last executing test programs: 3.449166228s ago: executing program 1 (id=5008): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3.200413606s ago: executing program 0 (id=5013): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 3.026420479s ago: executing program 0 (id=5016): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x20, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}]}, 0x20}}, 0x0) 2.983366132s ago: executing program 4 (id=5017): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) unshare(0x60480) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000c40)={0x42, 0x0, 0x0, 0x2}, 0x10) 2.926465896s ago: executing program 0 (id=5018): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) 2.838376263s ago: executing program 4 (id=5019): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-8'], 0x27) 2.838137033s ago: executing program 0 (id=5020): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xd, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.753813709s ago: executing program 0 (id=5021): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 2.753623189s ago: executing program 4 (id=5022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') readlink(&(0x7f0000003000)='./file0/../file0\x00', &(0x7f0000003040)=""/95, 0x5f) 2.616994789s ago: executing program 4 (id=5026): r0 = syz_io_uring_setup(0x2989, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f00000007c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0, 0x62}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.522090965s ago: executing program 4 (id=5028): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.stat\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x8, 0x4}) 2.496566227s ago: executing program 1 (id=5029): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x40}]}, 0x10) syz_emit_ethernet(0xfc1, &(0x7f0000001200)=ANY=[], 0x0) 2.346576239s ago: executing program 1 (id=5032): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) 1.550822767s ago: executing program 2 (id=5037): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6800000010000100feffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="008000000000000008000d00ffffff7f34002b80080001", @ANYBLOB], 0x68}}, 0x0) 1.324222563s ago: executing program 2 (id=5039): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x2, 0x0, 0x0, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.178659314s ago: executing program 2 (id=5040): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.08561639s ago: executing program 4 (id=5041): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknod$loop(0x0, 0x0, 0x1) 1.062838902s ago: executing program 2 (id=5042): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_pages(0x0, 0xf0, 0x0, 0x0, 0x0, 0x0) 762.380384ms ago: executing program 3 (id=5043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)={0x28, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x9}]}]}, 0x28}}, 0x0) 678.94371ms ago: executing program 3 (id=5044): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = syz_io_uring_setup(0x4173, &(0x7f0000000780), &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/158, 0x9e}], 0x1}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 553.833509ms ago: executing program 3 (id=5045): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060004000000000001"], 0x0, 0x42}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf2514000000080001000300000008000300", @ANYRES32=r0], 0x38}}, 0x0) 480.102015ms ago: executing program 3 (id=5046): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2b) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r1, &(0x7f0000000300)=""/4143, 0x102f) 342.349405ms ago: executing program 1 (id=5047): setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setreuid(0x0, 0xee00) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 332.371166ms ago: executing program 0 (id=5048): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 312.131377ms ago: executing program 3 (id=5049): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000580)={[{@errors_remount}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@gid}, {@uid={'uid', 0x3d, 0xee00}}, {@discard}]}, 0x81, 0x14fd, &(0x7f00000062c0)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 220.098854ms ago: executing program 1 (id=5050): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x90) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x1db, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x2}}, 0x0) 219.471874ms ago: executing program 2 (id=5051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 47.696657ms ago: executing program 2 (id=5052): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 46.936407ms ago: executing program 1 (id=5053): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="9fcef773371e4e035a4ff190bea4efd68642046c23be8a9aae70a0043860f98931e9a9d2a4cb9b6cbfab8d88542eafc9851179a8bc28dad0fbfc05804b2b"], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) rename(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file1\x00') unlink(&(0x7f0000000140)='./file1\x00') 0s ago: executing program 3 (id=5054): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) kernel console output (not intermixed with test programs): dpoint 0x81 has invalid wMaxPacketSize 0 [ 404.904548][ T7] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 404.938763][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.973047][ T7] usb 3-1: config 0 descriptor?? [ 405.085876][T14664] loop0: detected capacity change from 0 to 40427 [ 405.102137][T14664] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 405.110367][T14664] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 405.157745][T14664] F2FS-fs (loop0): Found nat_bits in checkpoint [ 405.182822][ T5143] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 405.220069][T14664] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 405.226080][T14684] loop4: detected capacity change from 0 to 32768 [ 405.233780][T14664] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 405.239478][T14684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3922 (14684) [ 405.265116][T14684] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.281915][T14684] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 405.290779][T14684] BTRFS info (device loop4): using free space tree [ 405.305679][T11323] syz-executor: attempt to access beyond end of device [ 405.305679][T11323] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 405.427048][ T5143] usb 2-1: Using ep0 maxpacket: 16 [ 405.475435][ T7] corsair 0003:1B1C:1B02.001E: unknown main item tag 0x0 [ 405.491116][T14684] BTRFS info (device loop4): enabling ssd optimizations [ 405.499854][ T7] corsair 0003:1B1C:1B02.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 405.543076][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.572809][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.593852][ T5143] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.607604][ T5143] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.617204][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.644596][ T5143] usb 2-1: config 0 descriptor?? [ 405.655112][T10779] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 405.707871][ T7] corsair 0003:1B1C:1B02.001E: Read invalid backlight brightness: db. [ 405.782244][T14715] tun0: tun_chr_ioctl cmd 2147767506 [ 405.930270][ T3678] usb 3-1: USB disconnect, device number 27 [ 406.052931][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 406.125223][ T5143] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 406.142649][ T5143] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 406.161781][ T5143] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 406.179679][ T5143] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 406.189510][ T5143] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 406.205228][ T5143] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 406.216075][T14730] loop0: detected capacity change from 0 to 164 [ 406.228952][ T5143] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 406.239155][ T5143] microsoft 0003:045E:07DA.001F: No inputs registered, leaving [ 406.247761][ T5143] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 406.259435][ T5143] microsoft 0003:045E:07DA.001F: no inputs found [ 406.266468][ T5143] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 406.376946][ T5143] usb 2-1: USB disconnect, device number 24 [ 406.574007][T14744] loop2: detected capacity change from 0 to 1024 [ 406.589976][T14746] netlink: 'syz.0.3941': attribute type 7 has an invalid length. [ 406.648567][ T33] hfsplus: b-tree write err: -5, ino 4 [ 406.682991][ T3625] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 406.705838][T14749] mkiss: ax0: crc mode is auto. [ 406.891866][T14756] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 407.063733][T14763] loop0: detected capacity change from 0 to 8 [ 407.099698][T14763] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 407.218442][T14759] loop3: detected capacity change from 0 to 8192 [ 407.222961][ T3625] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 407.243269][ T3625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.261479][ T3625] usb 5-1: Product: syz [ 407.265971][ T3625] usb 5-1: Manufacturer: syz [ 407.270578][ T3625] usb 5-1: SerialNumber: syz [ 407.304478][ T3625] usb 5-1: config 0 descriptor?? [ 407.325747][T14769] loop1: detected capacity change from 0 to 128 [ 407.573268][ T3625] cx82310_eth: probe of 5-1:0.0 failed with error -22 [ 407.641738][T14779] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3956'. [ 408.013135][ T3625] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 408.042159][T14767] loop0: detected capacity change from 0 to 32768 [ 408.107661][T14767] XFS (loop0): Mounting V5 Filesystem [ 408.112581][T14773] loop3: detected capacity change from 0 to 32768 [ 408.120774][T14773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3953 (14773) [ 408.135811][T14773] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.146096][T14773] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 408.154898][T14773] BTRFS info (device loop3): using free space tree [ 408.234027][ T4323] usb 5-1: USB disconnect, device number 25 [ 408.288014][T14767] XFS (loop0): Ending clean mount [ 408.295550][T14773] BTRFS info (device loop3): enabling ssd optimizations [ 408.323140][T14767] XFS (loop0): Quotacheck needed: Please wait. [ 408.363542][ T6399] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 408.402253][T14767] XFS (loop0): Quotacheck: Done. [ 408.467301][T11323] XFS (loop0): Unmounting Filesystem [ 409.246695][T14837] loop3: detected capacity change from 0 to 512 [ 409.340213][T14837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 409.359876][T14837] ext4 filesystem being mounted at /608/file0 supports timestamps until 2038 (0x7fffffff) [ 409.388768][T14837] tmpfs: Bad value for 'gid' [ 409.525922][ T6399] EXT4-fs (loop3): unmounting filesystem. [ 409.708662][T14858] loop3: detected capacity change from 0 to 1024 [ 409.761119][T14863] ALSA: mixer_oss: invalid index 2133437386 [ 409.781371][T14858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.141768][T14870] loop3: detected capacity change from 0 to 2048 [ 410.210844][T14870] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 410.232599][T14870] NILFS (loop3): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 410.556171][T14890] tun0: tun_chr_ioctl cmd 2147767506 [ 411.128065][T14903] debugfs: Directory 'netdev:nicvf0' with parent 'phy15' already present! [ 411.250755][T14884] loop2: detected capacity change from 0 to 32768 [ 411.327585][T14884] XFS (loop2): Mounting V5 Filesystem [ 411.429063][T14884] XFS (loop2): Ending clean mount [ 411.449133][T14884] XFS (loop2): Quotacheck needed: Please wait. [ 411.530284][T14894] loop0: detected capacity change from 0 to 32768 [ 411.532678][T14884] XFS (loop2): Quotacheck: Done. [ 411.578545][T14884] XFS (loop2): User initiated shutdown received. [ 411.584934][T14894] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.3995 (14894) [ 411.603623][T14894] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 411.608561][T14884] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:487). Shutting down filesystem. [ 411.624055][T14894] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 411.633691][T14884] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 411.654376][T14894] BTRFS info (device loop0): using free space tree [ 411.777344][ T9521] XFS (loop2): Unmounting Filesystem [ 411.788249][T14894] BTRFS info (device loop0): enabling ssd optimizations [ 411.867677][T11323] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 412.117928][T14953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4011'. [ 412.380165][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 412.717891][T14952] loop4: detected capacity change from 0 to 32768 [ 412.756353][T14975] loop1: detected capacity change from 0 to 2048 [ 412.774870][T14975] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 412.790175][T14952] XFS (loop4): Mounting V5 Filesystem [ 412.822794][T14975] NILFS (loop1): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 412.867734][T14952] XFS (loop4): Ending clean mount [ 412.926324][T14986] loop0: detected capacity change from 0 to 512 [ 412.964547][T10779] XFS (loop4): Unmounting Filesystem [ 413.036685][T14986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 413.052696][T14986] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038 (0x7fffffff) [ 413.110710][T14986] tmpfs: Bad value for 'gid' [ 413.156290][T11323] EXT4-fs (loop0): unmounting filesystem. [ 413.510015][T15010] mkiss: ax0: crc mode is auto. [ 413.659452][T15022] sctp: [Deprecated]: syz.0.4046 (pid 15022) Use of int in maxseg socket option. [ 413.659452][T15022] Use struct sctp_assoc_value instead [ 413.781775][T15031] loop2: detected capacity change from 0 to 2048 [ 413.801296][T15031] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 413.805850][ T5145] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 413.818824][T15031] NILFS (loop2): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 413.835503][T15029] loop0: detected capacity change from 0 to 4096 [ 413.877421][T15032] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 413.912600][ T26] audit: type=1800 audit(1725434277.785:3902): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4039" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 413.939500][ T26] audit: type=1804 audit(1725434277.785:3903): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4039" name="/newroot/254/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 414.032816][ T4364] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 414.092811][ T5145] usb 5-1: Using ep0 maxpacket: 16 [ 414.220090][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.259029][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.283817][ T5145] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 414.300298][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.311363][ T5145] usb 5-1: config 0 descriptor?? [ 414.563012][ T4364] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 414.580086][ T4364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.607756][T15057] usb usb1: usbfs: process 15057 (syz.0.4053) did not claim interface 0 before use [ 414.608442][ T4364] usb 2-1: Product: syz [ 414.642209][ T4364] usb 2-1: