last executing test programs: 2m20.046999838s ago: executing program 0 (id=42): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffe2b, &(0x7f0000000180)}, 0x10) 2m19.846315551s ago: executing program 0 (id=45): syz_open_dev$tty20(0xc, 0x4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 2m18.82901741s ago: executing program 0 (id=53): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x2, &(0x7f0000000180)={0x1f, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 2m18.649127544s ago: executing program 0 (id=55): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x55d, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m18.036074715s ago: executing program 0 (id=61): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000280)=0x5, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x29) 2m16.765137678s ago: executing program 0 (id=74): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = io_uring_setup(0x65d5, &(0x7f00000000c0)={0x0, 0x1cb7, 0x800, 0x1, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0, 0xf}, {0x0}, {0x0}], 0x0}, 0x2) 2m16.301371787s ago: executing program 32 (id=74): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = io_uring_setup(0x65d5, &(0x7f00000000c0)={0x0, 0x1cb7, 0x800, 0x1, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0, 0xf}, {0x0}, {0x0}], 0x0}, 0x2) 35.611798824s ago: executing program 3 (id=930): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) 35.373803018s ago: executing program 3 (id=934): r0 = open(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143142, 0xa2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x8, 0xffffffffffffffff}) truncate(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x59b) 35.222850831s ago: executing program 3 (id=935): syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800c, &(0x7f0000000180), 0x0, 0x1121, &(0x7f00000025c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 34.150244631s ago: executing program 3 (id=944): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@usrjquota}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 33.504981983s ago: executing program 3 (id=951): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001640)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="270502001a0014000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e5700001028", 0x41}], 0x1}, 0x0) 32.987185652s ago: executing program 3 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 32.449551532s ago: executing program 33 (id=957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 5.247370484s ago: executing program 2 (id=1130): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa042, 0x0) fsync(r0) 4.331539851s ago: executing program 2 (id=1134): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @tick=0x80000, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0xfb, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) 3.78910207s ago: executing program 4 (id=1140): unshare(0x22020600) r0 = open(&(0x7f0000000080)='.\x00', 0x21557f5ff635ad40, 0x0) tee(r0, 0xffffffffffffffff, 0x4, 0x0) 3.634927433s ago: executing program 4 (id=1141): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0xd, 0x3}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000100)=""/231, &(0x7f0000000200)=0xe7) 3.496093576s ago: executing program 4 (id=1143): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@bridge_dellink={0x38, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r1, 0x1733}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xc, 0x0, 0x0, 0x1}]}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 3.2851654s ago: executing program 4 (id=1144): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa042, 0x0) fsync(r0) 2.958245126s ago: executing program 2 (id=1148): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x40, 0xe, 0x4, "7f6ff83f"}, 0x0, 0x0, 0x0, 0x0}) 2.135136811s ago: executing program 5 (id=1154): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.854904416s ago: executing program 5 (id=1155): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000800)={0xd, 0x1, 0x8, 0x9, 0x8, 0x2cc, 0x0, 0xac83}, 0x0, 0x0, 0x0, 0x0) close(0x4) 1.550067912s ago: executing program 5 (id=1157): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 1.498554363s ago: executing program 1 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b1800068014000400200100"/171], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 996.828852ms ago: executing program 2 (id=1159): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x40810, 0x3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 994.950122ms ago: executing program 4 (id=1167): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xd0, 0x0}, 0x10) 994.338022ms ago: executing program 1 (id=1160): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x20001) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000001800)={0x1, 0x0, &(0x7f00000017c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000001840)={r1, 0x0, 0x8, 0xd, 0xafc9}) 780.783156ms ago: executing program 1 (id=1161): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000007880)='ns/cgroup\x00') setns(r0, 0x0) 564.45041ms ago: executing program 2 (id=1162): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') close_range(r0, r0, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000c40)={r0}, 0x8) 547.878611ms ago: executing program 1 (id=1163): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000000, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net\x00') getdents64(r0, &(0x7f0000003f40)=""/4093, 0xffd) 488.502192ms ago: executing program 5 (id=1164): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x4, 0x9, 0x1, 0x8, 0x8, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 349.179844ms ago: executing program 1 (id=1165): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x30) 346.825694ms ago: executing program 2 (id=1166): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 209.168027ms ago: executing program 5 (id=1168): io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x9153, 0x8, 0x2, 0x20}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 208.982887ms ago: executing program 4 (id=1169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) 38.58622ms ago: executing program 1 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0) 0s ago: executing program 5 (id=1171): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x4f27, 0x5, 0x4, 0x0, 0x7, 0xcc7, 0x6, 0x7, 0xa, 0x100, 0x2, 0x0, 0x1, 0x1, 0x6, 0x101, 0x1f, 0x6, 0x83, 0x40000003, 0x89, 0x9, 0x6, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0x160d]}) kernel console output (not intermixed with test programs): [ T5833] wacom 0003:056A:FF62.0004: Unknown device_type for 'HID 056a:ff62'. Ignoring. [ 112.180488][ T8] usb 4-1: USB disconnect, device number 3 [ 112.370290][ T6384] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.886297][ T6126] veth0_vlan: entered promiscuous mode [ 112.931725][ T6126] veth1_vlan: entered promiscuous mode [ 113.046189][ T6406] loop1: detected capacity change from 0 to 128 [ 113.052737][ T6126] veth0_macvtap: entered promiscuous mode [ 113.069169][ T6126] veth1_macvtap: entered promiscuous mode [ 113.127782][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.159449][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.200242][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.211059][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.231039][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.263965][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.301744][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.325939][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.343953][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.367170][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.378304][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.407020][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 113.425614][ T5833] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 113.437369][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.456866][ T5833] usb 3-1: config 0 has no interface number 0 [ 113.466900][ T5833] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.487164][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.505405][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 113.518418][ T5833] usb 3-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.524637][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.547071][ T5833] usb 3-1: config 0 interface 8 has no altsetting 0 [ 113.553785][ T5833] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 113.583764][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.587916][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.604691][ T5833] usb 3-1: config 0 descriptor?? [ 113.678941][ T6126] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.702740][ T6126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.728072][ T6126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.748155][ T6126] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.964662][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.995945][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.068363][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.076258][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.081053][ T5833] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 114.117685][ T5833] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 114.124922][ T5833] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 114.164995][ T5833] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 114.188089][ T5833] uclogic 0003:5543:0522.0005: unknown main item tag 0x0 [ 114.214858][ T5833] uclogic 0003:5543:0522.0005: No inputs registered, leaving [ 114.240343][ T5833] uclogic 0003:5543:0522.0005: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input8 [ 114.333313][ T5833] usb 3-1: USB disconnect, device number 3 [ 114.480441][ T6432] fido_id[6432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 114.485867][ T6438] loop4: detected capacity change from 0 to 256 [ 115.417380][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 116.186918][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.201214][ T6496] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 116.245835][ T27] audit: type=1326 audit(1753311805.008:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c578e9a9 code=0x7ffc0000 [ 116.326874][ T27] audit: type=1326 audit(1753311805.008:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c578e9a9 code=0x7ffc0000 [ 116.397473][ T27] audit: type=1326 audit(1753311805.048:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19c578d310 code=0x7ffc0000 [ 116.407011][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 116.447265][ T27] audit: type=1326 audit(1753311805.048:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19c578d310 code=0x7ffc0000 [ 116.459050][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.496097][ T5905] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 116.514977][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.540488][ T6502] loop2: detected capacity change from 0 to 8192 [ 116.547246][ T27] audit: type=1326 audit(1753311805.048:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c578e9a9 code=0x7ffc0000 [ 116.560439][ T5905] usb 2-1: config 0 descriptor?? [ 116.592948][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 116.609124][ T6502] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 116.643361][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.203'. [ 116.665502][ T27] audit: type=1326 audit(1753311805.048:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c578e9a9 code=0x7ffc0000 [ 116.667170][ T6502] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 116.699215][ T6502] REISERFS (device loop2): using ordered data mode [ 116.705858][ T6502] reiserfs: using flush barriers [ 116.729033][ T6508] netlink: 'syz.4.203': attribute type 13 has an invalid length. [ 116.739153][ T6502] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.791602][ T6508] netlink: 'syz.4.203': attribute type 11 has an invalid length. [ 116.810249][ T27] audit: type=1326 audit(1753311805.068:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f19c578e9a9 code=0x7ffc0000 [ 116.838262][ T6502] REISERFS (device loop2): checking transaction log (loop2) [ 116.908054][ T6502] REISERFS (device loop2): Using tea hash to sort names [ 116.926336][ T27] audit: type=1326 audit(1753311805.068:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c578e9a9 code=0x7ffc0000 [ 116.938500][ T6502] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 116.985731][ T27] audit: type=1326 audit(1753311805.068:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19c578e9a9 code=0x7ffc0000 [ 117.055629][ T5905] koneplus 0003:1E7D:2E22.0006: ignoring exceeding usage max [ 117.141088][ T5905] koneplus 0003:1E7D:2E22.