last executing test programs: 19.002156767s ago: executing program 2 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/speed\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) 18.86415178s ago: executing program 2 (id=801): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r1, 0x3, 0x67e, 0x2, 0x1, 0xe0}, &(0x7f00000000c0)=0x14) 18.662276274s ago: executing program 2 (id=803): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0xc, "c208071f"}, @local=@item_4={0x3, 0x2, 0x8, "c70151ff"}, @local=@item_012={0x2, 0x2, 0xa, "a311"}, @global=@item_4={0x3, 0x1, 0x7, "8427cf48"}, @global=@item_4={0x3, 0x1, 0x2, "16fb88d5"}, @local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 16.565457944s ago: executing program 2 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8) 16.420810617s ago: executing program 2 (id=823): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e23, @private=0xa010101}], 0x10) 16.106572364s ago: executing program 2 (id=825): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='kretap0 ', @ANYRESDEC], 0xe9) 15.641055355s ago: executing program 32 (id=825): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='kretap0 ', @ANYRESDEC], 0xe9) 2.516267182s ago: executing program 3 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a40), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={0x14, r1, 0x309, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x40) syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r0) 2.213030379s ago: executing program 1 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) 2.193354489s ago: executing program 3 (id=907): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 2.017423403s ago: executing program 1 (id=909): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r0 = fsopen(&(0x7f0000000080)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.922157635s ago: executing program 3 (id=910): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x3e6f, 0x400, 0x2, 0x1a4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x11d0}, 0x7, 0x3ed763469f8f58dc}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 1.844001147s ago: executing program 4 (id=911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x1}, {0x0, 0x4, 0x7}, {0x40000, 0x8, 0x10001}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x41}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.662673631s ago: executing program 4 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0xfffffff5}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x324}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) 1.640062022s ago: executing program 1 (id=914): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x400008) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 1.593137453s ago: executing program 3 (id=915): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0), 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r0, &(0x7f0000000200)="2df65be262dadbfce22d", 0xa, 0x8080c5d) fallocate(r0, 0x3, 0x80007, 0x8000c60) 1.465326386s ago: executing program 4 (id=916): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002000000000000000001080004000000000014000000110001"], 0xa0}}, 0x0) 1.435221457s ago: executing program 0 (id=917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10a, 0x0, 0x7fff}]}) 1.29496021s ago: executing program 1 (id=918): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 1.263958041s ago: executing program 4 (id=919): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x53}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x11) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000240)="2a73ed35", 0x4}], 0x1}}], 0x40000ca, 0x200040c4) 1.135240784s ago: executing program 1 (id=920): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000300)=@generic={0x8, "ffff00002000"}, 0xc) 1.096865225s ago: executing program 4 (id=921): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 1.092961334s ago: executing program 0 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000000040200000008", 0x40) 914.661739ms ago: executing program 0 (id=923): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x282, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/235, 0xeb}], 0x1, 0x112, 0x0) 914.154019ms ago: executing program 4 (id=924): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setregid(0x0, 0xee00) 798.052772ms ago: executing program 1 (id=925): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 705.024344ms ago: executing program 0 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000180)='3', 0x1}, {0x0, 0xa00}], 0x2) 664.265225ms ago: executing program 3 (id=927): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0x400008) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 385.142902ms ago: executing program 0 (id=928): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)={0x3b}, 0x8) sendmmsg$inet6(r0, &(0x7f0000005680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}}], 0x1, 0x4c040) 244.230485ms ago: executing program 0 (id=929): syz_mount_image$romfs(&(0x7f0000000200), &(0x7f0000000480)='./file0\x00', 0x4, &(0x7f0000000000)=ANY=[], 0x1, 0x162, &(0x7f0000000780)="$eJzs2rFKw0AYB/Bv0LZ2EkenQiUK2iRNtK46ipu7Q6m5NnixJRGkXRzFSVA4B19C8Al8AunopksHXyJyzVGTqEWXJuj/t+QPX5J+vYPL8tX8rldnQY1oo3d9MFryu16lYW+3WJ01KbJHRBUZhmF4q9MnL5P6MCT9ixuytfIWXatrbbF/yVzuWFm3BAAAAAAAAAAAAAAAAAAAAAAAP6SVVSh3hHfBXO7UY9WgPzhucu74AVEp+WBpll1mR6uoGS5igt/J9bET9fUSFWlHJlfs+rJuJp+/UWG1I/hren2NU69nBP1BzfWabaftnFiW3TA3TXPLMsbvMtJv1O5VTzQMH8zYOJn+dCg702LzZs/T5s16C9FV7n+BaG7ZFVdn6V/72P+/Hhbz0UbmoaB2Pi/9/KtwPvWe+Rx0OAm/OELzbfz9GxFR0a4+yvNPb3X5kSrOYjmz/fsA8J33AAAA///CvDfq") r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 3 (id=930): r0 = syz_io_uring_setup(0x47ec, &(0x7f0000000400)={0x0, 0x9ac7, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r4}}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): 0. [ 98.648539][ T6389] loop3: detected capacity change from 0 to 32768 [ 98.739954][ T6389] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.833998][ T6389] XFS (loop3): Ending clean mount [ 99.077647][ T28] audit: type=1400 audit(1791445204.847:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=6416 comm="syz.1.231" [ 99.099076][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.128983][ T6434] process 'syz.1.238' launched './file0' with NULL argv: empty string added [ 100.338836][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.537862][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 100.555729][ T5818] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 100.568932][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.579615][ T5818] usb 3-1: Product: syz [ 100.583828][ T5818] usb 3-1: Manufacturer: syz [ 100.594868][ T5818] usb 3-1: SerialNumber: syz [ 100.610225][ T5818] usb 3-1: config 0 descriptor?? [ 100.630497][ T5818] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 100.647909][ T5818] pctv452e: pctv452e_power_ctrl: 1 [ 100.647909][ T5818] [ 100.657912][ T5818] usb 3-1: selecting invalid altsetting 3 [ 100.663694][ T5818] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 100.663694][ T5818] [ 100.681671][ T5818] dvb-usb: bulk message failed: -22 (5/0) [ 100.697017][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.707198][ T5818] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 100.728077][ T5818] usb 3-1: media controller created [ 100.734243][ T5818] dvb-usb: bulk message failed: -22 (8/0) [ 100.751683][ T5818] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 100.772171][ T5818] dvb-usb: MAC address reading failed. [ 100.837334][ T6431] pctv452e: I2C error -22; AA 02 00 00 F5 -> 00 00 00 00 00 00 00 [ 100.840924][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.964374][ T5818] DVB: Unable to find symbol stb0899_attach() [ 100.970659][ T5818] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 101.079749][ T5818] rc_core: IR keymap rc-tt-1500 not found [ 101.085584][ T5818] Registered IR keymap rc-empty [ 101.093107][ T5818] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 101.106432][ T5818] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 101.129805][ T5818] dvb-usb: schedule remote query interval to 100 msecs. [ 101.136966][ T5818] pctv452e: pctv452e_power_ctrl: 0 [ 101.136966][ T5818] [ 101.145209][ T5818] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 101.159580][ T5818] usb 3-1: USB disconnect, device number 3 [ 101.260356][ T5818] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 101.423935][ T6480] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.484302][ T6482] loop3: detected capacity change from 0 to 64 [ 101.843902][ T6494] comedi comedi4: bad chanlist[0]=0x000000d1 chan=209 range length=2 [ 101.883909][ T6493] loop1: detected capacity change from 0 to 4096 [ 101.934552][ T6493] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 102.050719][ T6501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 102.074818][ T6493] ntfs3: loop1: ino=19, mi_enum_attr [ 102.142069][ T6493] ntfs3: loop1: failed to convert "c46c" to cp864 [ 102.153714][ T6506] loop3: detected capacity change from 0 to 164 [ 102.164174][ T6493] ntfs3: loop1: ino=20, mi_enum_attr [ 102.329440][ T6508] loop0: detected capacity change from 0 to 512 [ 102.516500][ T6516] loop0: detected capacity change from 0 to 512 [ 102.532229][ T6516] EXT4-fs: Ignoring removed bh option [ 102.589428][ T6516] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 102.620914][ T6516] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 102.644566][ T6516] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.271: Corrupt directory, running e2fsck is recommended [ 102.661121][ T6516] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 102.669986][ T6516] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.271: corrupted in-inode xattr: e_name out of bounds [ 102.698056][ T6516] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.271: couldn't read orphan inode 15 (err -117) [ 102.725542][ T6516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.761659][ T6516] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 102.774445][ T6516] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 102.807995][ T6516] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.271: Corrupt directory, running e2fsck is recommended [ 102.827419][ T6516] CacheFiles: Lookup cache failed with error -117 [ 102.837321][ T6516] CacheFiles: Failed to register: -117 [ 102.865442][ T6528] loop3: detected capacity change from 0 to 2048 [ 102.889505][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.968435][ T6531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.083937][ T28] audit: type=1800 audit(1791445208.867:9): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.275" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 103.178014][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.233232][ T6538] loop1: detected capacity change from 0 to 256 [ 103.358471][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 103.388038][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 103.403656][ T8] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 103.426984][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.441100][ T8] usb 3-1: Product: syz [ 103.455521][ T8] usb 3-1: Manufacturer: syz [ 103.460413][ T8] usb 3-1: SerialNumber: syz [ 103.539086][ T6544] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 103.584112][ T23] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 103.604775][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.618738][ T23] usb 1-1: Product: syz [ 103.622960][ T23] usb 1-1: Manufacturer: syz [ 103.640716][ T23] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 103.731133][ T8] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 103.771802][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.787584][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 103.805604][ T8] usb 3-1: media controller created [ 103.825204][ T6550] loop1: detected capacity change from 0 to 512 [ 103.830961][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.882177][ T6550] EXT4-fs (loop1): 1 truncate cleaned up [ 103.889504][ T5818] usb 1-1: USB disconnect, device number 7 [ 103.890642][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.959656][ T6550] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.285: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 103.997274][ T28] audit: type=1400 audit(1791445209.777:10): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=6552 comm="syz.3.286" name="p" offset=79 [ 104.022580][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.123282][ T8] zl10353_read_register: readreg error (reg=127, ret==-110) [ 104.191552][ T8] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 104.203002][ T8] usb 3-1: USB disconnect, device number 4 [ 104.336094][ T6560] tun0: tun_chr_ioctl cmd 1074812118 [ 104.584176][ T6572] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 104.594975][ T63] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.698327][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.767957][ T2137] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.905042][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.912025][ T6579] capability: warning: `syz.2.298' uses 32-bit capabilities (legacy support in use) [ 104.916521][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.936372][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.956918][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.966121][ T2137] usb 1-1: Using ep0 maxpacket: 32 [ 104.973319][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.982014][ T23] usb 2-1: Product: syz [ 104.986295][ T23] usb 2-1: Manufacturer: syz [ 104.991230][ T23] usb 2-1: SerialNumber: syz [ 104.998808][ T2137] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.013495][ T2137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.022775][ T23] hub 2-1:1.0: bad descriptor, ignoring hub [ 105.024351][ T6581] loop2: detected capacity change from 0 to 512 [ 105.029257][ T23] hub: probe of 2-1:1.0 failed with error -5 [ 105.047093][ T2137] usb 1-1: config 0 descriptor?? [ 105.081742][ T6581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002] [ 105.099297][ T6581] System zones: 0-2, 18-18, 34-34 [ 105.117391][ T6581] EXT4-fs (loop2): 1 orphan inode deleted [ 105.124333][ T6581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.137003][ T6581] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.165222][ T6581] EXT4-fs (loop2): resizing filesystem from 64 to 2 blocks [ 105.176468][ T6581] EXT4-fs warning (device loop2): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 105.216628][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.260203][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 105.278031][ T2137] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 105.297622][ T2137] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.314763][ T2137] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 105.325570][ T2137] usb 1-1: media controller created [ 105.351136][ T2137] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.414091][ T6587] loop2: detected capacity change from 0 to 256 [ 105.479479][ T2137] az6027: usb out operation failed. (-71) [ 105.506047][ T2137] az6027: usb out operation failed. (-71) [ 105.522744][ T2137] stb0899_attach: Driver disabled by Kconfig [ 105.539440][ T2137] az6027: no front-end attached [ 105.539440][ T2137] [ 105.563835][ T2137] az6027: usb out operation failed. (-71) [ 105.572243][ T2137] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 105.593500][ T2137] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 105.607457][ T6589] loop2: detected capacity change from 0 to 128 [ 105.619505][ T2137] dvb-usb: schedule remote query interval to 400 msecs. [ 105.633987][ T2137] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 105.648411][ T2137] usb 1-1: USB disconnect, device number 8 [ 105.688415][ T6589] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.736569][ T6589] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.780946][ T5817] usb 2-1: USB disconnect, device number 3 [ 105.796281][ T2137] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 105.806260][ T5817] usblp0: removed [ 105.904137][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.996761][ T6593] loop2: detected capacity change from 0 to 4096 [ 106.019677][ T6593] ntfs3: loop2: ino=3, mi_enum_attr [ 106.574581][ T6609] loop0: detected capacity change from 0 to 512 [ 106.598067][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.598165][ T5086] Bluetooth: hci4: command 0x1003 tx timeout [ 106.661943][ T6609] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.683733][ T6609] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 106.723807][ T6609] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 106.783766][ T6609] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #13: comm syz.0.310: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 106.838403][ T6609] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.310: couldn't read orphan inode 13 (err -117) [ 106.862351][ T6609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.945367][ T6609] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 106.971659][ T6609] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 107.081252][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.149264][ T6625] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 107.276585][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 107.327898][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.480367][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.527834][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 107.540397][ T27] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 107.558491][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.579159][ T27] usb 2-1: config 0 descriptor?? [ 107.785462][ T6644] set_capacity_and_notify: 1 callbacks suppressed [ 107.785477][ T6644] loop3: detected capacity change from 0 to 2048 [ 107.815277][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 107.830307][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.860739][ T27] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 107.877975][ T27] usb 2-1: media controller created [ 107.908964][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.939932][ T6644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.975268][ T6644] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.019721][ T27] az6027: usb out operation failed. (-71) [ 108.060255][ T27] az6027: usb out operation failed. (-71) [ 108.066047][ T27] stb0899_attach: Driver disabled by Kconfig [ 108.092060][ T27] az6027: no front-end attached [ 108.092060][ T27] [ 108.108161][ T27] az6027: usb out operation failed. (-71) [ 108.122350][ T27] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 108.137987][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 108.152007][ T6656] jffs2: notice: (6656) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.173080][ T6655] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.326: bg 0: block 345: padding at end of block bitmap is not set [ 108.193033][ T27] dvb-usb: schedule remote query interval to 400 msecs. [ 108.221558][ T27] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 108.247289][ T27] usb 2-1: USB disconnect, device number 4 [ 108.272217][ T6655] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 113 with error 117 [ 108.293205][ T6655] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.293205][ T6655] [ 108.388672][ T51] Bluetooth: hci0: Zero size dump init pkt [ 108.404356][ T27] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 108.561479][ T1103] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 108.578939][ T1103] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.578939][ T1103] [ 108.592724][ T1103] EXT4-fs (loop3): Total free blocks count 0 [ 108.607306][ T1103] EXT4-fs (loop3): Free/Dirty block details [ 108.617927][ T1103] EXT4-fs (loop3): free_blocks=0 [ 108.624118][ T1103] EXT4-fs (loop3): dirty_blocks=384 [ 108.647506][ T1103] EXT4-fs (loop3): Block reservation details [ 109.051864][ T6673] loop3: detected capacity change from 0 to 4096 [ 109.116121][ T6673] ntfs3: loop3: ino=3, mi_enum_attr [ 109.243144][ T6667] loop0: detected capacity change from 0 to 32768 [ 109.333933][ T6667] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.383427][ T6689] loop2: detected capacity change from 0 to 1764 [ 109.565545][ T6667] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 109.608671][ T6667] XFS (loop0): Starting recovery (logdev: internal) [ 109.662533][ T6667] XFS (loop0): Ending recovery (logdev: internal) [ 109.673638][ T6667] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 109.686424][ T6667] XFS (loop0): Failed to initialize disk quotas. [ 109.741390][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 109.776566][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.888004][ T5818] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.937875][ T2137] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.101107][ T5818] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 110.119930][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.140454][ T5818] usb 3-1: config 0 descriptor?? [ 110.143548][ T2137] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.175030][ T2137] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.210053][ T2137] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.228530][ T2137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.246846][ T2137] usb 2-1: SerialNumber: syz [ 110.316119][ T6712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.351'. [ 110.483720][ T2137] usb 2-1: 0:2 : does not exist [ 110.563712][ T2137] usb 2-1: USB disconnect, device number 5 [ 110.608199][ T5818] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 110.630352][ T5818] [drm] Initialized udl on minor 2 [ 110.804860][ T6727] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 110.804860][ T6727] The task syz.3.357 (6727) triggered the difference, watch for misbehavior. [ 110.975819][ T5818] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 110.990639][ T5818] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 111.001055][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.012437][ T5818] usb 3-1: USB disconnect, device number 5 [ 111.018866][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 111.038243][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 111.794419][ T6747] loop0: detected capacity change from 0 to 4096 [ 111.852446][ T2137] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.056162][ T2137] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.085046][ T2137] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.086469][ T6743] loop1: detected capacity change from 0 to 32768 [ 112.102058][ T2137] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.142325][ T2137] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 112.143764][ T6743] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.372 (6743) [ 112.158529][ T2137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.173063][ T2137] usb 3-1: Product: syz [ 112.177669][ T2137] usb 3-1: Manufacturer: syz [ 112.212670][ T2137] usb 3-1: SerialNumber: syz [ 112.217878][ T6743] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 112.229613][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 112.240021][ T6743] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 112.244721][ T2137] hub 3-1:1.0: bad descriptor, ignoring hub [ 112.251510][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 112.268933][ T2137] hub: probe of 3-1:1.0 failed with error -5 [ 112.272676][ T6743] BTRFS info (device loop1): using free space tree [ 112.284717][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 112.309283][ T6756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 112.485047][ T2137] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.502677][ T6743] BTRFS info (device loop1): enabling ssd optimizations [ 112.510879][ T6743] BTRFS info (device loop1): auto enabling async discard [ 112.561382][ T6780] bond0: option arp_validate: invalid value () [ 112.752043][ T5775] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 112.895091][ T5817] usb 3-1: USB disconnect, device number 6 [ 112.914189][ T5817] usblp0: removed [ 113.517321][ T6797] loop1: detected capacity change from 0 to 32768 [ 113.530534][ T6797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.379 (6797) [ 113.571644][ T6797] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.587174][ T6797] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 113.597477][ T6805] jffs2: notice: (6805) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.605711][ T6797] BTRFS info (device loop1): setting nodatasum [ 113.625326][ T6797] BTRFS info (device loop1): force zlib compression, level 3 [ 113.633575][ T6797] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 113.650823][ T6797] BTRFS info (device loop1): use lzo compression, level 0 [ 113.676821][ T6797] BTRFS info (device loop1): turning on flush-on-commit [ 113.698830][ T6797] BTRFS info (device loop1): enabling auto defrag [ 113.705377][ T6797] BTRFS info (device loop1): max_inline at 4096 [ 113.735462][ T6797] BTRFS info (device loop1): using free space tree [ 113.913090][ T6797] BTRFS info (device loop1): enabling ssd optimizations [ 114.228636][ T6801] loop0: detected capacity change from 0 to 32768 [ 114.269510][ T6801] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.344388][ T6842] loop3: detected capacity change from 0 to 1024 [ 114.356725][ T5775] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.440606][ T6801] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 114.476735][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.506854][ T6842] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.539594][ T6801] XFS (loop0): Starting recovery (logdev: internal) [ 114.626483][ T6842] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 6) [ 114.651408][ T2137] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.680222][ T6801] XFS (loop0): Ending recovery (logdev: internal) [ 114.707354][ T6801] XFS (loop0): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 114.725565][ T6842] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 114.733896][ T6801] XFS (loop0): Failed to initialize disk quotas. [ 114.738115][ T6842] EXT4-fs (loop3): This should not happen!! Data will be lost [ 114.738115][ T6842] [ 114.756779][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 114.774878][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 114.798816][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 114.837072][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 114.858515][ T6801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'. [ 114.873878][ T2137] usb 3-1: Using ep0 maxpacket: 16 [ 114.879338][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 114.882471][ T2137] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.904583][ T2137] usb 3-1: config 0 has no interface number 0 [ 114.907619][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 114.924730][ T2137] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.943617][ T2137] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 114.953850][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.956251][ T2137] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 114.972789][ T2137] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 114.973306][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 114.984048][ T2137] usb 3-1: Product: syz [ 115.002101][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 115.006597][ T6853] loop1: detected capacity change from 0 to 256 [ 115.018562][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.389: lblock 0 mapped to illegal pblock 0 (length 4) [ 115.022032][ T2137] usb 3-1: SerialNumber: syz [ 115.100608][ T2137] usb 3-1: config 0 descriptor?? [ 115.120066][ T2137] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 115.166533][ T2137] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10 [ 115.194219][ T6853] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 115.412240][ T1103] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 115.445886][ T1103] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.445886][ T1103] [ 115.471041][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.480554][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.488329][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.495535][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.503144][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.511984][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.517380][ T6857] jffs2: notice: (6857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.519237][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.547921][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.555303][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.562736][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 115.568644][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.576758][ T2137] usb 3-1: USB disconnect, device number 7 [ 115.578741][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 115.614240][ T2137] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 115.806845][ T6869] mmap: syz.0.396 (6869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.907008][ T6872] loop1: detected capacity change from 0 to 512 [ 115.911519][ T6867] loop3: detected capacity change from 0 to 4096 [ 115.925216][ T6872] EXT4-fs: Ignoring removed bh option [ 115.939097][ T6867] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 115.959059][ T6872] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 115.997473][ T6872] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 116.008105][ T6872] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.399: Corrupt directory, running e2fsck is recommended [ 116.023526][ T6872] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 116.032191][ T6872] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.399: corrupted in-inode xattr: e_name out of bounds [ 116.063772][ T6872] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.399: couldn't read orphan inode 15 (err -117) [ 116.078646][ T6872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.091837][ T6867] ntfs3: loop3: ino=19, mi_enum_attr [ 116.110759][ T6872] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.127863][ T6872] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 116.152443][ T6872] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.399: Corrupt directory, running e2fsck is recommended [ 116.194961][ T6872] CacheFiles: Lookup cache failed with error -117 [ 116.203258][ T6872] CacheFiles: Failed to register: -117 [ 116.237888][ T6867] ntfs3: loop3: failed to convert "c46c" to cp864 [ 116.267730][ T6867] ntfs3: loop3: ino=20, mi_enum_attr [ 116.269487][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.057503][ T6877] loop1: detected capacity change from 0 to 40427 [ 117.085760][ T6877] F2FS-fs (loop1): invalid crc value [ 117.124332][ T6877] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.249532][ T6877] F2FS-fs (loop1): Start checkpoint disabled! [ 117.287974][ T6877] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 117.376792][ T6896] loop3: detected capacity change from 0 to 32768 [ 117.427186][ T6896] JBD2: Ignoring recovery information on journal [ 117.512033][ T13] kworker/u4:1: attempt to access beyond end of device [ 117.512033][ T13] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 117.523337][ T6894] loop2: detected capacity change from 0 to 32768 [ 117.539991][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 117.542535][ T6896] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 117.547218][ T13] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 117.616033][ T6894] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.723717][ T6894] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 117.786870][ T6894] XFS (loop2): Starting recovery (logdev: internal) [ 117.843310][ T6894] XFS (loop2): Ending recovery (logdev: internal) [ 117.849735][ T6896] syz.3.409 (6896) used greatest stack depth: 18808 bytes left [ 117.872517][ T6894] XFS (loop2): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 117.902589][ T6894] XFS (loop2): Failed to initialize disk quotas. [ 117.928176][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 118.060380][ T6916] UHID_CREATE from different security context by process 215 (syz.1.411), this is not allowed. [ 118.072100][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 118.087549][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.141136][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 118.248569][ T5778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.324982][ T6918] fido_id[6918]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.377021][ T6924] loop3: detected capacity change from 0 to 512 [ 118.432717][ T6924] EXT4-fs: Ignoring removed bh option [ 118.473074][ T6920] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 118.528597][ T6924] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.557057][ T6924] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 118.587408][ T6920] ntfs3: loop0: ino=19, mi_enum_attr [ 118.605990][ T6924] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.410: Corrupt directory, running e2fsck is recommended [ 118.615620][ T6930] set_capacity_and_notify: 1 callbacks suppressed [ 118.615634][ T6930] loop2: detected capacity change from 0 to 256 [ 118.625727][ T6928] i2c i2c-0: delete_device: Can't parse I2C address [ 118.638633][ T6930] exfat: Deprecated parameter 'utf8' [ 118.644693][ T6930] exfat: Deprecated parameter 'utf8' [ 118.650695][ T6930] exfat: Deprecated parameter 'namecase' [ 118.657314][ T6930] exfat: Deprecated parameter 'namecase' [ 118.706062][ T6930] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf6e788d, utbl_chksum : 0xe619d30d) [ 118.706781][ T6924] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 118.735791][ T6920] ntfs3: loop0: failed to convert "c46c" to cp864 [ 118.742165][ T6924] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.410: corrupted in-inode xattr: e_name out of bounds [ 118.774996][ T6920] ntfs3: loop0: ino=20, mi_enum_attr [ 118.832367][ T6924] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.410: couldn't read orphan inode 15 (err -117) [ 118.895374][ T6924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.038467][ T6924] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.070484][ T6924] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 119.082636][ T6924] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.410: Corrupt directory, running e2fsck is recommended [ 119.101448][ T6924] CacheFiles: Lookup cache failed with error -117 [ 119.111422][ T6924] CacheFiles: Failed to register: -117 [ 119.185975][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.705408][ T6936] loop2: detected capacity change from 0 to 40427 [ 119.726007][ T6936] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 119.748112][ T6936] F2FS-fs (loop2): Image doesn't support compression [ 119.764724][ T6936] F2FS-fs (loop2): heap/no_heap options were deprecated [ 119.791776][ T6936] F2FS-fs (loop2): invalid crc value [ 119.806523][ T6942] loop3: detected capacity change from 0 to 32768 [ 119.821663][ T6936] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.855701][ T6942] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.422 (6942) [ 119.927134][ T6942] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 119.975471][ T6942] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 119.990748][ T6944] loop1: detected capacity change from 0 to 32768 [ 120.002035][ T6936] F2FS-fs (loop2): Start checkpoint disabled! [ 120.030872][ T6942] BTRFS info (device loop3): enabling ssd optimizations [ 120.051766][ T6942] BTRFS info (device loop3): not using ssd optimizations [ 120.071296][ T6944] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.084265][ T6942] BTRFS info (device loop3): turning off barriers [ 120.092366][ T6936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 120.126404][ T6942] BTRFS info (device loop3): use no compression [ 120.145585][ T6942] BTRFS info (device loop3): using free space tree [ 120.224268][ T6944] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 120.339137][ T6944] XFS (loop1): Starting recovery (logdev: internal) [ 120.366017][ T6944] XFS (loop1): Ending recovery (logdev: internal) [ 120.374165][ T6944] XFS (loop1): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 120.382835][ T6944] XFS (loop1): Failed to initialize disk quotas. [ 120.416045][ T1115] kworker/u4:7: attempt to access beyond end of device [ 120.416045][ T1115] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 120.431732][ T1115] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 120.462170][ T1115] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 120.522543][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 120.591766][ T5774] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 120.628994][ T5775] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 121.143767][ T6985] loop2: detected capacity change from 0 to 512 [ 121.173789][ T6985] EXT4-fs: Ignoring removed bh option [ 121.204501][ T6985] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 121.220308][ T6985] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 121.231074][ T6985] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.431: Corrupt directory, running e2fsck is recommended [ 121.267185][ T6985] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 121.320612][ T6985] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.431: corrupted in-inode xattr: e_name out of bounds [ 121.383321][ T6985] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.431: couldn't read orphan inode 15 (err -117) [ 121.423049][ T6985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.499120][ T6985] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 121.517914][ T6985] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 121.547985][ T6985] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.431: Corrupt directory, running e2fsck is recommended [ 121.577487][ T6985] CacheFiles: Lookup cache failed with error -117 [ 121.593400][ T6985] CacheFiles: Failed to register: -117 [ 121.683559][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.934204][ T7018] loop0: detected capacity change from 0 to 128 [ 121.959015][ T7018] hpfs: bad mount options. [ 122.257126][ T7014] loop2: detected capacity change from 0 to 32768 [ 122.267389][ T7014] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.440 (7014) [ 122.293776][ T7014] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.305292][ T7014] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 122.320814][ T7014] BTRFS info (device loop2): use zlib compression, level 3 [ 122.329858][ T7014] BTRFS info (device loop2): using free space tree [ 122.373546][ T7014] BTRFS info (device loop2): enabling ssd optimizations [ 122.380897][ T7014] BTRFS info (device loop2): auto enabling async discard [ 122.464812][ T7018] loop0: detected capacity change from 0 to 40427 [ 122.489505][ T7018] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 122.540575][ T7018] F2FS-fs (loop0): invalid crc value [ 122.566868][ T7018] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.680723][ T5778] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.896257][ T7018] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.109034][ T7042] netlink: 'syz.3.447': attribute type 12 has an invalid length. [ 123.116825][ T7042] netlink: 'syz.3.447': attribute type 29 has an invalid length. [ 123.129813][ T7018] syz.0.444: attempt to access beyond end of device [ 123.129813][ T7018] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.202291][ T7042] netlink: 148 bytes leftover after parsing attributes in process `syz.3.447'. [ 123.217472][ T7018] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 123.722784][ T5783] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5783) [ 123.734931][ T5818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.761212][ T7039] loop1: detected capacity change from 0 to 131072 [ 123.769822][ T7039] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 123.778362][ T7039] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 123.787228][ T7039] F2FS-fs (loop1): Test dummy encryption mode enabled [ 123.795109][ T7039] F2FS-fs (loop1): invalid crc value [ 123.809021][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 123.823136][ T7039] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.862927][ T7039] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 123.886040][ T7039] F2FS-fs (loop1): Start checkpoint disabled! [ 123.916412][ T7039] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 123.923721][ T7039] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 123.979651][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 124.002351][ T5818] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 124.038910][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.111388][ T5818] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 124.334434][ T7052] loop0: detected capacity change from 0 to 512 [ 124.353269][ T11] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 124.376374][ T7052] EXT4-fs: Ignoring removed bh option [ 124.425949][ T7052] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 124.448011][ T7052] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 124.489277][ T7052] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.450: Corrupt directory, running e2fsck is recommended [ 124.566231][ T7052] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 124.614638][ T7052] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.450: corrupted in-inode xattr: e_name out of bounds [ 124.647481][ T7052] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.450: couldn't read orphan inode 15 (err -117) [ 124.667115][ T7052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.804326][ T7052] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 124.834975][ T7052] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 124.862791][ T7052] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.450: Corrupt directory, running e2fsck is recommended [ 124.879207][ T7052] CacheFiles: Lookup cache failed with error -117 [ 124.885756][ T7052] CacheFiles: Failed to register: -117 [ 124.937427][ T5818] gspca_nw80x: reg_r err -71 [ 124.952580][ T5818] nw80x: probe of 4-1:3.0 failed with error -71 [ 124.973318][ T5818] usb 4-1: USB disconnect, device number 5 [ 125.000347][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.420469][ T7074] loop1: detected capacity change from 0 to 1024 [ 125.570687][ T7078] loop0: detected capacity change from 0 to 512 [ 126.010671][ T7091] i2c i2c-0: delete_device: Can't parse I2C address [ 126.024330][ T7088] block nbd1: shutting down sockets [ 126.282758][ T7084] loop3: detected