Manufacturer: syz [ 414.652807][ T4364] usb 2-1: SerialNumber: syz [ 414.663332][ T4364] usb 2-1: config 0 descriptor?? [ 414.807811][ T5145] corsair 0003:1B1C:1B02.0020: unknown main item tag 0x0 [ 414.838079][ T5145] corsair 0003:1B1C:1B02.0020: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 414.913002][ T4364] cx82310_eth: probe of 2-1:0.0 failed with error -22 [ 415.026235][ T5145] corsair 0003:1B1C:1B02.0020: Read invalid backlight brightness: db. [ 415.270335][ T5145] usb 5-1: USB disconnect, device number 26 [ 415.343337][ T4364] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 415.458036][T15062] loop0: detected capacity change from 0 to 32768 [ 415.499983][T15077] device dummy0 entered promiscuous mode [ 415.506687][T15062] XFS (loop0): Mounting V5 Filesystem [ 415.514031][T15074] device dummy0 left promiscuous mode [ 415.593848][ T4364] usb 2-1: USB disconnect, device number 25 [ 415.611730][T15062] XFS (loop0): Ending clean mount [ 415.637574][T15062] XFS (loop0): Quotacheck needed: Please wait. [ 415.651307][T15088] loop3: detected capacity change from 0 to 512 [ 415.681118][T15091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4065'. [ 415.693031][T15088] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 415.693048][T15062] XFS (loop0): Quotacheck: Done. [ 415.701844][T15088] EXT4-fs (loop3): orphan cleanup on readonly fs [ 415.743025][T15088] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 415.752005][T15088] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 415.771748][T15088] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.4064: Failed to acquire dquot type 1 [ 415.786842][T11323] XFS (loop0): Unmounting Filesystem [ 415.795210][T15088] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4064: bg 0: block 40: padding at end of block bitmap is not set [ 415.819988][T15088] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 415.857213][T15093] loop2: detected capacity change from 0 to 4096 [ 415.863790][T15088] EXT4-fs (loop3): 1 truncate cleaned up [ 415.869517][T15088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 415.914979][T15094] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 415.961570][ T26] audit: type=1800 audit(1725434279.835:3904): pid=15093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4066" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 416.018231][ T26] audit: type=1804 audit(1725434279.835:3905): pid=15093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4066" name="/newroot/401/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 416.481470][T15096] loop4: detected capacity change from 0 to 32768 [ 416.499169][ T6399] EXT4-fs (loop3): unmounting filesystem. [ 416.625850][T15096] XFS (loop4): Mounting V5 Filesystem [ 416.752387][T15096] XFS (loop4): Ending clean mount [ 416.772155][T15096] XFS (loop4): Quotacheck needed: Please wait. [ 416.848793][T15096] XFS (loop4): Quotacheck: Done. [ 416.887097][T15096] XFS (loop4): User initiated shutdown received. [ 416.927883][T15096] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:487). Shutting down filesystem. [ 417.000852][T15096] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 417.091869][T10779] XFS (loop4): Unmounting Filesystem [ 417.159124][T15155] loop1: detected capacity change from 0 to 512 [ 417.200748][T15157] device dummy0 entered promiscuous mode [ 417.208911][T15156] device dummy0 left promiscuous mode [ 417.235373][T15155] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 417.275038][T15155] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4092: invalid indirect mapped block 8 (level 2) [ 417.325550][T15155] EXT4-fs (loop1): Remounting filesystem read-only [ 417.332516][T15155] EXT4-fs (loop1): 1 truncate cleaned up [ 417.338401][T15155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 417.410879][T15155] EXT4-fs (loop1): shut down requested (2) [ 417.536842][T14245] EXT4-fs (loop1): unmounting filesystem. [ 417.630657][T15174] loop1: detected capacity change from 0 to 512 [ 417.645145][T15174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 417.688351][T15174] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 417.702842][T15174] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.4098: invalid indirect mapped block 2683928664 (level 1) [ 417.733901][T15174] EXT4-fs (loop1): 1 truncate cleaned up [ 417.749553][T15174] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 417.897703][T15189] loop4: detected capacity change from 0 to 1024 [ 417.920923][T15189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.078940][T15192] loop3: detected capacity change from 0 to 512 [ 418.103447][T15192] EXT4-fs: Ignoring removed orlov option [ 418.121108][T15196] loop2: detected capacity change from 0 to 64 [ 418.137137][T15192] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 418.163019][T15192] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 418.194041][T15192] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.4107: Corrupt directory, running e2fsck is recommended [ 418.380376][T15192] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 418.419590][T15192] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.4107: corrupted in-inode xattr [ 418.452677][T15192] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4107: couldn't read orphan inode 15 (err -117) [ 418.488662][T15192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 418.515123][ T26] audit: type=1800 audit(1725434282.395:3906): pid=15174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4098" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 418.584095][T15185] loop0: detected capacity change from 0 to 32768 [ 418.630183][ T6399] EXT4-fs (loop3): unmounting filesystem. [ 418.650824][T15185] XFS (loop0): Mounting V5 Filesystem [ 418.725953][T14245] EXT4-fs (loop1): unmounting filesystem. [ 418.861761][T15185] XFS (loop0): Ending clean mount [ 418.885114][T15185] XFS (loop0): Quotacheck needed: Please wait. [ 418.961204][T15185] XFS (loop0): Quotacheck: Done. [ 418.995187][T15185] XFS (loop0): User initiated shutdown received. [ 419.036776][T15185] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:487). Shutting down filesystem. [ 419.040262][T15220] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4117'. [ 419.070892][T15185] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 419.136178][T11323] XFS (loop0): Unmounting Filesystem [ 419.382547][T15235] loop4: detected capacity change from 0 to 512 [ 419.442293][T15235] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 419.455777][T15215] loop3: detected capacity change from 0 to 32768 [ 419.477867][T15235] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4123: invalid indirect mapped block 8 (level 2) [ 419.527214][T15215] XFS (loop3): Mounting V5 Filesystem [ 419.532093][T15235] EXT4-fs (loop4): Remounting filesystem read-only [ 419.548591][T15235] EXT4-fs (loop4): 1 truncate cleaned up [ 419.562871][T15235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 419.591015][T15235] EXT4-fs (loop4): shut down requested (2) [ 419.628915][T15215] XFS (loop3): Ending clean mount [ 419.665881][T15252] loop2: detected capacity change from 0 to 1024 [ 419.692584][T10779] EXT4-fs (loop4): unmounting filesystem. [ 419.706825][T15252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.749721][ T6399] XFS (loop3): Unmounting Filesystem [ 420.007402][T15270] loop1: detected capacity change from 0 to 1024 [ 420.222204][T15281] netlink: 'syz.2.4142': attribute type 8 has an invalid length. [ 420.252842][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4142'. [ 420.396752][T15290] loop0: detected capacity change from 0 to 1024 [ 420.432468][T15290] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.514128][T15294] netlink: 4156 bytes leftover after parsing attributes in process `syz.4.4147'. [ 420.532712][T15291] loop1: detected capacity change from 0 to 8192 [ 420.621301][T15291] loop1: p2 p3 p4 [ 420.625268][T15291] loop1: p2 start 14935 is beyond EOD, truncated [ 420.636213][T15291] loop1: p3 size 196608 extends beyond EOD, truncated [ 420.653737][T15291] loop1: p4 start 4026530307 is beyond EOD, truncated [ 420.767419][T15299] 9pnet: Could not find request transport: 0xffffffffffffffff [ 420.804527][T15307] loop4: detected capacity change from 0 to 1024 [ 420.921640][ T9] hfsplus: b-tree write err: -5, ino 4 [ 420.937596][T15313] loop1: detected capacity change from 0 to 64 [ 421.008923][T15317] loop4: detected capacity change from 0 to 512 [ 421.063043][T15317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 421.119718][T15321] loop1: detected capacity change from 0 to 512 [ 421.133215][T15317] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 421.143305][T15317] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4156: invalid indirect mapped block 2683928664 (level 1) [ 421.155591][T15321] EXT4-fs: Ignoring removed orlov option [ 421.204738][T15321] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 421.234796][T15317] EXT4-fs (loop4): 1 truncate cleaned up [ 421.240507][T15317] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 421.284945][T15321] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 421.346942][T15321] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4158: Corrupt directory, running e2fsck is recommended [ 421.474343][T15321] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 421.480543][T15338] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4164'. [ 421.511800][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4164'. [ 421.516539][T15321] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.4158: corrupted in-inode xattr [ 421.581608][T15321] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.4158: couldn't read orphan inode 15 (err -117) [ 421.621248][T15321] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 421.759944][T14245] EXT4-fs (loop1): unmounting filesystem. [ 421.902973][ T26] audit: type=1800 audit(1725434285.785:3907): pid=15317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4156" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 421.975744][T15330] loop2: detected capacity change from 0 to 32768 [ 422.044520][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4169'. [ 422.061564][T15330] XFS (loop2): Mounting V5 Filesystem [ 422.104355][T10779] EXT4-fs (loop4): unmounting filesystem. [ 422.164084][T15330] XFS (loop2): Ending clean mount [ 422.293652][T15364] loop1: detected capacity change from 0 to 128 [ 422.310812][ T9521] XFS (loop2): Unmounting Filesystem [ 422.404600][T15364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 422.433845][T15364] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 422.568301][T15355] loop0: detected capacity change from 0 to 32768 [ 422.573433][T15340] loop3: detected capacity change from 0 to 40427 [ 422.582419][T15340] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 422.601716][T15340] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 422.626343][T15340] F2FS-fs (loop3): invalid crc value [ 422.632008][T15355] XFS (loop0): Mounting V5 Filesystem [ 422.676316][T15340] F2FS-fs (loop3): Found nat_bits in checkpoint [ 422.745027][T14245] EXT4-fs (loop1): unmounting filesystem. [ 422.805222][T15340] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 422.819175][T15355] XFS (loop0): Ending clean mount [ 422.825015][T15340] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 422.834168][T15355] XFS (loop0): Quotacheck needed: Please wait. [ 422.890977][T15355] XFS (loop0): Quotacheck: Done. [ 422.924075][ T33] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 422.946235][ T33] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 423.049392][T15340] F2FS-fs (loop3): skip recovering inline_dots inode (ino:3, pino:3) in readonly mountpoint [ 423.075104][T15396] loop4: detected capacity change from 0 to 1024 [ 423.088154][T15396] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 423.092544][T11323] XFS (loop0): Unmounting Filesystem [ 423.102296][ T4364] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 423.137804][T15396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 423.304288][T10779] EXT4-fs (loop4): unmounting filesystem. [ 423.369160][ T4364] usb 2-1: Using ep0 maxpacket: 32 [ 423.505248][ T4364] usb 2-1: config 0 has no interfaces? [ 423.608555][T15414] tap0: tun_chr_ioctl cmd 1074025677 [ 423.624373][ T4364] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 423.625171][T15414] tap0: linktype set to 270 [ 423.649950][ T4364] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 423.666160][ T4364] usb 2-1: Product: syz [ 423.670822][ T4364] usb 2-1: Manufacturer: syz [ 423.680859][ T4364] usb 2-1: config 0 descriptor?? [ 423.848213][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4195'. [ 423.871161][T15434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4195'. [ 423.965355][ T4364] usb 2-1: USB disconnect, device number 26 [ 424.063062][T15442] loop0: detected capacity change from 0 to 512 [ 424.077097][T15442] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.116320][T15442] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 424.136490][T15442] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.4199: invalid indirect mapped block 2683928664 (level 1) [ 424.170947][T15442] EXT4-fs (loop0): 1 truncate cleaned up [ 424.191154][T15442] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 424.243572][T15433] loop4: detected capacity change from 0 to 32768 [ 424.305579][T15433] XFS (loop4): Mounting V5 Filesystem [ 424.383041][T15433] XFS (loop4): Ending clean mount [ 424.390333][T15433] XFS (loop4): Quotacheck needed: Please wait. [ 424.489972][T15433] XFS (loop4): Quotacheck: Done. [ 424.697793][T10779] XFS (loop4): Unmounting Filesystem [ 424.776367][T15447] loop2: detected capacity change from 0 to 32768 [ 424.826920][T15447] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.4201 (15447) [ 424.874291][T15447] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.886080][T15447] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 424.886644][T15464] Bluetooth: MGMT ver 1.22 [ 424.903258][T15447] BTRFS info (device loop2): using free space tree [ 424.932372][ T26] audit: type=1800 audit(1725434288.805:3908): pid=15442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4199" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 425.088060][T11323] EXT4-fs (loop0): unmounting filesystem. [ 425.163394][T15447] BTRFS info (device loop2): enabling ssd optimizations [ 425.298067][ T9521] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 426.001684][T15524] program syz.4.4225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.402825][ T4733] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 426.564067][T15522] loop1: detected capacity change from 0 to 32768 [ 426.600073][T15514] loop2: detected capacity change from 0 to 40427 [ 426.618689][T15514] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 426.639839][T15550] loop3: detected capacity change from 0 to 64 [ 426.647475][T15522] XFS (loop1): Mounting V5 Filesystem [ 426.653882][T15514] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 426.677978][T15514] F2FS-fs (loop2): invalid crc value [ 426.706256][T15514] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 426.740594][T15522] XFS (loop1): Ending clean mount [ 426.817065][ T4733] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 426.837912][T15514] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 