last executing test programs: 26.341605678s ago: executing program 1 (id=956): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 26.118905035s ago: executing program 1 (id=959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}]}}]}, 0x40}}, 0x0) 25.997473129s ago: executing program 1 (id=961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x80000000, [0x64b3d7eb, 0x4], 0xd3, 0x21, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @private1, @mcast2, @private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x10}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x653afb6a7eb5282b) 25.764572516s ago: executing program 1 (id=963): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x7, 0xee6, &(0x7f0000001ec0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 25.499374735s ago: executing program 1 (id=966): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) 24.579398494s ago: executing program 1 (id=973): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@dioread_lock}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2042, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x4, 0x1000000000000}) 24.195870925s ago: executing program 32 (id=973): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@dioread_lock}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2042, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x4, 0x1000000000000}) 4.841347707s ago: executing program 0 (id=1116): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000040)={0xffffffffffffffff, 0x3, {0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x2, 0x2, 0x15, "5f9375be473862906df623e9a134335101feff1d342c7ee864e46d8f13ee42405489d0742e8031cc48a0124be6a5b5ff8d368d166cb945a65f46414093a142f7", "42df62bfa3d2cfdbcda182017ab32acffe839a6cded7e21a05a49df0f930a65940788fd229f218def2b6dcdd4c17d6050aefa2d4c02f5cb81e8bc09ad83c7a6a", "75f421a4ecabf3391375496be6b9c86c71695a900b3adeca089712d7ec33d056", [0x3, 0x4]}}) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.258520245s ago: executing program 4 (id=1121): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0xd, '\x00', @p_u8=&(0x7f0000000040)}}) 3.958973335s ago: executing program 4 (id=1123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000002c0)=""/17, &(0x7f00000000c0)=0x11) 3.950063244s ago: executing program 3 (id=1125): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.674873633s ago: executing program 4 (id=1127): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x4}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 3.645129214s ago: executing program 3 (id=1128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000160001002bbd7000fbdbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010101000000000000000000000000000004d533000000ac1414100000000000000000000808f8635d790000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffc7ffffffff00000000030000000000000002000000000002000000000000000100000000000000faffffff2abd700000000000020002060100000000000000080000004f0700"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfc, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x1081}, 0x4000) 3.383212403s ago: executing program 3 (id=1131): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000002640)='memory.stat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002680)={0x2020}, 0x2020) 3.1643014s ago: executing program 5 (id=1134): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xd, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 3.034953584s ago: executing program 3 (id=1136): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000008c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trr\nD'], 0xa) 3.005191515s ago: executing program 0 (id=1137): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) 2.941885467s ago: executing program 5 (id=1138): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.792604641s ago: executing program 3 (id=1140): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000000040)=ANY=[], 0xff, 0x5ec9, &(0x7f00000097c0)="$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") mknod(&(0x7f000001f480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.772191242s ago: executing program 0 (id=1141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x28}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 2.674938325s ago: executing program 4 (id=1142): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="91") 2.568995448s ago: executing program 5 (id=1143): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.548618509s ago: executing program 0 (id=1144): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) set_mempolicy_home_node(&(0x7f000094d000/0x1000)=nil, 0x1000, 0x0, 0x0) 2.21010802s ago: executing program 5 (id=1146): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x8, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.913096929s ago: executing program 5 (id=1147): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") creat(&(0x7f0000000100)='./file1\x00', 0xe0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa, 0xffffffffffffffff}], ['\x00']}) 1.412899195s ago: executing program 3 (id=1150): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$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") creat(&(0x7f0000000240)='./file1\x00', 0x2c78c3279a909d5) lsetxattr$security_ima(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000340)=@sha1={0x1, "a8b9f870a34032cb1d9f2b21e968f06026cb07a4"}, 0x15, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 1.301232759s ago: executing program 0 (id=1151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d01}]}) 980.885658ms ago: executing program 2 (id=1153): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x60400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40007}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r0}, 0xc) 804.625144ms ago: executing program 0 (id=1154): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f00000019c0)=[{0x3, 0x0, 0x0, 0x0}, {0xc, 0x201, 0x0, 0x0}, {0xc, 0x2401, 0x50, &(0x7f0000000900)="30dc48cb46e4208a59b26684ac5005119c2e6dfd62832df910de4fc14cee9811bf98ce9ae05613e5a5075d9f488f08a382186f070406023c5e7ba0f4a501cc464894ce9a53acd85de44063553342a2b2"}], 0x3}) 758.287595ms ago: executing program 2 (id=1155): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000680)="c3ee7f670000ec6f83b4241531b500000000000033a42c9550f50aaab05450dc23d925b9e6a1b56f320fed50c64390b611b0cc67e2e658d909c57270d30b39d30d0b381d0000000000000000f8ff0000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x401}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000001c0), 0xa, 0x1038c3) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 577.406151ms ago: executing program 2 (id=1156): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x3, 0x6}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000001100)={0x4000000, 0x4, 0x4}) close(r0) 474.913215ms ago: executing program 4 (id=1157): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0xff, 0x204, &(0x7f0000000300)="$eJzs3c1qE1EUAOCTNM2PuOhOEIQRF7oq6hNUpIIYECpZ6E7QlVm1m9RN+wSufQWfwpfxAaSrbORKnMmP6RhjIDNVv2/TM/fc2/szZJJNTlLkvtz4GN1uI5oHcRDjRuxFM6bOo9TnD+XtAMAVN04pvqZc3WsBAKqxxvv/t4qXBABs2YuXr5496vcPj7KsG3FxPhqMBvnfPP/kaf/wfvbD3nzUxWg02JnlH2TLnx0m+d24VuQf5uOzWbodEYN23LuT5ye5x8/72c/jO/Fmy3sHAAAAAAAAAAAAAAAAAAAAAIC63IpsqrS+z/7+cr5X5POrhfpAS/V7WnGzVVzOywOlsyo2BQAAAAAAAAAAAAAAAAAAAH+Zk9P3714Ph2+P50EnIhZbWiV9fh00in+8Vuf6g2ZsNrxXbPOPRo13JgfeKI5ouxvsld/cdYJoXZW7s2mQVTBXb+XxpjQJyl8F07IYs5bGUp92RKye/e7Rposfp5SGn24fn5xGWtl5/ozoVPpEAgAAAAAAAAAAAAAAAACA/9fCt74v6daxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACowfz3/yfB5ZaVwVlEXI/fdp7OtRvdWvcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAv+t7AAAA//8lBiJZ") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x189800, 0x131) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) 403.120657ms ago: executing program 2 (id=1158): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4000000b}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) 202.074253ms ago: executing program 5 (id=1159): inotify_init1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) 138.900215ms ago: executing program 2 (id=1160): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0xfffffffc, 0x60, {0xa, 0xffffffff}, 0x0, 0x101}) 51.031728ms ago: executing program 4 (id=1161): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @local}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 0s ago: executing program 2 (id=1162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x9, 0x9, 0x6, 0x8084, 0x3, 0x2, 0x2]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): ][ T4318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.912309][ T4817] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 80.038527][ T4817] exFAT-fs (loop1): error, broken FAT chain. [ 80.060224][ T4817] exFAT-fs (loop1): Filesystem has been set read-only [ 80.091268][ T4817] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880554a07e0 iblock : 0, err : -5) [ 80.096914][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 80.119153][ T4823] capability: warning: `syz.0.178' uses deprecated v2 capabilities in a way that may be insecure [ 80.129845][ T4318] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 80.192286][ T4318] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 80.201822][ T4318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 80.219908][ T4318] usb 3-1: config 1 has no interface number 0 [ 80.232112][ T4318] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.247902][ T4318] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 80.280750][ T4318] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 80.303096][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.340735][ T4318] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 80.469620][ T4832] loop0: detected capacity change from 0 to 2048 [ 80.535544][ T4318] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 80.562350][ T4832] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 80.652037][ T4832] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 80.715385][ T4832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.052262][ T3598] usb 3-1: USB disconnect, device number 2 [ 81.078387][ T3598] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 81.121449][ T4824] loop4: detected capacity change from 0 to 32768 [ 81.220495][ T4824] XFS (loop4): Mounting V5 Filesystem [ 81.381650][ T4824] XFS (loop4): Ending clean mount [ 81.723115][ T4281] XFS (loop4): Unmounting Filesystem [ 81.882179][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.966640][ T4880] loop3: detected capacity change from 0 to 128 [ 81.980893][ T4880] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 82.000403][ T4880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.074764][ T22] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.095741][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 82.125804][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.162115][ T22] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.182250][ T22] usb 2-1: Product: syz [ 82.186471][ T22] usb 2-1: Manufacturer: syz [ 82.201274][ T22] usb 2-1: SerialNumber: syz [ 82.222701][ T22] usb 2-1: config 0 descriptor?? [ 82.261168][ T22] usb 2-1: selecting invalid altsetting 0 [ 82.530069][ T127] usb 2-1: USB disconnect, device number 2 [ 82.559717][ T4891] loop2: detected capacity change from 0 to 2048 [ 82.588320][ T4891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.774867][ T4895] loop0: detected capacity change from 0 to 256 [ 82.969407][ T4481] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.098839][ T4901] loop0: detected capacity change from 0 to 8192 [ 83.135820][ T4901] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 83.162084][ T4481] usb 5-1: Using ep0 maxpacket: 16 [ 83.166048][ T4901] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 83.180413][ T4901] REISERFS (device loop0): using ordered data mode [ 83.185443][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.187119][ T4901] reiserfs: using flush barriers [ 83.206544][ T4901] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.224556][ T4901] REISERFS (device loop0): checking transaction log (loop0) [ 83.300375][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.362337][ T4481] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 83.377269][ T4901] REISERFS (device loop0): Using tea hash to sort names [ 83.382552][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.407488][ T4901] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 83.436702][ T4481] usb 5-1: config 0 descriptor?? [ 83.884077][ T4481] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 83.891400][ T4481] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 83.905810][ T4922] netlink: 7 bytes leftover after parsing attributes in process `syz.1.218'. [ 83.942026][ T4481] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 83.968076][ T4481] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 83.982057][ T4481] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 84.025302][ T4481] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 84.100272][ T4481] corsair 0003:1B1C:1B02.0001: Read invalid backlight brightness: 54. [ 84.365748][ T22] usb 5-1: USB disconnect, device number 2 [ 84.422037][ T4481] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.622046][ T4481] usb 2-1: Using ep0 maxpacket: 32 [ 84.631529][ T4481] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 84.651931][ T4481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.661701][ T4481] usb 2-1: Product: syz [ 84.667357][ T4481] usb 2-1: Manufacturer: syz [ 84.682050][ T4481] usb 2-1: SerialNumber: syz [ 84.696995][ T4481] usb 2-1: config 0 descriptor?? [ 84.707705][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 84.912311][ T4945] netlink: 'syz.0.227': attribute type 8 has an invalid length. [ 85.134376][ T4481] airspy 2-1:0.0: Board ID: 00 [ 85.139214][ T4481] airspy 2-1:0.0: Firmware version: [ 85.507724][ T4964] program syz.2.235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.540709][ T4481] airspy 2-1:0.0: usb_control_msg() failed -71 request 0e [ 85.584519][ T4481] airspy 2-1:0.0: Registered as swradio24 [ 85.591298][ T4481] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 85.602304][ T4967] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 85.610027][ T4317] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.611549][ T4481] usb 2-1: USB disconnect, device number 3 [ 85.812204][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 85.831047][ T4317] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 85.867269][ T4317] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 85.907277][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.947148][ T4317] usb 1-1: Product: syz [ 85.971902][ T4317] usb 1-1: Manufacturer: syz [ 85.992066][ T4317] usb 1-1: SerialNumber: syz [ 86.009681][ T4317] usb 1-1: config 0 descriptor?? [ 86.036609][ T4317] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 86.055675][ T4317] usb 1-1: Detected FT232R [ 86.240964][ T4317] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 86.280928][ T4966] loop4: detected capacity change from 0 to 32768 [ 86.366711][ T4988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.245'. [ 86.459333][ T4317] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 86.502265][ T3598] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.591081][ T4994] loop4: detected capacity change from 0 to 1024 [ 86.691414][ T4318] usb 1-1: USB disconnect, device