ T4233] usb 3-1: Product: syz [ 84.362533][ T4233] usb 3-1: Manufacturer: syz [ 84.367157][ T4233] usb 3-1: SerialNumber: syz [ 84.389672][ T4591] ERROR: (device loop1): remounting filesystem as read-only [ 84.418963][ T4274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.449142][ T4274] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.465490][ T4591] jfs_create: dtInsert returned -EIO [ 84.475858][ T4614] capability: warning: `syz.4.136' uses deprecated v2 capabilities in a way that may be insecure [ 84.498176][ T4612] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 84.498176][ T4612] [ 84.516704][ T4591] ERROR: (device loop1): jfs_create: [ 84.516704][ T4591] [ 84.518107][ T4274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.538327][ T4614] program syz.4.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.562294][ T4612] ERROR: (device loop1): dbDiscardAG: -EIO [ 84.562294][ T4612] [ 84.606170][ T4274] usb 1-1: config 0 descriptor?? [ 84.849264][ T4233] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 84.855684][ T4233] usb 3-1: No valid video chain found. [ 84.888434][ T4233] usb 3-1: selecting invalid altsetting 0 [ 85.020806][ T4233] usb 3-1: selecting invalid altsetting 0 [ 85.026697][ T4233] usbtest: probe of 3-1:220.1 failed with error -22 [ 85.079194][ T4233] usb 3-1: USB disconnect, device number 3 [ 85.122753][ T4274] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 85.353302][ T4634] netlink: 'syz.1.143': attribute type 3 has an invalid length. [ 85.393197][ T4634] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.143'. [ 85.592976][ T4233] usb 1-1: USB disconnect, device number 2 [ 85.709290][ T4651] block nbd2: shutting down sockets [ 86.323440][ T4686] device erspan0 entered promiscuous mode [ 86.452392][ T4692] loop4: detected capacity change from 0 to 2048 [ 86.572293][ T1110] cfg80211: failed to load regulatory.db [ 86.578151][ T4696] loop0: detected capacity change from 0 to 1024 [ 86.594345][ T4692] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,jqfmt=vfsv0,quota,inode_readahead_blks=0x0000000000000400,. Quota mode: writeback. [ 86.619733][ T4692] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.642238][ T26] audit: type=1800 audit(1780538164.018:5): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.169" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 86.691036][ T4692] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.169: bg 0: block 345: padding at end of block bitmap is not set [ 86.715961][ T4696] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,nogrpid,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 86.876421][ T4692] EXT4-fs (loop4): Remounting filesystem read-only [ 86.890951][ T4688] loop2: detected capacity change from 0 to 40427 [ 86.983483][ T4688] F2FS-fs (loop2): invalid crc value [ 87.025606][ T4688] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 87.248647][ T4688] F2FS-fs (loop2): Start checkpoint disabled! [ 87.296829][ T4688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e7 [ 87.350499][ T4229] kernel read not supported for file /video9 (pid: 4229 comm: kworker/1:4) [ 87.433120][ T4719] loop3: detected capacity change from 0 to 1024 [ 87.512500][ T154] attempt to access beyond end of device [ 87.512500][ T154] loop2: rw=2049, want=45104, limit=40427 [ 87.552633][ T4727] syz.0.182 uses obsolete (PF_INET,SOCK_PACKET) [ 87.582578][ T4719] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.179: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.610433][ T4719] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 87.622933][ T4732] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by ""[4732] [ 87.668553][ T4719] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.179: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.688371][ T4719] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 87.757717][ T4719] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.179: Failed to acquire dquot type 0 [ 87.830278][ T4719] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 87.901184][ T4719] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.179: mark_inode_dirty error [ 87.999729][ T4719] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 88.031937][ T4745] loop0: detected capacity change from 0 to 256 [ 88.039300][ T4719] EXT4-fs (loop3): 1 orphan inode deleted [ 88.045064][ T4719] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 88.067506][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.077251][ T9] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.096280][ T9] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 88.105227][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0 [ 88.127111][ T4745] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 88.201157][ T4719] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.179: Invalid inode table block 1 in block_group 0 [ 88.243079][ T4749] loop1: detected capacity change from 0 to 256 [ 88.253905][ T4745] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 88.264745][ T4719] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 88.282397][ T4749] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.340225][ T4749] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 88.382190][ T4198] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.397920][ T4749] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 88.422453][ T4198] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 88.448291][ T4198] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 88.666744][ T4759] loop3: detected capacity change from 0 to 512 [ 88.783076][ T4759] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.193: iget: bad i_size value: 38620345925642 [ 88.865766][ T4759] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.193: couldn't read orphan inode 15 (err -117) [ 88.887628][ T4759] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000012,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 89.252915][ T4775] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.417733][ T4753] loop0: detected capacity change from 0 to 40427 [ 89.533263][ T4753] F2FS-fs (loop0): invalid crc value [ 89.566930][ T4786] capability: warning: `syz.3.207' uses 32-bit capabilities (legacy support in use) [ 89.586549][ T4753] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 89.809694][ T4792] loop3: detected capacity change from 0 to 512 [ 89.833661][ T4758] loop2: detected capacity change from 0 to 40427 [ 89.856965][ T4753] F2FS-fs (loop0): Start checkpoint disabled! [ 89.873601][ T4753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e7 [ 89.893577][ T4794] device veth0 entered promiscuous mode [ 89.909031][ T4794] device veth0 left promiscuous mode [ 89.924731][ T4758] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 89.935561][ T4792] EXT4-fs (loop3): Test dummy encryption mode enabled [ 89.958709][ T4758] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 89.977603][ T4792] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.996232][ T4758] F2FS-fs (loop2): invalid crc value [ 90.008625][ T4792] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.025946][ T4758] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.076823][ T4792] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.210: bad orphan inode 131083 [ 90.112835][ T4792] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 90.206133][ T1240] attempt to access beyond end of device [ 90.206133][ T1240] loop0: rw=2049, want=45104, limit=40427 [ 90.261628][ T4758] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 90.277419][ T4758] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.390686][ T4805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 90.431884][ T4805] netlink: 'syz.3.214': attribute type 25 has an invalid length. [ 90.446550][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 90.855470][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 90.894061][ T4820] netlink: 3 bytes leftover after parsing attributes in process `syz.0.213'. [ 90.915420][ T4823] hsr0: VLAN not yet supported [ 91.013870][ T4826] mmap: syz.1.223 (4826) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 91.100583][ T4829] loop0: detected capacity change from 0 to 1024 [ 91.406087][ T4836] loop4: detected capacity change from 0 to 512 [ 91.543150][ T4836] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.228: inode has both inline data and extents flags [ 91.578680][ T4836] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.228: couldn't read orphan inode 15 (err -117) [ 91.618047][ T4836] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.662564][ T4848] program syz.2.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.749237][ T4851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 91.896858][ T4849] loop1: detected capacity change from 0 to 4096 [ 91.995970][ T4849] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 92.096613][ T4864] netlink: 7986 bytes leftover after parsing attributes in process `syz.2.240'. [ 92.098068][ T4827] loop3: detected capacity change from 0 to 32768 [ 92.155416][ T4849] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 92.155416][ T4849] [ 92.286083][ T4827] XFS (loop3): Mounting V5 Filesystem [ 92.353968][ T4874] IPVS: sh: FWM 4 0x00000004 - no destination available [ 92.592290][ T4889] tipc: Started in network mode [ 92.596653][ T4827] XFS (loop3): Ending clean mount [ 92.603260][ T4888] loop2: detected capacity change from 0 to 16 [ 92.611410][ T4889] tipc: Node identity ac14140f, cluster identity 4711 [ 92.635200][ T4889] tipc: New replicast peer: 255.255.255.255 [ 92.652691][ T4889] tipc: Enabled bearer , priority 10 [ 92.687572][ T4888] erofs: (device loop2): mounted with root inode @ nid 36. [ 92.696940][ T4891] loop1: detected capacity change from 0 to 64 [ 92.756761][ T4198] XFS (loop3): Unmounting Filesystem [ 92.769860][ T4888] erofs: (device loop2): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 92.829178][ T4888] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 9 of nid 36 [ 92.839653][ T4888] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 92.849335][ T4888] attempt to access beyond end of device [ 92.849335][ T4888] loop2: rw=524288, want=67108888, limit=16 [ 92.863138][ T4888] attempt to access beyond end of device [ 92.863138][ T4888] loop2: rw=524288, want=736, limit=16 [ 92.876487][ T4888] attempt to access beyond end of device [ 92.876487][ T4888] loop2: rw=524288, want=525152, limit=16 [ 93.301730][ T4188] hfs: node 4:3 still has 1 user(s)! [ 93.462196][ T4920] loop4: detected capacity change from 0 to 512 [ 93.580874][ T4920] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,barrier=0x000000000000008e,bsddf,errors=remount-ro,init_itable,auto_da_alloc=0x00000000000000eb,quota,. Quota mode: writeback. [ 93.650270][ T7] tipc: Node number set to 2886997007 [ 93.786156][ T4920] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.874776][ T4920] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.263: directory missing '..' [ 93.952506][ T4918] XFS (loop1): Mounting V5 Filesystem [ 94.075617][ T4918] XFS (loop1): Ending clean mount [ 94.442239][ T4188] XFS (loop1): Unmounting Filesystem [ 94.561294][ T4964] set_capacity_and_notify: 1 callbacks suppressed [ 94.561310][ T4964] loop4: detected capacity change from 0 to 512 [ 94.755953][ T4964] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 94.898545][ T4964] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.073228][ T4963] loop3: detected capacity change from 0 to 32768 [ 95.121444][ T4957] loop2: detected capacity change from 0 to 32768 [ 95.170742][ T4963] [ 95.170742][ T4963] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.170742][ T4963] [ 95.241421][ T4957] XFS (loop2): Mounting V5 Filesystem [ 95.319393][ T4957] XFS (loop2): Ending clean mount [ 95.320088][ T4979] loop0: Can't mount, would change RO state [ 95.371062][ T154] ERROR: (device loop3): diWrite: ixpxd invalid [ 95.371062][ T154] [ 95.383345][ T154] ERROR: (device loop3): txCommit: [ 95.383345][ T154] [ 95.447015][ T4957] XFS (loop2): Quotacheck needed: Please wait. [ 95.471397][ T4970] loop0: detected capacity change from 0 to 32768 [ 95.481976][ T154] jfs_write_inode: jfs_commit_inode failed! [ 95.488798][ T4198] [ 95.488798][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.488798][ T4198] [ 95.512591][ T4198] [ 95.512591][ T4198] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 95.512591][ T4198] [ 95.526513][ T4985] loop4: detected capacity change from 0 to 256 [ 95.631529][ T4970] XFS (loop0): Mounting V5 Filesystem [ 95.774279][ T4957] XFS (loop2): Quotacheck: Done. [ 95.855749][ T4970] XFS (loop0): Ending clean mount [ 95.995603][ T4199] XFS (loop2): Unmounting Filesystem [ 96.002727][ T4193] XFS (loop0): Unmounting Filesystem [ 96.156633][ T5001] loop3: detected capacity change from 0 to 2048 [ 96.250234][ T5001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.294463][ T5005] program syz.1.290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.628614][ T5014] loop1: detected capacity change from 0 to 2048 [ 96.704439][ T5013] loop3: detected capacity change from 0 to 4096 [ 96.717488][ T5014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.858554][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 96.879171][ T5013] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 96.909475][ T5013] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 96.989123][ T5013] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 97.042062][ T5027] loop1: detected capacity change from 0 to 128 [ 97.066819][ T5013] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 97.118557][ T5013] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 