426.845091][ T4733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.847898][T15514] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 426.875021][T14245] XFS (loop1): Unmounting Filesystem [ 426.890909][ T4733] usb 5-1: config 0 descriptor?? [ 427.162861][ T4733] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e [ 427.172940][ T4733] hackrf 5-1:0.0: Could not detect board [ 427.182842][ T4733] hackrf: probe of 5-1:0.0 failed with error -71 [ 427.199513][ T4733] usb 5-1: USB disconnect, device number 27 [ 427.584275][T15581] loop1: detected capacity change from 0 to 2048 [ 427.632846][T15583] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.651026][T15585] loop2: detected capacity change from 0 to 64 [ 427.836478][T15593] loop1: detected capacity change from 0 to 512 [ 427.885327][T15597] loop3: detected capacity change from 0 to 1024 [ 427.898598][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4255'. [ 427.907830][T15593] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.4250: inode #1: comm syz.1.4250: iget: illegal inode # [ 427.932982][T15593] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.4250: error while reading EA inode 1 err=-117 [ 427.950148][T15597] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 427.959833][T15593] EXT4-fs (loop1): 1 orphan inode deleted [ 427.986154][T15593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 428.036471][T14245] EXT4-fs (loop1): unmounting filesystem. [ 428.130201][T15612] loop4: detected capacity change from 0 to 64 [ 428.190534][T15614] loop1: detected capacity change from 0 to 2048 [ 428.219354][T15614] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.317032][T15620] loop0: detected capacity change from 0 to 2048 [ 428.359275][T15623] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.482807][ T5145] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 428.516455][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4269'. [ 428.566681][T15637] loop2: detected capacity change from 0 to 2048 [ 428.586161][T15637] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 428.626684][T15640] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 428.773339][T15644] loop2: detected capacity change from 0 to 2048 [ 428.790863][T15644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.834944][T15647] loop0: detected capacity change from 0 to 4096 [ 428.857692][ T5145] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 428.882310][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.897773][T15647] NILFS (loop0): invalid segment: Checksum error in segment payload [ 428.906114][ T5145] usb 4-1: config 0 descriptor?? [ 428.914357][T15647] NILFS (loop0): trying rollback from an earlier position [ 428.946297][T15652] loop2: detected capacity change from 0 to 64 [ 428.977665][T15647] NILFS (loop0): recovery complete [ 428.997296][T15653] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.120217][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4280'. [ 429.192865][ T5145] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0e [ 429.200049][ T5145] hackrf 4-1:0.0: Could not detect board [ 429.233346][ T5145] hackrf: probe of 4-1:0.0 failed with error -71 [ 429.248317][T15663] loop2: detected capacity change from 0 to 64 [ 429.273855][ T5145] usb 4-1: USB disconnect, device number 22 [ 429.308313][T15663] BFS-fs: bfs_readdir(): Bad f_pos=00008001 for loop2:00000002 [ 429.429699][T15673] loop1: detected capacity change from 0 to 512 [ 429.437219][T15673] EXT4-fs: Ignoring removed orlov option [ 429.448082][T15673] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 429.473224][T15678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4288'. [ 429.495026][T15673] EXT4-fs (loop1): 1 truncate cleaned up [ 429.508537][T15673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 429.517856][T15678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4288'. [ 429.609134][ T26] audit: type=1800 audit(1725434293.485:3909): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4286" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 429.677516][T14245] EXT4-fs (loop1): unmounting filesystem. [ 429.704128][T15684] loop4: detected capacity change from 0 to 4096 [ 429.718313][T15684] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 429.938684][T15690] loop1: detected capacity change from 0 to 4096 [ 429.983786][T15690] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker. [ 430.021015][T15690] ntfs: volume version 3.1. [ 430.145909][T15711] loop3: detected capacity change from 0 to 128 [ 430.157551][T15711] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 430.196582][T15711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 430.364008][T15723] loop4: detected capacity change from 0 to 512 [ 430.403337][T15723] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.4307: inode #1: comm syz.4.4307: iget: illegal inode # [ 430.458440][T15723] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.4307: error while reading EA inode 1 err=-117 [ 430.479307][T15725] loop3: detected capacity change from 0 to 4096 [ 430.492944][T15723] EXT4-fs (loop4): 1 orphan inode deleted [ 430.498958][T15723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 430.530233][T15725] NILFS (loop3): invalid segment: Checksum error in segment payload [ 430.543717][T15725] NILFS (loop3): trying rollback from an earlier position [ 430.596557][T15725] NILFS (loop3): recovery complete [ 430.624291][T10779] EXT4-fs (loop4): unmounting filesystem. [ 430.633491][T15730] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 430.669583][T15732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4320'. [ 430.688867][T15732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4320'. [ 431.060264][T15744] loop0: detected capacity change from 0 to 4096 [ 431.087084][T15744] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 431.134325][T15744] ntfs: volume version 3.1. [ 431.145515][T15756] loop3: detected capacity change from 0 to 512 [ 431.187699][T15756] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4321: inode #1: comm syz.3.4321: iget: illegal inode # [ 431.231508][T15756] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4321: error while reading EA inode 1 err=-117 [ 431.280014][T15756] EXT4-fs (loop3): 1 orphan inode deleted [ 431.303461][T15756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 431.446310][ T6399] EXT4-fs (loop3): unmounting filesystem. [ 431.571820][T15757] loop4: detected capacity change from 0 to 32768 [ 431.590023][T15757] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.4322 (15757) [ 431.619204][T15757] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 431.635001][T15757] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 431.656094][ T3640] Bluetooth: hci1: command 0x0406 tx timeout [ 431.663014][T15757] BTRFS info (device loop4): doing ref verification [ 431.669740][T15757] BTRFS info (device loop4): using default commit interval 30s [ 431.678160][T15757] BTRFS info (device loop4): enabling ssd optimizations [ 431.685993][T15757] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 431.695946][T15757] BTRFS info (device loop4): use zstd compression, level 3 [ 431.703319][T15757] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 431.714065][T15757] BTRFS info (device loop4): trying to use backup root at mount time [ 431.727603][T15757] BTRFS info (device loop4): using free space tree [ 431.856551][T10779] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 432.529783][T15814] loop2: detected capacity change from 0 to 512 [ 432.543663][T15814] EXT4-fs: Ignoring removed orlov option [ 432.549798][T15814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 432.578359][T15814] EXT4-fs (loop2): 1 truncate cleaned up [ 432.582824][ T5142] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 432.592829][T15814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 432.604159][ T5145] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 432.627118][ T26] audit: type=1800 audit(1725434296.505:3910): pid=15814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4337" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 432.791426][ T9521] EXT4-fs (loop2): unmounting filesystem. [ 432.863054][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 432.973122][ T5142] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.988344][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.009563][ T5142] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 433.019736][ T5145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.021839][T15840] netdevsim netdevsim3 netdevsim0: Caught tx_queue_len zero misconfig [ 433.032065][ T5142] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.052429][ T5145] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.91 [ 433.061837][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.073254][ T5145] usb 5-1: config 0 descriptor?? [ 433.222999][ T5142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.232058][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.262787][ T5142] usb 1-1: Product: syz [ 433.266975][ T5142] usb 1-1: Manufacturer: syz [ 433.271572][ T5142] usb 1-1: SerialNumber: syz [ 433.333901][ T5142] usb 1-1: selecting invalid altsetting 1 [ 433.490833][T15842] loop3: detected capacity change from 0 to 32768 [ 433.519281][T15842] overlayfs: upper fs needs to support d_type. [ 433.526587][T15842] overlayfs: upper fs does not support tmpfile. [ 433.539261][T15842] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 433.556785][ T5145] lenovo 0003:17EF:60EE.0021: unknown main item tag 0x0 [ 433.565425][ T5145] lenovo 0003:17EF:60EE.0021: unknown main item tag 0x0 [ 433.572396][ T5145] lenovo 0003:17EF:60EE.0021: unknown main item tag 0x0 [ 433.579929][ T5145] lenovo 0003:17EF:60EE.0021: unknown main item tag 0x0 [ 433.587145][ T5145] lenovo 0003:17EF:60EE.0021: unknown main item tag 0x0 [ 433.594798][ T5145] lenovo 0003:17EF:60EE.0021: unknown main item tag 0x0 [ 433.601772][ T5145] lenovo 0003:17EF:60EE.0021: unknown main item tag 0x0 [ 433.610597][ T5145] lenovo 0003:17EF:60EE.0021: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 433.616912][ T4364] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 433.758465][T11114] usb 5-1: USB disconnect, device number 28 [ 433.802880][ T5142] usb 1-1: selecting invalid altsetting 1 [ 433.808736][ T5142] cdc_ncm 1-1:1.0: bind() failure [ 433.902811][ T4364] usb 3-1: Using ep0 maxpacket: 8 [ 433.961968][ T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.009570][ T5142] usb 1-1: USB disconnect, device number 26 [ 434.052411][ T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.070344][ T4364] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.079752][ T4364] usb 3-1: config 179 has no interface number 0 [ 434.096101][ T4364] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 434.109785][ T4364] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 434.127283][ T4364] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.139463][ T4364] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 434.151056][ T4364] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.169484][ T4364] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 434.170708][ T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.184531][ T4364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.213102][T15848] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 434.263556][ T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.568155][T11114] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input33 [ 434.699757][T15863] loop0: detected capacity change from 0 to 512 [ 434.712321][T15865] netlink: 'syz.1.4358': attribute type 11 has an invalid length. [ 434.723171][T15863] EXT4-fs: Ignoring removed orlov option [ 434.750725][T15863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 434.761714][ T3625] usb 3-1: USB disconnect, device number 28 [ 434.772778][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 434.781084][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 434.789449][ T3625] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 434.799640][T15863] EXT4-fs (loop0): 1 truncate cleaned up [ 434.801125][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.820246][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.822829][T15870] loop1: detected capacity change from 0 to 512 [ 434.833062][T15863] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 434.842392][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.857062][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.862091][T15870] EXT4-fs (loop1): Test dummy encryption mode enabled [ 434.867560][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 434.878386][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.881122][T15870] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.4359: casefold flag without casefold feature [ 434.895913][ T26] audit: type=1800 audit(1725434298.775:3911): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4356" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 434.901743][T15870] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 434.972068][T15870] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 434.982828][ T5142] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 435.010578][T11323] EXT4-fs (loop0): unmounting filesystem. [ 435.214357][T15866] chnl_net:caif_netlink_parms(): no params data found [ 435.232869][ T5142] usb 5-1: Using ep0 maxpacket: 16 [ 435.316337][T15870] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 435.354483][ T5142] usb 5-1: config 0 has no interfaces? [ 435.445979][T14245] EXT4-fs (loop1): unmounting filesystem. [ 435.452088][T15866] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.473226][T15866] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.491619][T15866] device bridge_slave_0 entered promiscuous mode [ 435.493083][ T5142] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 435.520282][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.528567][ T5142] usb 5-1: Product: syz [ 435.540857][ T5142] usb 5-1: Manufacturer: syz [ 435.560512][ T5142] r8152-cfgselector 5-1: config 0 descriptor?? [ 435.601103][T15866] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.639743][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.661574][T15866] device bridge_slave_1 entered promiscuous mode [ 435.803837][T15866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.822385][T15866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.832161][ T5142] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 435.857802][ T9] usb 5-1: config 0 descriptor?? [ 435.924066][T15866] team0: Port device team_slave_0 added [ 435.931688][T15866] team0: Port device team_slave_1 added [ 435.954408][T15866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.961361][T15866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.987631][ T5145] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 435.995562][T15866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.010957][T15866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.027603][T15866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.054200][T15866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.065404][ T3625] usb 5-1: USB disconnect, device number 29 [ 436.075836][ T33] device hsr_slave_0 left promiscuous mode [ 436.082040][ T33] device hsr_slave_1 left promiscuous mode [ 436.082875][ T9] usb 5-1: can't set config #0, error -71 [ 436.093917][T11114] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 436.101605][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.110538][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.121997][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.129753][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.137600][ T33] device bridge_slave_1 left promiscuous mode [ 436.143982][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.151962][ T33] device bridge_slave_0 left promiscuous mode [ 436.158401][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.184144][ T33] device veth1_macvtap left promiscuous mode [ 436.190149][ T33] device veth0_macvtap left promiscuous mode [ 436.196376][ T33] device veth1_vlan left promiscuous mode [ 436.202137][ T33] device veth0_vlan left promiscuous mode [ 436.343019][T11114] usb 2-1: Using ep0 maxpacket: 8 [ 436.382898][ T5145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.393265][ T5145] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 436.402282][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.419102][ T5145] usb 3-1: config 0 descriptor?? [ 436.488490][T11114] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 436.497153][T11114] usb 2-1: config 179 has no interface number 0 [ 436.497708][ T5145] comedi comedi0: Wrong number of endpoints [ 436.503826][T11114] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 436.517160][ T5145] dt9812 3-1:0.0: driver 'dt9812' failed to auto-configure device. [ 436.521314][T11114] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 436.541108][T11114] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.552488][T11114] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 436.564106][T11114] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 436.577549][T11114] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 436.586847][T11114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.614655][T15908] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 436.681056][ T5145] usb 3-1: USB disconnect, device number 29 [ 436.933937][ T3640] Bluetooth: hci4: command tx timeout [ 436.942466][T11114] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input34 [ 436.956671][ T33] team0 (unregistering): Port device team_slave_1 removed [ 437.006506][ T33] team0 (unregistering): Port device team_slave_0 removed [ 437.050285][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.097566][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.127372][T11114] usb 2-1: USB disconnect, device number 27 [ 437.133565][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 437.133611][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 437.152359][T11114] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 437.374635][T15918] loop2: detected capacity change from 0 to 512 [ 437.455875][T15918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 437.465091][T15918] ext4 filesystem being mounted at /479/bus supports timestamps until 2038 (0x7fffffff) [ 437.539810][ T9521] EXT4-fs (loop2): unmounting filesystem. [ 437.731664][T15927] loop1: detected capacity change from 0 to 64 [ 437.738947][ T48] Bluetooth: hci5: sending frame failed (-49) [ 437.769664][T15925] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 437.778929][ T3640] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 437.904319][ T33] bond0 (unregistering): Released all slaves [ 438.115562][T15866] device hsr_slave_0 entered promiscuous mode [ 438.153244][T15866] device hsr_slave_1 entered promiscuous mode [ 438.923650][T15933] loop2: detected capacity change from 0 to 32768 [ 438.993656][T15866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 439.012892][ T48] Bluetooth: hci4: command tx timeout [ 439.048972][T15866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 439.060957][T15866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 439.072370][T15866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.231255][T15866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.241031][T15957] loop4: detected capacity change from 0 to 512 [ 439.273351][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 439.281547][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 439.297272][T15866] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.305873][T15959] tmpfs: Bad value for 'uid' [ 439.334704][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 439.350858][T15957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 439.364200][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 439.378821][T15957] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038 (0x7fffffff) [ 439.385713][T15910] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.395833][T15910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.451136][T15957] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #12: comm syz.4.4397: invalid size [ 439.453671][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 439.488355][T15957] EXT4-fs (loop4): Remounting filesystem read-only [ 439.499475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 439.510917][T15967] loop1: detected capacity change from 0 to 512 [ 439.513348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.527610][T15967] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 439.557333][T15967] EXT4-fs (loop1): inodes count not valid: 32 vs 800 [ 439.564959][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.572053][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.583940][T10779] EXT4-fs (loop4): unmounting filesystem. [ 439.589943][ T11] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 439.596593][T15969] loop0: detected capacity change from 0 to 128 [ 439.618788][ T11] Quota error (device loop4): write_blk: dquota write failed [ 439.624673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 439.635458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 439.636530][T15969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 439.652606][ T11] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 439.679986][T15969] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 439.712147][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 439.758809][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 439.775093][T15974] loop4: detected capacity change from 0 to 2048 [ 439.801394][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 439.823398][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.829689][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.829927][T15972] loop2: detected capacity change from 0 to 8192 [ 439.852408][T15978] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 439.867372][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 439.893157][T11323] EXT4-fs (loop0): unmounting filesystem. [ 439.895411][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 439.919816][T15972] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 439.960949][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 439.986851][T15972] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 440.016894][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.040220][T15972] REISERFS (device loop2): using ordered data mode [ 440.058171][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.073786][T15972] reiserfs: using flush barriers [ 440.094843][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 440.105781][T15972] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 440.167435][T15972] REISERFS (device loop2): checking transaction log (loop2) [ 440.189496][T15972] REISERFS (device loop2): Using r5 hash to sort names [ 440.216810][T15986] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4407'. [ 440.219983][T15972] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 440.293225][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 440.708159][T15866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.743169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.760803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.816760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 440.843392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 440.883117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 440.891398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 440.908543][T16011] loop0: detected capacity change from 0 to 512 [ 440.942996][T16011] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 440.951187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 440.973491][T16011] UDF-fs: Scanning with blocksize 512 failed [ 440.973973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.001576][T16011] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 441.015840][T15866] device veth0_vlan entered promiscuous mode [ 441.050257][T16011] UDF-fs: Scanning with blocksize 1024 failed [ 441.057791][T15866] device veth1_vlan entered promiscuous mode [ 441.079837][T16011] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 441.095628][ T48] Bluetooth: hci4: command tx timeout [ 441.103710][T16011] UDF-fs: Scanning with blocksize 2048 failed [ 441.110226][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 441.122999][T16011] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 441.136671][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 441.164185][T16011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.213089][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 441.234170][T15910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.255999][T15866] device veth0_macvtap entered promiscuous mode [ 441.276556][T15866] device veth1_macvtap entered promiscuous mode [ 441.302338][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.322809][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.352747][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.372997][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.387361][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.398456][T15998] loop1: detected capacity change from 0 to 32768 [ 441.408841][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.431721][T15998] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.4412 (15998) [ 441.432040][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.466902][T15998] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 441.477235][T15998] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 441.487766][T15998] BTRFS info (device loop1): enabling auto defrag [ 441.496314][T15998] BTRFS info (device loop1): max_inline at 0 [ 441.502430][T15998] BTRFS info (device loop1): enabling ssd optimizations [ 441.510401][T15998] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 441.514372][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.521235][T15998] BTRFS info (device loop1): use lzo compression, level 0 [ 441.542864][T15998] BTRFS info (device loop1): using free space tree [ 441.556620][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.593383][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.619966][T15866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.670806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 441.679685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 441.687844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 441.697101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.718870][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.763395][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.798186][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.821811][T16015] loop4: detected capacity change from 0 to 32768 [ 441.831617][T16035] loop0: detected capacity change from 0 to 2048 [ 441.831724][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.851286][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.863771][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.874784][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.887513][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.900039][T15866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.900769][T16035] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 441.936065][T15866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.955854][T15866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.984859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 442.019238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 442.036925][T11323] EXT4-fs (loop0): unmounting filesystem. [ 442.050464][T14245] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 442.057040][T15866] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.072182][T15866] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.081543][T15866] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.090733][T15866] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.246400][T16052] loop0: detected capacity change from 0 to 1024 [ 442.373421][T15910] hfsplus: b-tree write err: -5, ino 4 [ 442.436483][T15910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.457689][T15910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.480206][T16056] loop0: detected capacity change from 0 to 512 [ 442.505364][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.521624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.564053][T16056] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.4431: casefold flag without casefold feature [ 442.599500][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.662390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 442.687847][T16056] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.4431: bad orphan inode 15 [ 442.758449][T16056] ext4_test_bit(bit=14, block=18) = 1 [ 442.776626][T16056] is_bad_inode(inode)=0 [ 442.780805][T16056] NEXT_ORPHAN(inode)=1023 [ 442.804817][T16056] max_ino=32 [ 442.808035][T16056] i_nlink=0 [ 442.842807][T16056] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2924: inode #15: comm syz.0.4431: corrupted xattr block 19 [ 442.893386][T16056] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 442.920387][T16056] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 442.931083][T16056] ext4 filesystem being mounted at /346/bus supports timestamps until 2038 (0x7fffffff) [ 442.988418][T16056] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz.0.4431: Directory hole found for htree leaf block 0 [ 443.099359][T16059] loop4: detected capacity change from 0 to 32768 [ 443.105209][T11323] EXT4-fs (loop0): unmounting filesystem. [ 443.171633][T16059] XFS (loop4): Mounting V5 Filesystem [ 443.177892][ T48] Bluetooth: hci4: command tx timeout [ 443.249342][T16059] XFS (loop4): Ending clean mount [ 443.305841][T10779] XFS (loop4): Unmounting Filesystem [ 443.986543][T16111] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 443.996286][T16081] loop1: detected capacity change from 0 to 40427 [ 444.007502][T16115] input: syz0 as /devices/virtual/input/input35 [ 444.016609][T16081] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 444.026115][T16081] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 444.114958][T16081] F2FS-fs (loop1): Found nat_bits in checkpoint [ 444.179281][T16122] loop4: detected capacity change from 0 to 1024 [ 444.229434][T16122] hfsplus: bad catalog entry type [ 444.260021][T16081] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 444.266691][T16129] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 444.275301][T16081] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 444.318754][ T3699] hfsplus: b-tree write err: -5, ino 4 [ 444.363181][ T26] audit: type=1804 audit(1725434308.245:3912): pid=16081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4439" name="/newroot/112/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 444.462370][T16135] loop0: detected capacity change from 0 to 1024 [ 444.490041][T16135] EXT4-fs: Ignoring removed orlov option [ 444.510750][T16135] EXT4-fs: Ignoring removed orlov option [ 444.548444][T16135] EXT4-fs (loop0): Test dummy encryption mode enabled [ 444.567575][T16101] loop2: detected capacity change from 0 to 40427 [ 444.578066][T16135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c11c, mo2=0002] [ 444.586648][T16135] System zones: 0-1, 3-36 [ 444.597113][T16135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 444.637474][T16101] F2FS-fs (loop2): Found nat_bits in checkpoint [ 444.861613][T16101] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 444.997726][T16135] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 445.122009][T11323] EXT4-fs (loop0): unmounting filesystem. [ 445.147046][T16149] loop1: detected capacity change from 0 to 64 [ 445.340089][T16137] loop3: detected capacity change from 0 to 40427 [ 445.389135][T16137] F2FS-fs (loop3): Encrypt feature is off [ 445.411953][T16134] loop4: detected capacity change from 0 to 32768 [ 445.441988][T16134] XFS (loop4): Mounting V5 Filesystem [ 445.554024][T16134] XFS (loop4): Ending clean mount [ 445.570018][T16134] XFS (loop4): Quotacheck needed: Please wait. [ 445.647566][T16134] XFS (loop4): Quotacheck: Done. [ 445.733115][ T5145] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 445.771371][T10779] XFS (loop4): Unmounting Filesystem [ 446.093960][ T5145] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.122901][ T5145] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.159005][ T5145] usb 1-1: config 1 interface 0 has no altsetting 0 [ 446.178163][ T3625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.204305][T16196] loop2: detected capacity change from 0 to 1024 [ 446.240931][T16196] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 446.252982][ T5145] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.280555][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 446.327261][ T5145] usb 1-1: SerialNumber: syz [ 446.340285][T16196] EXT4-fs warning (device loop2): empty_inline_dir:1851: bad inline directory (dir #12) - no `..' [ 446.403710][ T5145] cdc_ether 1-1:1.0: skipping garbage [ 446.409127][ T5145] usb 1-1: bad CDC descriptors [ 446.423716][T16190] loop3: detected capacity change from 0 to 32768 [ 446.440427][T16190] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.4479 (16190) [ 446.453195][ T7] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 446.467241][ T9521] EXT4-fs (loop2): unmounting filesystem. [ 446.472792][T16190] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 446.491632][T16190] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 446.507864][T16190] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 446.517307][T16190] BTRFS info (device loop3): use lzo compression, level 0 [ 446.524664][T16190] BTRFS info (device loop3): using free space tree [ 446.612151][ T5145] usb 1-1: USB disconnect, device number 27 [ 446.670720][T16190] BTRFS info (device loop3): enabling ssd optimizations [ 446.731784][T16233] loop2: detected capacity change from 0 to 256 [ 446.755418][T16233] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 446.823406][T16233] exFAT-fs (loop2): hint_cluster is invalid (17) [ 446.829440][T15866] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 446.843052][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.855644][ T26] audit: type=1800 audit(1725434310.735:3913): pid=16233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4491" name="file1" dev="loop2" ino=1048725 res=0 errno=0 [ 446.865051][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.000286][ T7] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 447.009489][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 447.018298][ T7] usb 5-1: SerialNumber: syz [ 447.206637][T16241] binder: 16240:16241 ioctl c018620c 20000140 returned -1 [ 447.278436][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 447.307259][ T7] usb 5-1: 0:2 : does not exist [ 447.329632][ T7] usb 5-1: USB disconnect, device number 30 [ 447.451250][T16258] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 447.862046][T16281] loop2: detected capacity change from 0 to 8192 [ 447.877263][T16281] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 447.902306][T16281] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 447.911974][T16281] REISERFS (device loop2): using ordered data mode [ 447.918962][T16281] reiserfs: using flush barriers [ 447.925382][T16281] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 447.942219][T16281] REISERFS (device loop2): checking transaction log (loop2) [ 447.950874][T16281] REISERFS (device loop2): Using tea hash to sort names [ 447.958402][T16281] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 448.162860][ T7] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 448.733059][ T7] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 448.762794][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 448.784292][ T7] usb 5-1: Product: syz [ 448.788479][ T7] usb 5-1: Manufacturer: syz [ 448.803556][ T7] usb 5-1: SerialNumber: syz [ 448.818880][ T7] usb 5-1: config 0 descriptor?? [ 448.899938][ T7] ch341 5-1:0.0: ch341-uart converter detected [ 449.294354][T16351] loop1: detected capacity change from 0 to 512 [ 449.305999][T16351] EXT4-fs (loop1): Test dummy encryption mode enabled [ 449.315517][T16351] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.4541: casefold flag without casefold feature [ 449.329680][T16351] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 449.340714][T16351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 449.410552][T14245] EXT4-fs (loop1): unmounting filesystem. [ 449.484368][T16358] loop1: detected capacity change from 0 to 2048 [ 449.513790][T16358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 449.535937][T16358] EXT4-fs (loop1): shut down requested (2) [ 449.580162][T14245] EXT4-fs (loop1): unmounting filesystem. [ 449.762862][ T7] usb 5-1: failed to send control message: -71 [ 449.769106][ T7] ch341-uart: probe of ttyUSB0 failed with error -71 [ 449.793592][ T7] usb 5-1: USB disconnect, device number 31 [ 449.800275][ T7] ch341 5-1:0.0: device disconnected [ 449.820901][T16367] netlink: 'syz.3.4545': attribute type 29 has an invalid length. [ 449.830177][T16365] loop1: detected capacity change from 0 to 4096 [ 449.835287][T16367] netlink: 'syz.3.4545': attribute type 29 has an invalid length. [ 449.849376][T16367] netlink: 'syz.3.4545': attribute type 29 has an invalid length. [ 449.857986][T16367] netlink: 'syz.3.4545': attribute type 29 has an invalid length. [ 449.860853][T16365] ntfs: (device loop1): ntfs_external_attr_find(): Base inode 0x1 contains corrupt attribute list attribute. Unmount and run chkdsk. [ 449.888771][T16365] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 449.910804][T16365] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 449.933296][T16365] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 449.961563][T16365] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 449.990837][T16365] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 450.011112][T16365] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 450.030808][T16365] ntfs: volume version 3.1. [ 450.037393][T16365] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 450.072120][T16365] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 450.101467][T16365] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 450.185163][T16380] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 450.188544][ T3640] Bluetooth: hci5: sending frame failed (-49) [ 450.200993][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 450.579343][T16391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.636503][T16397] loop3: detected capacity change from 0 to 256 [ 450.696418][T16397] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 450.769630][T16397] exFAT-fs (loop3): hint_cluster is invalid (17) [ 451.001889][T16376] loop2: detected capacity change from 0 to 40427 [ 451.034019][T16376] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 451.041774][T16376] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 451.080703][T16410] loop3: detected capacity change from 0 to 512 [ 451.098616][T16383] loop1: detected capacity change from 0 to 40427 [ 451.109133][T16376] F2FS-fs (loop2): Found nat_bits in checkpoint [ 451.123613][T16410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 451.137709][T16383] F2FS-fs (loop1): invalid crc value [ 451.174790][T16420] loop4: detected capacity change from 0 to 256 [ 451.180294][T16383] F2FS-fs (loop1): Found nat_bits in checkpoint [ 451.189107][T16410] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.4566: iget: bad extra_isize 7 (inode size 256) [ 451.213076][T16410] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4566: couldn't read orphan inode 15 (err -117) [ 451.245273][T16410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 451.249197][T16376] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 451.261309][T16376] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 451.285956][T16383] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 451.361634][T14245] syz-executor: attempt to access beyond end of device [ 451.361634][T14245] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 451.383772][T15866] EXT4-fs (loop3): unmounting filesystem. [ 451.531265][T16435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4576'. [ 451.577156][T16437] loop4: detected capacity change from 0 to 256 [ 451.670984][T16437] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 451.734417][T16437] exFAT-fs (loop4): hint_cluster is invalid (17) [ 451.752940][ T5145] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 451.932988][T16446] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4580'. [ 451.992811][ T5145] usb 4-1: Using ep0 maxpacket: 32 [ 452.060437][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4581'. [ 452.084506][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4581'. [ 452.112941][ T5145] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 452.136800][ T5145] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 452.166744][ T5145] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 452.202906][ T5145] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 452.246643][ T5145] usb 4-1: config 0 interface 0 has no altsetting 0 [ 452.312920][T16462] loop2: detected capacity change from 0 to 512 [ 452.413401][T16462] EXT4-fs (loop2): 1 orphan inode deleted [ 452.419201][T16462] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 452.428616][ T5145] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 452.437915][ T5145] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 452.446895][ T5145] usb 4-1: Product: syz [ 452.448598][ T33] EXT4-fs error (device loop2): ext4_release_dquot:6823: comm kworker/u4:2: Failed to release dquot type 1 [ 452.451152][T16462] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038 (0x7fffffff) [ 452.472818][ T5145] usb 4-1: Manufacturer: syz [ 452.477425][ T5145] usb 4-1: SerialNumber: syz [ 452.487334][ T5145] usb 4-1: config 0 descriptor?? [ 452.524627][ T5145] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 452.543659][ T5145] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 452.565499][ T9521] EXT4-fs (loop2): unmounting filesystem. [ 452.575759][T16469] loop1: detected capacity change from 0 to 256 [ 452.643857][T16469] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 452.729941][ T5145] usb 4-1: USB disconnect, device number 23 [ 452.740879][ T5145] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 452.952635][T16480] loop1: detected capacity change from 0 to 1024 [ 452.993692][T16480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 453.037213][ T4317] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 453.282823][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 453.389047][T16506] loop1: detected capacity change from 0 to 8192 [ 453.404260][T16506] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 453.417818][ T4317] usb 1-1: config 0 has no interfaces? [ 453.428284][T16506] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 453.437607][T16506] REISERFS (device loop1): using ordered data mode [ 453.444470][T16506] reiserfs: using flush barriers [ 453.461654][T16506] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 453.484983][T16506] REISERFS (device loop1): checking transaction log (loop1) [ 453.497140][T16513] loop2: detected capacity change from 0 to 256 [ 453.504074][T16506] REISERFS (device loop1): Using r5 hash to sort names [ 453.510952][T16506] REISERFS (device loop1): using 3.5.x disk format [ 453.526936][T16506] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 453.538632][T16513] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 453.623280][ T4317] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 453.638671][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.654696][ T4317] usb 1-1: Product: syz [ 453.664493][ T4317] usb 1-1: Manufacturer: syz [ 453.669349][ T4317] usb 1-1: SerialNumber: syz [ 453.675769][ T4317] usb 1-1: config 0 descriptor?? [ 453.752480][T16523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.856963][T16527] loop2: detected capacity change from 0 to 256 [ 453.951966][ T5145] usb 1-1: USB disconnect, device number 28 [ 454.159647][T16519] loop3: detected capacity change from 0 to 32768 [ 454.306344][T16536] loop4: detected capacity change from 0 to 8192 [ 454.906871][T16559] loop2: detected capacity change from 0 to 4096 [ 455.272179][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4641'. [ 455.476235][T16588] netlink: 'syz.3.4645': attribute type 18 has an invalid length. [ 456.241519][T16608] loop4: detected capacity change from 0 to 512 [ 456.256901][T16608] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.278063][T16608] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 456.319698][T16608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 456.327834][T16608] System zones: 1-12 [ 456.348264][T16608] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.4653: corrupted in-inode xattr [ 456.357909][T16615] loop2: detected capacity change from 0 to 764 [ 456.372291][T16615] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 456.376426][T16608] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.4653: couldn't read orphan inode 15 (err -117) [ 456.402033][T16615] device  entered promiscuous mode [ 456.423403][T16608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 456.466282][T16618] tap0: tun_chr_ioctl cmd 2147767521 [ 456.494706][T10779] EXT4-fs (loop4): unmounting filesystem. [ 456.583915][T16622] tap0: tun_chr_ioctl cmd 1074812118 [ 456.638989][T16626] loop1: detected capacity change from 0 to 512 [ 456.683506][T16626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 456.703639][T16626] ext4 filesystem being mounted at /169/bus supports timestamps until 2038 (0x7fffffff) [ 456.808598][T14245] EXT4-fs (loop1): unmounting filesystem. [ 457.080870][T16654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4674'. [ 457.642848][ T5145] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 