number 3 [ 86.726282][ T3598] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.734554][ T4318] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 86.745911][ T3598] usb 4-1: config 0 has no interface number 0 [ 86.761662][ T3598] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 86.771594][ T4318] ftdi_sio 1-1:0.0: device disconnected [ 86.784047][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.812406][ T3598] usb 4-1: Product: syz [ 86.823398][ T3598] usb 4-1: Manufacturer: syz [ 86.858995][ T3598] usb 4-1: SerialNumber: syz [ 86.890043][ T3598] usb 4-1: config 0 descriptor?? [ 86.895508][ T5000] netlink: 148 bytes leftover after parsing attributes in process `syz.1.251'. [ 87.062378][ T26] audit: type=1326 audit(1778838659.419:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.1.254" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f134519ce59 code=0x0 [ 87.085621][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.119202][ T3598] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 87.164013][ T3598] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 87.180595][ T3598] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 87.189998][ T3598] usb 4-1: media controller created [ 87.224821][ T3598] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.425194][ T5011] loop0: detected capacity change from 0 to 512 [ 87.463481][ T5011] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.553940][ T5011] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 87.581309][ T5011] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.256: bg 0: block 248: padding at end of block bitmap is not set [ 87.608123][ T5011] Quota error (device loop0): write_blk: dquota write failed [ 87.624049][ T5011] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 87.641169][ T5011] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.256: Failed to acquire dquot type 1 [ 87.667918][ T5011] EXT4-fs (loop0): 1 truncate cleaned up [ 87.685545][ T5011] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.014152][ T5009] loop2: detected capacity change from 0 to 131072 [ 88.024576][ T5009] F2FS-fs (loop2): invalid crc value [ 88.070891][ T5009] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.071907][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 88.112929][ T5009] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 88.120752][ T5009] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 88.253395][ T5022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 88.322869][ T3598] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 88.444953][ T3598] usb 4-1: USB disconnect, device number 3 [ 88.553160][ T5030] loop1: detected capacity change from 0 to 512 [ 88.711167][ T5030] syz.1.262: attempt to access beyond end of device [ 88.711167][ T5030] loop1: rw=3, sector=1438, nr_sectors = 2 limit=512 [ 88.804287][ T5030] syz.1.262: attempt to access beyond end of device [ 88.804287][ T5030] loop1: rw=2051, sector=1440, nr_sectors = 15358 limit=512 [ 89.032262][ T3598] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.122244][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.245065][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.302032][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.311857][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 89.314151][ T22] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.375407][ T22] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.378467][ T3598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 89.404125][ T3598] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 89.422262][ T3598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.422649][ T22] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.430546][ T5053] netlink: 1 bytes leftover after parsing attributes in process `syz.0.272'. [ 89.462087][ T3598] usb 3-1: Product: syz [ 89.466345][ T3598] usb 3-1: Manufacturer: syz [ 89.471001][ T3598] usb 3-1: SerialNumber: syz [ 89.471407][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.505482][ T3598] usb 3-1: config 0 descriptor?? [ 89.521083][ T5038] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.739137][ T3598] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 89.806346][ T5063] input: syz1 as /devices/virtual/input/input6 [ 89.940580][ T22] usb 5-1: USB disconnect, device number 3 [ 90.034591][ T3598] usb 3-1: USB disconnect, device number 3 [ 90.170109][ T5071] loop3: detected capacity change from 0 to 4096 [ 90.177323][ T5073] loop1: detected capacity change from 0 to 512 [ 90.248920][ T5073] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 90.268314][ T5075] netlink: 248 bytes leftover after parsing attributes in process `syz.0.281'. [ 90.297842][ T5076] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.618935][ T5080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 90.836018][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 90.923128][ T5091] loop3: detected capacity change from 0 to 16 [ 90.931336][ T5089] loop2: detected capacity change from 0 to 128 [ 90.959971][ T5091] erofs: (device loop3): mounted with root inode @ nid 36. [ 90.983568][ T5089] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 91.019926][ T5089] hpfs: filesystem error: improperly stopped [ 91.050765][ T5089] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 91.106165][ T5089] hpfs: You really don't want any checks? You are crazy... [ 91.143643][ T5089] hpfs: hpfs_map_sector(): read error [ 91.149066][ T5089] hpfs: code page support is disabled [ 91.202135][ T5089] hpfs: hpfs_map_4sectors(): unaligned read [ 91.208457][ T5089] hpfs: hpfs_map_4sectors(): unaligned read [ 91.242100][ T5089] hpfs: filesystem error: unable to find root dir [ 91.321021][ T5089] hpfs: hpfs_map_4sectors(): unaligned read [ 91.352706][ T5089] hpfs: hpfs_map_sector(): read error [ 91.418953][ T5105] device netdevsim0 entered promiscuous mode [ 91.432099][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 91.440336][ T5105] device netdevsim0 left promiscuous mode [ 91.876098][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.999112][ T5108] loop1: detected capacity change from 0 to 40427 [ 92.068881][ T5108] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.074579][ T22] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.097632][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.148679][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.191886][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.220605][ T5108] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 92.247768][ T22] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.261790][ T5108] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.281118][ T22] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.327760][ T22] usb 3-1: Product: syz [ 92.343930][ T22] usb 3-1: Manufacturer: syz [ 92.377878][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 92.386764][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 92.414565][ T22] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 92.420525][ T22] cdc_wdm 3-1:1.0: Unknown control protocol [ 92.469149][ T4278] syz-executor: attempt to access beyond end of device [ 92.469149][ T4278] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.623369][ T22] usb 3-1: USB disconnect, device number 4 [ 93.057221][ T5154] loop4: detected capacity change from 0 to 128 [ 93.096545][ T5154] EXT4-fs: Ignoring removed bh option [ 93.104084][ T5154] EXT4-fs: Ignoring removed bh option [ 93.190026][ T5154] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 93.221256][ T5164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 93.229746][ T5165] loop0: detected capacity change from 0 to 512 [ 93.271081][ T5154] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.328945][ T5165] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.351777][ T5170] program syz.1.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.378386][ T5165] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 93.452206][ T5165] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.320: Corrupt directory, running e2fsck is recommended [ 93.519652][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 93.532571][ T5165] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 93.572133][ T5165] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.320: corrupted in-inode xattr [ 93.635727][ T5165] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.320: couldn't read orphan inode 15 (err -117) [ 93.671431][ T5165] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.777577][ T5182] loop1: detected capacity change from 0 to 128 [ 93.866475][ T5182] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 93.958442][ T5182] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.150705][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 94.162176][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 94.758152][ T5212] pimreg: tun_chr_ioctl cmd 1074025677 [ 94.773279][ T5212] pimreg: linktype set to 805 [ 95.262198][ T4481] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.340848][ T5238] loop4: detected capacity change from 0 to 16 [ 95.376680][ T5238] erofs: (device loop4): mounted with root inode @ nid 36. [ 95.421767][ T5242] netlink: 64 bytes leftover after parsing attributes in process `syz.3.354'. [ 95.464778][ T4481] usb 3-1: Using ep0 maxpacket: 16 [ 95.492066][ T4481] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.501930][ T4481] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.531397][ T4481] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.588970][ T5245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 95.611016][ T4481] usb 3-1: config 1 interface 0 has no altsetting 0 [ 95.631380][ T5249] loop4: detected capacity change from 0 to 64 [ 95.642135][ T4481] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 95.651202][ T4481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.659780][ T4481] usb 3-1: Product: syz [ 95.664415][ T4481] usb 3-1: Manufacturer: syz [ 95.669032][ T4481] usb 3-1: SerialNumber: syz [ 95.908588][ T4481] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 95.996516][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 96.053642][ T5258] loop1: detected capacity change from 0 to 128 [ 96.115610][ T4483] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.145505][ T22] usb 3-1: USB disconnect, device number 5 [ 96.159076][ T22] usblp0: removed [ 96.302251][ T4483] usb 1-1: Using ep0 maxpacket: 32 [ 96.310861][ T4483] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 96.342194][ T4483] usb 1-1: config 0 has no interface number 0 [ 96.371880][ T4483] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 96.392942][ T4483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.400985][ T4483] usb 1-1: Product: syz [ 96.412671][ T4483] usb 1-1: Manufacturer: syz [ 96.422240][ T4483] usb 1-1: SerialNumber: syz [ 96.436849][ T4483] usb 1-1: config 0 descriptor?? [ 96.456581][ T4483] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 96.661387][ T4483] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 96.680460][ T4483] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 96.892054][ T3598] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.092015][ T3598] usb 2-1: Using ep0 maxpacket: 8 [ 97.102697][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 97.103198][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.118432][ T4483] usb 1-1: USB disconnect, device number 4 [ 97.147374][ T4483] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 97.181655][ T4483] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 97.189316][ T3598] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.230811][ T4483] quatech2 1-1:0.51: device disconnected [ 97.255308][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.291541][ T3598] usb 2-1: config 0 descriptor?? [ 97.315252][ T3598] hub 2-1:0.0: bad descriptor, ignoring hub [ 97.318084][ T5292] device macvlan0 entered promiscuous mode [ 97.328935][ T3598] hub: probe of 2-1:0.0 failed with error -5 [ 97.364528][ T5292] device ipvlan1 entered promiscuous mode [ 97.371397][ T5292] device ipvlan1 left promiscuous mode [ 97.387807][ T5292] device macvlan0 left promiscuous mode [ 97.530007][ T3598] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 97.810522][ T22] usb 2-1: USB disconnect, device number 4 [ 97.885623][ T5304] loop2: detected capacity change from 0 to 4096 [ 97.964157][ T5306] relay: one or more items not logged [item size (56) > sub-buffer size (3)] [ 97.977391][ T5309] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.108320][ T5304] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 98.129658][ T5304] Remounting filesystem read-only [ 98.179173][ T4272] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 98.548967][ T5325] syz.1.389 uses obsolete (PF_INET,SOCK_PACKET) [ 99.197243][ T5320] loop2: detected capacity change from 0 to 131072 [ 99.207417][ T5320] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 99.215583][ T5320] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.235505][ T5320] F2FS-fs (loop2): invalid crc value [ 99.301763][ T5320] F2FS-fs (loop2): Found nat_bits in checkpoint [ 99.388845][ T22] hid-generic 0003:0004:FFFF0001.0002: unknown main item tag 0x0 [ 99.398783][ T5320] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 99.406395][ T5320] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 99.449786][ T22] hid-generic 0003:0004:FFFF0001.