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 117.428594][ T5905] usb 2-1: USB disconnect, device number 3 [ 117.929118][ T6536] tmpfs: Too few inodes for current use [ 118.145019][ T6538] loop4: detected capacity change from 0 to 4096 [ 118.326208][ T6538] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 118.472801][ T6538] ntfs3: loop4: Failed to load $Extend (-22). [ 118.499877][ T6538] ntfs3: loop4: Failed to initialize $Extend. [ 118.612484][ T6558] loop1: detected capacity change from 0 to 128 [ 118.670046][ T6558] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 118.759505][ T6558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.780716][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 119.315859][ T6571] loop1: detected capacity change from 0 to 4096 [ 119.331429][ T6574] loop2: detected capacity change from 0 to 1024 [ 119.353860][ T6574] EXT4-fs: Ignoring removed nobh option [ 119.386494][ T6574] EXT4-fs: Ignoring removed bh option [ 119.410822][ T6574] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.423181][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.525065][ T6579] loop4: detected capacity change from 0 to 1024 [ 119.564811][ T6557] loop3: detected capacity change from 0 to 32768 [ 119.608707][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.728842][ T6574] EXT4-fs warning (device loop2): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 119.769763][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.924827][ T3498] hfsplus: b-tree write err: -5, ino 4 [ 119.948588][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.363624][ T6596] loop1: detected capacity change from 0 to 4096 [ 120.416061][ T6596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.483824][ T6596] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 120.708554][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.206905][ T5778] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.415545][ T5778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.456704][ T5778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.486870][ T5778] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.530643][ T5778] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 121.585839][ T5778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.623736][ T5778] usb 5-1: config 0 descriptor?? [ 121.643623][ T6639] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.941346][ T6650] loop2: detected capacity change from 0 to 256 [ 122.064453][ T6650] FAT-fs (loop2): Directory bread(block 64) failed [ 122.082291][ T6650] FAT-fs (loop2): Directory bread(block 65) failed [ 122.085713][ T5778] kye 0003:0458:5011.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 122.089960][ T6650] FAT-fs (loop2): Directory bread(block 66) failed [ 122.138604][ T5778] kye 0003:0458:5011.0007: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 122.154134][ T6650] FAT-fs (loop2): Directory bread(block 67) failed [ 122.168254][ T5778] kye 0003:0458:5011.0007: tablet-enabling feature report not found [ 122.177069][ T6650] FAT-fs (loop2): Directory bread(block 68) failed [ 122.183661][ T6650] FAT-fs (loop2): Directory bread(block 69) failed [ 122.188743][ T5778] kye 0003:0458:5011.0007: tablet enabling failed [ 122.210615][ T6650] FAT-fs (loop2): Directory bread(block 70) failed [ 122.219637][ T6650] FAT-fs (loop2): Directory bread(block 71) failed [ 122.226401][ T6650] FAT-fs (loop2): Directory bread(block 72) failed [ 122.235772][ T6650] FAT-fs (loop2): Directory bread(block 73) failed [ 122.391682][ T5778] usb 5-1: USB disconnect, device number 2 [ 122.462028][ T6657] fido_id[6657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 122.466664][ T6662] loop3: detected capacity change from 0 to 512 [ 122.519107][ T6662] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 122.563691][ T6662] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.585976][ T6662] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 122.619634][ T6662] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 122.654324][ T6662] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 122.691799][ T6662] System zones: 0-2, 18-18, 34-35 [ 122.739952][ T6662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.091159][ T6672] syz.1.251 (6672): drop_caches: 2 [ 123.136942][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.184623][ T6666] syz.1.251 (6666): drop_caches: 2 [ 123.195608][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.343487][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 123.351166][ T6678] loop3: detected capacity change from 0 to 64 [ 123.387224][ T5905] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.410475][ T5905] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.446910][ T5905] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.449247][ T6681] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 123.460803][ T5905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.500833][ T5905] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 123.518843][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.546156][ T27] audit: type=1804 audit(1753311812.308:13): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.256" name="/newroot/71/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 123.551699][ T5905] usb 3-1: config 0 descriptor?? [ 123.749111][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.954478][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.980726][ T787] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 124.010887][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.039581][ T787] usb 5-1: config 0 descriptor?? [ 124.218591][ T5905] lenovo 0003:17EF:60EE.0008: unknown main item tag 0xe [ 124.230711][ T6697] loop3: detected capacity change from 0 to 1024 [ 124.247228][ T5905] lenovo 0003:17EF:60EE.0008: hidraw0: USB HID vff.fd Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 124.407437][ T59] hfsplus: b-tree write err: -5, ino 4 [ 124.421804][ T5905] lenovo 0003:17EF:60EE.0008: Failed to switch middle button: -71 [ 124.474983][ T5905] lenovo 0003:17EF:60EE.0008: Fn-lock setting failed: -71 [ 124.492161][ T5905] lenovo 0003:17EF:60EE.0008: Sensitivity setting failed: -71 [ 124.560393][ T787] wacom 0003:056A:0331.0009: hidraw1: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 124.579846][ T5905] usb 3-1: USB disconnect, device number 4 [ 124.733770][ T787] usb 5-1: USB disconnect, device number 3 [ 124.800939][ T6707] fido_id[6707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 124.987064][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.041915][ T6713] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.177973][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 125.204084][ T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 125.221404][ T9] usb 4-1: config 1 has no interface number 0 [ 125.234656][ T9] usb 4-1: config 1 interface 3 has no altsetting 0 [ 125.254921][ T9] usb 4-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 125.264463][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.274568][ T9] usb 4-1: Product: syz [ 125.282452][ T9] usb 4-1: Manufacturer: syz [ 125.288461][ T9] usb 4-1: SerialNumber: syz [ 125.409500][ T6722] loop2: detected capacity change from 0 to 1024 [ 125.417959][ T6722] EXT4-fs: Ignoring removed orlov option [ 125.459777][ T6722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.516969][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.557690][ T9] usb 4-1: USB disconnect, device number 4 [ 125.576032][ T6728] ptrace attach of "./syz-executor exec"[6126] was attempted by ""[6728] [ 125.601071][ T6722] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2797: inode #15: comm syz.2.276: corrupted in-inode xattr: bad magic number in in-inode xattr [ 125.686859][ T6722] EXT4-fs (loop2): Remounting filesystem read-only [ 125.704864][ T6722] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 125.718375][ T787] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.726405][ T787] usb 2-1: config 0 has no interface number 0 [ 125.733693][ T787] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.753717][ T787] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.776619][ T787] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 125.804854][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.835101][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.840292][ T787] usb 2-1: config 0 descriptor?? [ 126.282566][ T787] prodikeys 0003:041E:2801.000A: item fetching failed at offset 0/7 [ 126.316108][ T787] prodikeys 0003:041E:2801.000A: hid parse failed [ 126.334562][ T787] prodikeys: probe of 0003:041E:2801.000A failed with error -22 [ 126.347272][ T6748] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.287'. [ 126.579594][ T5778] usb 2-1: USB disconnect, device number 4 [ 126.933970][ T6746] loop4: detected capacity change from 0 to 40427 [ 126.995933][ T6746] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 127.038068][ T6746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 127.081858][ T6746] F2FS-fs (loop4): invalid crc value [ 127.115371][ T6746] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.284974][ T6746] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 127.310486][ T6746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 127.366921][ T27] audit: type=1326 audit(1753311816.128:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 127.465128][ T27] audit: type=1326 audit(1753311816.128:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 127.544962][ T27] audit: type=1326 audit(1753311816.128:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 127.616496][ T27] audit: type=1326 audit(1753311816.128:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 127.691162][ T6775] loop1: detected capacity change from 0 to 256 [ 127.723287][ T27] audit: type=1326 audit(1753311816.128:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 127.786352][ T27] audit: type=1326 audit(1753311816.128:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 127.937704][ T27] audit: type=1326 audit(1753311816.128:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 128.007628][ T27] audit: type=1326 audit(1753311816.128:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 128.101261][ T27] audit: type=1326 audit(1753311816.128:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb518e9a9 code=0x7fc00000 [ 128.394625][ T6756] loop3: detected capacity change from 0 to 65536 [ 128.484658][ T6756] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 128.664642][ T6756] XFS (loop3): Ending clean mount [ 128.898884][ T5797] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 128.933596][ T5778] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.079752][ T6815] loop2: detected capacity change from 0 to 128 [ 129.100360][ T6815] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 129.117117][ T787] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 129.123794][ T5778] usb 2-1: config 7 has an invalid interface number: 209 but max is 1 [ 129.155301][ T6815] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.165759][ T5778] usb 2-1: config 7 has an invalid interface number: 61 but max is 1 [ 129.190643][ T5778] usb 2-1: config 7 has no interface number 0 [ 129.214799][ T5778] usb 2-1: config 7 has no interface number 1 [ 129.230552][ T5778] usb 2-1: config 7 interface 61 altsetting 1 endpoint 0x9 has invalid maxpacket 1983, setting to 1024 [ 129.272427][ T5778] usb 2-1: config 7 interface 61 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024 [ 129.290074][ T5778] usb 2-1: config 7 interface 61 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 129.311236][ T5778] usb 2-1: config 7 interface 209 has no altsetting 0 [ 129.326850][ T5778] usb 2-1: config 7 interface 61 has no altsetting 0 [ 129.349474][ T5778] usb 2-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=7f.6e [ 129.353790][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 129.388136][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.391530][ T787] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 129.417699][ T5778] usb 2-1: Product: syz [ 129.422055][ T5778] usb 2-1: Manufacturer: syz [ 129.436852][ T5778] usb 2-1: SerialNumber: syz [ 129.447127][ T787] usb 5-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 129.477340][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.508054][ T787] usb 5-1: config 0 descriptor?? [ 129.513902][ T6810] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.692791][ T5778] hub 2-1:7.209: Invalid hub with more than one config or interface [ 129.717113][ T5778] hub: probe of 2-1:7.209 failed with error -22 [ 129.766718][ T5778] hub 2-1:7.61: Invalid hub with more than one config or interface [ 129.777819][ T5778] hub: probe of 2-1:7.61 failed with error -22 [ 129.802700][ T5778] usb 2-1: USB disconnect, device number 5 [ 129.981006][ T787] apple 0003:05AC:0264.000B: unknown main item tag 0x6 [ 130.007980][ T787] apple 0003:05AC:0264.000B: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.4-1/input0 [ 130.233912][ T54] usb 5-1: USB disconnect, device number 4 [ 130.376538][ T6839] loop3: detected capacity change from 0 to 16 [ 130.569889][ T6843] warning: `syz.2.321' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.845787][ T6851] Illegal XDP return value 4294967283 on prog (id 15) dev N/A, expect packet loss! [ 131.203002][ T6866] loop2: detected capacity change from 0 to 64 [ 131.221954][ T6868] capability: warning: `syz.3.333' uses 32-bit capabilities (legacy support in use) [ 131.417080][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.640630][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.665211][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.696582][ T6881] loop1: detected capacity change from 0 to 128 [ 131.697723][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 131.745290][ T6881] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.751637][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.776877][ T8] usb 5-1: config 0 descriptor?? [ 131.790024][ T6881] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.828142][ T6883] tipc: Started in network mode [ 131.863712][ T6883] tipc: Node identity , cluster identity 4711 [ 131.888248][ T6883] tipc: Failed to set node id, please configure manually [ 131.919139][ T6883] tipc: Enabling of bearer rejected, failed to enable media [ 132.040095][ T6888] loop3: detected capacity change from 0 to 1024 [ 132.125802][ T6888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.212300][ T8] logitech-hidpp-device 0003:046D:C262.000C: unbalanced collection at end of report description [ 132.227708][ T8] logitech-hidpp-device 0003:046D:C262.000C: hidpp_probe:parse failed [ 132.238174][ T8] logitech-hidpp-device: probe of 0003:046D:C262.000C failed with error -22 [ 132.421270][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.452835][ T5833] usb 5-1: USB disconnect, device number 5 [ 133.016436][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023462][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.137381][ T787] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 133.363484][ T787] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 133.389534][ T787] usb 4-1: config 0 has no interface number 0 [ 133.429735][ T787] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 133.468710][ T787] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 133.490270][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.512400][ T787] usb 4-1: Product: syz [ 133.520684][ T6941] dummy0: entered promiscuous mode [ 133.522880][ T787] usb 4-1: Manufacturer: syz [ 133.543676][ T787] usb 4-1: SerialNumber: syz [ 133.565939][ T787] usb 4-1: config 0 descriptor?? [ 133.753669][ T6945] mmap: syz.4.360 (6945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 134.167078][ T6967] loop1: detected capacity change from 0 to 1024 [ 134.184996][ T6967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.251905][ T787] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 134.289332][ T787] usb 4-1: USB disconnect, device number 5 [ 134.509568][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.854578][ T6987] pim6reg: entered allmulticast mode [ 135.216653][ T7000] loop2: detected capacity change from 0 to 1024 [ 135.258193][ T7000] EXT4-fs: Ignoring removed bh option [ 135.275048][ T7000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.288002][ T7005] netlink: 288 bytes leftover after parsing attributes in process `syz.4.376'. [ 135.348396][ T7000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.567959][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.581190][ T7002] loop3: detected capacity change from 0 to 4096 [ 136.244725][ T7027] tmpfs: Bad value for 'size' [ 136.557494][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 136.631677][ T7040] loop2: detected capacity change from 0 to 128 [ 136.759280][ T7040] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.762730][ T7014] loop1: detected capacity change from 0 to 32768 [ 136.782093][ T7014] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.380 (7014) [ 136.803807][ T7014] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 136.814112][ T7014] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 136.823857][ T7014] BTRFS info (device loop1): using free space tree [ 136.842670][ T7040] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.021247][ T7065] binder: 7064:7065 ioctl c0306201 2000000001c0 returned -22 [ 137.042125][ T7014] BTRFS info (device loop1): enabling ssd optimizations [ 137.081546][ T7014] BTRFS info (device loop1): auto enabling async discard [ 137.162832][ T5796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.250337][ T7070] loop3: detected capacity change from 0 to 16 [ 137.277948][ T7070] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 137.307360][ T7070] cramfs: empty filesystem [ 137.417108][ T5996] udevd[5996]: incorrect cramfs checksum on /dev/loop3 [ 137.486019][ T5996] udevd[5996]: incorrect cramfs checksum on /dev/loop3 [ 137.656429][ T5804] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 138.385826][ T7101] Bluetooth: MGMT ver 1.22 [ 138.685021][ T7112] loop1: detected capacity change from 0 to 256 [ 138.788627][ T7112] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 139.012293][ T7098] loop4: detected capacity change from 0 to 8192 [ 139.101620][ T7098] loop4: p1 p2 p4 [ 139.147851][ T7098] loop4: p1 size 108920841 extends beyond EOD, truncated [ 139.196300][ T7098] loop4: p2 start 861536256 is beyond EOD, truncated [ 139.239351][ T7098] loop4: p4 size 65536 extends beyond EOD, truncated [ 139.358885][ T7130] loop3: detected capacity change from 0 to 1024 [ 139.373298][ T7130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.482232][ T7130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.498938][ T7128] loop2: detected capacity change from 0 to 4096 [ 139.826918][ T7128] ntfs3: loop2: failed to convert "0080" to cp775 [ 139.868362][ T7128] ntfs3: loop2: failed to convert name for inode 1e. [ 139.951109][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 139.973118][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 139.986066][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.901068][ T7143] loop1: detected capacity change from 0 to 32768 [ 140.953067][ T7143] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.415 (7143) [ 140.984257][ T7143] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 141.010769][ T7143] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 141.027415][ T7143] BTRFS info (device loop1): using free space tree [ 141.254767][ T7148] loop2: detected capacity change from 0 to 32768 [ 141.256875][ T7143] BTRFS info (device loop1): enabling ssd optimizations [ 141.276530][ T7148] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.417 (7148) [ 141.297401][ T7143] BTRFS info (device loop1): auto enabling async discard [ 141.331440][ T7148] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 141.360024][ T7148] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 141.405568][ T7143] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.425828][ T7148] BTRFS info (device loop2): using free space tree [ 141.773036][ T7148] BTRFS info (device loop2): enabling ssd optimizations [ 141.847696][ T7148] BTRFS info (device loop2): auto enabling async discard [ 141.856929][ T5804] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 141.998469][ T7219] netlink: 288 bytes leftover after parsing attributes in process `syz.3.433'. [ 142.090009][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 142.398733][ T5796] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 142.650266][ T7233] loop3: detected capacity change from 0 to 128 [ 142.717635][ T7238] binder: 7237:7238 ioctl c0306201 2000000001c0 returned -22 [ 142.969121][ T7233] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.077697][ T7233] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.453971][ T5797] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.579598][ T7252] loop2: detected capacity change from 0 to 4096 [ 143.922233][ T7259] loop3: detected capacity change from 0 to 1024 [ 144.217738][ T7259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.741226][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.801034][ T7281] netlink: 288 bytes leftover after parsing attributes in process `syz.1.440'. [ 144.930190][ T5905] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 145.188324][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.219090][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 145.249606][ T5905] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 145.281350][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.318265][ T5905] usb 3-1: config 0 descriptor?? [ 145.324200][ T7284] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.768128][ T5905] apple 0003:05AC:0264.000D: unknown main item tag 0x6 [ 145.803199][ T7271] loop4: detected capacity change from 0 to 32768 [ 145.810545][ T5905] apple 0003:05AC:0264.000D: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.2-1/input0 [ 145.889123][ T7271] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.437 (7271) [ 146.040840][ T5905] usb 3-1: USB disconnect, device number 5 [ 146.152641][ T7271] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 146.176989][ T7271] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 146.214807][ T7271] BTRFS info (device loop4): using free space tree [ 146.561210][ T7318] dummy0: entered promiscuous mode [ 146.577503][ T7271] BTRFS info (device loop4): enabling ssd optimizations [ 146.606927][ T7271] BTRFS info (device loop4): auto enabling async discard [ 147.075209][ T6126] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 148.196178][ T7331] loop2: detected capacity change from 0 to 40427 [ 148.227046][ T7331] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 148.234900][ T7331] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.260633][ T7331] F2FS-fs (loop2): invalid crc value [ 148.280589][ T7331] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.412623][ T54] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 148.492189][ T7331] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.516948][ T7331] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.637492][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 148.697255][ T54] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 