457.739424][T16661] loop2: detected capacity change from 0 to 32768 [ 457.752053][T16661] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4677 (16661) [ 457.771289][T16661] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 457.782024][T16661] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 457.793689][T16661] BTRFS info (device loop2): using free space tree [ 457.812360][T16659] loop1: detected capacity change from 0 to 32768 [ 457.836630][T16677] loop0: detected capacity change from 0 to 1024 [ 457.855970][T16659] XFS (loop1): Mounting V5 Filesystem [ 457.861960][T16661] BTRFS info (device loop2): enabling ssd optimizations [ 457.894856][ T5145] usb 4-1: Using ep0 maxpacket: 8 [ 457.956011][T16659] XFS (loop1): Ending clean mount [ 457.969842][T16659] XFS (loop1): Quotacheck needed: Please wait. [ 458.023747][ T5145] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 458.034322][ T5145] usb 4-1: config 179 has no interface number 0 [ 458.046543][ T9521] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 458.053292][T16659] XFS (loop1): Quotacheck: Done. [ 458.062496][ T5145] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 458.084338][ T5145] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 458.102839][ T5139] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 458.117579][ T5145] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.154503][ T5145] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 458.189765][ T5145] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 458.222819][ T5145] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 458.231980][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.273098][T16667] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 458.325773][T14245] XFS (loop1): Unmounting Filesystem [ 458.494260][ T5139] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 458.529555][ T5139] usb 5-1: config 0 has no interface number 0 [ 458.557414][ T5139] usb 5-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 458.578024][ T5139] usb 5-1: config 0 interface 20 has no altsetting 0 [ 458.586340][ T5139] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 458.607050][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.608860][T16711] loop2: detected capacity change from 0 to 2048 [ 458.627916][ T5142] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input37 [ 458.646912][ T5139] usb 5-1: config 0 descriptor?? [ 458.653250][T16711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.743220][ T4364] usb 4-1: USB disconnect, device number 24 [ 458.752822][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 458.761177][ T4364] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 458.907385][ T5142] usb 5-1: USB disconnect, device number 32 [ 459.246729][T16719] loop0: detected capacity change from 0 to 32768 [ 459.502964][ T5142] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 459.602809][ T3681] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 459.611381][T16737] netlink: 'syz.0.4698': attribute type 29 has an invalid length. [ 459.630339][T16737] netlink: 'syz.0.4698': attribute type 29 has an invalid length. [ 459.649064][T16737] netlink: 'syz.0.4698': attribute type 29 has an invalid length. [ 459.670070][T16737] netlink: 'syz.0.4698': attribute type 29 has an invalid length. [ 459.753995][ T5142] usb 2-1: Using ep0 maxpacket: 16 [ 459.839809][T16745] loop0: detected capacity change from 0 to 2048 [ 459.840450][T16747] loop4: detected capacity change from 0 to 512 [ 459.853024][ T3681] usb 4-1: Using ep0 maxpacket: 8 [ 459.868010][T16747] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 459.881594][T16747] UDF-fs: Scanning with blocksize 512 failed [ 459.891897][T16747] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 459.898178][T16750] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.904831][T16747] UDF-fs: Scanning with blocksize 1024 failed [ 459.923554][T16747] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 459.931124][T16747] UDF-fs: Scanning with blocksize 2048 failed [ 459.945175][T16747] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 459.962219][T16747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.033014][ T5142] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 460.047317][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.055974][ T5142] usb 2-1: Product: syz [ 460.060227][ T5142] usb 2-1: Manufacturer: syz [ 460.073233][ T5142] usb 2-1: SerialNumber: syz [ 460.092271][ T5142] usb 2-1: config 0 descriptor?? [ 460.145305][ T5142] as10x_usb: device has been detected [ 460.151073][ T5142] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 460.172929][ T3681] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 460.190609][ T3681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.201527][ T5142] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 460.201859][ T3681] usb 4-1: Product: syz [ 460.222973][ T3681] usb 4-1: Manufacturer: syz [ 460.227641][ T3681] usb 4-1: SerialNumber: syz [ 460.234361][ T3681] usb 4-1: config 0 descriptor?? [ 460.243896][ T5142] as10x_usb: error during firmware upload part1 [ 460.259972][ T5142] Registered device Sky IT Digital Key (green led) [ 460.399080][T16724] random: crng reseeded on system resumption [ 460.512952][ T3681] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 460.526004][T16776] loop4: detected capacity change from 0 to 2048 [ 460.602835][T16776] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 460.731823][T10779] EXT4-fs (loop4): unmounting filesystem. [ 460.951797][ T4364] usb 2-1: USB disconnect, device number 28 [ 460.974399][ T4364] Unregistered device Sky IT Digital Key (green led) [ 460.975420][ T4364] as10x_usb: device has been disconnected [ 461.165677][ T3681] usb write operation failed. (-71) [ 461.177961][ T3681] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.202282][ T3681] dvbdev: DVB: registering new adapter (Terratec H7) [ 461.212978][ T3681] usb 4-1: media controller created [ 461.242934][ T3681] usb read operation failed. (-71) [ 461.262960][ T3681] usb write operation failed. (-71) [ 461.271606][ T3681] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5 [ 461.281635][T16800] program syz.2.4728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.284127][ T3681] usb 4-1: USB disconnect, device number 25 [ 461.642800][ T153] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 461.705639][T16820] loop1: detected capacity change from 0 to 64 [ 461.840493][T16824] netlink: 'syz.1.4740': attribute type 1 has an invalid length. [ 461.852967][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4740'. [ 461.904268][ T153] usb 3-1: Using ep0 maxpacket: 16 [ 462.007590][T16831] loop0: detected capacity change from 0 to 128 [ 462.043126][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.048691][T16831] FAT-fs (loop0): bogus number of FAT sectors [ 462.063306][ T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.085803][ T153] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 462.100717][T16831] FAT-fs (loop0): Can't find a valid FAT filesystem [ 462.106519][ T153] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 462.116581][ T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.126775][ T153] usb 3-1: config 0 descriptor?? [ 462.412920][ T4364] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 462.595957][ T153] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 462.616794][ T153] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0022/input/input39 [ 462.636853][ T153] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 462.682837][ T4364] usb 4-1: Using ep0 maxpacket: 32 [ 462.746778][T16867] loop4: detected capacity change from 0 to 2048 [ 462.796925][ T5142] usb 3-1: USB disconnect, device number 30 [ 462.804347][T16867] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 462.813297][ T4364] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 462.823208][ T4364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.837770][ T4364] usb 4-1: config 0 descriptor?? [ 462.884840][ T4364] gspca_main: sunplus-2.14.0 probing 041e:400b [ 463.017624][T10779] EXT4-fs (loop4): unmounting filesystem. [ 463.088759][T16876] loop0: detected capacity change from 0 to 1024 [ 463.106416][T16876] hfsplus: request for non-existent node 3 in B*Tree [ 463.123806][T16876] hfsplus: request for non-existent node 3 in B*Tree [ 463.136976][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 463.136989][ T26] audit: type=1800 audit(1725434583.015:3917): pid=16876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4763" name="bus" dev="loop0" ino=2 res=0 errno=0 [ 463.137540][T16876] hfsplus: bad catalog folder thread [ 463.223393][T16880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4764'. [ 463.467631][T16874] loop1: detected capacity change from 0 to 32768 [ 463.476059][T16874] XFS: ikeep mount option is deprecated. [ 463.538798][T16874] XFS (loop1): Mounting V5 Filesystem [ 463.572931][ T5139] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 463.624638][T16907] loop4: detected capacity change from 0 to 256 [ 463.671608][T16874] XFS (loop1): Ending clean mount [ 463.679416][T16874] XFS (loop1): Quotacheck needed: Please wait. [ 463.753003][ T4364] gspca_sunplus: reg_r err -71 [ 463.757893][ T4364] sunplus: probe of 4-1:0.0 failed with error -71 [ 463.771591][T16874] XFS (loop1): Quotacheck: Done. [ 463.784114][ T4364] usb 4-1: USB disconnect, device number 26 [ 463.852437][T14245] XFS (loop1): Unmounting Filesystem [ 463.952833][ T5139] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 464.118185][ T5139] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 464.141743][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.166382][ T5139] usb 1-1: Product: syz [ 464.178499][ T5139] usb 1-1: Manufacturer: syz [ 464.195025][ T5139] usb 1-1: SerialNumber: syz [ 464.219017][ T5139] usb 1-1: config 0 descriptor?? [ 464.446038][T16931] vxcan1: tx address claim with dest, not broadcast [ 464.745029][T16910] loop4: detected capacity change from 0 to 65536 [ 464.769301][T16944] loop2: detected capacity change from 0 to 256 [ 464.859886][T16910] XFS (loop4): Mounting V5 Filesystem [ 464.958187][T16910] XFS (loop4): Ending clean mount [ 465.076562][T10779] XFS (loop4): Unmounting Filesystem [ 465.141750][T16967] loop1: detected capacity change from 0 to 1024 [ 465.148638][ T5139] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 465.167254][ T5139] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 465.189326][ T5139] asix: probe of 1-1:0.0 failed with error -71 [ 465.222830][ T5139] usb 1-1: USB disconnect, device number 29 [ 465.297689][T16971] loop2: detected capacity change from 0 to 512 [ 465.308572][ T33] hfsplus: b-tree write err: -5, ino 4 [ 465.333329][T16971] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 465.361059][T16971] UDF-fs: Scanning with blocksize 512 failed [ 465.376334][T16971] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 465.389614][T16971] UDF-fs: Scanning with blocksize 1024 failed [ 465.409388][T16971] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 465.420649][T16971] UDF-fs: Scanning with blocksize 2048 failed [ 465.459598][T16971] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 465.488940][T16971] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.637851][T16982] loop2: detected capacity change from 0 to 190 [ 465.679594][T16982] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 465.698825][T16982] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 465.718213][T16982] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 465.752795][T16982] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 466.422345][T17001] loop1: detected capacity change from 0 to 2048 [ 466.501286][T16986] loop3: detected capacity change from 0 to 32768 [ 466.512614][T17001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 466.534016][T17001] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038 (0x7fffffff) [ 466.566811][T16982] loop2: detected capacity change from 0 to 32768 [ 466.573959][T16982] XFS: ikeep mount option is deprecated. [ 466.579619][T16982] XFS: noikeep mount option is deprecated. [ 466.627972][T16982] XFS (loop2): Mounting V5 Filesystem [ 466.629063][T14245] EXT4-fs (loop1): unmounting filesystem. [ 466.745456][T17022] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 466.764792][T16982] XFS (loop2): Ending clean mount [ 466.786726][T16982] XFS (loop2): Quotacheck needed: Please wait. [ 466.826746][T16982] XFS (loop2): Quotacheck: Done. [ 466.928293][ T9521] XFS (loop2): Unmounting Filesystem [ 466.953346][T17026] loop4: detected capacity change from 0 to 4096 [ 466.976033][T17026] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 467.001155][T17026] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 467.043982][T17026] ntfs: volume version 3.1. [ 467.543018][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4833'. [ 467.555518][T17053] loop3: detected capacity change from 0 to 1024 [ 467.976749][T17080] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 468.083447][T17078] loop3: detected capacity change from 0 to 4096 [ 468.102812][T17078] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 468.159596][T17078] ntfs3: loop3: ino=1e, "file1" encrypted i/o not supported [ 468.169684][ T26] audit: type=1800 audit(1725434588.045:3918): pid=17078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4841" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 468.194250][T17078] ntfs3: loop3: ino=1e, "file1" encrypted i/o not supported [ 468.222837][ T3681] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 468.347802][T17100] loop2: detected capacity change from 0 to 1024 [ 468.493063][ T3681] usb 2-1: Using ep0 maxpacket: 16 [ 468.613256][ T3681] usb 2-1: config 0 has no interfaces? [ 468.778286][T17117] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 468.785519][ T3681] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 468.819767][ T3681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.831099][ T33] Bluetooth: hci5: Frame reassembly failed (-84) [ 468.868510][ T3681] usb 2-1: Product: syz [ 468.881618][ T3681] usb 2-1: Manufacturer: syz [ 468.909052][ T3681] usb 2-1: SerialNumber: syz [ 468.922109][ T3681] usb 2-1: config 0 descriptor?? [ 469.150030][T17106] loop4: detected capacity change from 0 to 32768 [ 469.160873][T17106] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz.4.4858 (17106) [ 469.187985][T17106] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 469.198991][T17106] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 469.209083][T17106] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 469.218610][T17106] BTRFS info (device loop4): use lzo compression, level 0 [ 469.226113][T17106] BTRFS info (device loop4): using free space tree [ 469.279148][ T3681] usb 2-1: USB disconnect, device number 29 [ 469.329097][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4873'. [ 469.389365][T17106] BTRFS info (device loop4): enabling ssd optimizations [ 469.436479][T17162] loop2: detected capacity change from 0 to 2048 [ 469.458726][T17162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 469.462642][T10779] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 469.536043][ T9521] EXT4-fs (loop2): unmounting filesystem. [ 469.672793][ T5139] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 469.740980][T17170] loop2: detected capacity change