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 99.474320][ T5320] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=7, ino,nid: [2055, 7] run fsck to fix. [ 99.768498][ T5349] loop3: detected capacity change from 0 to 256 [ 99.784343][ T5345] fido_id[5345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.914585][ T5371] loop1: detected capacity change from 0 to 4096 [ 100.985412][ T5371] ntfs: volume version 3.1. [ 101.090113][ T5371] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 101.114113][ T5371] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 101.877729][ T5404] loop4: detected capacity change from 0 to 1024 [ 102.281268][ T5412] input: syz0 as /devices/virtual/input/input8 [ 102.556106][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.589608][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.618721][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.662891][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.693273][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.716121][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.747333][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.781087][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.811326][ T5418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.836461][ T5418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.877761][ T5418] batman_adv: batadv0: Adding interface: ipvlan2 [ 102.889933][ T5418] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.915317][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.963794][ T5418] batman_adv: batadv0: Interface activated: ipvlan2 [ 103.473449][ T5433] process 'syz.3.430' launched './file1' with NULL argv: empty string added [ 103.783593][ T5440] netlink: 168 bytes leftover after parsing attributes in process `syz.1.432'. [ 104.050946][ T5450] loop2: detected capacity change from 0 to 256 [ 104.132179][ T4483] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.169056][ T5450] FAT-fs (loop2): Directory bread(block 64) failed [ 104.195447][ T5450] FAT-fs (loop2): Directory bread(block 65) failed [ 104.222173][ T5450] FAT-fs (loop2): Directory bread(block 66) failed [ 104.252020][ T5450] FAT-fs (loop2): Directory bread(block 67) failed [ 104.273540][ T5450] FAT-fs (loop2): Directory bread(block 68) failed [ 104.280132][ T5450] FAT-fs (loop2): Directory bread(block 69) failed [ 104.319195][ T5450] FAT-fs (loop2): Directory bread(block 70) failed [ 104.324159][ T4483] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.334369][ T5450] FAT-fs (loop2): Directory bread(block 71) failed [ 104.341015][ T5450] FAT-fs (loop2): Directory bread(block 72) failed [ 104.343232][ T4483] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 104.350035][ T5450] FAT-fs (loop2): Directory bread(block 73) failed [ 104.392578][ T4483] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 104.411076][ T4483] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 104.477266][ T4483] usb 1-1: config 129 has no interface number 0 [ 104.503457][ T4483] usb 1-1: config 129 has no interface number 1 [ 104.509780][ T4483] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 104.552053][ T4483] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 104.593027][ T4483] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 104.632244][ T4483] usb 1-1: config 129 interface 135 has no altsetting 0 [ 104.640149][ T4483] usb 1-1: config 129 interface 5 has no altsetting 0 [ 104.679503][ T4483] usb 1-1: string descriptor 0 read error: -22 [ 104.691796][ T5463] loop1: detected capacity change from 0 to 256 [ 104.704398][ T4483] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 104.733896][ T5466] loop2: detected capacity change from 0 to 128 [ 104.764151][ T4483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.810555][ T5466] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 104.812454][ T5466] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.843863][ T4483] usb 1-1: MIDIStreaming interface descriptor not found [ 105.015395][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 105.075001][ T22] usb 1-1: USB disconnect, device number 5 [ 105.173800][ T5477] loop2: detected capacity change from 0 to 128 [ 105.411826][ T5481] loop3: detected capacity change from 0 to 1024 [ 105.464777][ T5481] EXT4-fs: Ignoring removed orlov option [ 105.572929][ T5481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 105.824361][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 106.010647][ T5479] loop1: detected capacity change from 0 to 32768 [ 106.133535][ T5479] XFS (loop1): Mounting V5 Filesystem [ 106.258160][ T5479] XFS (loop1): Ending clean mount [ 106.372680][ T5479] syz.1.449 (5479) used greatest stack depth: 20336 bytes left [ 106.480300][ T4278] XFS (loop1): Unmounting Filesystem [ 106.582272][ T14] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.772124][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 106.779018][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.820774][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.851998][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.882838][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.910934][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.936276][ T14] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 106.965749][ T14] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 106.974135][ T14] usb 1-1: Manufacturer: syz [ 106.997578][ T14] usb 1-1: config 0 descriptor?? [ 107.392209][ T14] rc_core: IR keymap rc-hauppauge not found [ 107.400103][ T14] Registered IR keymap rc-empty [ 107.413768][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.463037][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.504221][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 107.546883][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 107.551592][ T5534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.470'. [ 107.653220][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 107.662903][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.702102][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.718106][ T5541] tun0: tun_chr_ioctl cmd 21731 [ 107.752100][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.789494][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.818357][ T5543] loop2: detected capacity change from 0 to 2048 [ 107.832355][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.857362][ T5543] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 107.872712][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.887137][ T5545] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 107.909597][ T5543] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 107.912052][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.956437][ T5543] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 107.972130][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.978027][ T5543] UDF-fs: Scanning with blocksize 512 failed [ 108.004571][ T5543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.030204][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.082883][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.123359][ T14] mceusb 1-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 108.162065][ T14] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 108.196855][ T14] usb 1-1: USB disconnect, device number 6 [ 108.250586][ T5550] loop4: detected capacity change from 0 to 256 [ 108.282880][ T5550] exfat: Deprecated parameter 'utf8' [ 108.290810][ T5550] exfat: Deprecated parameter 'utf8' [ 108.300999][ T5550] exfat: Deprecated parameter 'utf8' [ 108.306739][ T5550] exfat: Deprecated parameter 'utf8' [ 108.331609][ T5550] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 109.128181][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 109.750445][ T5565] loop2: detected capacity change from 0 to 32768 [ 109.750815][ T5585] loop3: detected capacity change from 0 to 4096 [ 109.898136][ T5565] XFS (loop2): Mounting V5 Filesystem [ 109.899664][ T5585] ntfs3: Cannot use different iocharset when remounting! [ 110.012178][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.023092][ T5565] XFS (loop2): Ending clean mount [ 110.063978][ T5565] XFS (loop2): Quotacheck needed: Please wait. [ 110.082312][ T5581] loop1: detected capacity change from 0 to 32768 [ 110.103310][ T5581] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.491 (5581) [ 110.140640][ T5581] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 110.153603][ T5581] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 110.174007][ T5581] BTRFS info (device loop1): using free space tree [ 110.190997][ T5565] XFS (loop2): Quotacheck: Done. [ 110.202254][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 110.222273][ T4481] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 110.233377][ T14] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 110.242527][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.253526][ T14] usb 5-1: config 0 descriptor?? [ 110.273038][ T14] gspca_main: sunplus-2.14.0 probing 041e:400b [ 110.294708][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 110.422139][ T4481] usb 1-1: Using ep0 maxpacket: 16 [ 110.441845][ T4272] XFS (loop2): Unmounting Filesystem [ 110.454838][ T4481] usb 1-1: config 0 has no interfaces? [ 110.474318][ T4481] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.485366][ T5581] BTRFS info (device loop1): enabling ssd optimizations [ 110.509485][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.527524][ T4481] usb 1-1: SerialNumber: syz [ 110.604912][ T4481] usb 1-1: config 0 descriptor?? [ 110.827196][ T4481] usb 1-1: USB disconnect, device number 7 [ 110.889434][ T4278] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 111.081210][ T14] gspca_sunplus: reg_r err -71 [ 111.090482][ T14] sunplus: probe of 5-1:0.0 failed with error -71 [ 111.173056][ T14] usb 5-1: USB disconnect, device number 4 [ 111.479382][ T5642] loop0: detected capacity change from 0 to 256 [ 111.508649][ T5642] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.298558][ T5672] loop4: detected capacity change from 0 to 1024 [ 112.359541][ T5672] hfsplus: bad catalog entry type [ 112.431517][ T32] hfsplus: b-tree write err: -5, ino 25 [ 112.445079][ T32] hfsplus: b-tree write err: -5, ino 4 [ 112.451193][ T32] hfsplus: b-tree write err: -5, ino 2 [ 112.630017][ T5680] netlink: 'syz.4.523': attribute type 2 has an invalid length. [ 112.638808][ T5680] netlink: 'syz.4.523': attribute type 3 has an invalid length. [ 112.710284][ T5660] loop2: detected capacity change from 0 to 40427 [ 112.732258][ T5660] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 112.743300][ T5683] loop4: detected capacity change from 0 to 512 [ 112.750900][ T5660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.767381][ T5660] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff [ 112.777116][ T5660] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 112.790608][ T5683] EXT4-fs (loop4): 1 truncate cleaned up [ 112.803743][ T5660] F2FS-fs (loop2): invalid crc value [ 112.816371][ T5683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 112.852437][ T5660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.012685][ T5660] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 113.025143][ T5660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.057861][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 113.093819][ T5695] Bluetooth: MGMT ver 1.22 [ 113.299751][ T4272] syz-executor: attempt to access beyond end of device [ 113.299751][ T4272] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.306107][ T5699] loop3: detected capacity change from 0 to 2048 [ 113.385472][ T5703] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.449981][ T5703] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 113.468367][ T5703] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 113.512151][ T5703] Remounting filesystem read-only [ 113.522400][ T5699] NILFS (loop3): mounting fs with errors [ 113.532706][ T5706] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 113.560704][ T5706] Remounting filesystem read-only [ 113.675312][ T5708] loop0: detected capacity change from 0 to 1024 [ 113.696034][ T4282] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 113.715758][ T4282] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 114.206335][ T5721] loop2: detected capacity change from 0 to 2048 [ 114.233798][ T5721] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 114.268798][ T5721] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 114.293852][ T5721] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 114.317616][ T5721] UDF-fs: Scanning with blocksize 512 failed [ 114.351389][ T5721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.442253][ T5628] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.486402][ T5727] comedi comedi3: comedi_test: 38 microvolt, 2047 microsecond waveform attached [ 114.636682][ T5628] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 114.662424][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.693877][ T5628] usb 5-1: config 0 descriptor?? [ 114.721386][ T5628] cp210x 5-1:0.0: cp210x converter detected [ 115.105675][ T5628] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 115.136374][ T5628] usb 5-1: cp210x converter now attached to ttyUSB0 [ 115.240293][ T5729] loop1: detected capacity change from 0 to 32768 [ 115.331511][ T22] usb 5-1: USB disconnect, device number 5 [ 115.358787][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 115.440925][ T22] cp210x 5-1:0.0: device disconnected [ 115.932104][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.125165][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 116.136318][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.169347][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.181316][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.200902][ T5767] loop4: detected capacity change from 0 to 4096 [ 116.237279][ T14] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 116.250130][ T5775] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 116.256948][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.265521][ T5775] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 116.273797][ T5775] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 116.281213][ T14] usb 4-1: config 0 descriptor?? [ 116.307453][ T5767] ntfs: volume version 3.1. [ 116.308689][ T5775] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 116.326068][ T5775] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 116.342700][ T5775] comedi comedi3: 8255: I/O port conflict (0x20000000,4) [ 116.363625][ T5767] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 116.382938][ T5775] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 116.390544][ T5767] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 116.403182][ T5775] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 116.417630][ T5767] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 116.462251][ T5767] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 116.542282][ T5767] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 116.586466][ T5767] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 116.701362][ T14] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 116.728370][ T14] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 116.731332][ T5781] loop2: detected capacity change from 0 to 4096 [ 116.745526][ T14] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 116.774101][ T14] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 116.801640][ T14] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 116.803035][ T5782] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.871225][ T14] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 116.900980][ T14] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 116.924599][ T14] pyra 0003:1E7D:2C24.0003: unknown main item tag 0x0 [ 116.984544][ T14] pyra 0003:1E7D:2C24.0003: hidraw0: USB HID v0.04 Device [HID 1e7d:2c24] on usb-dummy_hcd.3-1/input0 [ 117.010158][ T4272] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 117.078161][ T14] usb 4-1: USB disconnect, device number 4 [ 117.102090][ T4272] Remounting filesystem read-only [ 117.107300][ T4272] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 117.157268][ T4272] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=8192, inode=0, rec_len=0, name_len=0 [ 117.212078][ T4272] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 117.325091][ T5787] fido_id[5787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 117.497453][ T5796] loop0: detected capacity change from 0 to 2048 [ 117.605350][ T5796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.669525][ T5803] netlink: 774 bytes leftover after parsing attributes in process `syz.3.570'. [ 117.889331][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 117.922540][ T5808] loop3: detected capacity change from 0 to 64 [ 118.074864][ T5808] Trying to free block not in datazone [ 118.106300][ T5808] Trying to free block not in datazone [ 118.410572][ T5828] loop2: detected capacity change from 0 to 764 [ 118.498338][ T5828] Symlink component flag not implemented [ 118.514692][ T5828] Symlink component flag not implemented [ 118.909410][ T5824] loop3: detected capacity change from 0 to 32768 [ 118.933393][ T5824] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.580 (5824) [ 118.992309][ T5824] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.022456][ T5824] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 119.058399][ T5824] BTRFS