capacity change from 0 to 32768 [ 126.306740][ T7084] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.463 (7084) [ 126.316334][ T7100] loop0: detected capacity change from 0 to 1024 [ 126.351519][ T7100] EXT4-fs: Ignoring removed orlov option [ 126.375198][ T7084] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.398157][ T7084] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 126.413367][ T7100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.426299][ T7084] BTRFS info (device loop3): setting nodatasum [ 126.444697][ T7084] BTRFS info (device loop3): force zlib compression, level 3 [ 126.453414][ T7084] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 126.467091][ T7084] BTRFS info (device loop3): use lzo compression, level 0 [ 126.474405][ T7084] BTRFS info (device loop3): turning on flush-on-commit [ 126.481698][ T7084] BTRFS info (device loop3): enabling auto defrag [ 126.488317][ T7084] BTRFS info (device loop3): max_inline at 4096 [ 126.494739][ T7084] BTRFS info (device loop3): using free space tree [ 126.651864][ T7124] sd 0:0:1:0: PR command failed: 1026 [ 126.659797][ T7124] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 126.666752][ T7124] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 126.675194][ T7084] BTRFS info (device loop3): enabling ssd optimizations [ 126.700335][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.917466][ T7130] loop2: detected capacity change from 0 to 2048 [ 127.025159][ T7137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.095485][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.905832][ T5818] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.107879][ T5818] usb 1-1: Using ep0 maxpacket: 32 [ 128.121573][ T5818] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.147900][ T5818] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 128.168578][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.180611][ T5818] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 128.191490][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.215562][ T5818] usb 1-1: Product: syz [ 128.221433][ T7164] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 128.228401][ T5818] usb 1-1: Manufacturer: syz [ 128.233026][ T5818] usb 1-1: SerialNumber: syz [ 128.245220][ T5818] usb 1-1: config 0 descriptor?? [ 128.326606][ T28] audit: type=1400 audit(1791445234.107:11): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7171 comm="syz.3.494" name="p" offset=58 [ 128.427981][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 128.617831][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 128.629220][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.639116][ T23] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 128.649317][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.665818][ T5818] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 128.672738][ T23] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 128.682324][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.691154][ T23] usb 3-1: Product: syz [ 128.696807][ T23] usb 3-1: Manufacturer: syz [ 128.707129][ T23] usb 3-1: SerialNumber: syz [ 128.715493][ T23] usb 3-1: config 0 descriptor?? [ 128.773769][ T7178] loop3: detected capacity change from 0 to 32768 [ 128.785936][ T7178] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.497 (7178) [ 128.816051][ T7178] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 128.826518][ T7178] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 128.835966][ T7178] BTRFS info (device loop3): using free space tree [ 128.866740][ T5818] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 128.885126][ T5818] gs_usb: probe of 1-1:0.0 failed with error -22 [ 128.947111][ T7178] BTRFS info (device loop3): enabling ssd optimizations [ 128.954270][ T7178] BTRFS info (device loop3): auto enabling async discard [ 129.072142][ T5818] usb 1-1: USB disconnect, device number 9 [ 129.102416][ T5774] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 129.146099][ T23] gs_usb 3-1:0.0: Configuring for 63 interfaces [ 129.547218][ T23] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 129.577623][ T23] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 129.641789][ T23] gs_usb: probe of 3-1:0.0 failed with error -71 [ 129.671496][ T23] usb 3-1: USB disconnect, device number 8 [ 130.015389][ T7202] loop3: detected capacity change from 0 to 32768 [ 130.058684][ T7204] loop0: detected capacity change from 0 to 32768 [ 130.092240][ T7204] JBD2: Ignoring recovery information on journal [ 130.143610][ T7204] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.281105][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 130.281436][ T5086] Bluetooth: hci4: command 0x1003 tx timeout [ 130.320955][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 130.538055][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.647932][ T28] audit: type=1326 audit(1791445236.427:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 130.705212][ T28] audit: type=1326 audit(1791445236.427:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 130.753358][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.763323][ T28] audit: type=1326 audit(1791445236.427:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 130.775880][ T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.807671][ T7224] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.809977][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.849919][ T28] audit: type=1326 audit(1791445236.427:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 130.853285][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.903410][ T28] audit: type=1326 audit(1791445236.427:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 130.957708][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.958048][ T28] audit: type=1326 audit(1791445236.427:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 130.971458][ T28] audit: type=1326 audit(1791445236.427:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 131.062387][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.072934][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.082021][ T23] usb 3-1: Product: syz [ 131.088072][ T23] usb 3-1: Manufacturer: syz [ 131.111946][ T28] audit: type=1326 audit(1791445236.427:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 131.120023][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 131.176147][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 131.189724][ T28] audit: type=1326 audit(1791445236.427:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.503" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cff79e199 code=0x7ffc0000 [ 131.192866][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 131.272752][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 131.437542][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 131.438378][ T5818] usb 3-1: USB disconnect, device number 9 [ 131.444436][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 131.456103][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 131.655613][ T7234] loop1: detected capacity change from 0 to 32768 [ 131.715584][ T7234] JBD2: Ignoring recovery information on journal [ 131.857361][ T7234] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 132.058840][ T7255] ip_tables: iptables: counters copy to user failed while replacing table [ 132.150233][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 132.579378][ T23] kernel write not supported for file /dummy_udc (pid: 23 comm: kworker/1:0) [ 132.933518][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.942028][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.142696][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 133.158145][ T7290] netem: invalid attributes len -5 [ 133.163317][ T7290] netem: change failed [ 133.393900][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 133.952520][ T7314] loop3: detected capacity change from 0 to 2048 [ 133.974216][ T7314] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 134.019364][ T7314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.219276][ T7307] loop0: detected capacity change from 0 to 32768 [ 134.231360][ T7307] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.542 (7307) [ 134.258320][ T7319] loop2: detected capacity change from 0 to 1024 [ 134.287030][ T7307] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 134.356915][ T7307] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 134.382428][ T7307] BTRFS info (device loop0): using free space tree [ 134.522942][ T7307] BTRFS info (device loop0): enabling ssd optimizations [ 134.552004][ T7307] BTRFS info (device loop0): auto enabling async discard [ 134.964306][ T5777] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 135.084713][ T7350] loop2: detected capacity change from 0 to 2048 [ 135.115673][ T7350] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 135.199201][ T5791] udevd[5791]: incorrect nilfs2 checksum on /dev/loop2 [ 135.211456][ T7352] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.834199][ T7348] loop3: detected capacity change from 0 to 40427 [ 135.845067][ T7348] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 135.866185][ T7348] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 135.890488][ T7348] F2FS-fs (loop3): invalid crc value [ 135.908840][ T7348] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.995082][ T7348] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 135.997887][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.062761][ T7348] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.101247][ T7348] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 136.145019][ T5774] syz-executor: attempt to access beyond end of device [ 136.145019][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.163085][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 136.208838][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 136.233963][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 136.245857][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.272742][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 136.280128][ T23] pvrusb2: ********** [ 136.284212][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 136.295500][ T23] pvrusb2: Important functionality might not be entirely working. [ 136.307560][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 136.321508][ T23] pvrusb2: ********** [ 136.488717][ T2324] pvrusb2: Invalid write control endpoint [ 136.674273][ T2324] pvrusb2: Invalid write control endpoint [ 136.698353][ T2324] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 136.728783][ T2324] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 136.736399][ T2324] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 136.753488][ T2324] pvrusb2: Device being rendered inoperable [ 136.775344][ T7362] pvrusb2: Attempted to execute control transfer when device not ok [ 136.793215][ T2324] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 136.801263][ T2324] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 136.815067][ T8] usb 2-1: USB disconnect, device number 6 [ 136.821390][ T2324] pvrusb2: Attached sub-driver cx25840 [ 136.826494][ T7374] loop0: detected capacity change from 0 to 32768 [ 136.827144][ T2324] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 136.850552][ T2324] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 136.860188][ T7374] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.562 (7374) [ 136.910794][ T7374] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 136.922461][ T7374] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.934195][ T7374] BTRFS info (device loop0): enabling ssd optimizations [ 136.941771][ T7374] BTRFS info (device loop0): not using ssd optimizations [ 136.949007][ T7374] BTRFS info (device loop0): turning off barriers [ 136.955597][ T7374] BTRFS info (device loop0): use no compression [ 136.962303][ T7374] BTRFS info (device loop0): using free space tree [ 137.094422][ T5777] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 137.952723][ T7416] loop3: detected capacity change from 0 to 1024 [ 138.075021][ T7401] loop1: detected capacity change from 0 to 32768 [ 138.107315][ T7401] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.564 (7401) [ 138.197668][ T7401] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 138.247037][ T7401] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 138.291407][ T7401] BTRFS info (device loop1): using free space tree [ 138.325298][ T7411] loop2: detected capacity change from 0 to 32768 [ 138.397377][ T7411] JBD2: Ignoring recovery information on journal [ 138.458023][ T7401] BTRFS info (device loop1): enabling ssd optimizations [ 138.478095][ T7401] BTRFS info (device loop1): auto enabling async discard [ 138.512185][ T7411] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.532168][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 138.779191][ T5775] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 138.836255][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 139.397887][ T5818] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 139.406370][ T7455] macvlan0: entered promiscuous mode [ 139.603201][ T5818] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 139.617857][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.636199][ T5818] usb 2-1: Product: syz [ 139.640641][ T5818] usb 2-1: Manufacturer: syz [ 139.645272][ T5818] usb 2-1: SerialNumber: syz [ 139.666803][ T7451] loop2: detected capacity change from 0 to 32768 [ 139.677680][ T5818] usb 2-1: config 0 descriptor?? [ 139.707665][ T5818] hub 2-1:0.0: bad descriptor, ignoring hub [ 139.741092][ T5818] hub: probe of 2-1:0.0 failed with error -5 [ 139.753909][ T7465] program syz.3.