97.146991][ T5027] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 97.162906][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 97.179147][ T5027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.189625][ T5013] ntfs: volume version 3.1. [ 97.213480][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 97.233642][ T5033] Zero length message leads to an empty skb [ 97.249171][ T5013] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 97.299643][ T5013] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 97.363635][ T5037] loop4: detected capacity change from 0 to 16 [ 97.381286][ T5013] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 97.431638][ T5037] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.464869][ T5013] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 97.549122][ T5013] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 97.684822][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 97.817593][ T5053] lo speed is unknown, defaulting to 1000 [ 97.928872][ T5058] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.062624][ T5058] EXT4-fs (loop2): 1 truncate cleaned up [ 98.088934][ T5058] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.105536][ T5074] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.298032][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.354596][ T5082] erofs: (device loop3): mounted with root inode @ nid 36. [ 98.364823][ T5080] FAT-fs (loop1): Directory bread(block 64) failed [ 98.369716][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 98.390282][ T5080] FAT-fs (loop1): Directory bread(block 65) failed [ 98.397101][ T5080] FAT-fs (loop1): Directory bread(block 66) failed [ 98.428636][ T5080] FAT-fs (loop1): Directory bread(block 67) failed [ 98.437495][ T5084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.323'. [ 98.446045][ T5080] FAT-fs (loop1): Directory bread(block 68) failed [ 98.455641][ T5080] FAT-fs (loop1): Directory bread(block 69) failed [ 98.465287][ T5080] FAT-fs (loop1): Directory bread(block 70) failed [ 98.480650][ T5080] FAT-fs (loop1): Directory bread(block 71) failed [ 98.487423][ T5080] FAT-fs (loop1): Directory bread(block 72) failed [ 98.507593][ T5080] FAT-fs (loop1): Directory bread(block 73) failed [ 98.548254][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 98.669605][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 98.848521][ T4229] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 98.857628][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.872629][ T5102] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready [ 98.898909][ T4229] usb 1-1: Product: syz [ 98.905716][ T4229] usb 1-1: Manufacturer: syz [ 98.933594][ T4229] usb 1-1: SerialNumber: syz [ 98.945201][ T4229] usb 1-1: config 0 descriptor?? [ 99.029223][ T4229] hub 1-1:0.0: bad descriptor, ignoring hub [ 99.035375][ T5111] netlink: 76 bytes leftover after parsing attributes in process `syz.4.338'. [ 99.037702][ T4229] hub: probe of 1-1:0.0 failed with error -5 [ 99.070023][ T5113] program syz.1.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.398719][ T4228] usb 1-1: USB disconnect, device number 3 [ 99.416605][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 99.536350][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 99.888916][ T5136] set_capacity_and_notify: 3 callbacks suppressed [ 99.888933][ T5136] loop1: detected capacity change from 0 to 1024 [ 99.993692][ T5143] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 99.993692][ T5143] The task syz.3.352 (5143) triggered the difference, watch for misbehavior. [ 100.226277][ T4238] hfsplus: bad catalog file entry [ 100.241721][ T4238] hfsplus: b-tree write err: -5, ino 3 [ 100.313971][ T5121] loop2: detected capacity change from 0 to 32768 [ 100.517839][ T5121] XFS (loop2): Mounting V5 Filesystem [ 100.646238][ T5121] XFS (loop2): Ending clean mount [ 100.716710][ T4199] XFS (loop2): Unmounting Filesystem [ 100.881696][ T5179] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 101.425082][ T5201] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 101.440209][ T5188] loop3: detected capacity change from 0 to 8192 [ 101.461994][ T5201] netlink: 'syz.4.377': attribute type 2 has an invalid length. [ 101.502247][ T5188] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 101.538400][ T5205] netlink: 'syz.4.377': attribute type 1 has an invalid length. [ 101.608460][ T5188] REISERFS (device loop3): using ordered data mode [ 101.615042][ T5188] reiserfs: using flush barriers [ 101.641184][ T5205] netlink: 'syz.4.377': attribute type 2 has an invalid length. [ 101.728282][ T5188] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 101.789743][ T5188] REISERFS (device loop3): checking transaction log (loop3) [ 101.935910][ T5216] device team_slave_0 entered promiscuous mode [ 101.942475][ T5216] device team_slave_1 entered promiscuous mode [ 102.001840][ T5216] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.230369][ T5188] REISERFS (device loop3): Using r5 hash to sort names [ 102.237616][ T5188] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 102.366678][ T5188] REISERFS warning (device loop3): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd [ 102.448129][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.698379][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 102.818531][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.878241][ T4229] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 102.930562][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.963598][ T4229] usb 1-1: config 0 descriptor?? [ 103.009082][ T5259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.395'. [ 103.296246][ T5277] loop4: detected capacity change from 0 to 512 [ 103.360302][ T5279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 103.392443][ T5277] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.460641][ T4229] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 103.499690][ T4229] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 103.517093][ T4229] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 103.565628][ T4229] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 103.582966][ T5277] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 103.622499][ T4229] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 103.629946][ T5296] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 103.641256][ T5296] netlink: 768 bytes leftover after parsing attributes in process `syz.3.416'. [ 103.652816][ T5277] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.668380][ T4229] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 103.698361][ T4229] kone 0003:1E7D:2CED.0004: unknown main item tag 0x0 [ 103.705220][ T4229] kone 0003:1E7D:2CED.0004: item fetching failed at offset 15/44 [ 103.752628][ T4229] kone 0003:1E7D:2CED.0004: parse failed [ 103.775261][ T4229] kone: probe of 0003:1E7D:2CED.0004 failed with error -22 [ 103.843985][ T4229] usb 1-1: USB disconnect, device number 4 [ 103.953213][ T5304] loop3: detected capacity change from 0 to 128 [ 104.296070][ T5319] loop4: detected capacity change from 0 to 1024 [ 104.443994][ T5319] hfsplus: extend alloc file! (16384,256,150995125) [ 104.648150][ T4229] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 105.028213][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.053167][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.071944][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 105.113246][ T4229] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.137343][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.184205][ T5325] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 105.239219][ T4229] hub 3-1:1.0: bad descriptor, ignoring hub [ 105.245457][ T4229] hub: probe of 3-1:1.0 failed with error -5 [ 105.252282][ T4229] cdc_wdm 3-1:1.0: skipping garbage [ 105.257688][ T4229] cdc_wdm 3-1:1.0: skipping garbage [ 105.319075][ T4229] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 105.329774][ T4229] cdc_wdm 3-1:1.0: Unknown control protocol [ 105.387685][ T5375] netlink: 6 bytes leftover after parsing attributes in process `syz.1.450'. [ 105.584335][ T5382] netlink: 'syz.1.453': attribute type 11 has an invalid length. [ 105.914594][ T5403] loop4: detected capacity change from 0 to 256 [ 106.071292][ T4248] usb 3-1: USB disconnect, device number 4 [ 106.137183][ T5407] lo speed is unknown, defaulting to 1000 [ 106.312745][ T5418] loop4: detected capacity change from 0 to 1024 [ 106.422885][ T5418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.660090][ T5433] loop2: detected capacity change from 0 to 128 [ 106.794923][ T5433] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 106.874756][ T5433] MINIX-fs: bad superblock [ 107.098220][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.399420][ T5461] loop1: detected capacity change from 0 to 16 [ 107.464630][ T5461] erofs: (device loop1): mounted with root inode @ nid 36. [ 107.472217][ T4230] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.488061][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.550682][ T4230] usb 5-1: config 0 descriptor?? [ 107.563040][ T5428] loop0: detected capacity change from 0 to 40427 [ 107.589439][ T4230] cp210x 5-1:0.0: cp210x converter detected [ 107.602717][ T5469] loop2: detected capacity change from 0 to 512 [ 107.644428][ T5428] F2FS-fs (loop0): invalid crc value [ 107.679683][ T5428] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.708915][ T5469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.814061][ T5476] loop1: detected capacity change from 0 to 8192 [ 107.856075][ T5476] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 107.898329][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.914292][ T5476] REISERFS (device loop1): using ordered data mode [ 107.947567][ T5428] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.971154][ T5476] reiserfs: using flush barriers [ 108.028152][ T4230] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 108.038089][ T5476] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.106590][ T4230] usb 5-1: cp210x converter now attached to ttyUSB0 [ 108.132771][ T5476] REISERFS (device loop1): checking transaction log (loop1) [ 108.138749][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 108.253408][ T5476] REISERFS (device loop1): Using r5 hash to sort names [ 108.260100][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.280974][ T5476] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 108.319379][ T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 108.339787][ T4193] attempt to access beyond end of device [ 108.339787][ T4193] loop0: rw=2049, want=45104, limit=40427 [ 108.363939][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.394699][ T4230] usb 5-1: USB disconnect, device number 2 [ 108.409036][ T23] usb 4-1: config 0 descriptor?? [ 108.446408][ T4230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.446927][ T5484] loop2: detected capacity change from 0 to 2048 [ 108.525152][ T4230] cp210x 5-1:0.0: device disconnected [ 108.590230][ T5484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.911333][ T23] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 109.302127][ T5502] loop0: detected capacity change from 0 to 2048 [ 109.350406][ T4232] usb 4-1: USB disconnect, device number 3 [ 109.396174][ T5502] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 109.406603][ T5502] System zones: 0-7 [ 109.411808][ T5502] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nodioread_nolock,barrier=0x0000000000000007,debug,nojournal_checksum,min_batch_time=0x000000000000c619,errors=remount-ro,. Quota mode: none. [ 109.438075][ T5502] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.498: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 109.466422][ T5502] EXT4-fs (loop0): Remounting filesystem read-only [ 109.474621][ T4228] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.486130][ T5502] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.498: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 109.507290][ T5502] EXT4-fs (loop0): Remounting filesystem read-only [ 109.640056][ T5506] loop1: detected capacity change from 0 to 1024 [ 109.758135][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 109.792500][ T5510] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 109.823197][ T5510] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 109.853877][ T5510] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 109.897826][ T5510] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 109.908268][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 109.975387][ T5510] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000] [ 109.986021][ T5510] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.993543][ T5510] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.509: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 110.022441][ T5510] EXT4-fs error (device loop0): ext4_quota_enable:6447: comm syz.0.509: Bad quota inode: 4, type: 1 [ 110.084611][ T5494] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 110.102551][ T5510] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.117974][ T4228] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 110.127043][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.160972][ T5510] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 110.173426][ T5494] F2FS-fs (loop4): invalid crc value [ 110.199031][ T4228] usb 3-1: Product: syz [ 110.203357][ T4228] usb 3-1: Manufacturer: syz [ 110.210666][ T5510] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,debug,noblock_validity,usrjquota=,minixdf,min_batch_time=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback. [ 