from 0 to 128 [ 469.751822][T17170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 469.769615][T17170] ext4 filesystem being mounted at /610/mnt supports timestamps until 2038 (0x7fffffff) [ 469.822603][ T9521] EXT4-fs (loop2): unmounting filesystem. [ 469.935264][ T5139] usb 1-1: Using ep0 maxpacket: 16 [ 470.093088][ T5139] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.113200][ T5139] usb 1-1: config 0 interface 0 has no altsetting 0 [ 470.143756][ T5139] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 470.174520][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.213742][ T5139] usb 1-1: config 0 descriptor?? [ 470.278368][ T3690] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 470.328875][T17175] loop1: detected capacity change from 0 to 32768 [ 470.358743][T17175] XFS (loop1): Mounting V5 Filesystem [ 470.392161][T17175] XFS (loop1): Ending clean mount [ 470.459967][T14245] XFS (loop1): Unmounting Filesystem [ 470.682956][ T3690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.702829][ T3690] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 470.704376][ T5139] kye 0003:0458:0138.0023: unknown main item tag 0x0 [ 470.711861][ T3690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.721294][ T3690] usb 5-1: config 0 descriptor?? [ 470.764630][ T5139] kye 0003:0458:0138.0023: unknown main item tag 0x0 [ 470.786778][ T5139] kye 0003:0458:0138.0023: unexpected long global item [ 470.811487][ T3690] comedi comedi0: Wrong number of endpoints [ 470.814632][ T5139] kye 0003:0458:0138.0023: parse failed [ 470.817585][ T3690] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 470.826994][ T5139] kye: probe of 0003:0458:0138.0023 failed with error -22 [ 470.852985][ T3640] Bluetooth: hci5: command 0x1003 tx timeout [ 470.856158][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 470.969773][ T5143] usb 1-1: USB disconnect, device number 30 [ 470.986673][T17202] loop1: detected capacity change from 0 to 4096 [ 471.035403][ T4318] usb 5-1: USB disconnect, device number 33 [ 471.095983][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4891'. [ 471.223567][ T3690] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 471.594958][ T48] Bluetooth: hci1: unexpected event for opcode 0x080d [ 471.613160][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.624384][ T3690] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.633904][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.646181][ T3690] usb 3-1: config 0 descriptor?? [ 471.691965][T17219] device vlan2 entered promiscuous mode [ 471.697696][T17219] device bridge0 entered promiscuous mode [ 471.705418][T17219] bridge0: port 3(vlan2) entered blocking state [ 471.711806][T17219] bridge0: port 3(vlan2) entered disabled state [ 471.719719][T17219] device bridge0 left promiscuous mode [ 471.881541][T17223] loop0: detected capacity change from 0 to 1024 [ 471.910893][T17223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.915284][T17227] loop1: detected capacity change from 0 to 128 [ 471.933069][ T4318] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 471.970148][T17227] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 471.999925][T17227] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 472.113909][ T3690] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 472.132592][ T3690] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input40 [ 472.195042][T14245] EXT4-fs (loop1): unmounting filesystem. [ 472.202875][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 472.262673][ T3690] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 472.282596][T17235] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 472.301687][T17226] loop3: detected capacity change from 0 to 32768 [ 472.304662][ T33] Bluetooth: hci5: Frame reassembly failed (-84) [ 472.319415][T17226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4898 (17226) [ 472.337759][T17226] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 472.348194][ T4318] usb 5-1: config 0 has no interfaces? [ 472.352883][T17226] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 472.362533][T17226] BTRFS info (device loop3): using free space tree [ 472.387401][T17226] BTRFS info (device loop3): enabling ssd optimizations [ 472.451837][T15866] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 472.461334][T17254] netlink: 'syz.0.4915': attribute type 18 has an invalid length. [ 472.541554][ T4318] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 472.552474][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.562488][ T4318] usb 5-1: Product: syz [ 472.566822][ T4318] usb 5-1: Manufacturer: syz [ 472.571431][ T4318] usb 5-1: SerialNumber: syz [ 472.590894][ T4318] usb 5-1: config 0 descriptor?? [ 472.707190][T17258] loop0: detected capacity change from 0 to 4096 [ 472.716887][T17258] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 472.771621][T17258] ntfs3: loop0: failed to convert "c46c" to iso8859-14 [ 472.880176][ T4733] usb 5-1: USB disconnect, device number 34 [ 473.125010][ T5143] usb 3-1: USB disconnect, device number 31 [ 473.194406][T17268] loop0: detected capacity change from 0 to 2048 [ 473.201245][T17268] UDF-fs: bad mount option "18446744073709551615" or missing value [ 473.775443][T17287] loop2: detected capacity change from 0 to 512 [ 473.836210][T17287] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 473.852273][T17287] ext4 filesystem being mounted at /617/bus supports timestamps until 2038 (0x7fffffff) [ 473.982790][ T3625] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 473.995779][ T9521] EXT4-fs (loop2): unmounting filesystem. [ 474.286652][ T4733] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 474.294640][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 474.357873][ T3625] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 474.369657][ T3625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.398439][T17309] loop2: detected capacity change from 0 to 128 [ 474.409939][ T3625] usb 1-1: config 0 descriptor?? [ 474.423965][T17309] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 474.442480][T17309] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 474.569074][T17319] netlink: 'syz.2.4933': attribute type 1 has an invalid length. [ 474.577010][ T4733] usb 4-1: Using ep0 maxpacket: 16 [ 474.693229][ T4733] usb 4-1: config 0 has no interfaces? [ 474.853062][ T4733] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 474.870224][ T4733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.882803][ T4733] usb 4-1: Product: syz [ 474.886981][ T4733] usb 4-1: Manufacturer: syz [ 474.897079][ T3625] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 474.901894][ T4733] usb 4-1: SerialNumber: syz [ 474.913483][ T4733] usb 4-1: config 0 descriptor?? [ 475.049270][T17315] loop1: detected capacity change from 0 to 32768 [ 475.140327][T17315] XFS (loop1): Mounting V5 Filesystem [ 475.175308][ T4733] usb 4-1: USB disconnect, device number 27 [ 475.225296][T17315] XFS (loop1): Ending clean mount [ 475.232240][T17315] XFS (loop1): Quotacheck needed: Please wait. [ 475.290180][T17315] XFS (loop1): Quotacheck: Done. [ 475.332940][ T3625] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 475.372881][ T3625] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 475.387602][T14245] XFS (loop1): Unmounting Filesystem [ 475.413159][ T3625] gs_usb: probe of 1-1:0.0 failed with error -71 [ 475.427517][ T3625] usb 1-1: USB disconnect, device number 31 [ 475.666567][ T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 475.675769][ T48] Bluetooth: hci1: Injecting HCI hardware error event [ 475.691505][ T3640] Bluetooth: hci1: hardware error 0x00 [ 475.740404][T17349] loop1: detected capacity change from 0 to 512 [ 475.740588][ T5143] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 475.808322][T17349] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 475.821864][T17349] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038 (0x7fffffff) [ 475.898875][T17349] EXT4-fs error (device loop1): ext4_empty_dir:3134: inode #12: comm syz.1.4940: invalid size [ 475.929831][T17349] EXT4-fs (loop1): Remounting filesystem read-only [ 475.984309][T14245] EXT4-fs (loop1): unmounting filesystem. [ 475.992995][ T5143] usb 3-1: Using ep0 maxpacket: 32 [ 476.019196][T15910] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 476.036130][T15910] Quota error (device loop1): write_blk: dquota write failed [ 476.047176][T15910] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 476.067439][ T4733] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 476.113001][ T5143] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 476.195519][T17370] loop1: detected capacity change from 0 to 4096 [ 476.233252][T17370] ntfs: volume version 3.1. [ 476.240230][T17370] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 476.257804][T17370] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 476.271693][T17370] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 476.282924][ T5143] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 476.299108][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 476.301278][T17370] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 476.322738][ T5143] usb 3-1: Product: syz [ 476.326952][ T5143] usb 3-1: Manufacturer: syz [ 476.333327][T17370] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 476.349385][ T5143] usb 3-1: SerialNumber: syz [ 476.362027][ T5143] usb 3-1: config 0 descriptor?? [ 476.372879][ T4733] usb 5-1: Using ep0 maxpacket: 16 [ 476.397689][T17343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.480374][T17373] Bluetooth: MGMT ver 1.22 [ 476.609714][T17381] pim6reg: tun_chr_ioctl cmd 1074025677 [ 476.624635][T17381] pim6reg: linktype set to 769 [ 476.646972][ T4362] usb 3-1: USB disconnect, device number 32 [ 476.653467][ T4733] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 476.666398][ T4733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.685041][ T4733] usb 5-1: Product: syz [ 476.690726][ T4733] usb 5-1: Manufacturer: syz [ 476.696155][ T4733] usb 5-1: SerialNumber: syz [ 476.702992][ T4733] usb 5-1: config 0 descriptor?? [ 476.756060][ T4733] as10x_usb: device has been detected [ 476.761824][ T4733] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 476.764788][T17388] loop1: detected capacity change from 0 to 256 [ 476.798645][ T4733] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 476.812039][ T4733] as10x_usb: error during firmware upload part1 [ 476.812345][T17388] FAT-fs (loop1): Directory bread(block 64) failed [ 476.818953][ T4733] Registered device Sky IT Digital Key (green led) [ 476.826775][T17388] FAT-fs (loop1): Directory bread(block 65) failed [ 476.840139][T17388] FAT-fs (loop1): Directory bread(block 66) failed [ 476.847726][T17388] FAT-fs (loop1): Directory bread(block 67) failed [ 476.855055][T17388] FAT-fs (loop1): Directory bread(block 68) failed [ 476.861837][T17388] FAT-fs (loop1): Directory bread(block 69) failed [ 476.868759][T17388] FAT-fs (loop1): Directory bread(block 70) failed [ 476.876179][T17388] FAT-fs (loop1): Directory bread(block 71) failed [ 476.883325][T17388] FAT-fs (loop1): Directory bread(block 72) failed [ 476.890018][T17388] FAT-fs (loop1): Directory bread(block 73) failed [ 476.996006][T17351] random: crng reseeded on system resumption [ 477.420934][ T4362] usb 5-1: USB disconnect, device number 35 [ 477.463177][ T4362] Unregistered device Sky IT Digital Key (green led) [ 477.464623][ T4362] as10x_usb: device has been disconnected [ 477.733030][ T3640] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 477.851490][T17406] loop0: detected capacity change from 0 to 764 [ 477.873685][T17406] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 477.883661][T17396] loop1: detected capacity change from 0 to 40427 [ 477.908335][T17396] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 477.921585][T17406] device  entered promiscuous mode [ 477.931168][T17396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 477.947149][T17396] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 477.995408][T17396] F2FS-fs (loop1): invalid crc value [ 478.052034][T17396] F2FS-fs (loop1): Found nat_bits in checkpoint [ 478.127298][T17398] loop3: detected capacity change from 0 to 65536 [ 478.193987][T17423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4972'. [ 478.194071][T17396] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 478.233237][T17396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 478.258502][ T26] audit: type=1800 audit(1725434598.135:3919): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4962" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 478.279272][T17398] XFS (loop3): Mounting V5 Filesystem [ 478.400923][T17398] XFS (loop3): Ending clean mount [ 478.465658][ T9] kworker/u4:0: attempt to access beyond end of device [ 478.465658][ T9] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 478.553312][T15866] XFS (loop3): Unmounting Filesystem [ 478.982960][ T4322] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 479.174886][T17452] loop1: detected capacity change from 0 to 512 [ 479.190608][T17450] loop3: detected capacity change from 0 to 4096 [ 479.209564][T17450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 479.241241][T17452] EXT4-fs (loop1): 1 orphan inode deleted [ 479.252939][ T4322] usb 3-1: Using ep0 maxpacket: 16 [ 479.258390][T15910] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 479.275328][T17450] EXT4-fs (loop3): shut down requested (2) [ 479.277937][T17458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4983'. [ 479.282904][T17452] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 479.302952][T15910] EXT4-fs error (device loop1): ext4_release_dquot:6823: comm kworker/u4:3: Failed to release dquot type 1 [ 479.318829][T17450] EXT4-fs warning (device loop3): ext4_empty_dir:3154: inode #12: comm syz.3.4977: directory missing '..' [ 479.330672][T17452] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038 (0x7fffffff) [ 479.365763][T15866] EXT4-fs (loop3): unmounting filesystem. [ 479.435763][T17462] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 479.465805][T14245] EXT4-fs (loop1): unmounting filesystem. [ 479.559337][ T4322] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 479.578866][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.591690][ T4322] usb 3-1: Product: syz [ 479.598457][ T4322] usb 3-1: Manufacturer: syz [ 479.600538][T17466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.608826][ T4322] usb 3-1: SerialNumber: syz [ 479.616764][ T4322] usb 3-1: config 0 descriptor?? [ 479.657949][ T4322] as10x_usb: device has been detected [ 479.673359][ T4322] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 479.694960][ T4322] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 479.706086][ T4322] as10x_usb: error during firmware upload part1 [ 479.712379][ T4322] Registered device Sky IT Digital Key (green led) [ 479.732509][T17471] loop1: detected capacity change from 0 to 4096 [ 479.900258][T17442] random: crng reseeded on system resumption [ 479.950422][T17481] loop3: detected capacity change from 0 to 4096 [ 480.332074][ T4733] usb 3-1: USB disconnect, device number 33 [ 480.354980][ T4733] Unregistered device Sky IT Digital Key (green led) [ 480.357467][ T4733] as10x_usb: device has been disconnected [ 480.413468][T17475] loop4: detected capacity change from 0 to 32768 [ 