148.747107][ T54] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 148.756230][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.833289][ T54] usb 2-1: config 0 descriptor?? [ 148.883768][ T7347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.929921][ T7363] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.461'. [ 149.270073][ T7365] loop4: detected capacity change from 0 to 256 [ 149.410730][ T54] apple 0003:05AC:0264.000E: unknown main item tag 0x6 [ 149.459738][ T54] apple 0003:05AC:0264.000E: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.1-1/input0 [ 149.747059][ T5778] usb 2-1: USB disconnect, device number 6 [ 150.456850][ T787] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.566729][ T7378] loop1: detected capacity change from 0 to 1024 [ 150.570988][ T7361] loop3: detected capacity change from 0 to 32768 [ 150.585535][ T7378] EXT4-fs: Ignoring removed orlov option [ 150.604624][ T7361] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.459 (7361) [ 150.677003][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 150.690200][ T787] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 150.694427][ T7378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.699607][ T787] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 150.719884][ T787] usb 5-1: Product: syz [ 150.724099][ T787] usb 5-1: Manufacturer: syz [ 150.728820][ T787] usb 5-1: SerialNumber: syz [ 150.734583][ T7361] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 150.757466][ T787] usb 5-1: config 0 descriptor?? [ 150.774716][ T787] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 150.800473][ T7361] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 150.842808][ T7361] BTRFS info (device loop3): using free space tree [ 150.851356][ T7378] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2797: inode #15: comm syz.1.466: corrupted in-inode xattr: bad magic number in in-inode xattr [ 150.913829][ T7378] EXT4-fs (loop1): Remounting filesystem read-only [ 151.069577][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.158695][ T7361] BTRFS info (device loop3): enabling ssd optimizations [ 151.217326][ T7361] BTRFS info (device loop3): auto enabling async discard [ 151.391545][ T787] gspca_zc3xx: reg_w_i err -71 [ 151.396561][ T787] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 151.433229][ T787] usb 5-1: USB disconnect, device number 6 [ 151.639407][ T7407] loop2: detected capacity change from 0 to 128 [ 151.655217][ T7407] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 151.690237][ T7407] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.701113][ T5797] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 152.156956][ T7415] virtio-fs: tag not found [ 152.556900][ T5833] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 152.573714][ T7426] loop1: detected capacity change from 0 to 512 [ 152.617610][ T7426] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.481: corrupted in-inode xattr: invalid ea_ino [ 152.653175][ T7411] loop2: detected capacity change from 0 to 32768 [ 152.665749][ T7411] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.483 (7411) [ 152.677222][ T7426] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.481: couldn't read orphan inode 15 (err -117) [ 152.697408][ T7411] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 152.717635][ T7411] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 152.738956][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 152.752289][ T7426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.752694][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 152.773550][ T7411] BTRFS info (device loop2): using free space tree [ 152.783175][ T5833] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 152.793751][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.828641][ T5833] usb 4-1: config 0 descriptor?? [ 152.834462][ T7417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.962134][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.975276][ T7411] BTRFS info (device loop2): enabling ssd optimizations [ 152.987301][ T7411] BTRFS info (device loop2): auto enabling async discard [ 153.243688][ T5796] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 153.296341][ T5833] apple 0003:05AC:0264.000F: unknown main item tag 0x6 [ 153.321308][ T5833] apple 0003:05AC:0264.000F: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.3-1/input0 [ 153.607800][ T787] usb 4-1: USB disconnect, device number 6 [ 153.629118][ T7454] loop4: detected capacity change from 0 to 8 [ 154.477966][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 154.477983][ T27] audit: type=1326 audit(1753311843.248:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27818e9a9 code=0x7ffc0000 [ 154.570312][ T27] audit: type=1326 audit(1753311843.248:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27818e9a9 code=0x7ffc0000 [ 154.626991][ T27] audit: type=1326 audit(1753311843.248:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa27818e9a9 code=0x7ffc0000 [ 154.722069][ T27] audit: type=1326 audit(1753311843.248:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27818e9a9 code=0x7ffc0000 [ 154.784985][ T27] audit: type=1326 audit(1753311843.248:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fa27818e9a9 code=0x7ffc0000 [ 154.857258][ T27] audit: type=1326 audit(1753311843.248:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27818e9a9 code=0x7ffc0000 [ 154.916655][ T27] audit: type=1326 audit(1753311843.248:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7473 comm="syz.1.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27818e9a9 code=0x7ffc0000 [ 155.104915][ T7496] program syz.4.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.333210][ T7470] loop3: detected capacity change from 0 to 32768 [ 155.353625][ T7470] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop3 scanned by syz.3.493 (7470) [ 155.367848][ T7500] loop4: detected capacity change from 0 to 1024 [ 155.437051][ T7470] BTRFS info (device loop3): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 155.470760][ T7470] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 155.499125][ T7500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.526977][ T7470] BTRFS info (device loop3): using free space tree [ 155.654367][ T6126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.737011][ T7470] BTRFS info (device loop3): enabling ssd optimizations [ 155.744161][ T7470] BTRFS info (device loop3): auto enabling async discard [ 155.815785][ T7527] loop1: detected capacity change from 0 to 2048 [ 155.913419][ T7527] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 155.922066][ T7527] loop1: partition table partially beyond EOD, truncated [ 155.947258][ T7527] loop1: p2 start 4278190080 is beyond EOD, truncated [ 155.973717][ T7527] loop1: p4 size 8192 extends beyond EOD, truncated [ 155.979335][ T5833] kernel read not supported for file /swradio9 (pid: 5833 comm: kworker/1:5) [ 156.000823][ T5797] BTRFS info (device loop3): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 156.020062][ T7527] loop1: p6 size 8192 extends beyond EOD, truncated [ 156.040483][ T7532] program syz.2.512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.311368][ T5833] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.392475][ T7539] loop3: detected capacity change from 0 to 64 [ 156.576910][ T5833] usb 2-1: config 0 has no interfaces? [ 156.582988][ T5833] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.613327][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.646509][ T5833] usb 2-1: config 0 descriptor?? [ 156.746352][ T7544] nbd: must specify a size in bytes for the device [ 156.929702][ T787] usb 2-1: USB disconnect, device number 7 [ 157.257278][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 157.696071][ T7571] netlink: 'syz.1.530': attribute type 10 has an invalid length. [ 157.745222][ T7573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.531'. [ 157.771319][ T7571] team0: Port device netdevsim0 added [ 157.791797][ T7574] netlink: 'syz.1.530': attribute type 10 has an invalid length. [ 157.942033][ T7574] team0: Port device netdevsim0 removed [ 157.961501][ T7574] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 157.981176][ T7557] loop4: detected capacity change from 0 to 32768 [ 158.003587][ T7557] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.522 (7557) [ 158.077949][ T7557] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 158.123851][ T7557] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 158.154043][ T7557] BTRFS info (device loop4): using free space tree [ 158.322754][ T7557] BTRFS info (device loop4): enabling ssd optimizations [ 158.362812][ T7557] BTRFS info (device loop4): auto enabling async discard [ 158.721940][ T6126] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 158.914261][ T5996] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 10 /dev/loop4 scanned by udevd (5996) [ 158.933204][ T7576] loop3: detected capacity change from 0 to 40427 [ 158.971262][ T7610] loop2: detected capacity change from 0 to 1024 [ 158.987515][ T7576] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 159.026699][ T7576] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.084334][ T7610] hfsplus: found bad thread record in catalog [ 159.095238][ T7610] hfsplus: catalog searching failed [ 159.112748][ T7576] F2FS-fs (loop3): invalid crc value [ 159.203636][ T7576] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.257420][ T1129] hfsplus: b-tree write err: -5, ino 4 [ 159.357193][ T27] audit: type=1326 audit(1753311848.108:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.4.543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19c578e9a9 code=0x0 [ 159.429518][ T7623] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 159.494281][ T7576] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 159.507312][ T7576] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.852800][ T7631] loop1: detected capacity change from 0 to 1024 [ 159.916574][ T7633] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 160.057995][ T59] hfsplus: b-tree write err: -5, ino 4 [ 160.430453][ T7643] loop2: detected capacity change from 0 to 512 [ 160.477150][ T7643] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 160.637019][ T7643] EXT4-fs (loop2): 1 truncate cleaned up [ 160.659442][ T7643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.783363][ T7652] loop4: detected capacity change from 0 to 1024 [ 160.849983][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.963899][ T7652] syz.4.558: attempt to access beyond end of device [ 160.963899][ T7652] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 161.040653][ T7658] syz.4.558: attempt to access beyond end of device [ 161.040653][ T7658] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 161.084805][ T7660] loop2: detected capacity change from 0 to 256 [ 161.131335][ T7660] exfat: Deprecated parameter 'utf8' [ 161.150056][ T7660] exfat: Deprecated parameter 'utf8' [ 161.165918][ T7660] exfat: Deprecated parameter 'utf8' [ 161.217026][ T7660] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 161.367685][ T7664] loop1: detected capacity change from 0 to 512 [ 161.448040][ T7664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 161.535706][ T7664] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.590196][ T7655] loop3: detected capacity change from 0 to 32768 [ 161.611048][ T7655] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 161.779498][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 161.821320][ T6157] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 162.331848][ T7688] loop1: detected capacity change from 0 to 8192 [ 162.347596][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.486379][ T7692] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 162.549206][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.577881][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 162.609549][ T9] usb 4-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 162.620253][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.647025][ T9] usb 4-1: config 0 descriptor?? [ 162.846629][ T7700] loop4: detected capacity change from 0 to 2048 [ 162.887161][ T7700] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.972826][ T7704] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.099610][ T9] semitek 0003:1EA7:0907.0010: hidraw0: USB HID v0.00 Device [HID 1ea7:0907] on usb-dummy_hcd.3-1/input0 [ 163.332638][ T54] usb 4-1: USB disconnect, device number 7 [ 163.577204][ T7716] loop1: detected capacity change from 0 to 4096 [ 163.634457][ T7721] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.734368][ T7723] loop2: detected capacity change from 0 to 512 [ 163.925299][ T7723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.980108][ T7726] sp0: Synchronizing with TNC [ 164.024212][ T7725] [U] [ 164.172132][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.267483][ T7730] vlan2: entered promiscuous mode [ 164.272603][ T7730] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 164.311966][ T7730] vlan2: entered allmulticast mode [ 164.326977][ T7730] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 164.414027][ T7718] loop4: detected capacity change from 0 to 32768 [ 164.490172][ T7718] JBD2: Ignoring recovery information on journal [ 164.540437][ T7741] loop3: detected capacity change from 0 to 128 [ 164.572112][ T7741] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.610112][ T7741] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.627284][ T7718] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 164.657202][ T7718] (syz.4.584,7718,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 164.889834][ T6126] ocfs2: Unmounting device (7,4) on (node local) [ 164.923656][ T787] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.984906][ T5797] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.147081][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 165.183755][ T787] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.198923][ T787] usb 3-1: config 0 has no interface number 0 [ 165.210571][ T787] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 165.226864][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.245230][ T787] usb 3-1: Product: syz [ 165.261544][ T787] usb 3-1: Manufacturer: syz [ 165.273695][ T787] usb 3-1: SerialNumber: syz [ 165.282449][ T787] usb 3-1: config 0 descriptor?? [ 165.292582][ T787] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 165.315151][ T787] usb 3-1: selecting invalid altsetting 1 [ 165.321440][ T787] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 165.341335][ T787] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.352419][ T787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 165.364169][ T787] usb 3-1: media controller created [ 165.414738][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 165.432984][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.460560][ T7763] loop4: detected capacity change from 0 to 4096 [ 165.542346][ T7763] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 165.616896][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 165.631046][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.650214][ T9] usb 2-1: config 4 interface 0 has no altsetting 0 [ 165.675285][ T9] usb 2-1: string descriptor 0 read error: -22 [ 165.699596][ T9] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 165.746516][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.784877][ T7770] loop3: detected capacity change from 0 to 256 [ 165.785220][ T9] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 165.846590][ T7770] FAT-fs (loop3): Directory bread(block 64) failed [ 165.868154][ T7770] FAT-fs (loop3): Directory bread(block 65) failed [ 165.872055][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.884327][ T7770] FAT-fs (loop3): Directory bread(block 66) failed [ 165.905750][ T7770] FAT-fs (loop3): Directory bread(block 67) failed [ 165.932204][ T7770] FAT-fs (loop3): Directory bread(block 68) failed [ 165.943126][ T7770] FAT-fs (loop3): Directory bread(block 69) failed [ 165.947440][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 165.950741][ T7770] FAT-fs (loop3): Directory bread(block 70) failed [ 165.964481][ T7770] FAT-fs (loop3): Directory bread(block 71) failed [ 165.990042][ T7770] FAT-fs (loop3): Directory bread(block 72) failed [ 165.990401][ T9] usb 2-1: media controller created [ 166.007033][ T7770] FAT-fs (loop3): Directory bread(block 73) failed [ 166.094067][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.564828][ T7771] loop4: detected capacity change from 0 to 32768 [ 166.607452][ T787] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 166.627807][ T27] audit: type=1800 audit(1753311855.388:50): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.603" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 166.629565][ T787] zl10353_read_register: readreg error (reg=127, ret==-110) [ 166.660289][ T7744] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 166.688136][ T7771] ERROR: (device loop4): dbAllocBits: leaf page corrupt [ 166.688136][ T7771] [ 166.701561][ T787] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 166.710154][ T7758] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 166.722017][ T7771] ERROR: (device loop4): remounting filesystem as read-only [ 166.728956][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 166.773100][ T7771] syz.4.603: attempt to access beyond end of device [ 166.773100][ T7771] loop4: rw=34817, sector=4680704, nr_sectors = 792 limit=32768 [ 166.860050][ T9] usb 2-1: USB disconnect, device number 8 [ 166.869579][ T787] usb 3-1: USB disconnect, device number 6 [ 166.878545][ T111] blkno = 8ed80, nblocks = 63 [ 166.883283][ T111] ERROR: (device loop4): dbFree: block to be freed is outside the map [ 166.883283][ T111] [ 167.167751][ T7783] loop3: detected capacity change from 0 to 4096 [ 167.177051][ T7783] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 167.217794][ T7783] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 167.225201][ T7783] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 167.280202][ T7783] ntfs3: loop3: ino=5, "/" directory corrupted [ 168.035837][ T7806] loop4: detected capacity change from 0 to 1024 [ 168.118446][ T7806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.333147][ T7817] loop2: detected capacity change from 0 to 256 [ 168.427394][ T6126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.674599][ T7823] loop4: detected capacity change from 0 to 128 [ 168.719366][ T7823] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.772956][ T7823] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.883175][ T6126] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.126112][ T7815] loop1: detected capacity change from 0 to 32768 [ 169.200025][ T7815] ERROR: (device loop1): dbAllocAG: allocation request is larger than the allocation group size [ 169.200025][ T7815] [ 169.265654][ T7815] ERROR: (device loop1): remounting filesystem as read-only [ 169.284731][ T7815] ERROR: (device loop1): dbDiscardAG: -EIO [ 169.284731][ T7815] [ 169.622423][ T7821] loop3: detected capacity change from 0 to 32768 [ 169.671811][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.637'. [ 169.695064][ T7821] find_entry called with index = 0 [ 169.705673][ T7821] read_mapping_page failed! [ 169.711956][ T7821] ERROR: (device loop3): txCommit: [ 169.711956][ T7821] [ 169.901871][ T7843] netlink: 584 bytes leftover after parsing attributes in process `syz.1.636'. [ 170.180173][ T7850] netlink: 84 bytes leftover after parsing attributes in process `syz.3.641'. [ 170.197347][ T7850] netlink: 84 bytes leftover after parsing attributes in process `syz.3.641'. [ 170.386879][ T5842] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 170.457081][ T7856] loop2: detected capacity change from 0 to 4096 [ 170.458158][ T7838] loop4: detected capacity change from 0 to 40427 [ 170.473914][ T7856] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 170.509305][ T7838] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 170.524264][ T7838] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 170.564916][ T7838] F2FS-fs (loop4): invalid crc value [ 170.567386][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 170.592940][ T5842] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.615688][ T7838] F2FS-fs (loop4): Found nat_bits in checkpoint [ 170.623369][ T5842] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.673501][ T5842] usb 2-1: config 0 interface 0 has no altsetting 0 [ 170.691158][ T5842] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 170.724472][ T7856] ntfs: volume version 3.1. [ 170.750031][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.802998][ T5842] usb 2-1: config 0 descriptor?? [ 170.814971][ T7838] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 170.840216][ T7838] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.910633][ T7864] usb usb8: usbfs: process 7864 (syz.3.646) did not claim interface 3 before use [ 171.223794][ T5842] redragon 0003:0C45:760B.0011: item fetching failed at offset 0/4 [ 171.253227][ T5842] redragon: probe of 0003:0C45:760B.0011 failed with error -22 [ 171.427671][ T7874] loop3: detected capacity change from 0 to 1024 [ 171.443885][ T5842] usb 2-1: USB disconnect, device number 9 [ 171.475477][ T7874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.531233][ T7874] EXT4-fs: Ignoring sb option on remount [ 171.547109][ T7874] EXT4-fs: Ignoring removed orlov option [ 171.554130][ T7874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.577004][ T7874] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 171.596840][ T7874] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 171.604718][ T7874] EXT4-fs: can't change dax mount option while remounting [ 171.676219][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.953592][ T7891] bridge0: entered promiscuous mode [ 171.977141][ T7891] macvlan2: entered promiscuous mode [ 172.189006][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'. [ 172.219154][ T7900] loop3: detected capacity change from 0 to 2048 [ 172.239156][ T7902] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 172.320404][ T7900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.457891][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.832691][ T7924] process 'syz.1.673' launched '/dev/fd/3' with NULL argv: empty string added [ 173.012924][ T7930] netlink: 4692 bytes leftover after parsing attributes in process `syz.4.676'. [ 173.218122][ T7936] usb usb6: usbfs: process 7936 (syz.3.679) did not claim interface 63 before use [ 173.277979][ T7938] usb usb8: usbfs: process 7938 (syz.4.680) did not claim interface 0 before use [ 173.860069][ T7956] loop4: detected capacity change from 0 to 4096 [ 174.062514][ T7956] syz.4.689 (7956) used greatest stack depth: 20944 bytes left [ 174.580501][ T7986] loop2: detected capacity change from 0 to 256 [ 174.616461][ T7986] FAT-fs (loop2): Directory bread(block 64) failed [ 174.623291][ T7986] FAT-fs (loop2): Directory bread(block 65) failed [ 174.636849][ T7986] FAT-fs (loop2): Directory bread(block 66) failed [ 174.644077][ T7986] FAT-fs (loop2): Directory bread(block 67) failed [ 174.670767][ T7986] FAT-fs (loop2): Directory bread(block 68) failed [ 174.689767][ T7986] FAT-fs (loop2): Directory bread(block 69) failed [ 174.699646][ T7986] FAT-fs (loop2): Directory bread(block 70) failed [ 174.706343][ T7986] FAT-fs (loop2): Directory bread(block 71) failed [ 174.716567][ T7986] FAT-fs (loop2): Directory bread(block 72) failed [ 174.730767][ T7986] FAT-fs (loop2): Directory bread(block 73) failed [ 174.756979][ T787] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 174.967419][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 174.978942][ T787] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.988259][ T787] usb 5-1: config 0 has no interface number 0 [ 175.000360][ T787] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 175.012280][ T7997] loop2: detected capacity change from 0 to 128 [ 175.019143][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.036883][ T787] usb 