110.240543][ T5494] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.287509][ T4228] usb 3-1: SerialNumber: syz [ 110.312174][ T4228] usb 3-1: config 0 descriptor?? [ 110.390091][ T4228] hub 3-1:0.0: bad descriptor, ignoring hub [ 110.396144][ T4228] hub: probe of 3-1:0.0 failed with error -5 [ 110.398478][ T5510] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.509: bg 0: block 34: padding at end of block bitmap is not set [ 110.471968][ T5494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.696270][ T4189] attempt to access beyond end of device [ 110.696270][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 110.747243][ T23] usb 3-1: USB disconnect, device number 5 [ 111.311764][ T5557] netlink: 'syz.1.528': attribute type 1 has an invalid length. [ 111.347829][ T5553] set_capacity_and_notify: 3 callbacks suppressed [ 111.347843][ T5553] loop3: detected capacity change from 0 to 4096 [ 111.386003][ T5557] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.528'. [ 111.505838][ T5553] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.518653][ T5553] EXT4-fs (loop3): Ignoring removed orlov option [ 111.559832][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 111.605298][ T5553] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 111.703911][ T5553] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 111.810770][ T5579] tap0: tun_chr_ioctl cmd 1074025677 [ 111.821939][ T5579] tap0: linktype set to 778 [ 112.695699][ T5614] loop1: detected capacity change from 0 to 4096 [ 112.778633][ T5599] loop2: detected capacity change from 0 to 32768 [ 112.830418][ T5599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.548 (5599) [ 112.916557][ T5621] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.936880][ T5614] NILFS (loop1): corrupt root inode [ 112.974398][ T5599] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 113.033390][ T5599] BTRFS info (device loop2): setting nodatasum [ 113.054147][ T5599] BTRFS info (device loop2): force zlib compression, level 3 [ 113.075677][ T5599] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 113.107194][ T5599] BTRFS info (device loop2): use lzo compression, level 0 [ 113.127065][ T5599] BTRFS info (device loop2): turning on flush-on-commit [ 113.168117][ T5599] BTRFS info (device loop2): enabling auto defrag [ 113.224421][ T5599] BTRFS info (device loop2): max_inline at 4096 [ 113.273036][ T5599] BTRFS info (device loop2): using free space tree [ 113.302352][ T5599] BTRFS info (device loop2): has skinny extents [ 113.443846][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.451123][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.534256][ T5599] BTRFS info (device loop2): enabling ssd optimizations [ 114.237035][ T5675] loop3: detected capacity change from 0 to 8192 [ 114.310916][ T5675] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 114.330933][ T5675] REISERFS (device loop3): using ordered data mode [ 114.352036][ T5675] reiserfs: using flush barriers [ 114.367414][ T5675] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.418243][ T5675] REISERFS (device loop3): checking transaction log (loop3) [ 114.594008][ T5678] loop1: detected capacity change from 0 to 40427 [ 114.617283][ T5678] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 114.629154][ T5675] REISERFS (device loop3): Using tea hash to sort names [ 114.641636][ T5675] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 114.656646][ T5678] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 114.709573][ T5678] F2FS-fs (loop1): invalid crc value [ 114.766943][ T5678] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 114.875886][ T5678] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 114.884243][ T5678] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 114.981053][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 114.981069][ T26] audit: type=1800 audit(1780538192.358:6): pid=5678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.575" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 115.181062][ T5678] attempt to access beyond end of device [ 115.181062][ T5678] loop1: rw=34817, want=79880, limit=40427 [ 115.196372][ T5678] attempt to access beyond end of device [ 115.196372][ T5678] loop1: rw=34817, want=81920, limit=40427 [ 115.329787][ T4188] attempt to access beyond end of device [ 115.329787][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 115.388263][ T4228] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.667994][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 115.761747][ T5729] loop1: detected capacity change from 0 to 2048 [ 115.804751][ T5734] loop3: detected capacity change from 0 to 512 [ 115.866792][ T5734] EXT4-fs (loop3): 1 orphan inode deleted [ 115.875407][ T5734] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=remount-ro,debug_want_extra_isize=0x0000000000000036,user_xattr,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 115.966041][ T5729] loop1: detected capacity change from 0 to 256 [ 115.998413][ T4228] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 116.007781][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.016192][ T4228] usb 5-1: Product: syz [ 116.031922][ T4228] usb 5-1: Manufacturer: syz [ 116.040962][ T4228] usb 5-1: SerialNumber: syz [ 116.067284][ T4228] usb 5-1: config 0 descriptor?? [ 116.086845][ T5741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.592'. [ 116.343657][ T4228] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 003 [ 116.359015][ T5751] loop2: detected capacity change from 0 to 2048 [ 116.444226][ T5751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.542764][ T4228] usb 5-1: USB disconnect, device number 3 [ 117.404556][ T5767] loop1: detected capacity change from 0 to 40427 [ 117.515761][ T5767] F2FS-fs (loop1): invalid crc value [ 117.554711][ T5767] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.736106][ T5767] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.887389][ T4188] attempt to access beyond end of device [ 117.887389][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 117.985805][ T5820] loop2: detected capacity change from 0 to 256 [ 118.098939][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 118.115330][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 118.236194][ T5826] loop2: detected capacity change from 0 to 512 [ 118.272040][ T5826] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 118.291947][ T5826] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 118.304481][ T5826] System zones: 1-12 [ 118.312130][ T5826] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.324268][ T5826] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.629: invalid indirect mapped block 12 (level 1) [ 118.350023][ T5826] EXT4-fs (loop2): Remounting filesystem read-only [ 118.356576][ T5826] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.629: invalid indirect mapped block 2 (level 2) [ 118.376110][ T5826] EXT4-fs (loop2): Remounting filesystem read-only [ 118.384176][ T5826] EXT4-fs (loop2): 1 truncate cleaned up [ 118.390046][ T5826] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none. [ 118.735613][ T5839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 119.057426][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 119.089794][ T5855] device erspan0 entered promiscuous mode [ 119.983779][ T5904] loop3: detected capacity change from 0 to 512 [ 120.001409][ T5695] kernel write not supported for file /snd/seq (pid: 5695 comm: kworker/1:19) [ 120.025104][ T4228] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 120.087496][ T5904] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.661: bg 0: block 5: invalid block bitmap [ 120.090212][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 120.118859][ T5904] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 120.150522][ T5904] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.661: invalid indirect mapped block 3 (level 2) [ 120.256523][ T5904] EXT4-fs (loop3): 2 truncates cleaned up [ 120.269415][ T5904] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.361936][ T5917] loop2: detected capacity change from 0 to 1024 [ 120.478342][ T4228] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 120.516911][ T4228] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.537576][ T5917] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 120.553250][ T5917] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.588015][ T4228] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.599261][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 120.611867][ T5926] [U]  [ 120.615170][ T5926] [U] K{ [ 120.618871][ T4228] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 120.648552][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.658334][ T5926] [U] T 1ŠFFˊ`GJǘGO/MC [ 120.676493][ T5917] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,nouid32,noblock_validity,quota,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,dioread_nolock,,errors=continue. Quota mode: writeback. [ 120.707228][ T4228] usb 2-1: config 0 descriptor?? [ 120.712528][ T5917] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.735074][ T5926] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 120.798917][ T5883] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.816595][ T5926] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 120.830202][ T5926] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 120.865940][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.876760][ T5926] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 120.902027][ T5926] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 120.913907][ T5926] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 120.937822][ T5926] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 121.059977][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.074025][ T5926] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 121.105828][ T5926] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 121.120416][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 121.135417][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 121.154465][ T5926] [U] 22Ʃ۩X?0;3U [ 121.162491][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.677'. [ 121.173205][ T5926] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 121.198215][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.214308][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.677'. [ 121.230420][ T5926] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 121.241352][ T5926] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 121.251916][ T5926] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 121.259201][ T5926] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 121.272297][ T5926] [U] EC [ 121.276322][ T5926] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 121.329812][ T5925] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 121.361223][ T4228] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x0 [ 121.374502][ T4228] holtek_kbd 0003:04D9:A055.0006: unbalanced collection at end of report description [ 121.387784][ T4228] holtek_kbd: probe of 0003:04D9:A055.0006 failed with error -22 [ 121.564266][ T5694] usb 2-1: USB disconnect, device number 2 [ 121.614843][ T5959] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.675042][ T5961] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 121.867034][ T5969] program syz.2.691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.938112][ T4228] Bluetooth: hci2: command 0x0401 tx timeout [ 122.706859][ T6004] loop3: detected capacity change from 0 to 64 [ 122.773066][ T6004] Trying to free block not in datazone [ 123.151969][ T6020] loop4: detected capacity change from 0 to 2048 [ 123.232238][ T6020] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 123.245992][ T6028] input: syz0 as /devices/virtual/input/input10 [ 123.376245][ T6020] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 123.425381][ T6020] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 123.445159][ T6020] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.445159][ T6020] [ 123.457718][ T6020] EXT4-fs (loop4): Total free blocks count 0 [ 123.464173][ T6035] loop2: detected capacity change from 0 to 128 [ 123.473500][ T6020] EXT4-fs (loop4): Free/Dirty block details [ 123.484502][ T6020] EXT4-fs (loop4): free_blocks=2415919504 [ 123.493927][ T6020] EXT4-fs (loop4): dirty_blocks=32 [ 123.503279][ T6020] EXT4-fs (loop4): Block reservation details [ 123.514486][ T6020] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 123.536332][ T6035] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 123.564339][ T6035] hpfs: filesystem error: improperly stopped [ 123.575486][ T6036] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 123.593992][ T6035] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 123.611349][ T6035] hpfs: You really don't want any checks? You are crazy... [ 123.627228][ T6035] hpfs: hpfs_map_sector(): read error [ 123.633835][ T6036] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.633835][ T6036] [ 123.638966][ T6035] hpfs: code page support is disabled [ 123.658261][ T6035] hpfs: hpfs_map_4sectors(): unaligned read [ 123.678331][ T6035] hpfs: hpfs_map_4sectors(): unaligned read [ 123.684358][ T6035] hpfs: filesystem error: unable to find root dir [ 123.779536][ T6033] loop3: detected capacity change from 0 to 32768 [ 123.847503][ T6033] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.720 (6033) [ 123.887041][ T6033] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 123.918387][ T6033] BTRFS info (device loop3): force zlib compression, level 3 [ 123.967823][ T6033] BTRFS info (device loop3): turning