480.474585][T17475] XFS (loop4): Mounting V5 Filesystem [ 480.540037][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5002'. [ 480.573035][T17475] XFS (loop4): Ending clean mount [ 480.702880][T10779] XFS (loop4): Unmounting Filesystem [ 481.194743][T17532] loop3: detected capacity change from 0 to 512 [ 481.207498][T17535] loop2: detected capacity change from 0 to 512 [ 481.222294][T17532] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 481.226358][T17535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 481.267889][T17532] EXT4-fs (loop3): 1 truncate cleaned up [ 481.274295][T17532] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 481.292205][T17535] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.5015: invalid indirect mapped block 4294967295 (level 0) [ 481.323686][T17535] EXT4-fs (loop2): Remounting filesystem read-only [ 481.330236][T17535] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.5015: invalid indirect mapped block 4294967295 (level 1) [ 481.357070][T17532] EXT4-fs error (device loop3): ext4_generic_delete_entry:2727: inode #2: block 13: comm syz.3.5014: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 481.377596][T17535] EXT4-fs (loop2): 1 orphan inode deleted [ 481.384059][T17535] EXT4-fs (loop2): 1 truncate cleaned up [ 481.403416][T17535] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 481.417353][T17532] EXT4-fs error (device loop3) in ext4_delete_entry:2798: Corrupt filesystem [ 481.436049][T17532] EXT4-fs warning (device loop3): ext4_rename_delete:3776: inode #2: comm syz.3.5014: Deleting old file: nlink 5, error=-117 [ 481.513926][ T9521] EXT4-fs (loop2): unmounting filesystem. [ 481.528543][T15866] EXT4-fs (loop3): unmounting filesystem. [ 481.813031][ T3625] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 482.053174][ T3625] usb 1-1: Using ep0 maxpacket: 16 [ 482.308315][T17556] loop3: detected capacity change from 0 to 32768 [ 482.332831][ T3625] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 482.347463][ T3625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.364634][ T3625] usb 1-1: Product: syz [ 482.373311][ T3625] usb 1-1: Manufacturer: syz [ 482.377921][ T3625] usb 1-1: SerialNumber: syz [ 482.379589][T17564] loop4: detected capacity change from 0 to 32768 [ 482.394067][ T3625] usb 1-1: config 0 descriptor?? [ 482.400362][T17564] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.5028 (17564) [ 482.424846][T17556] XFS (loop3): Mounting V5 Filesystem [ 482.435422][ T3625] as10x_usb: device has been detected [ 482.441166][ T3625] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 482.488170][ T3625] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 482.504866][T17589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5036'. [ 482.515751][T17589] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 482.527493][ T3625] as10x_usb: error during firmware upload part1 [ 482.537758][ T3625] Registered device Sky IT Digital Key (green led) [ 482.539372][T17564] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 482.542776][T17556] XFS (loop3): Ending clean mount [ 482.547020][T17564] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 482.571100][T17564] BTRFS info (device loop4): setting nodatacow, compression disabled [ 482.580076][T17564] BTRFS info (device loop4): setting datacow [ 482.586232][T17564] BTRFS info (device loop4): doing ref verification [ 482.593033][T17564] BTRFS info (device loop4): force clearing of disk cache [ 482.600221][T17564] BTRFS info (device loop4): turning off barriers [ 482.606763][T17564] BTRFS info (device loop4): enabling ssd optimizations [ 482.615052][T17564] BTRFS info (device loop4): using spread ssd allocation scheme [ 482.628994][T17564] BTRFS info (device loop4): not using ssd optimizations [ 482.636081][T17564] BTRFS info (device loop4): not using spread ssd allocation scheme [ 482.666811][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5037'. [ 482.670305][T17564] BTRFS info (device loop4): using free space tree [ 482.676338][T17552] random: crng reseeded on system resumption [ 482.717787][T17591] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5037'. [ 482.732854][T17591] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 482.762055][T15866] XFS (loop3): Unmounting Filesystem [ 483.040453][T17564] BTRFS info (device loop4): rebuilding free space tree [ 483.182186][T10779] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 483.183000][ T3625] usb 1-1: USB disconnect, device number 32 [ 483.220256][ T3625] Unregistered device Sky IT Digital Key (green led) [ 483.221246][ T3625] as10x_usb: device has been disconnected [ 483.724181][T17625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5045'. [ 483.990910][T17631] loop0: detected capacity change from 0 to 512 [ 484.001582][T17633] loop3: detected capacity change from 0 to 256 [ 484.029720][T17635] loop1: detected capacity change from 0 to 8 [ 484.039992][T17631] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 484.069082][T17635] SQUASHFS error: Unable to read directory block [631:26] [ 484.099590][T17633] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 484.125239][T17631] EXT4-fs (loop0): 1 orphan inode deleted [ 484.142869][T17631] EXT4-fs (loop0): 1 truncate cleaned up [ 484.172651][T17631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 484.240327][T17631] ------------[ cut here ]------------ [ 484.245804][T17631] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 484.259425][T17631] WARNING: CPU: 1 PID: 17631 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 484.269510][T17631] Modules linked in: [ 484.273408][T17631] CPU: 1 PID: 17631 Comm: syz.0.5048 Not tainted 6.1.107-syzkaller #0 [ 484.281567][T17631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 484.291627][T17631] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 484.297369][T17631] Code: 8b 16 48 c7 c0 20 b1 d9 90 48 39 c2 74 46 f6 05 2e 16 df 03 01 75 3d c6 05 25 16 df 03 01 48 c7 c7 00 23 0c 8b e8 8e 31 ac f6 <0f> 0b eb 26 e8 95 b7 8f f9 48 c7 c7 40 22 0c 8b 89 de e8 07 f8 fd [ 484.316983][T17631] RSP: 0018:ffffc90004af7410 EFLAGS: 00010046 [ 484.323062][T17631] RAX: d7b06b24c31ced00 RBX: ffffffff90c71320 RCX: 0000000000040000 [ 484.331045][T17631] RDX: ffffc9000a86a000 RSI: 000000000000746d RDI: 000000000000746e [ 484.333640][T17644] loop1: detected capacity change from 0 to 64 [ 484.339013][T17631] RBP: ffffc90004af7510 R08: ffffffff8152a40e R09: fffff5200095ede1 [ 484.353128][T17631] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 484.361103][T17631] R13: 1ffff9200095ee90 R14: ffff88807273beb8 R15: ffffffff974bef01 [ 484.369082][T17631] FS: 00007f11a0a0b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 484.378025][T17631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.384620][T17631] CR2: 0000001b2eb12ff8 CR3: 000000005dfe1000 CR4: 00000000003506e0 [ 484.392601][T17631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.400575][T17631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.408552][T17631] Call Trace: [ 484.411835][T17631] [ 484.414769][T17631] ? __warn+0x15a/0x520 [ 484.418941][T17631] ? look_up_lock_class+0xc2/0x140 [ 484.424069][T17631] ? report_bug+0x2af/0x500 [ 484.428588][T17631] ? look_up_lock_class+0xc2/0x140 [ 484.433718][T17631] ? handle_bug+0x3d/0x70 [ 484.438056][T17631] ? exc_invalid_op+0x16/0x40 [ 484.442744][T17631] ? asm_exc_invalid_op+0x16/0x20 [ 484.447786][T17631] ? __warn_printk+0x28e/0x350 [ 484.452566][T17631] ? look_up_lock_class+0xc2/0x140 [ 484.457693][T17631] register_lock_class+0x100/0x990 [ 484.462821][T17631] ? is_dynamic_key+0x260/0x260 [ 484.467690][T17631] ? mark_lock+0x9a/0x340 [ 484.472034][T17631] __lock_acquire+0xd3/0x1f80 [ 484.476733][T17631] lock_acquire+0x1f8/0x5a0 [ 484.481254][T17631] ? ext4_move_extents+0x3a0/0xe30 [ 484.486382][T17631] ? read_lock_is_recursive+0x10/0x10 [ 484.491769][T17631] ? __might_sleep+0xb0/0xb0 [ 484.496370][T17631] ? rwsem_write_trylock+0x166/0x210 [ 484.501672][T17631] ? inode_owner_or_capable+0x210/0x210 [ 484.507240][T17631] ? clear_nonspinnable+0x60/0x60 [ 484.512282][T17631] down_write_nested+0x39/0x60 [ 484.517057][T17631] ? ext4_move_extents+0x3a0/0xe30 [ 484.522175][T17631] ext4_move_extents+0x3a0/0xe30 [ 484.527104][T17631] ? rcu_read_lock_any_held+0xb3/0x160 [ 484.532548][T17631] ? ext4_double_up_write_data_sem+0x30/0x30 [ 484.538534][T17631] ext4_ioctl+0x3a8d/0x5f60 [ 484.543020][T17631] ? kasan_set_track+0x4b/0x70 [ 484.547769][T17631] ? security_file_ioctl+0x6d/0xa0 [ 484.552896][T17631] ? __se_sys_ioctl+0x47/0x160 [ 484.557672][T17631] ? do_syscall_64+0x3b/0xb0 [ 484.562251][T17631] ? ext4_fileattr_set+0x1770/0x1770 [ 484.567536][T17631] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 484.572467][T17631] ? __x64_compat_sys_ioctl+0x80/0x80 [ 484.577821][T17631] ? __lock_acquire+0x1f80/0x1f80 [ 484.582830][T17631] ? lockdep_hardirqs_on+0x94/0x130 [ 484.588038][T17631] ? __kmem_cache_free+0x25c/0x3c0 [ 484.593146][T17631] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 484.598866][T17631] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 484.604482][T17631] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 484.610095][T17631] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 484.615537][T17631] ? __fget_files+0x28/0x4a0 [ 484.620111][T17631] ? __fget_files+0x28/0x4a0 [ 484.624680][T17631] ? __fget_files+0x435/0x4a0 [ 484.629335][T17631] ? __fget_files+0x28/0x4a0 [ 484.633913][T17631] ? bpf_lsm_file_ioctl+0x5/0x10 [ 484.638842][T17631] ? security_file_ioctl+0x7d/0xa0 [ 484.643943][T17631] ? ext4_fileattr_set+0x1770/0x1770 [ 484.649226][T17631] __se_sys_ioctl+0xf1/0x160 [ 484.653805][T17631] do_syscall_64+0x3b/0xb0 [ 484.658232][T17631] ? clear_bhb_loop+0x45/0xa0 [ 484.662897][T17631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.668783][T17631] RIP: 0033:0x7f119fb7cef9 [ 484.673188][T17631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.692787][T17631] RSP: 002b:00007f11a0a0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.701195][T17631] RAX: ffffffffffffffda RBX: 00007f119fd35f80 RCX: 00007f119fb7cef9 [ 484.709146][T17631] RDX: 0000000020000000 RSI: 00000000c028660f RDI: 0000000000000004 [ 484.717095][T17631] RBP: 00007f119fbef01e R08: 0000000000000000 R09: 0000000000000000 [ 484.725051][T17631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.733002][T17631] R13: 0000000000000000 R14: 00007f119fd35f80 R15: 00007ffd55df8868 [ 484.740972][T17631] [ 484.743980][T17631] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 484.751231][T17631] CPU: 1 PID: 17631 Comm: syz.0.5048 Not tainted 6.1.107-syzkaller #0 [ 484.759362][T17631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 484.769397][T17631] Call Trace: [ 484.772655][T17631] [ 484.775565][T17631] dump_stack_lvl+0x1e3/0x2cb [ 484.780332][T17631] ? nf_tcp_handle_invalid+0x642/0x642 [ 484.785778][T17631] ? panic+0x764/0x764 [ 484.789860][T17631] ? vscnprintf+0x59/0x80 [ 484.793447][ T7] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 484.801689][T17631] panic+0x318/0x764 [ 484.805575][T17631] ? __warn+0x169/0x520 [ 484.809720][T17631] ? memcpy_page_flushcache+0xfc/0xfc [ 484.815076][T17631] __warn+0x348/0x520 [ 484.819062][T17631] ? look_up_lock_class+0xc2/0x140 [ 484.824197][T17631] report_bug+0x2af/0x500 [ 484.828506][T17631] ? look_up_lock_class+0xc2/0x140 [ 484.833610][T17631] handle_bug+0x3d/0x70 [ 484.837740][T17631] exc_invalid_op+0x16/0x40 [ 484.842224][T17631] asm_exc_invalid_op+0x16/0x20 [ 484.847058][T17631] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 484.852760][T17631] Code: 8b 16 48 c7 c0 20 b1 d9 90 48 39 c2 74 46 f6 05 2e 16 df 03 01 75 3d c6 05 25 16 df 03 01 48 c7 c7 00 23 0c 8b e8 8e 31 ac f6 <0f> 0b eb 26 e8 95 b7 8f f9 48 c7 c7 40 22 0c 8b 89 de e8 07 f8 fd [ 484.872359][T17631] RSP: 0018:ffffc90004af7410 EFLAGS: 00010046 [ 484.878406][T17631] RAX: d7b06b24c31ced00 RBX: ffffffff90c71320 RCX: 0000000000040000 [ 484.886356][T17631] RDX: ffffc9000a86a000 RSI: 000000000000746d RDI: 000000000000746e [ 484.894306][T17631] RBP: ffffc90004af7510 R08: ffffffff8152a40e R09: fffff5200095ede1 [ 484.902256][T17631] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 484.910204][T17631] R13: 1ffff9200095ee90 R14: ffff88807273beb8 R15: ffffffff974bef01 [ 484.918173][T17631] ? __warn_printk+0x28e/0x350 [ 484.922926][T17631] register_lock_class+0x100/0x990 [ 484.928023][T17631] ? is_dynamic_key+0x260/0x260 [ 484.932876][T17631] ? mark_lock+0x9a/0x340 [ 484.937187][T17631] __lock_acquire+0xd3/0x1f80 [ 484.941883][T17631] lock_acquire+0x1f8/0x5a0 [ 484.946377][T17631] ? ext4_move_extents+0x3a0/0xe30 [ 484.951484][T17631] ? read_lock_is_recursive+0x10/0x10 [ 484.956847][T17631] ? __might_sleep+0xb0/0xb0 [ 484.961423][T17631] ? rwsem_write_trylock+0x166/0x210 [ 484.966701][T17631] ? inode_owner_or_capable+0x210/0x210 [ 484.972231][T17631] ? clear_nonspinnable+0x60/0x60 [ 484.977235][T17631] down_write_nested+0x39/0x60 [ 484.981980][T17631] ? ext4_move_extents+0x3a0/0xe30 [ 484.987068][T17631] ext4_move_extents+0x3a0/0xe30 [ 484.991986][T17631] ? rcu_read_lock_any_held+0xb3/0x160 [ 484.997429][T17631] ? ext4_double_up_write_data_sem+0x30/0x30 [ 485.003478][T17631] ext4_ioctl+0x3a8d/0x5f60 [ 485.007963][T17631] ? kasan_set_track+0x4b/0x70 [ 485.012715][T17631] ? security_file_ioctl+0x6d/0xa0 [ 485.017824][T17631] ? __se_sys_ioctl+0x47/0x160 [ 485.022600][T17631] ? do_syscall_64+0x3b/0xb0 [ 485.027206][T17631] ? ext4_fileattr_set+0x1770/0x1770 [ 485.032509][T17631] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 485.037361][T17631] ? __x64_compat_sys_ioctl+0x80/0x80 [ 485.042719][T17631] ? __lock_acquire+0x1f80/0x1f80 [ 485.047771][T17631] ? lockdep_hardirqs_on+0x94/0x130 [ 485.052950][T17631] ? __kmem_cache_free+0x25c/0x3c0 [ 485.058042][T17631] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 485.063653][T17631] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 485.069266][T17631] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 485.074880][T17631] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 485.080315][T17631] ? __fget_files+0x28/0x4a0 [ 485.084893][T17631] ? __fget_files+0x28/0x4a0 [ 485.089469][T17631] ? __fget_files+0x435/0x4a0 [ 485.094128][T17631] ? __fget_files+0x28/0x4a0 [ 485.098697][T17631] ? bpf_lsm_file_ioctl+0x5/0x10 [ 485.103611][T17631] ? security_file_ioctl+0x7d/0xa0 [ 485.108697][T17631] ? ext4_fileattr_set+0x1770/0x1770 [ 485.113959][T17631] __se_sys_ioctl+0xf1/0x160 [ 485.118531][T17631] do_syscall_64+0x3b/0xb0 [ 485.122927][T17631] ? clear_bhb_loop+0x45/0xa0 [ 485.127583][T17631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.133454][T17631] RIP: 0033:0x7f119fb7cef9 [ 485.137844][T17631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.157430][T17631] RSP: 002b:00007f11a0a0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.165822][T17631] RAX: ffffffffffffffda RBX: 00007f119fd35f80 RCX: 00007f119fb7cef9 [ 485.173777][T17631] RDX: 0000000020000000 RSI: 00000000c028660f RDI: 0000000000000004 [ 485.181726][T17631] RBP: 00007f119fbef01e R08: 0000000000000000 R09: 0000000000000000 [ 485.189678][T17631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.192861][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 485.202611][T17631] R13: 0000000000000000 R14: 00007f119fd35f80 R15: 00007ffd55df8868 [ 485.210565][T17631] [ 485.213694][T17631] Kernel Offset: disabled [ 485.218004][T17631] Rebooting in 86400 seconds..