5-1: Product: syz [ 175.051120][ T787] usb 5-1: Manufacturer: syz [ 175.071506][ T787] usb 5-1: SerialNumber: syz [ 175.083587][ T787] usb 5-1: config 0 descriptor?? [ 175.089324][ T7997] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 175.108448][ T787] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 175.136821][ T787] usb 5-1: selecting invalid altsetting 1 [ 175.150111][ T787] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.167064][ T7997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.195510][ T787] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.211001][ T787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.221975][ T787] usb 5-1: media controller created [ 175.281197][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.487013][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 175.557829][ T8005] netlink: 4108 bytes leftover after parsing attributes in process `syz.2.712'. [ 175.681747][ T9] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 175.690549][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.721224][ T9] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=37.89 [ 175.736969][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.755630][ T9] usb 4-1: Product: syz [ 175.775888][ T9] usb 4-1: Manufacturer: syz [ 175.792364][ T7999] loop1: detected capacity change from 0 to 32768 [ 175.796221][ T9] usb 4-1: SerialNumber: syz [ 175.819253][ T9] usb 4-1: config 0 descriptor?? [ 175.844714][ T9] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 175.845873][ T7999] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.034510][ T7999] XFS (loop1): Ending clean mount [ 176.074370][ T7999] XFS (loop1): Quotacheck needed: Please wait. [ 176.174478][ T7999] XFS (loop1): Quotacheck: Done. [ 176.255887][ T5804] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 176.329532][ T8024] loop2: detected capacity change from 0 to 2048 [ 176.373900][ T787] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 176.375846][ T8024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.383193][ T787] zl10353_read_register: readreg error (reg=127, ret==-110) [ 176.409385][ T787] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 176.462049][ T8024] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 176.477094][ T787] usb 5-1: USB disconnect, device number 7 [ 176.492708][ T9] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 176.499927][ T9] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 176.534864][ T9] usb 4-1: USB disconnect, device number 8 [ 176.583995][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.654302][ T8029] netlink: 'syz.2.719': attribute type 30 has an invalid length. [ 177.140666][ T8039] netlink: 'syz.3.724': attribute type 6 has an invalid length. [ 177.181922][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 177.845640][ T8035] loop2: detected capacity change from 0 to 32768 [ 177.961421][ T8035] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 177.961421][ T8035] [ 178.325248][ T8069] loop1: detected capacity change from 0 to 1024 [ 178.347984][ T8069] EXT4-fs: Ignoring removed oldalloc option [ 178.413569][ T8069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.603820][ T8063] loop3: detected capacity change from 0 to 32768 [ 178.639340][ T5804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.011398][ T5905] IPVS: starting estimator thread 0... [ 179.037975][ T8080] program syz.3.741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.127202][ T8083] IPVS: using max 16 ests per chain, 38400 per kthread [ 179.797271][ T5905] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.909750][ T8116] netlink: 'syz.1.753': attribute type 30 has an invalid length. [ 179.986820][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 180.006138][ T5905] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.036691][ T5905] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.053724][ T787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.069476][ T5905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.091054][ T5905] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 180.116899][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.139913][ T5905] usb 3-1: config 0 descriptor?? [ 180.245636][ T8127] netlink: 'syz.4.756': attribute type 6 has an invalid length. [ 180.257454][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 180.267706][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.277603][ T787] usb 4-1: config 4 interface 0 has no altsetting 0 [ 180.303308][ T787] usb 4-1: string descriptor 0 read error: -22 [ 180.310168][ T787] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 180.336832][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.366251][ T787] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 180.428939][ T787] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 180.477945][ T787] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 180.492128][ T787] usb 4-1: media controller created [ 180.529564][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.586068][ T5905] redragon 0003:0C45:760B.0012: item fetching failed at offset 0/4 [ 180.623774][ T5905] redragon: probe of 0003:0C45:760B.0012 failed with error -22 [ 180.856396][ T5905] usb 3-1: USB disconnect, device number 7 [ 181.147092][ T5833] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 181.160805][ T8149] loop4: detected capacity change from 0 to 2048 [ 181.208324][ T8149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.290772][ T8149] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 181.347281][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 181.364560][ T5833] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.395061][ T5833] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.418738][ T5833] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.444120][ T6126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.456592][ T5833] usb 2-1: config 0 interface 0 has no altsetting 0 [ 181.471891][ T5833] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 181.492824][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.527863][ T5833] usb 2-1: config 0 descriptor?? [ 181.640053][ T787] zl10353_read_register: readreg error (reg=127, ret==0) [ 181.743004][ T787] usb 4-1: USB disconnect, device number 9 [ 181.980674][ T5833] lenovo 0003:17EF:60EE.0013: unknown main item tag 0xe [ 182.019577][ T5833] lenovo 0003:17EF:60EE.0013: hidraw0: USB HID vff.fd Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 182.175237][ T5833] lenovo 0003:17EF:60EE.0013: Failed to switch middle button: -71 [ 182.195814][ T5833] lenovo 0003:17EF:60EE.0013: Fn-lock setting failed: -71 [ 182.205719][ T5833] lenovo 0003:17EF:60EE.0013: Sensitivity setting failed: -71 [ 182.247316][ T5833] usb 2-1: USB disconnect, device number 10 [ 183.299824][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 183.407522][ T8180] loop4: detected capacity change from 0 to 32768 [ 183.470079][ T8219] loop1: detected capacity change from 0 to 128 [ 183.495460][ T8180] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.534783][ T8219] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 183.545277][ T5778] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 183.683459][ T8219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.749589][ T5778] usb 3-1: Using ep0 maxpacket: 8 [ 183.777760][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.795076][ T5778] usb 3-1: config 4 interface 0 has no altsetting 0 [ 183.803390][ T8180] XFS (loop4): Ending clean mount [ 183.822738][ T5778] usb 3-1: string descriptor 0 read error: -22 [ 183.839247][ T5778] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 183.867832][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.912130][ T5778] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 183.943421][ T5778] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.990493][ T5778] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 184.027015][ T5778] usb 3-1: media controller created [ 184.100713][ T5778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.124819][ T8227] syz.3.780 (8227): drop_caches: 2 [ 185.157996][ T5778] zl10353_read_register: readreg error (reg=127, ret==0) [ 185.228968][ T8180] XFS (loop4): Quotacheck needed: Please wait. [ 185.257392][ T8228] syz.3.780 (8228): drop_caches: 2 [ 185.299232][ T5778] usb 3-1: USB disconnect, device number 8 [ 185.343771][ T8180] XFS (loop4): Quotacheck: Done. [ 185.568979][ T6126] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.679602][ T5842] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 186.843143][ T8268] loop1: detected capacity change from 0 to 32768 [ 186.887550][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 186.895135][ T5842] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 186.917692][ T5842] usb 5-1: config 1 has no interface number 0 [ 186.937869][ T5842] usb 5-1: config 1 interface 3 has no altsetting 0 [ 186.987094][ T5842] usb 5-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 187.005947][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.024275][ T5842] usb 5-1: Product: syz [ 187.047222][ T5842] usb 5-1: Manufacturer: syz [ 187.061314][ T5842] usb 5-1: SerialNumber: syz [ 187.119327][ T8284] syz.2.791 (8284): drop_caches: 2 [ 187.338312][ T8268] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 187.338312][ T8268] [ 187.373504][ T5842] usb 5-1: USB disconnect, device number 8 [ 187.514861][ T8282] syz.2.791 (8282): drop_caches: 2 [ 187.890150][ T8291] loop3: detected capacity change from 0 to 40427 [ 187.916919][ T8291] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 187.958932][ T8291] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.991333][ T8291] F2FS-fs (loop3): invalid crc value [ 188.050888][ T8291] F2FS-fs (loop3): Found nat_bits in checkpoint [ 188.223431][ T8291] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 188.245722][ T8291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 188.368834][ T54] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.558718][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 188.595819][ T54] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.618577][ T54] usb 5-1: config 4 interface 0 has no altsetting 0 [ 188.646560][ T54] usb 5-1: string descriptor 0 read error: -22 [ 188.653965][ T54] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 188.680913][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.691345][ T8327] ptrace attach of "./syz-executor exec"[5804] was attempted by ""[8327] [ 188.718344][ T54] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 188.766740][ T54] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.788760][ T54] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 188.799560][ T54] usb 5-1: media controller created [ 188.868448][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.283505][ T8339] loop1: detected capacity change from 0 to 1024 [ 189.394417][ T3498] hfsplus: b-tree write err: -5, ino 4 [ 189.960678][ T54] zl10353_read_register: readreg error (reg=127, ret==0) [ 190.003884][ T54] usb 5-1: USB disconnect, device number 9 [ 190.651072][ T8347] syz.4.804 (8347): drop_caches: 2 [ 190.713281][ T8349] syz.4.804 (8349): drop_caches: 2 [ 190.916859][ T5842] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.996226][ T8359] ptrace attach of "./syz-executor exec"[5797] was attempted by ""[8359] [ 190.998008][ T8358] syz.4.820 (8358): drop_caches: 2 [ 191.048033][ T8358] syz.4.820 (8358): drop_caches: 2 [ 191.117930][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 191.130225][ T5842] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 191.156603][ T5842] usb 2-1: config 1 has no interface number 0 [ 191.167335][ T5842] usb 2-1: config 1 interface 3 has no altsetting 0 [ 191.188299][ T5842] usb 2-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 191.206865][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.223965][ T5842] usb 2-1: Product: syz [ 191.237101][ T5842] usb 2-1: Manufacturer: syz [ 191.241985][ T5842] usb 2-1: SerialNumber: syz [ 191.373217][ T8368] syz.4.824 (8368): drop_caches: 2 [ 191.407453][ T8371] loop2: detected capacity change from 0 to 1024 [ 191.412777][ T8368] syz.4.824 (8368): drop_caches: 2 [ 191.502696][ T5842] usb 2-1: USB disconnect, device number 11 [ 191.600403][ T59] hfsplus: b-tree write err: -5, ino 4 [ 191.695261][ T8377] tmpfs: Too few inodes for current use [ 192.035624][ T8388] syz.4.827 (8388): drop_caches: 2 [ 192.075585][ T8388] syz.4.827 (8388): drop_caches: 2 [ 192.222187][ T8393] loop2: detected capacity change from 0 to 128 [ 192.307632][ T8393] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.343917][ T8393] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.561198][ T5796] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.594228][ T8405] loop1: detected capacity change from 0 to 4096 [ 192.614140][ T8407] program syz.3.843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.662813][ T8405] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 192.774570][ T8411] loop2: detected capacity change from 0 to 256 [ 192.969578][ T8411] FAT-fs (loop2): Directory bread(block 64) failed [ 193.007571][ T8411] FAT-fs (loop2): Directory bread(block 65) failed [ 193.035856][ T8411] FAT-fs (loop2): Directory bread(block 66) failed [ 193.057549][ T8411] FAT-fs (loop2): Directory bread(block 67) failed [ 193.064261][ T8411] FAT-fs (loop2): Directory bread(block 68) failed [ 193.107833][ T8411] FAT-fs (loop2): Directory bread(block 69) failed [ 193.134167][ T8411] FAT-fs (loop2): Directory bread(block 70) failed [ 193.147416][ T8411] FAT-fs (loop2): Directory bread(block 71) failed [ 193.154213][ T8411] FAT-fs (loop2): Directory bread(block 72) failed [ 193.218004][ T8411] FAT-fs (loop2): Directory bread(block 73) failed [ 193.297955][ T8420] loop3: detected capacity change from 0 to 4096 [ 193.325142][ T8420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.393644][ T8420] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 193.560622][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.616682][ T8432] loop4: detected capacity change from 0 to 512 [ 193.735375][ T8432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 193.770622][ T8432] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.040756][ T6126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 194.452565][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.500364][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 194.554179][ T8468] loop3: detected capacity change from 0 to 2048 [ 194.682930][ T8468] Alternate GPT is invalid, using primary GPT. [ 194.729867][ T8468] loop3: p2 p3 p7 [ 195.076934][ T5842] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.169438][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 195.179984][ T6157] udevd[6157]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 195.192493][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 195.214868][ T8488] loop3: detected capacity change from 0 to 8 [ 195.256444][ T8490] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 195.271416][ T8490] CUSE: unknown device info "3ܟ,̘" [ 195.297337][ T8490] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 195.297337][ T8490] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 195.329377][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.344002][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.367884][ T8490] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 195.381909][ T5842] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 195.405338][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.405398][ T8490] CUSE: DEVNAME unspecified [ 195.435790][ T5842] usb 3-1: config 0 descriptor?? [ 195.882656][ T5842] holtek_kbd 0003:04D9:A055.0014: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 196.037091][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.088323][ T5778] usb 3-1: USB disconnect, device number 9 [ 196.109532][ T8516] loop3: detected capacity change from 0 to 1024 [ 196.156435][ T8516] hfsplus: bad catalog entry type [ 196.186486][ T8514] loop4: detected capacity change from 0 to 2048 [ 196.220707][ T3498] hfsplus: b-tree write err: -5, ino 4 [ 196.255562][ T8514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.272315][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.312524][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.345931][ T787] usb 2-1: New USB device found, idVendor=056a, idProduct=ff62, bcdDevice= 0.f5 [ 196.374481][ T27] audit: type=1800 audit(1753311885.138:51): pid=8514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.878" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 196.396059][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.415922][ T787] usb 2-1: config 0 descriptor?? [ 196.892551][ T787] wacom 0003:056A:FF62.0015: Unknown device_type for 'HID 056a:ff62'. Ignoring. [ 197.113697][ T8536] loop4: detected capacity change from 0 to 512 [ 197.136415][ T787] usb 2-1: USB disconnect, device number 12 [ 197.213580][ T8536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.227189][ T8536] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.314503][ T8536] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.891: directory missing '..' [ 197.444729][ T6126] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.533300][ T8529] loop2: detected capacity change from 0 to 32768 [ 197.563027][ T8529] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.887 (8529) [ 197.617576][ T8529] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.657113][ T8529] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 197.668551][ T8529] BTRFS info (device loop2): using free space tree [ 197.858449][ T8568] loop3: detected capacity change from 0 to 512 [ 197.903882][ T8529] BTRFS info (device loop2): enabling ssd optimizations [ 197.929320][ T8568] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.898: corrupted in-inode xattr: invalid ea_ino [ 197.955395][ T8529] BTRFS info (device loop2): auto enabling async discard [ 198.024519][ T8568] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.898: couldn't read orphan inode 15 (err -117) [ 198.088782][ T8568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.126910][ T5778] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.241654][ T5796] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 198.299516][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.337759][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.389686][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.436061][ T5778] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 198.466541][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.544717][ T5778] usb 2-1: config 0 descriptor?? [ 198.815099][ T8592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.907'. [ 198.847401][ T8592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.907'. [ 198.964350][ T8590] loop4: detected capacity change from 0 to 4096 [ 198.999531][ T5778] pyra 0003:1E7D:2CF6.0016: item fetching failed at offset 5/7 [ 199.028524][ T5778] pyra 0003:1E7D:2CF6.0016: parse failed [ 199.034315][ T5778] pyra: probe of 0003:1E7D:2CF6.0016 failed with error -22 [ 199.261376][ T787] usb 2-1: USB disconnect, device number 13 [ 199.864221][ T8594] loop3: detected capacity change from 0 to 32768 [ 199.952985][ T8594] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.111685][ T8620] loop4: detected capacity change from 0 to 256 [ 200.143994][ T8594] XFS (loop3): Ending clean mount [ 200.154929][ T8594] XFS (loop3): Quotacheck needed: Please wait. [ 200.174441][ T8620] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 200.227537][ T8594] XFS (loop3): Quotacheck: Done. [ 200.366324][ T5797] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.668780][ T8627] loop2: detected capacity change from 0 to 256 [ 200.772404][ T8627] FAT-fs (loop2): Directory bread(block 64) failed [ 200.792877][ T8627] FAT-fs (loop2): Directory bread(block 65) failed [ 200.816544][ T8627] FAT-fs (loop2): Directory bread(block 66) failed [ 200.851959][ T8627] FAT-fs (loop2): Directory bread(block 67) failed [ 200.873550][ T8627] FAT-fs (loop2): Directory bread(block 68) failed [ 200.884669][ T8627] FAT-fs (loop2): Directory bread(block 69) failed [ 200.891839][ T8627] FAT-fs (loop2): Directory bread(block 70) failed [ 200.899088][ T8627] FAT-fs (loop2): Directory bread(block 71) failed [ 200.908448][ T8627] FAT-fs (loop2): Directory bread(block 72) failed [ 200.915405][ T8627] FAT-fs (loop2): Directory bread(block 73) failed [ 201.104391][ T8636] loop3: detected capacity change from 0 to 256 [ 201.417417][ T8646] "syz.3.930" (8646) uses obsolete ecb(arc4) skcipher [ 201.685575][ T8653] loop1: detected capacity change from 0 to 4096 [ 201.698082][ T8653] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 201.743674][ T8652] loop4: detected capacity change from 0 to 4096 [ 201.767032][ T8653] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 201.788494][ T8653] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount. [ 201.831346][ T8653] ntfs: (device loop1): read_ntfs_boot_sector(): Using backup boot sector. [ 201.876197][ T8653] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 201.926285][ T8653] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 201.994548][ T8653] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 202.017228][ T8653] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 202.039361][ T8653] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 202.054788][ T8653] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 202.087062][ T8653] ntfs: volume version 3.1. [ 202.179134][ T8658] loop3: detected capacity change from 0 to 8192 [ 202.222115][ T8658] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.246913][ T8658] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 202.302552][ T8658] REISERFS (device loop3): using ordered data mode [ 202.336915][ T8658] reiserfs: using flush barriers [ 202.391056][ T8658] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.537474][ T8658] REISERFS (device loop3): checking transaction log (loop3) [ 202.579251][ T8658] REISERFS (device loop3): Using tea hash to sort names [ 202.595712][ T8658] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 202.708795][ T8676] loop2: detected capacity change from 0 to 64 [ 202.978234][ T8681] loop3: detected capacity change from 0 to 512 [ 203.011601][ T8681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.045653][ T8681] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.944: bad orphan inode 131083 [ 203.069072][ T8681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.150454][ T8681] overlayfs: upper fs needs to support d_type. [ 203.292964][ T5797] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /240/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 203.334241][ T8688] loop2: detected capacity change from 0 to 4096 [ 203.374548][ T8688] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 203.461002][ T8688] ntfs3: loop2: Failed to load $Extend (-22). [ 203.471003][ T8688] ntfs3: loop2: Failed to initialize $Extend. [ 203.605913][ T8696] loop1: detected capacity change from 0 to 64 [ 203.838740][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.939943][ T8704] loop4: detected capacity change from 0 to 256 [ 204.011788][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.131294][ T8702] loop2: detected capacity change from 0 to 4096 [ 204.153712][ T8702] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 204.183369][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.240028][ T8702] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 204.258648][ T8702] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 204.318312][ T8702] ntfs3: loop2: ino=5, "/" directory corrupted [ 204.332366][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.559569][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.761903][ T8712] loop2: detected capacity change from 0 to 4096 [ 204.866411][ T8717] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.075275][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 