info (device loop3): setting nodatacow, compression disabled [ 119.079818][ T5824] BTRFS info (device loop3): disabling tree log [ 119.097179][ T5824] BTRFS info (device loop3): max_inline at 0 [ 119.128613][ T5824] BTRFS info (device loop3): using free space tree [ 119.811349][ T4282] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.569331][ T5904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.604'. [ 120.709056][ T5910] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 120.930763][ T5920] vivid-000: disconnect [ 120.964347][ T5915] vivid-000: reconnect [ 121.187497][ T5927] loop0: detected capacity change from 0 to 1024 [ 121.248080][ T5927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 121.273450][ T5927] System zones: 0-1, 3-36 [ 121.324823][ T5927] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.614: bad orphan inode 134217728 [ 121.407330][ T5927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.614823][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 122.060701][ T5955] loop4: detected capacity change from 0 to 128 [ 122.258273][ T5943] loop1: detected capacity change from 0 to 32768 [ 122.351624][ T5943] XFS (loop1): Mounting V5 Filesystem [ 122.541672][ T5943] XFS (loop1): Ending clean mount [ 122.659126][ T4278] XFS (loop1): Unmounting Filesystem [ 123.079947][ T5988] tun0: tun_chr_ioctl cmd 2147767519 [ 123.392166][ T4316] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 123.500620][ T6000] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 123.590843][ T4316] usb 4-1: not running at top speed; connect to a high speed hub [ 123.615519][ T4316] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 123.636029][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.650255][ T4316] usb 4-1: Product: syz [ 123.657522][ T4316] usb 4-1: Manufacturer: syz [ 123.671044][ T4316] usb 4-1: SerialNumber: syz [ 124.553093][ T4316] usb 4-1: MIDIStreaming interface descriptor not found [ 124.622181][ T4316] usb 4-1: USB disconnect, device number 5 [ 124.955395][ T5057] udevd[5057]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.282974][ T6029] loop1: detected capacity change from 0 to 32768 [ 125.297805][ T6029] XFS: attr2 mount option is deprecated. [ 125.307555][ T6041] loop0: detected capacity change from 0 to 128 [ 125.379223][ T6029] XFS (loop1): Mounting V5 Filesystem [ 125.510543][ T6029] XFS (loop1): Ending clean mount [ 125.603483][ T6029] XFS (loop1): Quotacheck needed: Please wait. [ 125.679219][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 125.690952][ T6029] XFS (loop1): Quotacheck: Done. [ 125.782444][ T6065] loop3: detected capacity change from 0 to 64 [ 125.833147][ T6065] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 125.873564][ T4278] XFS (loop1): Unmounting Filesystem [ 126.139944][ T6069] loop2: detected capacity change from 0 to 512 [ 126.226964][ T4316] kernel write not supported for file /vcs (pid: 4316 comm: kworker/0:5) [ 126.265809][ T22] kernel read not supported for file /vcs (pid: 22 comm: kworker/1:0) [ 126.273438][ T6069] EXT4-fs (loop2): 1 truncate cleaned up [ 126.279882][ T6069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 126.306728][ T4287] Bluetooth: hci0: unexpected event 0x01 length: 29 > 1 [ 126.312821][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.365917][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.412117][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.419895][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.474770][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.512768][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.520234][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.552143][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.559575][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.589114][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.599219][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.616862][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.640727][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.668119][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.686202][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.712232][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.719688][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.757678][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.783189][ T6091] program syz.4.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.785991][ T127] hid-generic 00A0:0086:0003.0004: unknown main item tag 0x0 [ 126.825736][ T127] hid-generic 00A0:0086:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 126.861374][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 127.410936][ T6077] loop3: detected capacity change from 0 to 40427 [ 127.493644][ T6077] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 127.521828][ T6077] F2FS-fs (loop3): invalid crc value [ 127.554646][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 127.569952][ T6077] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.694930][ T6117] device bond_slave_0 entered promiscuous mode [ 127.701510][ T6117] device bond_slave_1 entered promiscuous mode [ 127.729469][ T6077] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.768999][ T6117] device macvlan2 entered promiscuous mode [ 127.788554][ T6117] device bond0 entered promiscuous mode [ 127.806728][ T6117] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.222949][ T127] hid-generic 0005:0004:A9D3.0005: unknown main item tag 0x0 [ 128.257029][ T127] hid-generic 0005:0004:A9D3.0005: unknown main item tag 0x0 [ 128.268371][ T6133] loop3: detected capacity change from 0 to 512 [ 128.283839][ T127] hid-generic 0005:0004:A9D3.0005: unknown main item tag 0x0 [ 128.303861][ T6133] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.319204][ T127] hid-generic 0005:0004:A9D3.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 128.342211][ T6133] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 128.376419][ T6133] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 128.395167][ T6133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 128.421732][ T6133] System zones: 0-2, 18-18, 34-34 [ 128.478380][ T6133] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.694: iget: bad i_size value: 360287970189639680 [ 128.497201][ T6133] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.694: couldn't read orphan inode 15 (err -117) [ 128.513739][ T6133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 128.678393][ T6138] fido_id[6138]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.683552][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 128.830692][ T6126] loop1: detected capacity change from 0 to 32768 [ 128.869671][ T6126] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.691 (6126) [ 128.920070][ T6126] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.961396][ T6126] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 128.986385][ T6126] BTRFS info (device loop1): enabling auto defrag [ 129.002912][ T6126] BTRFS info (device loop1): use no compression [ 129.022380][ T6126] BTRFS info (device loop1): max_inline at 4096 [ 129.028683][ T6126] BTRFS info (device loop1): using free space tree [ 129.165166][ T6153] loop4: detected capacity change from 0 to 1024 [ 129.286570][ T6153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.313601][ T6167] loop3: detected capacity change from 0 to 256 [ 129.383119][ T6167] exfat: Deprecated parameter 'utf8' [ 129.390557][ T6153] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.4.702: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 129.395038][ T6140] loop0: detected capacity change from 0 to 32768 [ 129.463165][ T6126] BTRFS info (device loop1): enabling ssd optimizations [ 129.510523][ T6167] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 129.542569][ T6153] EXT4-fs error (device loop4) in ext4_delete_inline_entry:1822: Corrupt filesystem [ 129.618363][ T6140] non-latin1 character 0x466c found in JFS file name [ 129.733001][ T6140] mount with iocharset=utf8 to access [ 129.750633][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 129.908360][ T4278] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.435243][ T5058] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (5058) [ 131.647767][ T6225] loop1: detected capacity change from 0 to 16 [ 131.657200][ T6226] loop4: detected capacity change from 0 to 256 [ 131.735915][ T6225] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.825417][ T6226] FAT-fs (loop4): Directory bread(block 64) failed [ 131.882113][ T6226] FAT-fs (loop4): Directory bread(block 65) failed [ 131.931101][ T6226] FAT-fs (loop4): Directory bread(block 66) failed [ 131.969744][ T6226] FAT-fs (loop4): Directory bread(block 67) failed [ 132.000431][ T6226] FAT-fs (loop4): Directory bread(block 68) failed [ 132.019195][ T6226] FAT-fs (loop4): Directory bread(block 69) failed [ 132.029960][ T6226] FAT-fs (loop4): Directory bread(block 70) failed [ 132.061057][ T6226] FAT-fs (loop4): Directory bread(block 71) failed [ 132.107160][ T6226] FAT-fs (loop4): Directory bread(block 72) failed [ 132.131928][ T6226] FAT-fs (loop4): Directory bread(block 73) failed [ 132.153645][ T6218] loop0: detected capacity change from 0 to 131072 [ 132.180300][ T6218] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 132.188516][ T6218] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 132.198944][ T6218] F2FS-fs (loop0): invalid crc value [ 132.267604][ T6218] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.324564][ T6218] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 132.331665][ T6218] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 132.572157][ T4317] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.637776][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774273][ T4317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.796516][ T4317] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 132.841298][ T4317] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 132.889782][ T4317] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 132.924998][ T4317] usb 3-1: config 129 has no interface number 0 [ 132.951599][ T4317] usb 3-1: config 129 has no interface number 1 [ 132.967844][ T4317] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 133.028093][ T4317] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 133.070009][ T4317] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 133.112065][ T4317] usb 3-1: config 129 interface 135 has no altsetting 0 [ 133.145466][ T4317] usb 3-1: config 129 interface 5 has no altsetting 0 [ 133.164103][ T4317] usb 3-1: string descriptor 0 read error: -22 [ 133.170398][ T4317] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 133.210262][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.266494][ T4317] usb 3-1: MIDIStreaming interface descriptor not found [ 133.587437][ T4317] usb 3-1: USB disconnect, device number 6 [ 133.629231][ T6261] loop1: detected capacity change from 0 to 512 [ 133.754245][ T6261] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 133.765260][ T6261] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.943943][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 134.089499][ T6255] loop4: detected capacity change from 0 to 32768 [ 134.111043][ T6255] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.733 (6255) [ 134.177890][ T6278] loop3: detected capacity change from 0 to 1024 [ 134.187849][ T6255] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.230489][ T6255] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 134.242653][ T6255] BTRFS info (device loop4): setting nodatacow, compression disabled [ 134.250775][ T6255] BTRFS info (device loop4): disabling tree log [ 134.312864][ T6255] BTRFS info (device loop4): max_inline at 0 [ 134.316112][ T6280] loop2: detected capacity change from 0 to 512 [ 134.318936][ T6255] BTRFS info (device loop4): using free space tree [ 134.384283][ T6280] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 134.501378][ T6286] hub 1-0:1.0: USB hub found [ 134.556755][ T6280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 134.567407][ T6286] hub 1-0:1.0: 1 port detected [ 134.576620][ T6280] EXT4-fs (loop2): orphan cleanup on readonly fs [ 134.593484][ T6280] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.743: bad orphan inode 267 [ 134.632449][ T6280] EXT4-fs (loop2): Remounting filesystem read-only [ 134.649862][ T6280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.757742][ T6280] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.743: dx entry: limit 0 != root limit 125 [ 134.817237][ T6280] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.743: Corrupt directory, running e2fsck is recommended [ 134.930483][ T4281] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.962559][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 135.047791][ T6294] loop3: detected capacity change from 0 to 32768 [ 135.298547][ T4265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4265) [ 136.342132][ T4317] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.461597][ T6345] loop1: detected capacity change from 0 to 128 [ 136.534485][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.552925][ T4317] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 136.577466][ T4317] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 136.600994][ T4317] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 136.612925][ T4317] usb 5-1: config 129 has no interface number 0 [ 136.620092][ T4317] usb 5-1: config 129 has no interface number 1 [ 136.628138][ T4317] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 136.642198][ T4317] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 136.670590][ T4317] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 136.714608][ T4317] usb 5-1: config 129 interface 135 has no altsetting 0 [ 136.737318][ T4317] usb 5-1: config 129 interface 5 has no altsetting 0 [ 136.773305][ T4317] usb 5-1: string descriptor 0 read error: -22 [ 136.789841][ T4317] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 136.809501][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.883889][ T4317] usb 5-1: MIDIStreaming interface descriptor not found [ 137.169442][ T4316] usb 5-1: USB disconnect, device number 6 [ 137.397404][ T6365] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 137.850761][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 138.309781][ T6370] loop3: detected capacity change from 0 to 32768 [ 138.443161][ T6370] XFS (loop3): Mounting V5 Filesystem [ 138.511350][ T6392] loop0: detected capacity change from 0 to 256 [ 138.653500][ T6370] XFS (loop3): Ending clean mount [ 138.955606][ T4282] XFS (loop3): Unmounting Filesystem [ 139.273854][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.474610][ T6403] loop3: detected capacity change from 0 to 128 [ 139.476526][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 139.501136][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.524916][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.544936][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.592250][ T4316] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.625122][ T4316] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.657307][ T4316] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.697950][ T6396] loop0: detected capacity change from 0 to 32768 [ 139.705836][ T4316] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.722553][ T4316] usb 2-1: Manufacturer: syz [ 139.725931][ T6396] XFS: attr2 mount option is deprecated. [ 139.760516][ T4316] usb 2-1: config 0 descriptor?? [ 139.804799][ T6396] XFS (loop0): Mounting V5 Filesystem [ 139.926013][ T6396] XFS (loop0): Ending clean mount [ 139.934819][ T6396] XFS (loop0): Quotacheck needed: Please wait. [ 140.033511][ T6396] XFS (loop0): Quotacheck: Done. [ 140.096766][ T6420] loop6: detected capacity change from 0 to 8 [ 140.141007][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.150446][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.179894][ T6423] loop4: detected capacity change from 0 to 256 [ 140.185996][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.195305][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.205352][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.214587][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.222059][ T4316] rc_core: IR keymap rc-hauppauge not found [ 140.224263][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.228783][ T4316] Registered IR keymap rc-empty [ 140.237437][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.243760][ T4271] XFS (loop0): Unmounting Filesystem [ 140.257270][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.266459][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.275063][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.284285][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.293913][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.303116][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.313796][ T6406] loop2: detected capacity change from 0 to 32768 [ 140.319327][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.333441][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.342666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.350889][ T6420] ldm_validate_partition_table(): Disk read failed. [ 140.360245][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.369469][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.377468][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.387593][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.396785][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 140.413919][ T4316] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 140.425457][ T6420] Dev loop6: unable to read RDB block 0 [ 140.428293][ T4316] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 140.459311][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.484999][ T6423] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 140.487160][ T6420] loop6: unable to read partition table [ 140.500183][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.510040][ T6420] loop6: partition table beyond EOD, truncated [ 140.510074][ T6420] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 140.571556][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.617353][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.662220][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.710719][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.762166][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.802075][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.842106][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.872119][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 140.903139][ T4316] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 140.911183][ T4316] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.971434][ T4316] usb 2-1: USB disconnect, device number 5 [ 141.424861][ T6439] loop3: detected capacity change from 0 to 128 [ 141.670721][ T6428] loop4: detected capacity change from 0 to 32768 [ 141.760519][ T6446] comedi comedi3: comedi_test: 38 microvolt, 2047 microsecond waveform attached [ 141.787518][ T6428] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 141.847105][ T6428] JBD2: Ignoring recovery information on journal [ 142.012436][ T6428] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 142.064567][ T6443] loop2: detected capacity change from 0 to 32768 [ 142.141616][ T6443] XFS (loop2): Mounting V5 Filesystem [ 142.258045][ T6443] XFS (loop2): Ending clean mount [ 142.370385][ T6463] loop0: detected capacity change from 0 to 128 [ 142.508695][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 142.550174][ T4272] XFS (loop2): Unmounting Filesystem [ 142.618097][ T4316] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.817650][ T4316] usb 2-1: Using ep0 maxpacket: 8 [ 142.827839][ T4316] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 142.851726][ T4316] usb 2-1: config 179 has no interface number 0 [ 142.904061][ T4316] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 142.945117][ T4316] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 142.987573][ T4316] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.012306][ T4316] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 143.042038][ T4316] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.084564][ T4316] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.102069][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.132023][ T6461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 143.565381][ T4316] usb 2-1: USB disconnect, device number 6 [ 143.571298][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 143.571351][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 144.008668][ T6473] loop4: detected capacity change from 0 to 40427 [ 144.036918][ T6473] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 144.051997][ T6473] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 144.075259][ T6473] F2FS-fs (loop4): invalid crc value [ 144.144222][ T6473] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 144.299738][ T6473] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 144.328817][ T6473] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.413285][ T6473] syz.4.798: attempt to access beyond end of device [ 144.413285][ T6473] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 144.547870][ T4281] syz-executor: attempt to access beyond end of device [ 144.547870][ T4281] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.572435][ T6488] XFS (loop3): Mounting V5 Filesystem [ 144.654629][ T6488] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 144.705136][ T6488] XFS (loop3): Starting recovery (logdev: internal) [ 144.766067][ T4316] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.786026][ T6488] XFS (loop3): Ending recovery (logdev: internal) [ 144.846043][ T26] audit: type=1800 audit(1778838973.193:13): pid=6488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.806" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 144.984791][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 144.992208][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.017831][ T4282] XFS (loop3): Unmounting Filesystem [ 145.042664][ T4316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.107368][ T4316] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.152368][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.177751][ T4316] usb 3-1: config 0 descriptor?? [ 145.587306][ T6519] set_capacity_and_notify: 1 callbacks suppressed [ 145.587322][ T6519] loop1: detected capacity change from 0 to 4096 [ 145.634257][ T4316] HID 045e:07da: Invalid code 65791 type 1 [ 145.678030][ T4316] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input11 [ 145.693216][ T6521] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.783178][ T4316] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 146.038980][ T4316] usb 3-1: USB disconnect, device number 7 [ 146.168354][ T6522] fido_id[6522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 146.743964][ T6540] loop2: detected capacity change from 0 to 764 [ 146.765564][ T6543] loop3: detected capacity change from 0 to 256 [ 146.858477][ T6543] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 146.964552][ T6543] exFAT-fs (loop3): hint_cluster is invalid (4278190089) [ 146.966078][ T6515] loop0: detected capacity change from 0 to 32768 [ 147.025696][ T6543] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805548a1e0 iblock : 8, err : -5) [ 147.064024][ T6543] exFAT-fs (loop3): Filesystem has been set read-only [ 147.064902][ T6545] netlink: 56 bytes leftover after parsing attributes in process `syz.1.824'. [ 147.091356][ T6543] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008) [ 147.170566][ T6549] program syz.2.825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.192236][ T6543] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008) [ 147.312239][ T6515] XFS (loop0): Mounting V5 Filesystem [ 147.489903][ T6531] loop4: detected capacity change from 0 to 40427 [ 147.529885][ T6531] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 147.577420][ T6531] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 147.602938][ T6515] XFS (loop0): Ending clean mount [ 147.624091][ T6531] F2FS-fs (loop4): invalid crc value [ 147.652319][ T6531] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.820514][ T6566] program syz.3.830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.883302][ T6531] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 147.928401][ T6569] loop1: detected capacity change from 0 to 512 [ 147.971753][ T26] audit: type=1800 audit(1778838976.313:14): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.817" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 147.997468][ T6531] syz.4.817: attempt to access beyond end of device [ 147.997468][ T6531] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 148.163770][ T6569] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.831: invalid indirect mapped block 256 (level 2) [ 148.247958][ T4281] syz-executor: attempt to access beyond end of device [ 148.247958][ T4281] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.269019][ T4271] XFS (loop0): Unmounting Filesystem [ 148.275272][ T6569] EXT4-fs (loop1): Remounting filesystem read-only [ 148.306776][ T6569] EXT4-fs (loop1): 2 truncates cleaned up [ 148.364994][ T6563] loop2: detected capacity change from 0 to 32768 [ 148.382574][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.488035][ T6563] JBD2: Ignoring recovery information on journal [ 148.605930][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 148.852393][ T6563] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.200127][ T4272] ocfs2: Unmounting device (7,2) on (node local) [ 149.484986][ T6597] program syz.4.843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.717656][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 149.726940][ T6609] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5) [ 150.332055][ T6315] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.515538][ T6315] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 150.530699][ T6641] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.864'. [ 150.532037][ T6315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.573149][ T6639] loop3: detected capacity change from 0 to 2048 [ 150.581215][ T6315] usb 2-1: Product: syz [ 150.591330][ T6315] usb 2-1: Manufacturer: syz [ 150.612100][ T6315] usb 2-1: SerialNumber: syz [ 150.623110][ T6315] usb 2-1: config 0 descriptor?? [ 150.699604][ T6639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 150.710685][ T6639] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.874338][ T4316] usb 2-1: USB disconnect, device number 7 [ 150.957491][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 151.331566][ T6632] loop0: detected capacity change from 0 to 32768 [ 151.347828][ T6632] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.860 (6632) [ 151.420837][ T6656] loop4: detected capacity change from 0 to 16 [ 151.451217][ T6657] loop2: detected capacity change from 0 to 1024 [ 151.461992][ T6632] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 151.489071][ T6656] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 151.500198][ T6632] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 151.515132][ T6632] BTRFS info (device loop0): using free space tree [ 151.573554][ T5058] udevd[5058]: incorrect cramfs checksum on /dev/loop4 [ 151.633450][ T6657] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.662858][ T6657] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.692271][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.873'. [ 151.863801][ T6632] BTRFS info (device loop0): enabling ssd optimizations [ 152.009173][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 152.143865][ T4271] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 152.214933][ T6696] loop3: detected capacity change from 0 to 2048 [ 152.256428][ T6696] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 152.339007][ T6696] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 152.420192][ T6696] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 152.452069][ T6696] UDF-fs: Scanning with blocksize 512 failed [ 152.554535][ T6696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.698910][ T6709] loop4: detected capacity change from 0 to 1024 [ 152.772121][ T6709] EXT4-fs (loop4): Invalid log cluster size: 772 [ 153.031631][ T32] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.345893][ T6709] loop4: detected capacity change from 0 to 40427 [ 153.366692][ T6709] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 153.392693][ T6709] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.416329][ T6709] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.462466][ T6709] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 153.469620][ T6709] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 153.522462][ T4316] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.577587][ T4281] syz-executor: attempt to access beyond end of device [ 153.577587][ T4281] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.733677][ T4316] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 153.742877][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.753370][ T4316] usb 1-1: config 0 descriptor?? [ 154.125897][ T6734] loop1: detected capacity change from 0 to 128 [ 154.146568][ T6736] loop2: detected capacity change from 0 to 128 [ 154.168765][ T4316] [drm:udl_init] *ERROR* Selecting channel failed [ 154.246111][ T4316] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 154.285524][ T4316] [drm] Initialized udl on minor 2 [ 154.319719][ T4316] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 154.333046][ T4316] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 154.349533][ T4316] usb 1-1: USB disconnect, device number 8 [ 154.375732][ T5876] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 154.401533][ T5876] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 154.422937][ T5876] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 154.606349][ T6744] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 154.739222][ T6748] loop1: detected capacity change from 0 to 64 [ 154.797278][ T6750] binder: 6749:6750 ioctl 400c620e 200000000200 returned -22 [ 154.823001][ T6754] netlink: 79 bytes leftover after parsing attributes in process `syz.0.900'. [ 155.032189][ T4273] Bluetooth: hci5: command 0x1003 tx timeout [ 155.040972][ T4287] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 155.416760][ T6775] tipc: Started in network mode [ 155.427849][ T6775] tipc: Node identity ac14140f, cluster identity 4711 [ 155.443680][ T6775] tipc: New replicast peer: 255.255.255.255 [ 155.457886][ T6775] tipc: Enabled bearer , priority 10 [ 155.907805][ T6758] loop0: detected capacity change from 0 to 40427 [ 155.949805][ T6758] F2FS-fs (loop0): invalid crc value [ 155.968223][ T6758] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.021565][ T5886] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 156.046176][ T6758] F2FS-fs (loop0): Start checkpoint disabled! [ 156.119145][ T6758] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 156.161330][ T6758] syz.0.904: attempt to access beyond end of device [ 156.161330][ T6758] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.225681][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.242111][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.274377][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.299325][ T6803] netlink: 220 bytes leftover after parsing attributes in process `syz.3.923'. [ 156.314405][ T5886] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 156.326197][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.341521][ T5886] usb 2-1: config 0 descriptor?? [ 156.409008][ T4564] kworker/u4:7: attempt to access beyond end of device [ 156.409008][ T4564] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 156.416042][ T6805] loop3: detected capacity change from 0 to 128 [ 156.454143][ T4316] tipc: Node number set to 2886997007 [ 156.488684][ T6805] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.508173][ T6805] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.618101][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 156.773789][ T5886] wacom 0003:056A:0010.0007: unbalanced collection at end of report description [ 156.783810][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.926'. [ 156.793457][ T5886] wacom 0003:056A:0010.0007: parse failed [ 156.799313][ T5886] wacom: probe of 0003:056A:0010.0007 failed with error -22 [ 156.989348][ T5886] usb 2-1: USB disconnect, device number 8 [ 157.206553][ T4483] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 157.399878][ T4483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.428132][ T4483] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 157.442271][ T4483] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.472244][ T4483] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 157.491910][ T4483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.511016][ T4483] usb 4-1: config 0 descriptor?? [ 157.537573][ T6818] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 157.561740][ T6836] loop2: detected capacity change from 0 to 1024 [ 157.665599][ T6836] hfsplus: xattr search failed [ 157.875675][ T6846] loop1: detected capacity change from 0 to 1024 [ 157.909283][ T6846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.971566][ T4483] gt683r_led 0003:1770:FF00.0008: unexpected long global item [ 157.989969][ T4483] gt683r_led 0003:1770:FF00.0008: hid parsing failed [ 157.999678][ T4483] gt683r_led: probe of 0003:1770:FF00.0008 failed with error -22 [ 158.162236][ T4483] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.183389][ T6312] usb 4-1: USB disconnect, device number 6 [ 158.306023][ T5886] kernel write not supported for file /snd/seq (pid: 5886 comm: kworker/0:16) [ 158.362090][ T4483] usb 3-1: Using ep0 maxpacket: 8 [ 158.369581][ T4483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.381370][ T4483] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.390907][ T4483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.409622][ T4483] usb 3-1: config 0 descriptor?? [ 158.632918][ T4483] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 158.848558][ T6312] usb 3-1: USB disconnect, device number 8 [ 159.130791][ T6885] loop0: detected capacity change from 0 to 128 [ 159.166619][ T6885] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.176096][ T6885] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.220194][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 159.242274][ T4483] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 159.299367][ T6891] loop0: detected capacity change from 0 to 512 [ 159.307242][ T6891] EXT4-fs: Ignoring removed nobh option [ 159.322987][ T6891] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.962: corrupted in-inode xattr [ 159.359886][ T6891] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.962: couldn't read orphan inode 15 (err -117) [ 159.381900][ T6891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.438521][ T4483] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 159.465113][ T6894] loop1: detected capacity change from 0 to 4096 [ 159.476393][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 159.494904][ T6895] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.500892][ T4483] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 159.557395][ T4483] usb 5-1: config 0 has no interface number 0 [ 159.602740][ T4483] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 159.640349][ T4483] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.683903][ T4483] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 159.715475][ T6879] loop3: detected capacity change from 0 to 40427 [ 159.735238][ T4483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.765462][ T6879] F2FS-fs (loop3): invalid crc value [ 159.782297][ T4483] usb 5-1: config 0 descriptor?? [ 159.818898][ T6879] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.938018][ T6879] F2FS-fs (loop3): Start checkpoint disabled! [ 160.011098][ T6879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 160.069263][ T26] audit: type=1326 audit(1778838988.413:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6905 comm="syz.0.968" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd77b9ce59 code=0x0 [ 160.265363][ T46] kworker/u4:3: attempt to access beyond end of device [ 160.265363][ T46] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 160.406243][ T4483] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input12 [ 160.482180][ T4483] input: failed to attach handler kbd to device input12, error: -5 [ 160.610268][ T5876] usb 5-1: USB disconnect, device number 7 [ 160.630963][ T4564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.780068][ T4564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.886979][ T4564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.026294][ T4564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.273959][ T6932] loop0: detected capacity change from 0 to 512 [ 161.795589][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.807875][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.817385][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.825576][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.852596][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.859910][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.305873][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'. [ 162.405543][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 162.484347][ T6967] loop4: detected capacity change from 0 to 256 [ 162.509335][ T6967] exfat: Deprecated parameter 'utf8' [ 162.525308][ T6967] exfat: Deprecated parameter 'namecase' [ 162.555587][ T6967] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 162.636775][ T6941] chnl_net:caif_netlink_parms(): no params data found [ 162.996783][ T6983] loop4: detected capacity change from 0 to 1024 [ 163.038837][ T6988] loop3: detected capacity change from 0 to 512 [ 163.116395][ T6983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.131040][ T6988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.158449][ T6983] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.176475][ T6988] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.216488][ T6983] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 3: comm syz.4.995: lblock 3 mapped to illegal pblock 3 (length 3) [ 163.315749][ T6983] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 163.360576][ T6983] EXT4-fs (loop4): This should not happen!! Data will be lost [ 163.360576][ T6983] [ 163.400200][ T7001] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #15: block 3: comm syz.4.995: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.446522][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 163.451777][ T6941] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.465604][ T6941] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.475230][ T26] audit: type=1800 audit(1778838991.823:16): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.995" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 163.483079][ T6941] device bridge_slave_0 entered promiscuous mode [ 163.643438][ T32] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 163.694937][ T32] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 163.707604][ T32] EXT4-fs (loop4): This should not happen!! Data will be lost [ 163.707604][ T32] [ 163.726352][ T7010] loop3: detected capacity change from 0 to 2048 [ 163.770224][ T7010] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 163.784304][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 163.866489][ T4265] udevd[4265]: incorrect nilfs2 checksum on /dev/loop3 [ 163.901202][ T7015] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.912476][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 164.142698][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.149868][ T6941] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.174912][ T7027] loop0: detected capacity change from 0 to 128 [ 164.199093][ T6941] device bridge_slave_1 entered promiscuous mode [ 164.278493][ T7027] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 164.291208][ T7027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.351478][ T6941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.515896][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 164.633065][ T6941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.737900][ T4564] device hsr_slave_0 left promiscuous mode [ 164.762162][ T4564] device hsr_slave_1 left promiscuous mode [ 164.792235][ T4483] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 164.851450][ T4564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.870297][ T4564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.903756][ T4564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.931534][ T4564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.959662][ T7050] loop2: detected capacity change from 0 to 256 [ 164.966133][ T4564] device bridge_slave_1 left promiscuous mode [ 164.984955][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.012208][ T4483] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 165.030047][ T4564] device bridge_slave_0 left promiscuous mode [ 165.033206][ T4483] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.043063][ T7050] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 165.065347][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.075531][ T4483] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.128806][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.158085][ T4483] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.189423][ T4483] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.216880][ T4564] device veth1_macvtap left promiscuous mode [ 165.231190][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.234219][ T4564] device veth0_macvtap left promiscuous mode [ 165.252817][ T4483] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.284367][ T4483] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.287406][ T4564] device veth1_vlan left promiscuous mode [ 165.321775][ T4564] device veth0_vlan left promiscuous mode [ 165.322101][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.356458][ T4483] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.399667][ T4483] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.431574][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.454455][ T4483] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.505496][ T4483] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.551178][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.564930][ T4483] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.592290][ T4483] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.642761][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.670828][ T4483] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.697851][ T4483] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.720685][ T7068] loop2: detected capacity change from 0 to 16 [ 165.732562][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.750692][ T4483] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.772125][ T4483] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.786484][ T7068] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 165.832674][ T4483] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.863723][ T4483] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 165.905694][ T4483] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 165.939185][ T4483] usb 4-1: Product: syz [ 165.953430][ T4483] usb 4-1: Manufacturer: syz [ 165.968394][ T4483] usb 4-1: SerialNumber: syz [ 165.995507][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 166.009984][ T4483] usb 4-1: config 0 descriptor?? [ 166.043040][ T4483] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 166.143538][ T7055] loop0: detected capacity change from 0 to 40427 [ 166.191654][ T7055] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 166.210478][ T7055] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 166.288684][ T7055] F2FS-fs (loop0): invalid crc value [ 166.326018][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 166.350960][ T4483] usb 4-1: USB disconnect, device number 7 [ 166.361651][ T7055] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 166.381909][ T4483] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 166.616269][ T7055] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 166.647349][ T7055] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.741195][ T7055] syz.0.1020: attempt to access beyond end of device [ 166.741195][ T7055] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 166.856526][ T4271] syz-executor: attempt to access beyond end of device [ 166.856526][ T4271] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.035170][ T7085] loop4: detected capacity change from 0 to 64 [ 167.615811][ T4564] team0 (unregistering): Port device team_slave_1 removed [ 167.685658][ T4564] team0 (unregistering): Port device team_slave_0 removed [ 167.732030][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 167.771681][ T4564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.825748][ T4564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.932160][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 167.944932][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 182, changing to 11 [ 167.960741][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 167.980144][ T5876] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 167.990355][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.030357][ T5876] usb 5-1: config 0 descriptor?? [ 168.072106][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 168.327518][ T7102] loop3: detected capacity change from 0 to 40427 [ 168.348468][ T4564] bond0 (unregistering): Released all slaves [ 168.379443][ T7102] F2FS-fs (loop3): invalid crc value [ 168.386927][ T7102] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.439216][ T7102] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.446659][ T5876] kye 0003:0458:5010.0009: unknown main item tag 0xd [ 168.468221][ T5876] kye 0003:0458:5010.0009: unknown main item tag 0x1 [ 168.482132][ T26] audit: type=1800 