on flush-on-commit [ 123.988051][ T6033] BTRFS info (device loop3): max_inline at 4096 [ 123.994357][ T6033] BTRFS info (device loop3): using free space tree [ 124.020033][ T6033] BTRFS info (device loop3): has skinny extents [ 124.203862][ T6033] BTRFS info (device loop3): enabling ssd optimizations [ 125.281230][ T6115] netlink: 'syz.4.747': attribute type 3 has an invalid length. [ 125.319534][ T6115] __nla_validate_parse: 1 callbacks suppressed [ 125.319549][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 125.592232][ T6129] loop4: detected capacity change from 0 to 16 [ 125.629789][ T6129] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 125.648107][ T5693] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 125.957461][ T6106] loop2: detected capacity change from 0 to 40427 [ 126.004685][ T6106] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 126.037055][ T6106] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 126.069587][ T5693] usb 4-1: config 9 has an invalid interface number: 129 but max is 0 [ 126.078170][ T5693] usb 4-1: config 9 has no interface number 0 [ 126.084316][ T5693] usb 4-1: config 9 interface 129 has no altsetting 0 [ 126.098364][ T6106] F2FS-fs (loop2): invalid crc value [ 126.144792][ T6106] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 126.248626][ T5693] usb 4-1: New USB device found, idVendor=154b, idProduct=f00b, bcdDevice= 9.b0 [ 126.265549][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.284477][ T6106] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 126.291758][ T6106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.294470][ T5693] usb 4-1: Product: syz [ 126.313975][ T6124] ODEBUG: Out of memory. ODEBUG disabled [ 126.358062][ T5693] usb 4-1: Manufacturer: syz [ 126.362721][ T5693] usb 4-1: SerialNumber: syz [ 126.444471][ T4199] attempt to access beyond end of device [ 126.444471][ T4199] loop2: rw=2049, want=45104, limit=40427 [ 126.719967][ T5693] usb-storage 4-1:9.129: USB Mass Storage device detected [ 126.745356][ T5693] usb-storage 4-1:9.129: Quirks match for vid 154b pid f00b: 2000000 [ 126.860826][ T5693] usb 4-1: USB disconnect, device number 4 [ 127.054409][ T6169] loop2: detected capacity change from 0 to 4096 [ 127.313340][ T6181] loop3: detected capacity change from 0 to 64 [ 127.422957][ T6183] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 127.511926][ T6185] loop2: detected capacity change from 0 to 2048 [ 127.628385][ T6185] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 127.694500][ T6185] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 127.763616][ T6185] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 127.838860][ T6185] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.838860][ T6185] [ 127.857506][ T6185] EXT4-fs (loop2): Total free blocks count 0 [ 127.868140][ T6185] EXT4-fs (loop2): Free/Dirty block details [ 127.879450][ T6185] EXT4-fs (loop2): free_blocks=2415919504 [ 127.889480][ T6185] EXT4-fs (loop2): dirty_blocks=32 [ 127.907976][ T6185] EXT4-fs (loop2): Block reservation details [ 127.918166][ T6185] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 127.935206][ T6191] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 127.967977][ T6191] EXT4-fs (loop2): This should not happen!! Data will be lost [ 127.967977][ T6191] [ 128.089206][ T4274] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.177148][ T6200] loop2: detected capacity change from 0 to 1024 [ 128.481051][ T6211] loop4: detected capacity change from 0 to 512 [ 128.509796][ T4274] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.546464][ T4274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.574944][ T4274] usb 4-1: config 0 descriptor?? [ 128.589975][ T6211] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 128.629370][ T4274] cp210x 4-1:0.0: cp210x converter detected [ 128.632075][ T6211] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.684053][ T6214] loop2: detected capacity change from 0 to 8192 [ 128.939841][ T6220] bridge0: port 1(bridge_slave_0) entered listening state [ 128.990161][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.073586][ T4274] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 129.130732][ T4274] usb 4-1: cp210x converter now attached to ttyUSB0 [ 129.172714][ T6227] loop4: detected capacity change from 0 to 1024 [ 129.218120][ T6227] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 129.256645][ T6227] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.343077][ T4274] usb 4-1: USB disconnect, device number 5 [ 129.366516][ T6227] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 129.377350][ T4274] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.408973][ T4274] cp210x 4-1:0.0: device disconnected [ 130.142135][ T6262] netlink: 'syz.3.798': attribute type 11 has an invalid length. [ 130.199618][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 130.648208][ T4274] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.672663][ T6124] Set syz1 is full, maxelem 65536 reached [ 130.841752][ T6267] loop4: detected capacity change from 0 to 32768 [ 130.912061][ T6267] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 130.918146][ T4274] usb 3-1: Using ep0 maxpacket: 16 [ 131.024206][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 131.060658][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 131.080013][ T4274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.103523][ T4274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.103594][ T4274] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.103621][ T4274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.109155][ T4274] usb 3-1: config 0 descriptor?? [ 131.521753][ T6328] hugetlbfs: Bad value 'g' for mount option 'size' [ 131.521753][ T6328] [ 131.758000][ T4228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.808847][ T4274] usbhid 3-1:0.0: can't add hid device: -71 [ 131.814856][ T4274] usbhid: probe of 3-1:0.0 failed with error -71 [ 131.827842][ T6341] misc userio: Begin command sent, but we're already running [ 131.830477][ T4274] usb 3-1: USB disconnect, device number 6 [ 131.895120][ T6337] loop4: detected capacity change from 0 to 32768 [ 131.934727][ T6337] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.829 (6337) [ 131.960676][ T6343] netlink: 'syz.3.832': attribute type 29 has an invalid length. [ 131.971917][ T6343] netlink: 'syz.3.832': attribute type 29 has an invalid length. [ 131.984867][ T6337] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 131.997706][ T6337] BTRFS info (device loop4): force zlib compression, level 3 [ 132.007273][ T6337] BTRFS info (device loop4): turning on flush-on-commit [ 132.023060][ T6337] BTRFS info (device loop4): max_inline at 4096 [ 132.029930][ T6337] BTRFS info (device loop4): using free space tree [ 132.036577][ T6337] BTRFS info (device loop4): has skinny extents [ 132.124289][ T6337] BTRFS info (device loop4): enabling ssd optimizations [ 132.204061][ T4228] usb 2-1: unable to get BOS descriptor or descriptor too short [ 132.296120][ T6346] loop3: detected capacity change from 0 to 32768 [ 132.309508][ T4228] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 132.468345][ T6346] XFS (loop3): Mounting V5 Filesystem [ 132.565419][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 132.636302][ T4228] usb 2-1: string descriptor 0 read error: -22 [ 132.644270][ T4228] usb 2-1: New USB device found, idVendor=245f, idProduct=931c, bcdDevice= 0.40 [ 132.656960][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.657045][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.703026][ T4228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.721504][ T6346] XFS (loop3): Ending clean mount [ 132.976748][ T4198] XFS (loop3): Unmounting Filesystem [ 133.003800][ T4228] snd-usb-hiface: probe of 2-1:1.1 failed with error -22 [ 133.151534][ T6405] netlink: 'syz.2.843': attribute type 25 has an invalid length. [ 133.176607][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.843'. [ 133.228626][ T4228] snd-usb-hiface: probe of 2-1:1.2 failed with error -22 [ 133.587832][ T6413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.847'. [ 133.694325][ T6419] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 133.937975][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.309483][ T4229] usb 5-1: too many endpoints for config 1 interface 2 altsetting 248: 255, using maximum allowed: 30 [ 134.323298][ T4229] usb 5-1: config 1 interface 2 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 134.347020][ T4229] usb 5-1: config 1 interface 2 has no altsetting 0 [ 134.508271][ T4229] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 134.522314][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.536587][ T4229] usb 5-1: Product: syz [ 134.540870][ T4229] usb 5-1: Manufacturer: syz [ 134.545644][ T4229] usb 5-1: SerialNumber: syz [ 134.568521][ T5693] Bluetooth: hci5: command 0x1003 tx timeout [ 134.574626][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 134.584713][ T4228] usb 2-1: USB disconnect, device number 3 [ 134.633906][ T6449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.863'. [ 134.760887][ T6456] netlink: 64 bytes leftover after parsing attributes in process `syz.1.866'. [ 134.891387][ T4229] usb 5-1: 1:1 : no cluster descriptor [ 134.921530][ T4229] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 134.944946][ T4229] usb 5-1: selecting invalid altsetting 0 [ 134.981485][ T4229] usb 5-1: USB disconnect, device number 4 [ 135.261680][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.357845][ T6487] program syz.2.880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.589794][ T6502] loop2: detected capacity change from 0 to 128 [ 135.598702][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.785397][ T6512] loop2: detected capacity change from 0 to 512 [ 135.850653][ T6516] loop4: detected capacity change from 0 to 64 [ 135.869748][ T6512] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.884877][ T6512] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.888: bad orphan inode 131083 [ 135.903510][ T6512] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 135.933707][ T26] audit: type=1800 audit(1780538213.308:7): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.888" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 135.998118][ T4229] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 136.018156][ T4229] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 136.029955][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.090277][ T4229] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 136.194703][ T6523] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 136.513972][ T6540] loop3: detected capacity change from 0 to 256 [ 136.565407][ T6544] loop2: detected capacity change from 0 to 64 [ 136.648648][ T5693] Bluetooth: hci5: command 0x1001 tx timeout [ 136.654786][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 136.700279][ T6540] FAT-fs (loop3): Directory bread(block 64) failed [ 136.716733][ T6540] FAT-fs (loop3): Directory bread(block 65) failed [ 136.723918][ T6540] FAT-fs (loop3): Directory bread(block 66) failed [ 136.731283][ T6540] FAT-fs (loop3): Directory bread(block 67) failed [ 136.737967][ T6540] FAT-fs (loop3): Directory bread(block 68) failed [ 136.744689][ T6540] FAT-fs (loop3): Directory bread(block 69) failed [ 136.751451][ T6540] FAT-fs (loop3): Directory bread(block 70) failed [ 136.758305][ T6540] FAT-fs (loop3): Directory bread(block 71) failed [ 136.764925][ T6540] FAT-fs (loop3): Directory bread(block 72) failed [ 136.771534][ T6540] FAT-fs (loop3): Directory bread(block 73) failed [ 137.025532][ T6554] netlink: 'syz.3.905': attribute type 1 has an invalid length. [ 137.046242][ T6554] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.905'. [ 137.248057][ T4229] stv0680 2-1:4.0: Could not get descriptor 0200 [ 137.285717][ T6566] loop4: detected capacity change from 0 to 256 [ 137.368751][ T6566] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d) [ 137.468100][ T4229] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 137.485907][ T4229] stv0680 2-1:4.0: last error: 34, command = 0xf [ 137.513283][ T4229] usb 2-1: USB disconnect, device number 4 [ 137.711872][ T6568] loop3: detected capacity change from 0 to 32768 [ 137.803172][ T6568] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 137.884732][ T6588] loop2: detected capacity change from 0 to 1024 [ 137.923212][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 137.984124][ T6588] hfsplus: catalog searching failed [ 138.070051][ T9] hfsplus: b-tree write err: -5, ino 3 [ 138.728162][ T5693] Bluetooth: hci5: command 0x1009 tx timeout [ 138.902460][ T6613] loop2: detected capacity change from 0 to 32768 [ 138.951368][ T6613] JBD2: Ignoring recovery information on journal [ 138.982843][ T6613] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 139.013568][ T6613] JBD2: bad block at offset 32 [ 139.046604][ T6613] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.122525][ T6622] loop4: detected capacity change from 0 to 32768 [ 139.205053][ T4199] ocfs2: Unmounting device (7,2) on (node local) [ 139.227391][ T6622] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 139.227391][ T6622] [ 139.247109][ T6622] ERROR: (device loop4): remounting filesystem as read-only [ 139.255772][ T6622] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 139.255772][ T6622] [ 139.357997][ T5693] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.758380][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.078147][ T5693] usb 2-1: string descriptor 0 read error: -22 [ 140.084469][ T5693] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 