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.778739][ T7451] JBD2: Ignoring recovery information on journal [ 139.924136][ T5818] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 139.952758][ T7451] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.974107][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.998295][ T5818] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 140.006836][ T5818] usb 2-1: media controller created [ 140.041200][ T7469] loop3: detected capacity change from 0 to 2048 [ 140.091456][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.123459][ T7444] dib0700: tx buffer length is larger than 4. Not supported. [ 140.133625][ T7470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.210059][ T7463] loop0: detected capacity change from 0 to 32768 [ 140.242700][ T7463] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.586 (7463) [ 140.296787][ T5818] DVB: Unable to find symbol dib7000p_attach() [ 140.331332][ T5818] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 140.340285][ T7463] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 140.358687][ T7463] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 140.406613][ T7463] BTRFS info (device loop0): using free space tree [ 140.435207][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 140.496654][ T5818] rc_core: IR keymap rc-dib0700-rc5 not found [ 140.521680][ T5818] Registered IR keymap rc-empty [ 140.534820][ T5818] dvb-usb: could not initialize remote control. [ 140.558182][ T5818] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 140.573249][ T5818] usb 2-1: USB disconnect, device number 7 [ 140.641943][ T5818] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 140.661696][ T7463] BTRFS info (device loop0): enabling ssd optimizations [ 140.688926][ T7463] BTRFS info (device loop0): auto enabling async discard [ 141.025422][ T5777] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 141.480542][ T7496] loop2: detected capacity change from 0 to 32768 [ 141.524240][ T7496] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop2 scanned by syz.2.591 (7496) [ 141.591844][ T7496] BTRFS info (device loop2): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 141.641105][ T7496] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 141.667884][ T7496] BTRFS info (device loop2): using free space tree [ 141.815596][ T7496] BTRFS info (device loop2): enabling ssd optimizations [ 141.838622][ T7496] BTRFS info (device loop2): auto enabling async discard [ 141.945008][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 141.945053][ T28] audit: type=1800 audit(1791445247.727:22): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.591" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 142.195127][ T5778] BTRFS info (device loop2): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 142.699648][ T7547] loop0: detected capacity change from 0 to 256 [ 142.718744][ T7547] exfat: Deprecated parameter 'utf8' [ 142.732371][ T7547] exfat: Deprecated parameter 'utf8' [ 142.764913][ T7547] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 142.850947][ T7531] loop1: detected capacity change from 0 to 32768 [ 142.882095][ T5818] smpboot: CPU 1 is now offline [ 142.931087][ T7531] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.599 (7531) [ 143.144133][ T7531] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 143.208441][ T7531] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 143.220744][ T7556] loop0: detected capacity change from 0 to 256 [ 143.257939][ T7531] BTRFS info (device loop1): enabling ssd optimizations [ 143.264930][ T7531] BTRFS info (device loop1): not using ssd optimizations [ 143.377627][ T7531] BTRFS info (device loop1): turning off barriers [ 143.421590][ T7531] BTRFS info (device loop1): use no compression [ 143.488711][ T7531] BTRFS info (device loop1): using free space tree [ 143.767843][ T5818] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.891987][ T5775] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 143.979038][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.997872][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 144.015755][ T5818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.087512][ T5818] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.124703][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.169790][ T5818] usb 4-1: SerialNumber: syz [ 144.233203][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.264483][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.325873][ T8] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 144.389446][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.405298][ T5818] usb 4-1: 0:2 : does not exist [ 144.452790][ T8] usb 3-1: config 0 descriptor?? [ 144.535653][ T5818] usb 4-1: USB disconnect, device number 6 [ 144.731212][ T7596] loop1: detected capacity change from 0 to 512 [ 144.771259][ T7596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.844161][ T7596] EXT4-fs (loop1): 1 truncate cleaned up [ 144.868667][ T7596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.921337][ T8] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 144.949936][ T8] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 145.020519][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.085759][ T8] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 145.154147][ T8] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 145.179674][ T7607] loop3: detected capacity change from 0 to 512 [ 145.228026][ T8] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 145.243493][ T7607] EXT4-fs: Ignoring removed oldalloc option [ 145.309906][ T7607] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.359728][ T8] usb 3-1: USB disconnect, device number 10 [ 145.407240][ T8] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 145.431616][ T7611] fido_id[7611]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 145.488042][ T7607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.562376][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 145.607099][ T7620] IPVS: Error joining to the multicast group [ 145.722955][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.756102][ T7624] loop0: detected capacity change from 0 to 1024 [ 145.840014][ T7624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.967329][ T51] Bluetooth: hci2: unexpected event 0x0f length: 84 > 4 [ 146.013771][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.682513][ T7655] loop0: detected capacity change from 0 to 8192 [ 146.753315][ T7655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.814323][ T7655] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 146.862637][ T7655] REISERFS (device loop0): using ordered data mode [ 146.905122][ T7655] reiserfs: using flush barriers [ 146.961550][ T7655] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.041260][ T7655] REISERFS (device loop0): checking transaction log (loop0) [ 147.196516][ T7655] REISERFS (device loop0): Using tea hash to sort names [ 147.231865][ T7655] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 147.247911][ T56] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.451012][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 147.476655][ T56] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.533867][ T56] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.584282][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 147.639255][ T56] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 147.659545][ T7674] loop2: detected capacity change from 0 to 32768 [ 147.666063][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.719915][ T56] usb 2-1: Product: syz [ 147.733651][ T7674] JBD2: Ignoring recovery information on journal [ 147.752625][ T56] usb 2-1: Manufacturer: syz [ 147.781380][ T56] usb 2-1: SerialNumber: syz [ 147.827039][ T56] usb 2-1: config 0 descriptor?? [ 147.872527][ T7674] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 148.208378][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 148.273614][ T56] gs_usb 2-1:0.0: Configuring for 63 interfaces [ 148.290453][ T7693] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.438294][ T7697] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 148.457859][ T7697] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 148.674005][ T56] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 148.725951][ T56] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 148.779915][ T56] gs_usb: probe of 2-1:0.0 failed with error -71 [ 148.804929][ T56] usb 2-1: USB disconnect, device number 8 [ 148.927970][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.057899][ T5819] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.129787][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.150011][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 149.176448][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.200371][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 149.231900][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 149.259548][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 149.275712][ T5819] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.300197][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.318670][ T5819] usb 3-1: config 179 has no interface number 0 [ 149.330904][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.353162][ T5819] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 149.374868][ T8] usb 4-1: Product: syz [ 149.392240][ T5819] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 149.403943][ T8] usb 4-1: Manufacturer: syz [ 149.431198][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 149.458069][ T5819] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.469925][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 149.490349][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 149.508422][ T5819] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 149.520553][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 149.560416][ T5819] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 149.619600][ T5819] usb 3-1: config 179 interface 65 has no altsetting 0 [ 149.651226][ T5819] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 149.697965][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.792426][ T5819] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 149.814552][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.821196][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.827490][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.834076][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.840570][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.847158][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.853382][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.859958][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.866190][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.872770][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.879057][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.885658][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.892411][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.898991][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.905436][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.912031][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.918393][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.924981][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.931253][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 149.937868][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 149.953592][ T56] usb 4-1: USB disconnect, device number 7 [ 149.959618][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 150.099293][ T5819] usb 3-1: USB disconnect, device number 11 [ 150.105285][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.214545][ T5819] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 150.667686][ T7720] loop1: detected capacity change from 0 to 40427 [ 150.692944][ T7720] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 150.722054][ T7720] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 150.760975][ T7720] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 150.802846][ T7727] cgroup: fork rejected by pids controller in /syz0 [ 150.819125][ T7720] F2FS-fs (loop1): invalid crc value [ 150.865349][ T7720] F2FS-fs (loop1): Found nat_bits in checkpoint [ 151.002296][ T7720] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 151.035075][ T7720] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.134491][ T7720] syz.1.677: attempt to access beyond end of device [ 151.134491][ T7720] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 151.225473][ T7720] syz.1.677: attempt to access beyond end of device [ 151.225473][ T7720] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.322951][ T5775] syz-executor: attempt to access beyond end of device [ 151.322951][ T5775] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 151.370018][ T5775] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 151.531348][ T1103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.716781][ T1103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.883117][ T1103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.067404][ T1103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.369998][ T5819] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 152.532241][ T7757] loop3: detected capacity change from 0 to 512 [ 152.559795][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.572809][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.582171][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.589626][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.608847][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.618262][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.625441][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.702507][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 152.777709][ T7757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.798598][ T5819] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 152.847964][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.892830][ T5819] usb 2-1: Product: syz [ 152.909756][ T7757] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.928198][ T5819] usb 2-1: Manufacturer: syz [ 152.943122][ T5819] usb 2-1: SerialNumber: syz [ 153.008067][ T7757] logitech-hidpp-device 0005:046D:B012.0005: received hid++ report of bad size (4096) [ 153.031861][ T7771] loop2: detected capacity change from 0 to 256 [ 153.130811][ T5818] logitech-hidpp-device 0005:046D:B012.0005: Device not connected [ 153.253368][ T5819] kaweth 2-1:1.0: Firmware present in device. [ 153.305708][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.416629][ T5819] kaweth 2-1:1.0: Statistics collection: 0 [ 153.443049][ T5819] kaweth 2-1:1.0: Multicast filter limit: 0 [ 153.487554][ T5819] kaweth 2-1:1.0: MTU: 0 [ 153.509709][ T5819] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 