audit(1778838996.823:17): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1035" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 168.508998][ T5876] kye 0003:0458:5010.0009: unknown main item tag 0x1 [ 168.516713][ T5876] kye 0003:0458:5010.0009: unknown main item tag 0x0 [ 168.536440][ T5876] kye 0003:0458:5010.0009: hidraw0: USB HID v0.09 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 168.554285][ T5876] kye 0003:0458:5010.0009: tablet-enabling feature report not found [ 168.562767][ T4282] syz-executor: attempt to access beyond end of device [ 168.562767][ T4282] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.566098][ T5876] kye 0003:0458:5010.0009: tablet enabling failed [ 168.623246][ T6941] team0: Port device team_slave_0 added [ 168.668282][ T5886] usb 5-1: USB disconnect, device number 8 [ 168.754399][ T6941] team0: Port device team_slave_1 added [ 168.845818][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.872472][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.974342][ T7104] fido_id[7104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 169.011648][ T6941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.069394][ T6941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.085464][ T6941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.170170][ T6941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.329189][ T6941] device hsr_slave_0 entered promiscuous mode [ 169.382622][ T6941] device hsr_slave_1 entered promiscuous mode [ 169.418641][ T6941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.429793][ T6941] Cannot create hsr debugfs directory [ 169.925988][ T6941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.932129][ T5628] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.965941][ T6941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.006316][ T6941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.024115][ T6941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.088245][ T7109] loop2: detected capacity change from 0 to 40427 [ 170.124121][ T5628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.138826][ T7109] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 170.145403][ T6312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.153242][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 170.159708][ T5628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.172284][ T7109] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 170.180306][ T5628] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 170.200475][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.218805][ T7109] F2FS-fs (loop2): invalid crc value [ 170.228368][ T5628] usb 5-1: config 0 descriptor?? [ 170.270015][ T7109] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 170.352450][ T6941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.362195][ T6312] usb 1-1: Using ep0 maxpacket: 16 [ 170.371565][ T6312] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 170.411607][ T6312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.422655][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.431013][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.438446][ T6312] usb 1-1: Product: syz [ 170.438494][ T6312] usb 1-1: Manufacturer: syz [ 170.464853][ T7109] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 170.472226][ T6312] usb 1-1: SerialNumber: syz [ 170.486684][ T6941] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.492092][ T7109] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.522722][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.543145][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.580970][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.588170][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.608131][ T7109] syz.2.1037: attempt to access beyond end of device [ 170.608131][ T7109] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 170.647785][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.701152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.718111][ T6312] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 170.739869][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.754822][ T6312] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.758591][ T4272] syz-executor: attempt to access beyond end of device [ 170.758591][ T4272] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.779263][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.786423][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.801884][ T6312] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 170.810498][ T6312] usb 1-1: media controller created [ 170.821784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 170.887110][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 170.887897][ T7132] loop3: detected capacity change from 0 to 32768 [ 170.905225][ T6312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.921177][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.961421][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.984524][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.987471][ T26] audit: type=1800 audit(1778838999.333:18): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1043" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 170.995307][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.064035][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.094662][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.119791][ T6941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.149608][ T6312] zl10353_read_register: readreg error (reg=127, ret==-71) [ 171.175637][ T6941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.220520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.239384][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.269681][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.287057][ T6312] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 171.315575][ T6312] usb 1-1: USB disconnect, device number 9 [ 171.479514][ T5628] wacom 0003:056A:030C.000A: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.4-1/input0 [ 171.497834][ T7148] loop3: detected capacity change from 0 to 128 [ 171.569753][ T7148] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 171.629731][ T7148] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 171.650933][ T5886] usb 5-1: USB disconnect, device number 9 [ 171.729509][ T7149] fido_id[7149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 171.811491][ T7148] sysv_count_free_inodes: unable to read inode table [ 171.958433][ T4282] sysv_free_block: trying to free block not in datazone [ 172.005355][ T4282] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 172.151192][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.170619][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.253045][ T6941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.333002][ T7166] loop3: detected capacity change from 0 to 2048 [ 172.374097][ T7166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.459878][ T7166] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 172.525396][ T7166] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 173.336821][ T7196] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1058'. [ 173.361808][ T7170] loop2: detected capacity change from 0 to 32768 [ 173.674515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.696907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.740639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.793895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.807104][ T6941] device veth0_vlan entered promiscuous mode [ 173.853296][ T7207] netlink: 'syz.3.1064': attribute type 3 has an invalid length. [ 173.882128][ T7207] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1064'. [ 173.931666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.950208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 173.987555][ T6941] device veth1_vlan entered promiscuous mode [ 174.074828][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.124343][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.165005][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.208077][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.242722][ T6941] device veth0_macvtap entered promiscuous mode [ 174.275018][ T6941] device veth1_macvtap entered promiscuous mode [ 174.359866][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.408283][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.489576][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.523874][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.564378][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.612018][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.644734][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.668737][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.716274][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.756556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.779505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.810236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.887315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.925476][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 174.943035][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.969310][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.009071][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.046885][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.071696][ T7221] loop3: detected capacity change from 0 to 32768 [ 175.076666][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.162382][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.189197][ T7221] XFS (loop3): Mounting V5 Filesystem [ 175.225101][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.239625][ T7221] XFS (loop3): Ending clean mount [ 175.267697][ T7221] XFS (loop3): Quotacheck needed: Please wait. [ 175.328711][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.338827][ T6941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 175.357195][ T6941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.398849][ T6941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.399106][ T7221] XFS (loop3): Quotacheck: Done. [ 175.425951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.441506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.515742][ T6941] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.549630][ T6941] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.601724][ T6941] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.620935][ T6941] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.728681][ T7267] loop0: detected capacity change from 0 to 64 [ 175.838871][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.852091][ T6312] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.878842][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.951416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.988961][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.007635][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.067462][ T6312] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 176.078293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.103700][ T4282] XFS (loop3): Unmounting Filesystem [ 176.107587][ T6312] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 176.140229][ T6312] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.161820][ T6312] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 176.182054][ T6312] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 176.243567][ T6312] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.263295][ T7254] loop2: detected capacity change from 0 to 32768 [ 176.272244][ T6312] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.297366][ T6312] usb 5-1: Product: syz [ 176.301581][ T6312] usb 5-1: Manufacturer: syz [ 176.377329][ T6312] cdc_wdm 5-1:1.0: skipping garbage [ 176.384606][ T7254] XFS (loop2): Mounting V5 Filesystem [ 176.399739][ T7280] loop5: detected capacity change from 0 to 512 [ 176.421055][ T6312] cdc_wdm 5-1:1.0: skipping garbage [ 176.452813][ T7280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.459485][ T7280] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.509401][ T6312] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 176.531106][ T7280] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 176.549658][ T7280] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 176.562076][ T6312] cdc_wdm 5-1:1.0: Unknown control protocol [ 176.590502][ T7280] EXT4-fs (loop5): 1 truncate cleaned up [ 176.620685][ T7280] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 176.653681][ T7254] XFS (loop2): Ending clean mount [ 176.666540][ T7284] loop0: detected capacity change from 0 to 4096 [ 176.696060][ T7280] EXT4-fs (loop5): shut down requested (2) [ 176.793288][ T7292] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.823304][ T4272] XFS (loop2): Unmounting Filesystem [ 176.858029][ T4483] usb 5-1: USB disconnect, device number 10 [ 177.233806][ T6941] EXT4-fs (loop5): unmounting filesystem. [ 177.354346][ T4317] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 177.460337][ T7302] loop3: detected capacity change from 0 to 4096 [ 177.542124][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 177.551273][ T4317] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 177.574306][ T4317] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 177.605035][ T4317] usb 1-1: Product: syz [ 177.617893][ T4317] usb 1-1: Manufacturer: syz [ 177.632834][ T4317] usb 1-1: SerialNumber: syz [ 177.653689][ T4317] usb 1-1: config 0 descriptor?? [ 177.674396][ T4317] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 177.820323][ T4282] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 177.840205][ T4282] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 178.274401][ T4317] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 178.305849][ T7329] program syz.2.1094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.438348][ T7304] loop5: detected capacity change from 0 to 40427 [ 178.482258][ T5881] usb 1-1: USB disconnect, device number 10 [ 178.492614][ T7304] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 178.529416][ T7304] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 178.569273][ T7304] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x3ffff [ 178.606063][ T7337] loop2: detected capacity change from 0 to 8 [ 178.612394][ T7304] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 178.651731][ T7304] F2FS-fs (loop5): invalid crc value [ 178.724174][ T7304] F2FS-fs (loop5): Found nat_bits in checkpoint [ 179.002690][ T7304] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 179.061781][ T7304] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 179.161015][ T7357] loop2: detected capacity change from 0 to 512 [ 179.172934][ T7304] syz.5.1087: attempt to access beyond end of device [ 179.172934][ T7304] loop5: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 179.223900][ T7359] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x4) [ 179.255586][ T7357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 179.352406][ T7357] System zones: 1-12 [ 179.357408][ T7357] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1101: Directory hole found for htree index block 0 [ 179.412641][ T7357] EXT4-fs (loop2): Remounting filesystem read-only [ 179.419345][ T7357] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 179.514121][ T6941] syz-executor: attempt to access beyond end of device [ 179.514121][ T6941] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.565247][ T7357] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1101: Directory hole found for htree index block 0 [ 179.583857][ T7357] EXT4-fs (loop2): Remounting filesystem read-only [ 179.590654][ T7357] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 179.601270][ T7357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.652516][ T7357] EXT4-fs (loop2): shut down requested (2) [ 179.811635][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 180.377716][ T7386] loop4: detected capacity change from 0 to 8192 [ 180.606093][ T7395] loop5: detected capacity change from 0 to 4096 [ 180.627719][ T7395] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 180.662363][ T4317] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.705415][ T7402] loop2: detected capacity change from 0 to 1024 [ 180.792152][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 180.802115][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 180.855702][ T4317] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 180.860196][ T7402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 180.871144][ T7395] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 180.881157][ T4317] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 180.922453][ T4317] usb 1-1: config 220 has an invalid descriptor of length 41, skipping remainder of the config [ 180.964493][ T4317] usb 1-1: config 220 has no interface number 2 [ 180.970825][ T4317] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 181.003871][ T7402] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.2.1119: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 181.071214][ T4317] usb 1-1: config 220 interface 0 has no altsetting 0 [ 181.094889][ T7402] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1822: Corrupt filesystem [ 181.098609][ T4317] usb 1-1: config 220 interface 76 has no altsetting 0 [ 181.132829][ T4317] usb 1-1: config 220 interface 1 has no altsetting 0 [ 181.146180][ T32] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 181.157710][ T6941] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 181.173133][ T6941] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 181.192620][ T4317] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 181.220545][ T6941] ntfs3: loop5: ntfs_set_state r=3 failed, -22. [ 181.227739][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.244668][ T4564] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22. [ 181.247398][ T4317] usb 1-1: Product: syz [ 181.255527][ T6941] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 181.268506][ T6941] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22. [ 181.276796][ T4317] usb 1-1: Manufacturer: syz [ 181.281429][ T4317] usb 1-1: SerialNumber: syz [ 181.325361][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 181.533020][ T4317] usb 1-1: selecting invalid altsetting 0 [ 181.552869][ T4317] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 181.585006][ T4317] usb 1-1: No valid video chain found. [ 181.624711][ T4317] usb 1-1: selecting invalid altsetting 0 [ 181.658038][ T4317] usbtest: probe of 1-1:220.1 failed with error -22 [ 181.711341][ T4317] usb 1-1: USB disconnect, device number 11 [ 181.754568][ T7436] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1130'. [ 182.548026][ T7460] loop2: detected capacity change from 0 to 4096 [ 182.754153][ T5876] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 182.848806][ T4272] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 182.868634][ T4272] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 182.962184][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 182.973273][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.018353][ T7476] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1146'. [ 183.018501][ T5876] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 183.080138][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.130534][ T5876] usb 5-1: config 0 descriptor?? [ 183.386696][ T7463] loop3: detected capacity change from 0 to 32768 [ 183.497194][ T7463] non-latin1 character 0x466c found in JFS file name [ 183.531675][ T7463] mount with iocharset=utf8 to access [ 183.576141][ T5876] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 184.007969][ T6312] usb 5-1: USB disconnect, device number 11 [ 184.374100][ T7483] loop5: detected capacity change from 0 to 32768 [ 184.420266][ T7512] program syz.2.1155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.475811][ T7483] XFS (loop5): Mounting V5 Filesystem [ 184.588405][ T7483] XFS (loop5): Ending clean mount [ 184.679165][ T7492] loop3: detected capacity change from 0 to 32768 [ 184.712150][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.725094][ T7523] loop4: detected capacity change from 0 to 256 [ 184.766513][ T7492] JBD2: Ignoring recovery information on journal [ 184.913798][ T5876] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.934552][ T5876] usb 1-1: config 0 has no interface number 0 [ 184.950384][ T5876] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 184.972116][ T6941] XFS (loop5): Unmounting Filesystem [ 184.993652][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.001712][ T5876] usb 1-1: Product: syz [ 185.010527][ T5876] usb 1-1: Manufacturer: syz [ 185.022775][ T5876] usb 1-1: SerialNumber: syz [ 185.031351][ T7492] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 185.048021][ T5876] usb 1-1: config 0 descriptor?? [ 185.111288][ T7492] [ 185.113653][ T7492] ====================================================== [ 185.120678][ T7492] WARNING: possible circular locking dependency detected [ 185.127723][ T7492] syzkaller #0 Not tainted [ 185.132143][ T7492] ------------------------------------------------------ [ 185.139176][ T7492] syz.3.1150/7492 is trying to acquire lock: [ 185.145166][ T7492] ffff888028836650 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_truncate_file+0x668/0x1580 [ 185.154708][ T7492] [ 185.154708][ T7492] but task is already holding lock: [ 185.162085][ T7492] ffff888055793f60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_truncate_file+0x362/0x1580 [ 185.171960][ T7492] [ 185.171960][ T7492] which lock already depends on the new lock. [ 185.171960][ T7492] [ 185.182369][ T7492] [ 185.182369][ T7492] the existing dependency chain (in reverse order) is: [ 185.191393][ T7492] [ 185.191393][ T7492] -> #2 (&oi->ip_alloc_sem){++++}-{3:3}: [ 185.199326][ T7492] down_read+0x42/0x2d0 [ 185.204034][ T7492] ocfs2_read_virt_blocks+0x25d/0x970 [ 185.209959][ T7492] ocfs2_find_entry+0x3c1/0x2180 [ 185.215444][ T7492] ocfs2_rename+0x1e72/0x3950 [ 185.220669][ T7492] vfs_rename+0xbe1/0x1100 [ 185.225629][ T7492] do_renameat2+0x8e5/0xce0 [ 185.230671][ T7492] __x64_sys_rename+0x82/0x90 [ 185.235884][ T7492] do_syscall_64+0x4c/0xa0 [ 185.240838][ T7492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.247278][ T7492] [ 185.247278][ T7492] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 185.255810][ T7492] down_read+0x42/0x2d0 [ 185.260517][ T7492] ocfs2_start_trans+0x3a4/0x6f0 [ 185.265992][ T7492] ocfs2_reserve_local_alloc_bits+0xaae/0x2700 [ 185.272688][ T7492] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 185.279552][ T7492] ocfs2_mknod+0xf15/0x25b0 [ 185.284595][ T7492] ocfs2_mkdir+0x1b6/0x4b0 [ 185.289558][ T7492] vfs_mkdir+0x387/0x570 [ 185.294339][ T7492] do_mkdirat+0x1d8/0x440 [ 185.299639][ T7492] __x64_sys_mkdirat+0x85/0x90 [ 185.300824][ T7540] loop2: detected capacity change from 0 to 256 [ 185.304923][ T7492] do_syscall_64+0x4c/0xa0 [ 185.304953][ T7492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.304975][ T7492] [ 185.304975][ T7492] -> #0 (sb_internal#6){.+.+}-{0:0}: [ 185.305013][ T7492] __lock_acquire+0x2d07/0x7d10 [ 185.305038][ T7492] lock_acquire+0x1bb/0x4a0 [ 185.305066][ T7492] ocfs2_start_trans+0x2a5/0x6f0 [ 185.305083][ T7492] ocfs2_truncate_file+0x668/0x1580 [ 185.351641][ T7492] ocfs2_setattr+0x16b8/0x1d30 [ 185.356935][ T7492] notify_change+0xc74/0xf40 [ 185.362040][ T7492] do_truncate+0x1ac/0x240 [ 185.366976][ T7492] path_openat+0x2861/0x2ee0 [ 185.372081][ T7492] do_filp_open+0x1f1/0x430 [ 185.377098][ T7492] do_sys_openat2+0x150/0x4b0 [ 185.382297][ T7492] __x64_sys_open+0x11b/0x140 [ 185.387495][ T7492] do_syscall_64+0x4c/0xa0 [ 185.392429][ T7492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.398854][ T7492] [ 185.398854][ T7492] other info that might help us debug this: [ 185.398854][ T7492] [ 185.409077][ T7492] Chain exists of: [ 185.409077][ T7492] sb_internal#6 --> &journal->j_trans_barrier --> &oi->ip_alloc_sem [ 185.409077][ T7492] [ 185.423007][ T7492] Possible unsafe locking scenario: [ 185.423007][ T7492] [ 185.430442][ T7492] CPU0 CPU1 [ 185.435791][ T7492] ---- ---- [ 185.441142][ T7492] lock(&oi->ip_alloc_sem); [ 185.445723][ T7492] lock(&journal->j_trans_barrier); [ 185.453517][ T7492] lock(&oi->ip_alloc_sem); [ 185.460617][ T7492] lock(sb_internal#6); [ 185.464855][ T7492] [ 185.464855][ T7492] *** DEADLOCK *** [ 185.464855][ T7492] [ 185.472981][ T7492] 3 locks held by syz.3.1150/7492: [ 185.478075][ T7492] #0: ffff888028836460 (sb_writers#33){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 185.487308][ T7492] #1: ffff8880557942c8 (&sb->s_type->i_mutex_key#41){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 185.497663][ T7492] #2: ffff888055793f60 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_truncate_file+0x362/0x1580 [ 185.507938][ T7492] [ 185.507938][ T7492] stack backtrace: [ 185.513823][ T7492] CPU: 0 PID: 7492 Comm: syz.3.1150 Not tainted syzkaller #0 [ 185.521179][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.531236][ T7492] Call Trace: [ 185.534511][ T7492] [ 185.537434][ T7492] dump_stack_lvl+0x188/0x24e [ 185.542112][ T7492] ? load_image+0x400/0x400 [ 185.546608][ T7492] ? show_regs_print_info+0x12/0x12 [ 185.551807][ T7492] ? print_circular_bug+0x12b/0x1a0 [ 185.557013][ T7492] check_noncircular+0x296/0x330 [ 185.561957][ T7492] ? add_chain_block+0x940/0x940 [ 185.566889][ T7492] ? lockdep_lock+0xf1/0x1f0 [ 185.571475][ T7492] ? _find_first_zero_bit+0xcf/0x100 [ 185.576753][ T7492] __lock_acquire+0x2d07/0x7d10 [ 185.581607][ T7492] ? verify_lock_unused+0x140/0x140 [ 185.586804][ T7492] ? verify_lock_unused+0x140/0x140 [ 185.591999][ T7492] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 185.597984][ T7492] lock_acquire+0x1bb/0x4a0 [ 185.602484][ T7492] ? ocfs2_truncate_file+0x668/0x1580 [ 185.607859][ T7492] ? __might_sleep+0xd0/0xd0 [ 185.612435][ T7492] ? do_raw_spin_lock+0x128/0x2f0 [ 185.617450][ T7492] ? read_lock_is_recursive+0x10/0x10 [ 185.622819][ T7492] ? __rwlock_init+0x140/0x140 [ 185.627575][ T7492] ? do_raw_spin_unlock+0x11d/0x230 [ 185.632763][ T7492] ocfs2_start_trans+0x2a5/0x6f0 [ 185.637691][ T7492] ? ocfs2_truncate_file+0x668/0x1580 [ 185.643060][ T7492] ? ocfs2_recovery_exit+0x50/0x50 [ 185.648160][ T7492] ? do_raw_spin_unlock+0x11d/0x230 [ 185.653348][ T7492] ocfs2_truncate_file+0x668/0x1580 [ 185.658543][ T7492] ? __lock_acquire+0x7d10/0x7d10 [ 185.663562][ T7492] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 185.669277][ T7492] ? slab_free_freelist_hook+0x131/0x1a0 [ 185.674904][ T7492] ? do_raw_spin_unlock+0x11d/0x230 [ 185.680093][ T7492] ? _raw_spin_unlock+0x24/0x40 [ 185.684935][ T7492] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 185.690650][ T7492] ? ocfs2_inode_lock_atime+0x530/0x530 [ 185.696188][ T7492] ? ocfs2_rw_lock+0x134/0x250 [ 185.700945][ T7492] ? dquot_initialize+0x20/0x20 [ 185.705786][ T7492] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 185.711849][ T7492] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 185.718432][ T7492] ocfs2_setattr+0x16b8/0x1d30 [ 185.723199][ T7492] ? ocfs2_extend_allocation+0x1930/0x1930 [ 185.728999][ T7492] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 185.735239][ T7492] ? ocfs2_xattr_get+0x149/0x260 [ 185.740177][ T7492] ? ocfs2_get_reflink_xattr_value_root+0xd0/0xd0 [ 185.746585][ T7492] ? aa_get_newest_label+0xf9/0x5b0 [ 185.751775][ T7492] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 185.757661][ T7492] ? current_time+0x196/0x2b0 [ 185.762332][ T7492] ? atime_needs_update+0x780/0x780 [ 185.767523][ T7492] ? evm_inode_setattr+0x91/0x790 [ 185.772543][ T7492] ? bpf_lsm_inode_setattr+0x5/0x10 [ 185.777743][ T7492] ? security_inode_setattr+0xd8/0x140 [ 185.783232][ T7492] ? try_break_deleg+0x79/0x120 [ 185.788077][ T7492] ? ocfs2_extend_allocation+0x1930/0x1930 [ 185.793885][ T7492] notify_change+0xc74/0xf40 [ 185.798475][ T7492] do_truncate+0x1ac/0x240 [ 185.802888][ T7492] ? put_page_bootmem+0x2c0/0x2c0 [ 185.807912][ T7492] ? ima_bprm_check+0x200/0x200 [ 185.812753][ T7492] ? bpf_lsm_path_truncate+0x5/0x10 [ 185.817964][ T7492] path_openat+0x2861/0x2ee0 [ 185.822554][ T7492] ? do_syscall_64+0x4c/0xa0 [ 185.827142][ T7492] ? do_filp_open+0x430/0x430 [ 185.831826][ T7492] do_filp_open+0x1f1/0x430 [ 185.836319][ T7492] ? vfs_tmpfile+0x480/0x480 [ 185.840906][ T7492] ? _raw_spin_unlock+0x24/0x40 [ 185.845745][ T7492] ? alloc_fd+0x58f/0x630 [ 185.850076][ T7492] do_sys_openat2+0x150/0x4b0 [ 185.854749][ T7492] ? do_sys_open+0xe0/0xe0 [ 185.859157][ T7492] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 185.865140][ T7492] ? lock_chain_count+0x20/0x20 [ 185.869987][ T7492] __x64_sys_open+0x11b/0x140 [ 185.874663][ T7492] do_syscall_64+0x4c/0xa0 [ 185.879076][ T7492] ? clear_bhb_loop+0x60/0xb0 [ 185.883755][ T7492] ? clear_bhb_loop+0x60/0xb0 [ 185.888427][ T7492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.894312][ T7492] RIP: 0033:0x7f3dca39ce59 [ 185.898728][ T7492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.918324][ T7492] RSP: 002b:00007f3dcb2e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 185.926726][ T7492] RAX: ffffffffffffffda RBX: 00007f3dca615fa0 RCX: 00007f3dca39ce59 [ 185.934689][ T7492] RDX: 0000000000000000 RSI: 0000000000080242 RDI: 0000200000000040 [ 185.942647][ T7492] RBP: 00007f3dca432d6f R08: 0000000000000000 R09: 0000000000000000 [ 185.950607][ T7492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.958566][ T7492] R13: 00007f3dca616038 R14: 00007f3dca615fa0 R15: 00007ffef0a38018 [ 185.966561][ T7492] [ 185.991812][ T5876] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 186.026454][ T5876] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 186.049856][ T7540] FAT-fs (loop2): Directory bread(block 64) failed [ 186.057686][ T5876] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 186.061079][ T7540] FAT-fs (loop2): Directory bread(block 65) failed [ 186.066014][ T5876] usb 1-1: media controller created [ 186.076059][ T7540] FAT-fs (loop2): Directory bread(block 66) failed [ 186.086398][ T7540] FAT-fs (loop2): Directory bread(block 67) failed [ 186.086674][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.093269][ T7540] FAT-fs (loop2): Directory bread(block 68) failed [ 186.108966][ T7540] FAT-fs (loop2): Directory bread(block 69) failed [ 186.127279][ T7540] FAT-fs (loop2): Directory bread(block 70) failed [ 186.135033][ T4282] ocfs2: Unmounting device (7,3) on (node local) [ 186.145419][ T7540] FAT-fs (loop2): Directory bread(block 71) failed [ 186.165768][ T7540] FAT-fs (loop2): Directory bread(block 72) failed [ 186.182989][ T7540] FAT-fs (loop2): Directory bread(block 73) failed [ 187.202223][ T5876] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 187.223378][ T5876] usb 1-1: USB disconnect, device number 12 [ 194.083334][ T1267] ieee802154 phy0 wpan0: encryption failed: -22