140.094704][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.798170][ T5693] usb 2-1: current rate 18100 is different from the runtime rate 48000 [ 141.004733][ T5693] usb 2-1: USB disconnect, device number 5 [ 141.701381][ T6644] loop2: detected capacity change from 0 to 2048 [ 141.761737][ T6644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.798366][ T5693] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.181276][ T6646] loop4: detected capacity change from 0 to 32768 [ 142.194363][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.232054][ T6646] [ 142.232054][ T6646] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 142.232054][ T6646] [ 142.243379][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.255453][ T5693] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 142.272784][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.313360][ T6646] ERROR: (device loop4): ea_get: invalid ea.flag [ 142.313360][ T6646] [ 142.335509][ T5693] usb 4-1: config 0 descriptor?? [ 142.348017][ T6646] ERROR: (device loop4): remounting filesystem as read-only [ 142.499966][ T6648] loop2: detected capacity change from 0 to 32768 [ 142.554034][ T6648] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.951 (6648) [ 142.596928][ T6648] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 142.635842][ T6648] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 142.670501][ T6648] BTRFS info (device loop2): use zstd compression, level 3 [ 142.696155][ T6648] BTRFS info (device loop2): using free space tree [ 142.708570][ T6648] BTRFS info (device loop2): has skinny extents [ 143.078472][ T5693] hid-led 0003:1D34:000A.0007: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 143.116543][ T6648] BTRFS info (device loop2): enabling ssd optimizations [ 143.179240][ T5693] hid-led 0003:1D34:000A.0007: Dream Cheeky Webmail Notifier initialized [ 143.299258][ T5693] usb 4-1: USB disconnect, device number 6 [ 143.404146][ T6705] fido_id[6705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 143.959144][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 144.053054][ T6739] loop3: detected capacity change from 0 to 4096 [ 144.162645][ T6739] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 144.205092][ T6749] netlink: 'syz.1.987': attribute type 11 has an invalid length. [ 145.198365][ T6393] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.599721][ T6393] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 145.618004][ T6393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.653926][ T6393] usb 3-1: config 0 descriptor?? [ 145.666555][ T6810] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 145.701233][ T6393] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 145.744347][ T6795] loop4: detected capacity change from 0 to 32768 [ 146.118217][ T6393] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 146.462277][ T6845] user requested TSC rate below hardware speed [ 146.538110][ T6393] gspca_cpia1: usb_control_msg 02, error -71 [ 146.568857][ T6393] gspca_cpia1: usb_control_msg 05, error -71 [ 146.574912][ T6393] cpia1 3-1:0.0: unexpected systemstate: 00 [ 146.609130][ T6393] usb 3-1: USB disconnect, device number 7 [ 146.998021][ T6840] loop3: detected capacity change from 0 to 40427 [ 147.104874][ T6840] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 147.114260][ T6840] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 147.145226][ T6840] F2FS-fs (loop3): invalid crc_offset: 1 [ 147.184209][ T6840] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 147.363044][ T6840] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 147.380078][ T6840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.423974][ T6889] loop4: detected capacity change from 0 to 8 [ 147.507063][ T4198] attempt to access beyond end of device [ 147.507063][ T4198] loop3: rw=2049, want=45104, limit=40427 [ 147.541555][ T6889] SQUASHFS error: Unable to read inode 0x11f [ 147.886269][ T6912] loop4: detected capacity change from 0 to 1024 [ 148.049703][ T1173] hfsplus: b-tree write err: -5, ino 25 [ 148.055636][ T1173] hfsplus: b-tree write err: -5, ino 4 [ 148.068341][ T1173] hfsplus: b-tree write err: -5, ino 2 [ 148.100573][ T6924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1068'. [ 148.499190][ T6730] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 148.768136][ T6730] usb 5-1: Using ep0 maxpacket: 8 [ 148.870621][ T6947] loop3: detected capacity change from 0 to 256 [ 148.913726][ T6730] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 148.926494][ T6730] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 148.944574][ T6947] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 148.956757][ T6730] usb 5-1: config 6 has no interface number 0 [ 148.974439][ T6730] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.188139][ T6730] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 149.197248][ T6730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.219734][ T6730] usb 5-1: Product: syz [ 149.223996][ T6730] usb 5-1: Manufacturer: syz [ 149.229057][ T6730] usb 5-1: SerialNumber: syz [ 149.280521][ T6730] hso 5-1:6.2: Failed to find INT IN ep [ 149.448046][ T6730] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.612053][ T4232] usb 5-1: USB disconnect, device number 5 [ 149.878121][ T6730] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 149.889811][ T6730] usb 4-1: config 0 has no interface number 0 [ 149.936109][ T6730] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 149.956706][ T6730] usb 4-1: config 0 interface 216 altsetting 4 has an invalid endpoint with address 0xDB, skipping [ 149.977954][ T6730] usb 4-1: config 0 interface 216 has no altsetting 0 [ 149.995646][ T6730] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 150.011995][ T6730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.035177][ T6730] usb 4-1: config 0 descriptor?? [ 150.058460][ T6955] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.068455][ T6955] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.099900][ T6730] usb 4-1: NFC: intf ffff8880626f9000 id ffffffff8cb53340 [ 150.143693][ T6730] kernel write not supported for file /amidi2 (pid: 6730 comm: kworker/0:19) [ 150.303767][ T6730] usb 4-1: USB disconnect, device number 7 [ 151.334979][ T6989] loop3: detected capacity change from 0 to 40427 [ 151.396424][ T6989] F2FS-fs (loop3): invalid crc value [ 151.449175][ T6989] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.581653][ T6989] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 151.608428][ T6989] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.137737][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1112'. [ 152.268502][ T4229] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 152.314691][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 152.326821][ T26] audit: type=1326 audit(1780538229.698:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.3.1113" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a313dae59 code=0x0 [ 152.327331][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 152.370885][ T6962] Set syz1 is full, maxelem 65536 reached [ 152.640420][ T4229] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 152.655149][ T4229] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 152.675559][ T4229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.682866][ T4229] usb 5-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 152.698729][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.719061][ T4229] usb 5-1: config 0 descriptor?? [ 152.738540][ T7022] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.150692][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 153.183551][ T1110] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 153.210870][ T4229] wacom 0003:056A:002A.0008: unknown main item tag 0x3 [ 153.217812][ T4229] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 153.239075][ T4229] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 153.246127][ T4229] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 153.286308][ T4229] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 153.293803][ T4229] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 153.307818][ T4229] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 153.315314][ T4229] wacom 0003:056A:002A.0008: unknown main item tag 0x0 [ 153.348963][ T4229] wacom 0003:056A:002A.0008: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 153.368477][ T4229] wacom 0003:056A:002A.0008: hidraw0: USB HID v0.05 Device [HID 056a:002a] on usb-dummy_hcd.4-1/input0 [ 153.381520][ T4229] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:002A.0008/input/input14 [ 153.508203][ T4229] usb 5-1: USB disconnect, device number 6 [ 153.583878][ T1110] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 153.612885][ T1110] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 153.634505][ T1110] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 153.652734][ T1110] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 153.695253][ T1110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 153.726166][ T1110] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 153.882124][ T7092] fido_id[7092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 153.989722][ T1110] usb 3-1: string descriptor 0 read error: -22 [ 153.996113][ T1110] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 154.056503][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.089716][ T1110] usb 3-1: config 0 descriptor?? [ 154.108243][ T7069] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 154.128887][ T1110] hub 3-1:0.0: bad descriptor, ignoring hub [ 154.134873][ T1110] hub: probe of 3-1:0.0 failed with error -5 [ 154.168148][ T1110] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 154.415794][ T7115] vxcan0: tx address claim with dest, not broadcast [ 154.428247][ T6393] usb 3-1: USB disconnect, device number 8 [ 155.308165][ T7147] loop2: detected capacity change from 0 to 32768 [ 155.333144][ T7147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1169 (7147) [ 155.395873][ T7147] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 155.432363][ T7147] BTRFS info (device loop2): setting nodatasum [ 155.440066][ T7147] BTRFS info (device loop2): enabling auto defrag [ 155.446518][ T7147] BTRFS info (device loop2): disabling tree log [ 155.481618][ T7147] BTRFS info (device loop2): using free space tree [ 155.501284][ T7147] BTRFS info (device loop2): has skinny extents [ 155.924056][ T7147] BTRFS info (device loop2): enabling ssd optimizations [ 156.273390][ T4267] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4267) [ 156.367973][ T6729] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.376558][ T7193] program syz.4.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.729493][ T7063] Set syz1 is full, maxelem 65536 reached [ 156.768313][ T6729] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.777448][ T6729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.851493][ T6729] usb 4-1: config 0 descriptor?? [ 156.899311][ T6729] cp210x 4-1:0.0: cp210x converter detected [ 157.519317][ T7236] netem: incorrect ge model size [ 157.525123][ T7236] netem: change failed [ 157.538156][ T6729] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 157.557319][ T6729] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 157.575438][ T6729] usb 4-1: cp210x converter now attached to ttyUSB0 [ 157.611936][ T6729] usb 4-1: USB disconnect, device number 8 [ 157.631508][ T6729] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.662103][ T7240] team0: Device vlan2 is already an upper device of the team interface [ 157.672595][ T7242] input: syz1 as /devices/virtual/input/input19 [ 157.679025][ T6729] cp210x 4-1:0.0: device disconnected [ 157.768312][ T1110] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.312163][ T1110] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 158.342023][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.357453][ T1110] usb 5-1: Product: syz [ 158.374013][ T1110] usb 5-1: Manufacturer: syz [ 158.380276][ T1110] usb 5-1: SerialNumber: syz [ 158.396709][ T7273] program syz.2.1218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.406743][ T1110] usb 5-1: config 0 descriptor?? [ 158.620469][ T7286] binder: 7285:7286 ioctl c0306201 200000000480 returned -14 [ 158.699422][ T1110] int51x1: probe of 5-1:0.0 failed with error -71 [ 158.722141][ T1110] usb 5-1: USB disconnect, device number 7 [ 158.762411][ T6729] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.988168][ T6396] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 159.028058][ T6729] usb 3-1: Using ep0 maxpacket: 32 [ 159.168130][ T6729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.187946][ T6729] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.196961][ T6729] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 159.209435][ T6729] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 159.223643][ T6729] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.253056][ T6729] usb 3-1: config 1 interface 1 has no altsetting 0 [ 159.259869][ T6396] usb 4-1: Using ep0 maxpacket: 8 [ 159.378331][ T6396] usb 4-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 159.395070][ T6396] usb 4-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.416467][ T6396] usb 4-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.426840][ T6396] usb 4-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 159.440281][ T6729] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 159.458288][ T6396] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.464967][ T6396] usb 4-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 159.479951][ T6729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.491587][ T6729] usb 3-1: Product: syz [ 159.495785][ T6729] usb 3-1: Manufacturer: syz [ 159.502751][ T6396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.513874][ T6729] usb 3-1: SerialNumber: syz [ 159.544009][ T6396] usb 4-1: config 0 descriptor?? [ 159.645129][ T7305] loop4: detected capacity change from 0 to 40427 [ 159.666164][ T7305] F2FS-fs (loop4): Invalid Fs Meta Ino: node(2305) meta(2) root(3) [ 159.683681][ T7305] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.696762][ T7305] F2FS-fs (loop4): invalid crc value [ 159.711367][ T7305] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.795289][ T7305] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.806998][ T6729] usb 3-1: selecting invalid altsetting 0 [ 159.814007][ T7305] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.864068][ T7305] attempt to access beyond end of device [ 159.864068][ T7305] loop4: rw=10241, want=45104, limit=40427 [ 159.891864][ T4189] attempt to access beyond end of device [ 159.891864][ T4189] loop4: rw=2049, want=45112, limit=40427 [ 160.011028][ T6396] wacom 0003:056A:010E.0009: unbalanced collection at end of report description [ 160.028096][ T6729] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 160.035035][ T6396] wacom 0003:056A:010E.0009: parse failed [ 160.041287][ T6396] wacom: probe of 0003:056A:010E.0009 failed with error -22 [ 160.225534][ T6396] usb 4-1: USB disconnect, device number 9 [ 160.286448][ T6729] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 160.338257][ T6729] usb 3-1: USB disconnect, device number 9 [ 160.542479][ T7324] loop4: detected capacity change from 0 to 32768 [ 160.606074][ T7324] [ 160.606074][ T7324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.606074][ T7324] [ 160.625582][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.645299][ T26] audit: type=1800 audit(1780538238.018:9): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1240" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 160.698624][ T4189] [ 160.698624][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.698624][ T4189] [ 160.709618][ T4189] [ 160.709618][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 160.709618][ T4189] [ 161.060733][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1250'. [ 161.212257][ T7353] loop2: detected capacity change from 0 to 2048 [ 161.306985][ T7353] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.348759][ T7353] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.638971][ T7380] netlink: 'syz.3.1265': attribute type 5 has an invalid length. [ 161.662735][ T7380] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.672737][ T7380] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.681557][ T7380] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.690334][ T7380] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.711273][ T7380] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.720274][ T7380] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.729515][ T7380] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.738489][ T7380] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.783366][ T7384] loop4: detected capacity change from 0 to 2048 [ 161.858508][ T4267] loop4: p3 < > p4 < > [ 161.863090][ T4267] loop4: partition table partially beyond EOD, truncated [ 161.883617][ T4267] loop4: p3 start 4284289 is beyond EOD, truncated [ 161.928278][ T7384] loop4: p3 < > p4 < > [ 161.936002][ T7384] loop4: partition table partially beyond EOD, truncated [ 161.947203][ T7384] loop4: p3 start 4284289 is beyond EOD, truncated [ 162.098696][ T7396] __sock_release: fasync list not empty! [ 162.187147][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 162.301798][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 162.315730][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 162.481962][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 162.527310][ T7417] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 162.543738][ T7417] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 162.564357][ T7418] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 162.754646][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 163.048495][ T5693] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.216631][ T7458] lo speed is unknown, defaulting to 1000 [ 163.298016][ T5693] usb 5-1: Using ep0 maxpacket: 8 [ 163.418244][ T5693] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.435338][ T5693] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.478396][ T5693] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.499543][ T5693] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 163.532648][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.580622][ T5693] usb 5-1: config 0 descriptor?? [ 164.083978][ T5693] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 164.121545][ T5693] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 164.139750][ T5693] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 164.154679][ T5693] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 164.182990][ T5693] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 164.225007][ T5693] smartjoyplus 0003:6666:8804.000A: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.4-1/input0 [ 164.247359][ T5693] smartjoyplus 0003:6666:8804.000A: no output reports found [ 164.299270][ T5693] usb 5-1: USB disconnect, device number 8 [ 164.414904][ T7512] fido_id[7512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 164.535542][ T7491] loop3: detected capacity change from 0 to 40427 [ 164.654530][ T7491] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 164.674918][ T7491] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 164.693945][ T7491] F2FS-fs (loop3): invalid crc value [ 164.721215][ T7491] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.778046][ T6725] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.804111][ T7491] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 164.880007][ T7491] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.936647][ T7491] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x185/0x8f0 [ 164.967643][ T7491] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580 [ 165.022231][ T4198] attempt to access beyond end of device [ 165.022231][ T4198] loop3: rw=2049, want=45104, limit=40427 [ 165.090269][ T7538] loop4: detected capacity change from 0 to 512 [ 165.127661][ T7538] EXT4-fs (loop4): Ignoring removed bh option [ 165.174713][ T7538] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 165.184847][ T6725] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.218039][ T6725] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.240829][ T7538] EXT4-fs (loop4): 1 truncate cleaned up [ 165.247583][ T7538] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 165.380506][ T26] audit: type=1800 audit(1780538242.758:10): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1331" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 165.432544][ T6725] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.447910][ T6725] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.468746][ T6725] usb 3-1: Product: syz [ 165.476490][ T6725] usb 3-1: Manufacturer: syz [ 165.481194][ T6725] usb 3-1: SerialNumber: syz [ 165.516777][ T6725] usb 3-1: config 0 descriptor?? [ 165.795448][ T4229] usb 3-1: USB disconnect, device number 10 [ 166.034909][ T7564] loop4: detected capacity change from 0 to 2048 [ 166.221325][ T7564] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.855140][ T7596] loop2: detected capacity change from 0 to 2048 [ 166.903000][ T7596] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.975269][ T7602] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 167.003601][ T7602] netlink: 'syz.4.1359': attribute type 2 has an invalid length. [ 167.045598][ T7603] netlink: 'syz.4.1359': attribute type 1 has an invalid length. [ 167.082263][ T5693] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.121942][ T7603] netlink: 'syz.4.1359': attribute type 2 has an invalid length. [ 167.163423][ T7607] loop3: detected capacity change from 0 to 256 [ 167.237133][ T7610] loop4: detected capacity change from 0 to 512 [ 167.259275][ T7607] exfat: Deprecated parameter 'utf8' [ 167.278188][ T7607] exfat: Deprecated parameter 'namecase' [ 167.302775][ T7607] exfat: Deprecated parameter 'namecase' [ 167.322602][ T7610] EXT4-fs (loop4): Ignoring removed nobh option [ 167.366987][ T7607] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 167.420273][ T7610] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1363: corrupted in-inode xattr [ 167.458274][ T7610] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1363: couldn't read orphan inode 15 (err -117) [ 167.476179][ T7610] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,delalloc,debug_want_extra_isize=0x000000000000005a,usrjquota=,nouid32,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 167.546104][ T7620] lo speed is unknown, defaulting to 1000 [ 167.628044][ T5693] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 167.639876][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.651536][ T5693] usb 2-1: Product: syz [ 167.656895][ T5693] usb 2-1: Manufacturer: syz [ 167.666315][ T5693] usb 2-1: SerialNumber: syz [ 167.721439][ T5693] usb 2-1: config 0 descriptor?? [ 167.756601][ T7623] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.779925][ T5693] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 006 [ 167.834178][ T7625] netem: change failed [ 167.951128][ T7631] IPv6: addrconf: prefix option has invalid lifetime [ 168.015139][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.198235][ T5693] (null): failure reading functionality [ 168.242217][ T5693] i2c i2c-1: connected i2c-tiny-usb device [ 168.442992][ T4195] block nbd0: Receive control failed (result -32) [ 168.458676][ T5693] usb 2-1: USB disconnect, device number 6 [ 168.488389][ T6729] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 168.658250][ T6725] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.841475][ T7669] loop4: detected capacity change from 0 to 1024 [ 168.894183][ T7669] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 168.909400][ T6729] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.918428][ T6725] usb 4-1: Using ep0 maxpacket: 8 [ 168.919059][ T7669] System zones: 0-1, 3-12 [ 168.928380][ T6729] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.944078][ T7669] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,stripe=0x0000000000000fdc,debug,resgid=0x0000000000000000,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 168.948284][ T6729] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.980415][ T6729] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 168.991464][ T6729] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 169.049572][ T7669] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 169.069991][ T6725] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 169.081344][ T6725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.092625][ T6725] usb 4-1: config 0 has no interface number 0 [ 169.104522][ T4189] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 169.148978][ T6729] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.170441][ T6729] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.211807][ T7681] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1393'. [ 169.218408][ T6729] usb 3-1: Product: syz [ 169.225222][ T6729] usb 3-1: Manufacturer: syz [ 169.298659][ T6725] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 169.308875][ T6729] cdc_wdm 3-1:1.0: skipping garbage [ 169.314116][ T6729] cdc_wdm 3-1:1.0: skipping garbage [ 169.327966][ T6725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.357766][ T6729] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 169.363885][ T6725] usb 4-1: Product: syz [ 169.371907][ T6725] usb 4-1: Manufacturer: syz [ 169.377549][ T6729] cdc_wdm 3-1:1.0: Unknown control protocol [ 169.384165][ T6725] usb 4-1: SerialNumber: syz [ 169.401096][ T5693] kernel write not supported for file /uinput (pid: 5693 comm: kworker/1:17) [ 169.425315][ T6725] usb 4-1: config 0 descriptor?? [ 169.470004][ T6725] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 169.492303][ T6725] usb 4-1: No streaming interface found for terminal 6. [ 169.618684][ T7695] loop4: detected capacity change from 0 to 1024 [ 169.664977][ T7697] sch_fq: defrate 0 ignored. [ 169.725244][ T6725] usb 4-1: USB disconnect, device number 10 [ 169.773917][ T1240] hfsplus: b-tree write err: -5, ino 25 [ 169.799339][ T1240] hfsplus: b-tree write err: -5, ino 4 [ 169.809673][ T1240] hfsplus: b-tree write err: -5, ino 2 [ 170.157907][ T6725] usb 3-1: USB disconnect, device number 11 [ 170.710190][ T7752] syz.2.1427[7752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.710291][ T7752] syz.2.1427[7752] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.764088][ T7757] loop4: detected capacity change from 0 to 16 [ 170.870072][ T7757] erofs: (device loop4): mounted with root inode @ nid 36. [ 170.881298][ T7757] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 170.957429][ T7757] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 171.015205][ T7757] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 171.215812][ T7777] loop2: detected capacity change from 0 to 512 [ 171.258043][ T7777] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 171.336855][ T7774] loop3: detected capacity change from 0 to 8192 [ 171.379968][ T7774] FAT-fs (loop3): Unrecognized mount option "dts" or missing value [ 171.408152][ T7785] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 171.415296][ T7785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.422798][ T7788] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 171.429332][ T7788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 171.465635][ T7786] lo speed is unknown, defaulting to 1000 [ 171.546294][ T7788] vhci_hcd vhci_hcd.0: Device attached [ 171.624084][ T7785] vhci_hcd vhci_hcd.0: Device attached [ 171.762419][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 171.806237][ T7793] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 171.812824][ T7793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.828114][ T4229] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 171.956352][ T7793] vhci_hcd vhci_hcd.0: Device attached [ 172.018201][ T7800] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(5) [ 172.024789][ T7800] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.137179][ T7800] vhci_hcd vhci_hcd.0: Device attached [ 172.182025][ T7801] vhci_hcd: connection closed [ 172.186632][ T9] vhci_hcd: stop threads [ 172.212322][ T7802] vhci_hcd: connection closed [ 172.212565][ T7789] vhci_hcd: connection closed [ 172.217477][ T7787] vhci_hcd: connection reset by peer [ 172.238030][ T9] vhci_hcd: release socket [ 172.258880][ T9] vhci_hcd: disconnect device [ 172.288171][ T9] vhci_hcd: stop threads [ 172.292463][ T9] vhci_hcd: release socket [ 172.307200][ T9] vhci_hcd: disconnect device [ 172.317799][ T9] vhci_hcd: stop threads [ 172.329587][ T9] vhci_hcd: release socket [ 172.341931][ T9] vhci_hcd: disconnect device [ 172.359549][ T9] vhci_hcd: stop threads [ 172.379875][ T9] vhci_hcd: release socket [ 172.394603][ T9] vhci_hcd: disconnect device [ 172.399493][ T7783] loop4: detected capacity change from 0 to 32768 [ 172.507992][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 172.558429][ T7783] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 172.594551][ T7783] JBD2: Ignoring recovery information on journal [ 172.767943][ T6729] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 172.796580][ T7783] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 172.883411][ T7821] syzkaller0: tun_chr_ioctl cmd 35108 [ 173.003609][ T7826] program syz.1.1451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.027179][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 173.033942][ T23] usb 3-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 173.058302][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.076679][ T23] usb 3-1: Product: syz [ 173.087233][ T23] usb 3-1: Manufacturer: syz [ 173.106984][ T23] usb 3-1: SerialNumber: syz [ 173.183572][ T6729] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 173.198022][ T6729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.220110][ T6729] usb 4-1: config 0 descriptor?? [ 173.278687][ T6729] cp210x 4-1:0.0: cp210x converter detected [ 173.403259][ T7836] lo speed is unknown, defaulting to 1000 [ 173.451883][ T7841] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 173.532202][ T23] usb 3-1: USB disconnect, device number 12 [ 173.716927][ T6729] usb 4-1: cp210x converter now attached to ttyUSB0 [ 173.910873][ T23] usb 4-1: USB disconnect, device number 11 [ 173.932026][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.982753][ T23] cp210x 4-1:0.0: device disconnected [ 174.278337][ T5693] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 174.639217][ T5693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 174.818882][ T5693] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 174.848208][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.862976][ T5693] usb 5-1: Product: syz [ 174.872980][ T5693] usb 5-1: Manufacturer: syz [ 174.883096][ T5693] usb 5-1: SerialNumber: syz [ 174.901462][ T5693] usb 5-1: config 0 descriptor?? [ 175.169371][ T5693] usb 5-1: USB disconnect, device number 9 [ 176.034149][ T7918] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1493'. [ 176.101717][ T7918] netlink: 'syz.4.1493': attribute type 1 has an invalid length. [ 176.127415][ T7926] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 176.358545][ T7938] loop3: detected capacity change from 0 to 256 [ 176.404070][ T7943] loop4: detected capacity change from 0 to 1024 [ 176.733332][ T7951] loop2: detected capacity change from 0 to 512 [ 176.829080][ T7951] EXT4-fs (loop2): Ignoring removed orlov option [ 176.985519][ T7951] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 177.035189][ T7962] sctp: [Deprecated]: syz.4.1514 (pid 7962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.035189][ T7962] Use struct sctp_sack_info instead [ 177.048250][ T4229] vhci_hcd: vhci_device speed not set [ 177.075853][ T7951] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.111278][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'. [ 177.201381][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1515'. [ 177.771700][ T7991] loop2: detected capacity change from 0 to 256 [ 177.857638][ T7991] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 177.888424][ T6729] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.898332][ T7995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1529'. [ 178.066887][ T7970] loop4: detected capacity change from 0 to 32768 [ 178.161947][ T26] audit: type=1800 audit(1780538511.537:11): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1516" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 178.282130][ T8011] loop2: detected capacity change from 0 to 512 [ 178.308494][ T6729] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 178.349310][ T6729] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.425517][ T4238] read_mapping_page failed! [ 178.430463][ T4238] ERROR: (device loop4): txCommit: [ 178.430463][ T4238] [ 178.484278][ T4238] jfs_write_inode: jfs_commit_inode failed! [ 178.588225][ T6729] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 178.605708][ T6729] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 178.639233][ T6729] usb 2-1: Product: syz [ 178.653481][ T6729] usb 2-1: Manufacturer: syz [ 178.663984][ T6729] usb 2-1: SerialNumber: syz [ 178.677725][ T6729] usb 2-1: config 0 descriptor?? [ 178.718395][ T7985] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.752352][ T6729] usb 2-1: selecting invalid altsetting 0 [ 178.925613][ T8029] loop2: detected capacity change from 0 to 2048 [ 178.965862][ T7985] usb 2-1: selecting invalid altsetting 0 [ 178.985463][ T6396] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.008164][ T8029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.018540][ T7985] usb 2-1: 0:0: usb_set_interface failed (-22) [ 179.024762][ T7985] usb 2-1: selecting invalid altsetting 0 [ 179.040910][ T7985] usb 2-1: 0:0: usb_set_interface failed (-22) [ 179.055473][ T7985] usb 2-1: selecting invalid altsetting 0 [ 179.069439][ T7985] usb 2-1: 0:0: usb_set_interface failed (-22) [ 179.086971][ T7985] usb 2-1: selecting invalid altsetting 0 [ 179.102759][ T7985] usb 2-1: 0:0: usb_set_interface failed (-22) [ 179.147092][ T7985] usb 2-1: selecting invalid altsetting 0 [ 179.166665][ T7985] usb 2-1: 0:0: usb_set_interface failed (-22) [ 179.195824][ T23] usb 2-1: USB disconnect, device number 7 [ 179.376801][ T8042] input: syz1 as /devices/virtual/input/input20 [ 179.408183][ T6396] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 179.436132][ T6396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.471377][ T8047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1552'. [ 179.487952][ T6396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.515166][ T8047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1552'. [ 179.530803][ T6396] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 179.654040][ T6396] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 179.673074][ T6396] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 179.682795][ T8056] program syz.0.1556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.695631][ T6396] usb 4-1: Manufacturer: syz [ 179.711689][ T6396] usb 4-1: config 0 descriptor?? [ 179.813966][ T8054] loop2: detected capacity change from 0 to 4096 [ 179.860553][ T8054] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 179.884674][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 179.933807][ T8054] ntfs3: loop2: Failed to load $Extend. [ 179.974738][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 180.249772][ T6396] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 180.270806][ T6396] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 180.332579][ T6396] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 180.533084][ T6396] usb 4-1: USB disconnect, device number 12 [ 181.004982][ T8096] kvm [8095]: vcpu3, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 181.144090][ T8101] bridge0: port 3(vlan5) entered blocking state [ 181.173570][ T8101] bridge0: port 3(vlan5) entered disabled state [ 181.289828][ T8110] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1578'. [ 181.309802][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1578'. [ 181.452062][ T8119] loop4: detected capacity change from 0 to 64 [ 181.522594][ T8119] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 181.554792][ T8119] hfs: get root inode failed [ 181.788519][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'. [ 181.828148][ T8131] netlink: 580 bytes leftover after parsing attributes in process `syz.0.1588'. [ 181.889005][ T8134] loop4: detected capacity change from 0 to 2048 [ 181.947656][ T8134] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 182.004482][ T8134] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.317572][ T8157] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.377960][ T8157] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.438070][ T8157] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.446915][ T8157] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 182.509748][ T8157] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 182.527969][ T8157] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 182.549112][ T8157] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 182.568218][ T8157] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 183.031290][ T8180] ipt_CLUSTERIP: Please specify destination IP [ 183.336015][ T8203] sg_read: process 569 (syz.0.1619) changed security contexts after opening file descriptor, this is not allowed. [ 183.353313][ T8204] input: syz0 as /devices/virtual/input/input21 [ 183.624674][ T8215] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1626'. [ 183.846940][ T8228] loop2: detected capacity change from 0 to 256 [ 183.990906][ T8228] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 185.020692][ T6729] kernel read not supported for file /dsp1 (pid: 6729 comm: kworker/0:18) [ 185.350220][ T8254] loop4: detected capacity change from 0 to 40427 [ 185.412242][ T8254] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 185.480517][ T8254] F2FS-fs (loop4): invalid crc value [ 185.510161][ T8254] F2FS-fs (loop4): Found nat_bits in checkpoint [ 185.569178][ T6729] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.674798][ T8254] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.819895][ T4189] attempt to access beyond end of device [ 185.819895][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 185.836896][ T6729] usb 2-1: Using ep0 maxpacket: 8 [ 185.994891][ T6729] usb 2-1: config 0 has no interfaces? [ 186.174722][ T6729] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 186.194066][ T6729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.216944][ T6729] usb 2-1: Product: syz [ 186.227073][ T6729] usb 2-1: Manufacturer: syz [ 186.228843][ T4229] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 186.245448][ T6729] usb 2-1: SerialNumber: syz [ 186.263088][ T6729] usb 2-1: config 0 descriptor?? [ 186.541443][ T6396] usb 2-1: USB disconnect, device number 8 [ 186.608533][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.628892][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.738286][ T4229] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.747388][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.801266][ T4229] usb 3-1: SerialNumber: syz [ 186.832388][ T8312] loop4: detected capacity change from 0 to 4096 [ 186.879703][ T8312] EXT4-fs (loop4): Test dummy encryption mode enabled [ 186.887029][ T8312] EXT4-fs (loop4): Ignoring removed oldalloc option [ 186.957328][ T8312] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 186.973394][ T8312] System zones: 0-5 [ 186.997160][ T8312] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 187.081641][ T4229] usb 3-1: 0:2 : does not exist [ 187.299338][ T4229] usb 3-1: USB disconnect, device number 13 [ 187.590893][ T4408] udevd[4408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.926634][ T8378] loop4: detected capacity change from 0 to 128 [ 188.076670][ T8378] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none. [ 188.186112][ T8378] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.249525][ T8378] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 26915 (only 1 groups) [ 188.340102][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 188.584153][ T8417] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 188.617144][ T8423] loop7: detected capacity change from 0 to 7 [ 188.660847][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.664987][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.737635][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.750180][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 188.899074][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.910037][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 188.963999][ T8446] tipc: Enabling of bearer rejected, already