153.828061][ T5819] kaweth 2-1:1.0: Error setting SOFS wait [ 153.833911][ T5819] kaweth: probe of 2-1:1.0 failed with error -5 [ 153.908011][ T5819] usb 2-1: USB disconnect, device number 9 [ 153.940068][ T7791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.005915][ T7791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.025726][ T7791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.038933][ T7791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.050272][ T7791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.062164][ T7791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.073704][ T7791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.090884][ T7791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.103866][ T7791] ipvlan2: entered allmulticast mode [ 154.112942][ T7791] batadv_slave_1: entered allmulticast mode [ 154.123199][ T7791] batman_adv: batadv0: Adding interface: ipvlan2 [ 154.131037][ T7791] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.159028][ T7791] batman_adv: batadv0: Interface activated: ipvlan2 [ 154.233825][ T7758] chnl_net:caif_netlink_parms(): no params data found [ 154.683890][ T5086] Bluetooth: hci3: command tx timeout [ 154.713929][ T1103] hsr_slave_0: left promiscuous mode [ 154.735982][ T1103] hsr_slave_1: left promiscuous mode [ 154.756096][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.785978][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.808956][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.833175][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.846860][ T5819] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 154.913976][ T7811] loop3: detected capacity change from 0 to 2048 [ 154.935396][ T1103] bridge_slave_1: left allmulticast mode [ 154.955203][ T1103] bridge_slave_1: left promiscuous mode [ 154.971980][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.020080][ T7811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.054619][ T1103] bridge_slave_0: left allmulticast mode [ 155.065006][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.080606][ T1103] bridge_slave_0: left promiscuous mode [ 155.103876][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.128419][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.138471][ T7811] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.163706][ T5819] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 155.210324][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.243701][ T1103] veth1_macvtap: left promiscuous mode [ 155.264233][ T5819] usb 2-1: config 0 descriptor?? [ 155.277028][ T1103] veth0_macvtap: left promiscuous mode [ 155.305512][ T1103] veth1_vlan: left promiscuous mode [ 155.336259][ T1103] veth0_vlan: left promiscuous mode [ 155.469991][ T7811] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 155.524329][ T7811] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 155.720465][ T5819] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 155.755549][ T5819] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 155.860476][ T5819] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected [ 155.889502][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.905046][ T5819] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 155.941643][ T5819] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 156.033526][ T5819] usb 2-1: USB disconnect, device number 10 [ 156.088837][ T5819] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected [ 156.115352][ T7827] fido_id[7827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 156.632967][ T7832] loop1: detected capacity change from 0 to 512 [ 156.653371][ T7832] EXT4-fs: Ignoring removed oldalloc option [ 156.679335][ T7832] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.702627][ T7832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.742882][ T7832] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.707: invalid block [ 156.761335][ T5086] Bluetooth: hci3: command tx timeout [ 156.783984][ T7832] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.707: invalid indirect mapped block 4294967295 (level 1) [ 156.816801][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 156.830446][ T7832] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.707: invalid indirect mapped block 4294967295 (level 1) [ 156.872265][ T7832] EXT4-fs (loop1): 2 truncates cleaned up [ 156.893054][ T7832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.932538][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 156.976617][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.110880][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.166804][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.709'. [ 157.256304][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.583150][ T7847] loop1: detected capacity change from 0 to 512 [ 157.607270][ T7847] EXT4-fs (loop1): Test dummy encryption mode enabled [ 157.664404][ T7847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.721672][ T7847] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 157.769688][ T7847] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 157.914650][ T7847] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 157.994105][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.115986][ T1103] bond0 (unregistering): Released all slaves [ 158.184280][ T7758] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.194195][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.216269][ T7758] bridge_slave_0: entered allmulticast mode [ 158.232328][ T7758] bridge_slave_0: entered promiscuous mode [ 158.244122][ T7819] pimreg1: tun_chr_ioctl cmd 1074025677 [ 158.253172][ T7819] pimreg1: linktype set to 778 [ 158.285933][ T7758] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.332029][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.375666][ T7758] bridge_slave_1: entered allmulticast mode [ 158.400154][ T7758] bridge_slave_1: entered promiscuous mode [ 158.457388][ T7859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.716'. [ 158.526925][ T7758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.599437][ T7758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.722502][ T7867] loop2: detected capacity change from 0 to 1024 [ 158.754343][ T7758] team0: Port device team_slave_0 added [ 158.765120][ T7867] EXT4-fs: Ignoring removed nobh option [ 158.811509][ T7867] EXT4-fs: Ignoring removed bh option [ 158.820220][ T7758] team0: Port device team_slave_1 added [ 158.844601][ T5086] Bluetooth: hci3: command tx timeout [ 158.869258][ T7867] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 158.932547][ T7867] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 158.948271][ T7758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.968804][ T7867] System zones: 0-1, 3-12 [ 158.974368][ T7758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.008704][ T7867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.063782][ T7758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.079558][ T7867] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #12: block 7: comm syz.2.718: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 159.114289][ T7758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.162637][ T7758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.209836][ T7867] EXT4-fs (loop2): Remounting filesystem read-only [ 159.273059][ T7758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.314550][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.537225][ T7758] hsr_slave_0: entered promiscuous mode [ 159.638296][ T7758] hsr_slave_1: entered promiscuous mode [ 159.698117][ T7758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.778698][ T7758] Cannot create hsr debugfs directory [ 160.807093][ T7903] loop2: detected capacity change from 0 to 512 [ 160.918104][ T5086] Bluetooth: hci3: command tx timeout [ 160.935076][ T7903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.018094][ T7903] ext4 filesystem being mounted at /184/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.159239][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.477517][ T7927] kernel read not supported for file /eth0 (pid: 7927 comm: syz.3.733) [ 161.532876][ T28] audit: type=1800 audit(1791445267.317:23): pid=7927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.733" name="eth0" dev="mqueue" ino=14704 res=0 errno=0 [ 161.557699][ T7931] 9pnet_fd: Insufficient options for proto=fd [ 161.618885][ T5817] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.818174][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 161.845707][ T5817] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 161.864032][ T7758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.884459][ T5817] usb 2-1: config 0 has no interface number 0 [ 161.905042][ T7758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.923060][ T5817] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 161.947538][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.966856][ T7758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.986798][ T5817] usb 2-1: Product: syz [ 162.003077][ T5817] usb 2-1: Manufacturer: syz [ 162.015299][ T7758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.033721][ T5817] usb 2-1: SerialNumber: syz [ 162.053396][ T5817] usb 2-1: config 0 descriptor?? [ 162.086033][ T5817] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 162.297183][ T7758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.336565][ T5817] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 162.355183][ T7758] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.390454][ T5817] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 162.443573][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.451785][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.502287][ T28] audit: type=1800 audit(1791445268.267:24): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.739" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 162.580776][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.587915][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.652749][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.723176][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.766054][ T7758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.845649][ T7758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.011874][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 163.025492][ T5818] usb 2-1: USB disconnect, device number 11 [ 163.075492][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 163.165050][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 163.239297][ T5818] quatech2 2-1:0.51: device disconnected [ 163.458832][ T7758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.615553][ T7758] veth0_vlan: entered promiscuous mode [ 163.672580][ T7758] veth1_vlan: entered promiscuous mode [ 163.840911][ T7758] veth0_macvtap: entered promiscuous mode [ 163.870128][ T7987] loop2: detected capacity change from 0 to 256 [ 163.889726][ T7758] veth1_macvtap: entered promiscuous mode [ 163.920978][ T7987] exFAT-fs (loop2): error, The cluster chain has a loop [ 163.965354][ T7987] exFAT-fs (loop2): Filesystem has been set read-only [ 163.981641][ T7991] netlink: 96 bytes leftover after parsing attributes in process `syz.1.752'. [ 163.996660][ T7758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.032365][ T7987] exFAT-fs (loop2): failed to count the number of clusters in root [ 164.050234][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 164.065478][ T7758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.079963][ T7987] exFAT-fs (loop2): failed to recognize exfat type [ 164.097998][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 164.114792][ T7758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.130103][ T7758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.152314][ T7758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.187904][ T7758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.216015][ T7758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.283935][ T7994] loop1: detected capacity change from 0 to 2048 [ 164.312554][ T7758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.380701][ T7758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.399970][ T7994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.451346][ T7758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.490314][ T7994] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.510666][ T7758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.550087][ T7758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.583805][ T7994] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 164.597918][ T7758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.627124][ T7758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 164.638257][ T7994] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 164.651848][ T7758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.685887][ T7758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.751738][ T7758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.811073][ T7758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.848133][ T7758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.872394][ T7758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.024248][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.169593][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.177449][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.316718][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.355404][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.957523][ T8040] loop2: detected capacity change from 0 to 8192 [ 165.973617][ T8049] loop0: detected capacity change from 0 to 512 [ 166.033383][ T8040] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.067274][ T8049] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.770: inode has both inline data and extents flags [ 166.141609][ T8040] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 166.172437][ T8049] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.770: couldn't read orphan inode 15 (err -117) [ 166.228156][ T8040] REISERFS (device loop2): using ordered data mode [ 166.234691][ T8040] reiserfs: using flush barriers [ 166.268668][ T8049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.322375][ T8040] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.351746][ T8059] netem: change failed [ 166.392688][ T8049] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 166.443020][ T8040] REISERFS (device loop2): checking transaction log (loop2) [ 166.472417][ T8063] loop1: detected capacity change from 0 to 256 [ 166.586007][ T28] audit: type=1800 audit(1791445272.367:25): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.774" name="file1" dev="loop1" ino=1048668 res=0 errno=0 [ 166.613128][ T8063] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 166.643536][ T7758] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.669931][ T8063] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 166.701067][ T8040] REISERFS (device loop2): Using tea hash to sort names [ 166.768526][ T8040] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 166.826088][ T8066] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 167.395503][ T8093] loop2: detected capacity change from 0 to 256 [ 167.458621][ T8093] exfat: Deprecated parameter 'namecase' [ 167.503894][ T8093] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 167.717589][ T8102] loop1: detected capacity change from 0 to 128 [ 167.806373][ T8102] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.871663][ T8110] loop2: detected capacity change from 0 to 64 [ 167.908267][ T8102] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.164359][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.517128][ T8126] loop2: detected capacity change from 0 to 512 [ 168.606562][ T8126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.701298][ T8126] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.808125][ T8126] logitech-hidpp-device 0005:046D:B012.0008: received hid++ report of bad size (4096) [ 168.861883][ T5837] logitech-hidpp-device 0005:046D:B012.0008: Device not connected [ 168.967386][ T8086] loop3: detected capacity change from 0 to 40427 [ 169.012127][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.058967][ T8086] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 169.066202][ T8086] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 169.250404][ T8086] F2FS-fs (loop3): Image doesn't support compression [ 169.257249][ T8086] F2FS-fs (loop3): Image doesn't support compression [ 169.312132][ T8143] vxcan0: tx address claim with dest, not broadcast [ 169.378572][ T8086] F2FS-fs (loop3): invalid crc value [ 169.422014][ T28] audit: type=1800 audit(1791445275.207:26): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.798" name="dummy_udc" dev="gadgetfs" ino=5959 res=0 errno=0 [ 169.801008][ T8086] F2FS-fs (loop3): Start checkpoint disabled! [ 169.930787][ T8086] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 169.997868][ T8086] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 170.166324][ T8086] VFS:Filesystem freeze failed [ 170.218166][ T5837] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 170.326599][ T8179] netlink: 76 bytes leftover after parsing attributes in process `syz.0.807'. [ 170.413927][ T8179] netlink: 76 bytes leftover after parsing attributes in process `syz.0.807'. [ 170.472156][ T8179] Zero length message leads to an empty skb [ 170.479786][ T5837] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.497872][ T28] audit: type=1400 audit(1791445276.277:27): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8181 comm="syz.1.810" [ 170.543540][ T5837] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.612563][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.647870][ T5837] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 170.693678][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.749345][ T5837] usb 3-1: config 0 descriptor?? [ 171.165704][ T5837] hid (null): invalid report_size 1221535620 [ 171.202029][ T5837] hid-multitouch 0003:0EEF:72C4.0009: collection stack underflow [ 171.263541][ T5837] hid-multitouch 0003:0EEF:72C4.0009: item 0 4 0 12 parsing failed [ 171.298259][ T5837] hid-multitouch: probe of 0003:0EEF:72C4.0009 failed with error -22 [ 171.374734][ T5837] usb 3-1: USB disconnect, device number 12 [ 171.724591][ T8198] loop1: detected capacity change from 0 to 32768 [ 171.771936][ T8198] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.815 (8198) [ 171.839513][ T8198] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.894862][ T8198] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 171.956050][ T8198] BTRFS info (device loop1): setting nodatasum [ 171.983406][ T8198] BTRFS info (device loop1): enabling auto defrag [ 172.022713][ T8198] BTRFS info (device loop1): disabling tree log [ 172.070412][ T8198] BTRFS info (device loop1): using free space tree [ 172.230620][ T8198] BTRFS info (device loop1): enabling ssd optimizations [ 172.250213][ T8198] BTRFS info (device loop1): auto enabling async discard [ 172.388169][ T5819] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.455043][ T5775] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.615135][ T5819] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.651697][ T5819] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.688772][ T1115] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.728965][ T5819] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.778842][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.813793][ T8224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.871302][ T5819] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 173.113311][ T1115] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.330986][ T56] usb 1-1: USB disconnect, device number 10 [ 173.474073][ T1115] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.548942][ T8252] tap0: tun_chr_ioctl cmd 1074025677 [ 173.590856][ T8252] tap0: linktype set to 825 [ 173.641255][ T1115] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.719938][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.750837][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.760021][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.767545][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.777288][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.784537][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.071572][ T1115] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.310914][ T5819] kernel write not supported for file /snd/seq (pid: 5819 comm: kworker/0:5) [ 174.681437][ T8254] chnl_net:caif_netlink_parms(): no params data found [ 174.809991][ T8288] loop0: detected capacity change from 0 to 128 [ 174.871188][ T8288] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.948983][ T8288] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.038013][ T5818] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 175.110426][ T7758] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.247803][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 175.294293][ T5818] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 175.320995][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.377446][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.390935][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.440724][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.453905][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.482075][ T8254] bridge_slave_0: entered allmulticast mode [ 175.499020][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.541831][ T8254] bridge_slave_0: entered promiscuous mode [ 175.570664][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.580811][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.597164][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.623169][ T8312] loop0: detected capacity change from 0 to 256 [ 175.629924][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.645568][ T8254] bridge_slave_1: entered allmulticast mode [ 175.666283][ T8254] bridge_slave_1: entered promiscuous mode [ 175.677007][ T8312] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 175.868590][ T5818] usb 2-1: GET_CAPABILITIES returned 0 [ 175.874122][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 175.880972][ T51] Bluetooth: hci2: command tx timeout [ 176.130815][ T8318] loop0: detected capacity change from 0 to 4096 [ 176.146695][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.185864][ T5818] usb 2-1: USB disconnect, device number 12 [ 176.199905][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.222722][ T8318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.545367][ T7758] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.585161][ T8254] team0: Port device team_slave_0 added [ 176.718446][ T8254] team0: Port device team_slave_1 added [ 176.844252][ T8330] loop1: detected capacity change from 0 to 512 [ 177.212224][ T8342] kAFS: Invalid Command on /proc/fs/afs/cells file [ 177.243869][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.281262][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.390852][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.486325][ T1115] hsr_slave_0: left promiscuous mode [ 177.515657][ T1115] hsr_slave_1: left promiscuous mode [ 177.544728][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.559739][ T8355] loop0: detected capacity change from 0 to 512 [ 177.582297][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.608178][ T8355] EXT4-fs (loop0): 1 truncate cleaned up [ 177.634696][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.659215][ T8355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.678612][ T8358] loop3: detected capacity change from 0 to 128 [ 177.701462][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.753286][ T1115] bridge_slave_1: left promiscuous mode [ 177.797432][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.808956][ T28] audit: type=1800 audit(1791445283.597:28): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.858" name="file1" dev="loop0" ino=13 res=0 errno=0 [ 177.831776][ T8355] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.858: bg 0: block 465: padding at end of block bitmap is not set [ 177.876138][ T1115] bridge_slave_0: left allmulticast mode [ 177.916890][ T1115] bridge_slave_0: left promiscuous mode [ 177.933506][ T8355] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 177.951453][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.963427][ T51] Bluetooth: hci2: command tx timeout [ 177.985514][ T8355] EXT4-fs (loop0): This should not happen!! Data will be lost [ 177.985514][ T8355] [ 178.019792][ T8355] EXT4-fs (loop0): Total free blocks count 0 [ 178.026062][ T1115] veth1_macvtap: left promiscuous mode [ 178.037392][ T1115] veth0_macvtap: left promiscuous mode [ 178.044255][ T8355] EXT4-fs (loop0): Free/Dirty block details [ 178.059789][ T1115] veth1_vlan: left promiscuous mode [ 178.066227][ T8355] EXT4-fs (loop0): free_blocks=0 [ 178.077171][ T1115] veth0_vlan: left promiscuous mode [ 178.083825][ T8355] EXT4-fs (loop0): dirty_blocks=9 [ 178.095729][ T8355] EXT4-fs (loop0): Block reservation details [ 178.136128][ T8355] EXT4-fs (loop0): i_reserved_data_blocks=9 [ 178.207060][ T7758] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.555347][ T8368] loop3: detected capacity change from 0 to 64 [ 179.520028][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 179.572446][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 179.629292][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.689876][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.042976][ T51] Bluetooth: hci2: command tx timeout [ 180.122665][ T1115] bond0 (unregistering): Released all slaves [ 180.226641][ T8387] loop3: detected capacity change from 0 to 512 [ 180.259470][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.287120][ T8387] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.871: invalid indirect mapped block 10 (level 1) [ 180.307006][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.354689][ T8387] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.871: invalid indirect mapped block 8 (level 1) [ 180.376665][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.412743][ T8387] EXT4-fs (loop3): 1 truncate cleaned up [ 180.491339][ T8387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.552384][ T8254] hsr_slave_0: entered promiscuous mode [ 180.581754][ T8254] hsr_slave_1: entered promiscuous mode [ 180.622528][ T8391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.872'. [ 180.670792][ T8387] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 180.919314][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.313773][ T8406] loop3: detected capacity change from 0 to 128 [ 181.407182][ T8406] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.423558][ T8254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.493949][ T8254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.521456][ T8406] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.569149][ T8254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.623466][ T8254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.754155][ T8393] loop0: detected capacity change from 0 to 40427 [ 181.791723][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.856688][ T8393] F2FS-fs (loop0): invalid crc value [ 181.913190][ T8393] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.979547][ T8254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.072319][ T8254] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.119488][ T51] Bluetooth: hci2: command tx timeout [ 182.152478][ T8393] F2FS-fs (loop0): Start checkpoint disabled! [ 182.235335][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.242486][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.276412][ T8393] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 182.340190][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.347316][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.608858][ T1103] kworker/u4:6: attempt to access beyond end of device [ 182.608858][ T1103] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 182.644688][ T8436] jffs2: notice: (8436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 182.681019][ T1103] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 182.715527][ T1103] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 182.946432][ T8449] loop1: detected capacity change from 0 to 512 [ 182.968723][ T5837] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.993417][ T8254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.017330][ T8449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.097433][ T8449] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.888: bad orphan inode 131083 [ 183.153132][ T8449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.221791][ T5837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.263858][ T5837] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.321445][ T5837] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.385256][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.452572][ T8439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.501139][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.527080][ T5837] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 183.803878][ T8469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 183.810844][ T8469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.899836][ T8469] vhci_hcd vhci_hcd.0: Device attached [ 183.955353][ T8254] veth0_vlan: entered promiscuous mode [ 183.965618][ T8475] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 183.972139][ T8475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 184.028740][ T8015] usb 4-1: USB disconnect, device number 8 [ 184.043466][ T8254] veth1_vlan: entered promiscuous mode [ 184.087124][ T8475] vhci_hcd vhci_hcd.0: Device attached [ 184.158062][ T5837] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 184.182690][ T8475] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(8) [ 184.189234][ T8475] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.251423][ T8254] veth0_macvtap: entered promiscuous mode [ 184.284454][ T8469] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 184.291012][ T8469] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.313490][ T8254] veth1_macvtap: entered promiscuous mode [ 184.342561][ T8488] loop1: detected capacity change from 0 to 256 [ 184.355671][ T8475] vhci_hcd vhci_hcd.0: Device attached [ 184.371783][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.415019][ T8469] vhci_hcd vhci_hcd.0: Device attached [ 184.452547][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.479790][ T8484] vhci_hcd: connection closed [ 184.485978][ T8471] vhci_hcd: connection reset by peer [ 184.496077][ T8476] vhci_hcd: connection closed [ 184.496323][ T63] vhci_hcd: stop threads [ 184.518582][ T8482] vhci_hcd: connection closed [ 184.547845][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.567982][ T63] vhci_hcd: release socket [ 184.581339][ T63] vhci_hcd: disconnect device [ 184.596544][ T63] vhci_hcd: stop threads [ 184.606358][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.616486][ T63] vhci_hcd: release socket [ 184.627020][ T63] vhci_hcd: disconnect device [ 184.636808][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.649802][ T63] vhci_hcd: stop threads [ 184.654049][ T63] vhci_hcd: release socket [ 184.670337][ T63] vhci_hcd: disconnect device [ 184.678007][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.689889][ T63] vhci_hcd: stop threads [ 184.694139][ T63] vhci_hcd: release socket [ 184.713494][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.748183][ T63] vhci_hcd: disconnect device [ 184.785457][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.835985][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.856574][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.880253][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.914173][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 184.949654][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.977543][ T8254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.027465][ T8254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.080892][ T8254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.142094][ T8506] loop0: detected capacity change from 0 to 512 [ 185.151201][ T8254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.206703][ T8254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.220352][ T8506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 185.247317][ T8254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.260393][ T8506] System zones: 1-12 [ 185.286026][ T8506] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.896: missing EA_INODE flag [ 185.308256][ T8254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.389807][ T8506] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.896: error while reading EA inode 12 err=-117 [ 185.466172][ T8506] EXT4-fs (loop0): 1 orphan inode deleted [ 185.483545][ T8506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.695733][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.705146][ T28] audit: type=1800 audit(1791445291.467:29): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.896" name="bus" dev="loop0" ino=15 res=0 errno=0 [ 185.759830][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.783669][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.836247][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.999011][ T8525] kAFS: bad VL server IP address [ 186.169945][ T7758] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.189927][ T8532] ip_tables: iptables: counters copy to user failed while replacing table [ 186.365724][ T8538] loop0: detected capacity change from 0 to 256 [ 186.424538][ T8538] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 186.643071][ T8549] syz.1.909: attempt to access beyond end of device [ 186.643071][ T8549] loop2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 186.746486][ T8549] SQUASHFS error: Failed to read block 0x0: -5 [ 187.108382][ T8566] loop3: detected capacity change from 0 to 512 [ 187.217860][ T8566] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.915: inode has both inline data and extents flags [ 187.315665][ T8566] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.915: couldn't read orphan inode 15 (err -117) [ 187.421073][ T8566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.509604][ T28] audit: type=1400 audit(1791445293.297:30): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=8586 comm="syz.0.922" name="p" offset=64 [ 187.859142][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.017806][ T5818] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 188.218065][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 188.241332][ T5818] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 188.280692][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.338476][ T5818] usb 2-1: config 0 descriptor?? [ 188.364132][ T8612] loop0: detected capacity change from 0 to 24 [ 188.385291][ T5818] as10x_usb: device has been detected [ 188.413893][ T8612] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 188.436109][ T5818] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 188.491301][ T8612] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 188.538700][ T5818] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 188.586902][ T8597] ------------[ cut here ]------------ [ 188.592469][ T8597] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 188.626294][ T8597] WARNING: CPU: 0 PID: 8597 at kernel/locking/mutex.c:582 __mutex_lock+0xb48/0xc80 [ 188.641966][ T8597] Modules linked in: [ 188.645856][ T8597] CPU: 0 PID: 8597 Comm: syz.1.925 Not tainted syzkaller #0 [ 188.653306][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.663430][ T8597] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 188.668739][ T8597] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d 51 cb d0 04 00 0f 85 d1 f5 ff ff 48 c7 c7 80 ba ca 8a 48 c7 c6 20 bb ca 8a e8 d8 8a b5 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 188.688654][ T8597] RSP: 0018:ffffc900036d7ac0 EFLAGS: 00010246 [ 188.694710][ T8597] RAX: 53a35f8a906bdf00 RBX: ffff88805bfa8ce0 RCX: 0000000000080000 [ 188.703552][ T8597] RDX: ffffc9000cb19000 RSI: 0000000000004b8c RDI: 0000000000004b8d [ 188.711671][ T8597] RBP: ffffc900036d7c20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 188.719724][ T8597] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff920006daf68 [ 188.727680][ T8597] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 188.735753][ T8597] FS: 00007fbc0d2296c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 188.744698][ T8597] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.751422][ T8597] CR2: 00007fdc5da807b8 CR3: 00000000683e5000 CR4: 00000000003506f0 [ 188.759489][ T8597] Call Trace: [ 188.762787][ T8597] [ 188.765704][ T8597] ? __mutex_lock+0x30d/0xc80 [ 188.770416][ T8597] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 188.776034][ T8597] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 188.781702][ T8597] ? mutex_lock_nested+0x20/0x20 [ 188.786637][ T8597] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 188.792628][ T8597] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 188.798533][ T8597] ? mutex_unlock+0x10/0x10 [ 188.803538][ T8597] ? mutex_lock_nested+0x20/0x20 [ 188.808539][ T8597] ? _raw_spin_lock_irq+0xbb/0xf0 [ 188.813553][ T8597] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.818794][ T8597] as102_dvb_dmx_start_feed+0x70/0x280 [ 188.824238][ T8597] dmx_ts_feed_start_filtering+0x120/0x220 [ 188.830060][ T8597] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 188.835944][ T8597] dvb_dmxdev_filter_start+0x422/0x10a0 [ 188.841506][ T8597] dvb_demux_do_ioctl+0x482/0x530 [ 188.846545][ T8597] dvb_usercopy+0x195/0x2b0 [ 188.851079][ T8597] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 188.856629][ T8597] ? dvb_generic_ioctl+0xb0/0xb0 [ 188.861591][ T8597] ? dvb_demux_poll+0x210/0x210 [ 188.866426][ T8597] dvb_demux_ioctl+0x29/0x30 [ 188.871024][ T8597] __se_sys_ioctl+0xfd/0x170 [ 188.875623][ T8597] do_syscall_64+0x55/0xb0 [ 188.880051][ T8597] ? clear_bhb_loop+0x40/0x90 [ 188.884711][ T8597] ? clear_bhb_loop+0x40/0x90 [ 188.889394][ T8597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.895293][ T8597] RIP: 0033:0x7fbc0c39e199 [ 188.899735][ T8597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.919968][ T8597] RSP: 002b:00007fbc0d229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.928466][ T8597] RAX: ffffffffffffffda RBX: 00007fbc0c625fa0 RCX: 00007fbc0c39e199 [ 188.936425][ T8597] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 188.944418][ T8597] RBP: 00007fbc0c435888 R08: 0000000000000000 R09: 0000000000000000 [ 188.952431][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.960446][ T8597] R13: 00007fbc0c626038 R14: 00007fbc0c625fa0 R15: 00007ffda5776c78 [ 188.968432][ T8597] [ 188.971437][ T8597] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.978703][ T8597] CPU: 0 PID: 8597 Comm: syz.1.925 Not tainted syzkaller #0 [ 188.985962][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 188.995997][ T8597] Call Trace: [ 188.999259][ T8597] [ 189.002174][ T8597] dump_stack_lvl+0x18c/0x250 [ 189.006928][ T8597] ? show_regs_print_info+0x20/0x20 [ 189.012105][ T8597] ? load_image+0x420/0x420 [ 189.016592][ T8597] panic+0x2ca/0x720 [ 189.020470][ T8597] ? bpf_jit_dump+0xd0/0xd0 [ 189.024958][ T8597] __warn+0x2e0/0x470 [ 189.028919][ T8597] ? __mutex_lock+0xb48/0xc80 [ 189.033591][ T8597] ? __mutex_lock+0xb48/0xc80 [ 189.038269][ T8597] report_bug+0x2be/0x4f0 [ 189.042579][ T8597] ? __mutex_lock+0xb48/0xc80 [ 189.047238][ T8597] ? __mutex_lock+0xb48/0xc80 [ 189.051899][ T8597] ? __mutex_lock+0xb4a/0xc80 [ 189.056557][ T8597] handle_bug+0xcf/0x120 [ 189.060797][ T8597] exc_invalid_op+0x1a/0x50 [ 189.065279][ T8597] asm_exc_invalid_op+0x1a/0x20 [ 189.070108][ T8597] RIP: 0010:__mutex_lock+0xb48/0xc80 [ 189.075393][ T8597] Code: 04 08 84 c0 0f 85 2f 01 00 00 83 3d 51 cb d0 04 00 0f 85 d1 f5 ff ff 48 c7 c7 80 ba ca 8a 48 c7 c6 20 bb ca 8a e8 d8 8a b5 f6 <0f> 0b e9 b7 f5 ff ff 0f 0b e9 75 f9 ff ff 0f 0b e9 4f f6 ff ff 48 [ 189.094984][ T8597] RSP: 0018:ffffc900036d7ac0 EFLAGS: 00010246 [ 189.101030][ T8597] RAX: 53a35f8a906bdf00 RBX: ffff88805bfa8ce0 RCX: 0000000000080000 [ 189.108983][ T8597] RDX: ffffc9000cb19000 RSI: 0000000000004b8c RDI: 0000000000004b8d [ 189.116950][ T8597] RBP: ffffc900036d7c20 R08: ffff8880b8c28c53 R09: 1ffff1101718518a [ 189.124901][ T8597] R10: dffffc0000000000 R11: ffffed101718518b R12: 1ffff920006daf68 [ 189.132849][ T8597] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 189.140823][ T8597] ? __mutex_lock+0x30d/0xc80 [ 189.145486][ T8597] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 189.151100][ T8597] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 189.156720][ T8597] ? mutex_lock_nested+0x20/0x20 [ 189.161638][ T8597] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 189.167601][ T8597] ? dmx_ts_feed_start_filtering+0x52/0x220 [ 189.173472][ T8597] ? mutex_unlock+0x10/0x10 [ 189.177955][ T8597] ? mutex_lock_nested+0x20/0x20 [ 189.182872][ T8597] ? _raw_spin_lock_irq+0xbb/0xf0 [ 189.187881][ T8597] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.193060][ T8597] as102_dvb_dmx_start_feed+0x70/0x280 [ 189.198518][ T8597] dmx_ts_feed_start_filtering+0x120/0x220 [ 189.204304][ T8597] ? dmx_ts_feed_stop_filtering+0x190/0x190 [ 189.210181][ T8597] dvb_dmxdev_filter_start+0x422/0x10a0 [ 189.215716][ T8597] dvb_demux_do_ioctl+0x482/0x530 [ 189.220724][ T8597] dvb_usercopy+0x195/0x2b0 [ 189.225210][ T8597] ? dvb_dmxdev_buffer_read+0x4a0/0x4a0 [ 189.230737][ T8597] ? dvb_generic_ioctl+0xb0/0xb0 [ 189.235664][ T8597] ? dvb_demux_poll+0x210/0x210 [ 189.240494][ T8597] dvb_demux_ioctl+0x29/0x30 [ 189.245068][ T8597] __se_sys_ioctl+0xfd/0x170 [ 189.249639][ T8597] do_syscall_64+0x55/0xb0 [ 189.254036][ T8597] ? clear_bhb_loop+0x40/0x90 [ 189.258692][ T8597] ? clear_bhb_loop+0x40/0x90 [ 189.263350][ T8597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.269228][ T8597] RIP: 0033:0x7fbc0c39e199 [ 189.273639][ T8597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.293226][ T8597] RSP: 002b:00007fbc0d229028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.301622][ T8597] RAX: ffffffffffffffda RBX: 00007fbc0c625fa0 RCX: 00007fbc0c39e199 [ 189.309573][ T8597] RDX: 0000200000000040 RSI: 0000000040146f2c RDI: 0000000000000004 [ 189.317522][ T8597] RBP: 00007fbc0c435888 R08: 0000000000000000 R09: 0000000000000000 [ 189.325477][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.333426][ T8597] R13: 00007fbc0c626038 R14: 00007fbc0c625fa0 R15: 00007ffda5776c78 [ 189.341382][ T8597] [ 189.344440][ T8597] Kernel Offset: disabled [ 189.348743][ T8597] Rebooting in 86400 seconds..