enabled [ 189.006004][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.016986][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.029543][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.040541][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.052721][ T8452] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1717'. [ 189.109089][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.120135][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.180083][ T8460] tipc: Started in network mode [ 189.215278][ T8460] tipc: Node identity ac14140f, cluster identity 4711 [ 189.244223][ T8460] tipc: New replicast peer: 172.30.0.4 [ 189.264263][ T8460] tipc: Enabled bearer , priority 10 [ 189.281814][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1722'. [ 189.323066][ T8463] tipc: Disabling bearer [ 189.381076][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 189.494141][ T8477] Set syz1 is full, maxelem 65536 reached [ 189.683809][ T8485] loop3: detected capacity change from 0 to 4096 [ 189.781733][ T8490] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.892884][ T8492] loop4: detected capacity change from 0 to 2048 [ 189.947757][ T8492] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 189.991354][ T8492] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 190.042463][ T8492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.282586][ T8474] loop2: detected capacity change from 0 to 40427 [ 190.330656][ T8474] F2FS-fs (loop2): invalid crc value [ 190.355094][ T8474] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.484211][ T8474] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.947017][ T4199] attempt to access beyond end of device [ 190.947017][ T4199] loop2: rw=2049, want=40992, limit=40427 [ 191.052246][ T5693] Bluetooth: hci1: command 0x0406 tx timeout [ 191.065645][ T5693] Bluetooth: hci0: command 0x0406 tx timeout [ 191.077959][ T6396] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.090915][ T5693] Bluetooth: hci2: command 0x0406 tx timeout [ 191.120232][ T5693] Bluetooth: hci4: command 0x0406 tx timeout [ 191.648137][ T6396] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 191.657786][ T6396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.665917][ T6396] usb 2-1: Product: syz [ 191.670419][ T6396] usb 2-1: Manufacturer: syz [ 191.675044][ T6396] usb 2-1: SerialNumber: syz [ 191.728158][ T6729] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 191.737699][ T6396] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 191.918106][ T6725] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.978509][ T8548] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "\x22"[8548] [ 192.128219][ T6729] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 192.137653][ T6729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.148119][ T6729] usb 5-1: config 0 descriptor?? [ 192.202425][ T6729] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 192.339691][ T4229] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.358321][ T6725] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 192.369622][ T6725] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2015, setting to 1024 [ 192.408613][ T6729] gp8psk: usb in 128 operation failed. [ 192.498214][ T6396] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 192.568179][ T6725] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice= 0.40 [ 192.579482][ T4229] usb 4-1: Using ep0 maxpacket: 32 [ 192.579490][ T6725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.592900][ T6725] usb 3-1: Product: syz [ 192.597094][ T6725] usb 3-1: Manufacturer: syz [ 192.601800][ T6725] usb 3-1: SerialNumber: syz [ 192.668193][ T6729] gp8psk: FW Version = 220.37.51 (0xdc2533) Build 2136/100/214 [ 192.858667][ T4229] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 192.875741][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.884197][ T4229] usb 4-1: Product: syz [ 192.891211][ T6729] gp8psk: usb in 149 operation failed. [ 192.896709][ T6729] gp8psk: failed to get FPGA version [ 192.901822][ T4229] usb 4-1: Manufacturer: syz [ 192.907052][ T4229] usb 4-1: SerialNumber: syz [ 192.921484][ T4200] usb 2-1: USB disconnect, device number 9 [ 192.943369][ T6729] gp8psk: usb in 138 operation failed. [ 192.949116][ T6729] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 192.959749][ T4229] usb 4-1: config 0 descriptor?? [ 192.968874][ T6729] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 192.985449][ T6729] usb 5-1: USB disconnect, device number 10 [ 192.993435][ T6725] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 193.051026][ T6725] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 193.107779][ T6725] usb 3-1: USB disconnect, device number 14 [ 193.361788][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.365762][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 193.426738][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.447314][ T4229] airspy 4-1:0.0: Board ID: 00 [ 193.463128][ T4229] airspy 4-1:0.0: Firmware version: [ 193.528235][ T6396] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 193.536464][ T6396] ath9k_htc: Failed to initialize the device [ 193.573632][ T4200] usb 2-1: ath9k_htc: USB layer deinitialized [ 193.869180][ T4229] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 193.908415][ T4229] airspy 4-1:0.0: Registered as swradio24 [ 193.914210][ T4229] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 193.970184][ T4229] usb 4-1: USB disconnect, device number 13 [ 194.012124][ T6725] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 194.094430][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.100834][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.183405][ T8616] netlink: 'syz.2.1788': attribute type 5 has an invalid length. [ 194.415660][ T8623] loop3: detected capacity change from 0 to 512 [ 194.441571][ T8625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1791'. [ 194.442103][ T8623] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.487317][ T8623] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1792: invalid indirect mapped block 256 (level 2) [ 194.502227][ T8623] EXT4-fs (loop3): 2 truncates cleaned up [ 194.512788][ T8623] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback. [ 194.533446][ T8623] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz.3.1792: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 194.553066][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.573394][ T8623] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 194.624542][ T6725] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 194.640279][ T6725] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 194.655036][ T6725] usb 5-1: Product: syz [ 194.663069][ T6725] usb 5-1: Manufacturer: syz [ 194.667762][ T6725] usb 5-1: SerialNumber: syz [ 194.688676][ T7748] ------------[ cut here ]------------ [ 194.694933][ T7748] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 194.705661][ T7748] WARNING: CPU: 0 PID: 7748 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 194.715745][ T7748] Modules linked in: [ 194.719695][ T7748] CPU: 0 PID: 7748 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 194.727274][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.737422][ T7748] Workqueue: phy5 ieee80211_roc_work [ 194.742784][ T7748] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 194.749095][ T7748] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 00 a0 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 01 6a 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 194.768798][ T7748] RSP: 0018:ffffc9000302f5c8 EFLAGS: 00010246 [ 194.774926][ T7748] RAX: ad39162d817b8e00 RBX: 0000000000000008 RCX: ffff8880737e0000 [ 194.782967][ T7748] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 194.790992][ T7748] RBP: 0000000000000054 R08: ffffc9000302f0e7 R09: 1ffff92000605e1c [ 194.799011][ T7748] R10: dffffc0000000000 R11: fffff52000605e1d R12: ffff888058768a28 [ 194.807011][ T7748] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.815053][ T7748] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 194.824048][ T7748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.830720][ T7748] CR2: 00007f1a321836b8 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 194.838762][ T7748] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.846767][ T7748] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.854808][ T7748] Call Trace: [ 194.858154][ T7748] [ 194.861124][ T7748] rate_control_send_low+0x194/0x790 [ 194.866454][ T7748] rate_control_get_rate+0x207/0x5c0 [ 194.871805][ T7748] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 194.877499][ T7748] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 194.883561][ T7748] ? sta_info_hash_lookup+0x53e/0x580 [ 194.888994][ T7748] ? ieee80211_queue_skb+0xbc/0x2060 [ 194.894332][ T7748] invoke_tx_handlers_late+0xaa/0x16a0 [ 194.899847][ T7748] ? ieee80211_tx_h_select_key+0x7a6/0x17f0 [ 194.905788][ T7748] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 194.911677][ T7748] ieee80211_tx+0x2d4/0x460 [ 194.916232][ T7748] ? ieee80211_skb_resize+0x630/0x630 [ 194.921722][ T7748] ? ieee80211_xmit+0x34c/0x470 [ 194.926619][ T7748] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 194.932493][ T7748] ieee80211_handle_roc_started+0x270/0x3f0 [ 194.938537][ T7748] _ieee80211_start_next_roc+0x832/0xbd0 [ 194.944230][ T7748] ieee80211_roc_work+0x2b/0x40 [ 194.949136][ T7748] process_one_work+0x85f/0x1010 [ 194.954131][ T7748] ? worker_detach_from_pool+0x240/0x240 [ 194.959826][ T7748] ? lockdep_hardirqs_off+0x70/0x100 [ 194.965147][ T7748] ? _raw_spin_lock_irq+0xb7/0xf0 [ 194.970235][ T7748] ? _raw_spin_lock_irqsave+0x100/0x100 [ 194.975836][ T7748] ? wq_worker_running+0x97/0x170 [ 194.981001][ T7748] worker_thread+0xaa6/0x1290 [ 194.985733][ T7748] ? lockdep_hardirqs_on+0x94/0x140 [ 194.991018][ T7748] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 194.996963][ T7748] kthread+0x436/0x520 [ 195.001085][ T7748] ? rcu_lock_release+0x20/0x20 [ 195.005971][ T7748] ? kthread_blkcg+0xd0/0xd0 [ 195.010635][ T7748] ret_from_fork+0x1f/0x30 [ 195.015109][ T7748] [ 195.018186][ T7748] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.025486][ T7748] CPU: 0 PID: 7748 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 195.033056][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.043148][ T7748] Workqueue: phy5 ieee80211_roc_work [ 195.048470][ T7748] Call Trace: [ 195.051772][ T7748] [ 195.054723][ T7748] dump_stack_lvl+0x188/0x250 [ 195.059436][ T7748] ? show_regs_print_info+0x20/0x20 [ 195.064666][ T7748] ? load_image+0x400/0x400 [ 195.069226][ T7748] panic+0x2e5/0x810 [ 195.073161][ T7748] ? bpf_jit_dump+0xd0/0xd0 [ 195.077712][ T7748] ? ret_from_fork+0x1f/0x30 [ 195.082337][ T7748] ? __rate_control_send_low+0x630/0x880 [ 195.088004][ T7748] __warn+0x248/0x2b0 [ 195.092008][ T7748] ? __rate_control_send_low+0x630/0x880 [ 195.097689][ T7748] report_bug+0x1b7/0x2e0 [ 195.102087][ T7748] handle_bug+0x3a/0x70 [ 195.106277][ T7748] exc_invalid_op+0x16/0x40 [ 195.110809][ T7748] asm_exc_invalid_op+0x16/0x20 [ 195.115688][ T7748] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 195.121969][ T7748] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 00 a0 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 e0 01 6a 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 195.141597][ T7748] RSP: 0018:ffffc9000302f5c8 EFLAGS: 00010246 [ 195.147697][ T7748] RAX: ad39162d817b8e00 RBX: 0000000000000008 RCX: ffff8880737e0000 [ 195.155693][ T7748] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 195.163702][ T7748] RBP: 0000000000000054 R08: ffffc9000302f0e7 R09: 1ffff92000605e1c [ 195.171699][ T7748] R10: dffffc0000000000 R11: fffff52000605e1d R12: ffff888058768a28 [ 195.179697][ T7748] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.187715][ T7748] ? __rate_control_send_low+0x630/0x880 [ 195.193398][ T7748] rate_control_send_low+0x194/0x790 [ 195.198729][ T7748] rate_control_get_rate+0x207/0x5c0 [ 195.204064][ T7748] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 195.209754][ T7748] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 195.215778][ T7748] ? sta_info_hash_lookup+0x53e/0x580 [ 195.221196][ T7748] ? ieee80211_queue_skb+0xbc/0x2060 [ 195.226515][ T7748] invoke_tx_handlers_late+0xaa/0x16a0 [ 195.232008][ T7748] ? ieee80211_tx_h_select_key+0x7a6/0x17f0 [ 195.237969][ T7748] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 195.243828][ T7748] ieee80211_tx+0x2d4/0x460 [ 195.248371][ T7748] ? ieee80211_skb_resize+0x630/0x630 [ 195.253796][ T7748] ? ieee80211_xmit+0x34c/0x470 [ 195.258689][ T7748] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 195.264531][ T7748] ieee80211_handle_roc_started+0x270/0x3f0 [ 195.270471][ T7748] _ieee80211_start_next_roc+0x832/0xbd0 [ 195.276153][ T7748] ieee80211_roc_work+0x2b/0x40 [ 195.281037][ T7748] process_one_work+0x85f/0x1010 [ 195.286020][ T7748] ? worker_detach_from_pool+0x240/0x240 [ 195.291689][ T7748] ? lockdep_hardirqs_off+0x70/0x100 [ 195.297013][ T7748] ? _raw_spin_lock_irq+0xb7/0xf0 [ 195.302065][ T7748] ? _raw_spin_lock_irqsave+0x100/0x100 [ 195.307639][ T7748] ? wq_worker_running+0x97/0x170 [ 195.312697][ T7748] worker_thread+0xaa6/0x1290 [ 195.317406][ T7748] ? lockdep_hardirqs_on+0x94/0x140 [ 195.322632][ T7748] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 195.328730][ T7748] kthread+0x436/0x520 [ 195.332819][ T7748] ? rcu_lock_release+0x20/0x20 [ 195.337692][ T7748] ? kthread_blkcg+0xd0/0xd0 [ 195.342309][ T7748] ret_from_fork+0x1f/0x30 [ 195.346761][ T7748] [ 195.350164][ T7748] Kernel Offset: disabled [ 195.354904][ T7748] Rebooting in 86400 seconds..