205.587185][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.598635][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.607424][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.625249][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.633638][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.651992][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.873408][ T8732] loop2: detected capacity change from 0 to 4096 [ 205.931525][ T8741] loop1: detected capacity change from 0 to 4096 [ 206.029171][ T8741] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 206.098622][ T8741] ntfs3: loop1: Failed to load $Extend (-22). [ 206.104823][ T8741] ntfs3: loop1: Failed to initialize $Extend. [ 206.756918][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 206.763170][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 206.825936][ T8735] loop4: detected capacity change from 0 to 32768 [ 207.025045][ T8735] ERROR: (device loop4): dbAllocAG: allocation request is larger than the allocation group size [ 207.025045][ T8735] [ 207.042037][ T8735] ERROR: (device loop4): remounting filesystem as read-only [ 207.086992][ T8735] ERROR: (device loop4): dbDiscardAG: -EIO [ 207.086992][ T8735] [ 207.115203][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 207.717126][ T50] Bluetooth: hci2: command tx timeout [ 208.201976][ T48] hsr_slave_0: left promiscuous mode [ 208.228085][ T48] hsr_slave_1: left promiscuous mode [ 208.234277][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.260217][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.274170][ T8773] loop2: detected capacity change from 0 to 32768 [ 208.281819][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.307465][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.337431][ T48] bridge_slave_1: left allmulticast mode [ 208.353312][ T48] bridge_slave_1: left promiscuous mode [ 208.368351][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.374737][ T8773] find_entry called with index = 0 [ 208.388269][ T48] bridge_slave_0: left allmulticast mode [ 208.394525][ T8773] read_mapping_page failed! [ 208.398084][ T48] bridge_slave_0: left promiscuous mode [ 208.408306][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.415806][ T8773] ERROR: (device loop2): txCommit: [ 208.415806][ T8773] [ 208.533370][ T48] bridge0: left promiscuous mode [ 208.540748][ T48] veth1_macvtap: left promiscuous mode [ 208.546346][ T48] veth0_macvtap: left promiscuous mode [ 208.552630][ T48] veth1_vlan: left promiscuous mode [ 208.558183][ T48] veth0_vlan: left promiscuous mode [ 208.851457][ T8799] loop2: detected capacity change from 0 to 4096 [ 208.928683][ T8790] loop4: detected capacity change from 0 to 32768 [ 208.953845][ T8790] XFS: ikeep mount option is deprecated. [ 208.994016][ T8790] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.208964][ T8790] XFS (loop4): Ending clean mount [ 209.229179][ T8790] XFS (loop4): Quotacheck needed: Please wait. [ 209.331917][ T8790] XFS (loop4): Quotacheck: Done. [ 209.577093][ T6126] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.801253][ T50] Bluetooth: hci2: command tx timeout [ 210.318822][ T48] team0 (unregistering): Port device team_slave_1 removed [ 210.390168][ T48] team0 (unregistering): Port device team_slave_0 removed [ 210.484058][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.546132][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.096056][ T48] bond0 (unregistering): Released all slaves [ 211.188964][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.196310][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.204032][ T8733] bridge_slave_0: entered allmulticast mode [ 211.215985][ T8733] bridge_slave_0: entered promiscuous mode [ 211.251863][ T8811] netlink: 'syz.2.986': attribute type 10 has an invalid length. [ 211.275697][ T8811] team0: Port device netdevsim0 added [ 211.282549][ T8811] syz.2.986 (8811) used greatest stack depth: 20592 bytes left [ 211.285825][ T8812] netlink: 'syz.2.986': attribute type 10 has an invalid length. [ 211.310299][ T8812] team0: Port device netdevsim0 removed [ 211.322389][ T8812] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 211.340575][ T8816] bridge0: entered promiscuous mode [ 211.346012][ T8816] macvlan2: entered promiscuous mode [ 211.353712][ T8818] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 211.391024][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.428366][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.458672][ T8733] bridge_slave_1: entered allmulticast mode [ 211.472387][ T8733] bridge_slave_1: entered promiscuous mode [ 211.670100][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.709420][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.878257][ T50] Bluetooth: hci2: command tx timeout [ 211.920062][ T8733] team0: Port device team_slave_0 added [ 211.931962][ T8733] team0: Port device team_slave_1 added [ 212.069350][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.114271][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.191355][ T8733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.257700][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.264737][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.361209][ T8733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.393070][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.998'. [ 212.551680][ T8733] hsr_slave_0: entered promiscuous mode [ 212.573582][ T8846] loop2: detected capacity change from 0 to 4096 [ 212.580505][ T8733] hsr_slave_1: entered promiscuous mode [ 212.644744][ T8733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.663227][ T8824] loop4: detected capacity change from 0 to 32768 [ 212.681931][ T8733] Cannot create hsr debugfs directory [ 212.689479][ T8824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.991 (8824) [ 212.773225][ T8824] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.797658][ T8824] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 212.833424][ T8824] BTRFS info (device loop4): using free space tree [ 213.082936][ T8824] BTRFS info (device loop4): enabling ssd optimizations [ 213.097729][ T8872] netlink: 4692 bytes leftover after parsing attributes in process `syz.2.1003'. [ 213.100229][ T8824] BTRFS info (device loop4): auto enabling async discard [ 213.375194][ T8877] usb usb6: usbfs: process 8877 (syz.1.1005) did not claim interface 63 before use [ 213.588708][ T6126] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.665417][ T8733] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.750844][ T8733] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.803542][ T8733] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.831535][ T8733] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.958114][ T50] Bluetooth: hci2: command tx timeout [ 213.976184][ T5996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5996) [ 214.331524][ T8733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.417804][ T8733] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.438227][ T8881] loop2: detected capacity change from 0 to 32768 [ 214.459308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.466476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.488886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.496129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.616988][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 214.617007][ T27] audit: type=1800 audit(1753311903.378:52): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1006" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 214.648734][ T8881] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 214.648734][ T8881] [ 214.681731][ T8881] ERROR: (device loop2): remounting filesystem as read-only [ 214.684063][ T8733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.703883][ T8881] syz.2.1006: attempt to access beyond end of device [ 214.703883][ T8881] loop2: rw=34817, sector=4680704, nr_sectors = 792 limit=32768 [ 214.753061][ T112] blkno = 8ed80, nblocks = 63 [ 214.763074][ T112] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 214.763074][ T112] [ 215.002532][ T8910] loop4: detected capacity change from 0 to 1024 [ 215.079362][ T8913] loop1: detected capacity change from 0 to 4096 [ 215.102195][ T8913] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 215.142729][ T8910] hfsplus: found bad thread record in catalog [ 215.157142][ T8910] hfsplus: catalog searching failed [ 215.246335][ T8913] ntfs: volume version 3.1. [ 215.358283][ T1118] hfsplus: b-tree write err: -5, ino 4 [ 215.362525][ T8733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.036394][ T8733] veth0_vlan: entered promiscuous mode [ 216.073357][ T8733] veth1_vlan: entered promiscuous mode [ 216.140058][ T8733] veth0_macvtap: entered promiscuous mode [ 216.161237][ T8733] veth1_macvtap: entered promiscuous mode [ 216.210964][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.237167][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.254049][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.264956][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.281688][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.292808][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.311985][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.336112][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.355426][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.383538][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.394256][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.398018][ T8924] loop2: detected capacity change from 0 to 32768 [ 216.404983][ T8733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.430353][ T8733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.437557][ T8924] XFS: ikeep mount option is deprecated. [ 216.465557][ T8733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.495308][ T8924] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.528255][ T8733] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.554735][ T8733] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.568311][ T8733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.577704][ T8733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.767451][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.775441][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.856061][ T8924] XFS (loop2): Ending clean mount [ 216.865521][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.876852][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.886249][ T8924] XFS (loop2): Quotacheck needed: Please wait. [ 217.019178][ T8924] XFS (loop2): Quotacheck: Done. [ 217.078431][ T8955] loop4: detected capacity change from 0 to 8 [ 217.100458][ T8951] loop5: detected capacity change from 0 to 1024 [ 217.270312][ T8951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.272896][ T5796] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.409556][ T8733] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.642905][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 217.876059][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 217.901598][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.927023][ T9] usb 2-1: Product: syz [ 217.929396][ T8969] loop4: detected capacity change from 0 to 4096 [ 217.931246][ T9] usb 2-1: Manufacturer: syz [ 217.983341][ T9] usb 2-1: SerialNumber: syz [ 218.002905][ T9] usb 2-1: config 0 descriptor?? [ 218.043401][ T8979] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.255488][ T8982] loop5: detected capacity change from 0 to 1024 [ 218.513091][ T34] hfsplus: b-tree write err: -5, ino 4 [ 218.659332][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 218.686920][ T9] usb 2-1: Please update to version 0.2 or newer [ 218.773833][ T8999] loop2: detected capacity change from 0 to 8 [ 218.852480][ T9] usb 2-1: USB disconnect, device number 14 [ 219.532052][ T9] IPVS: starting estimator thread 0... [ 219.658296][ T9024] IPVS: using max 18 ests per chain, 43200 per kthread [ 220.681078][ T9060] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1049'. [ 220.873682][ T9029] loop1: detected capacity change from 0 to 40427 [ 220.903280][ T9029] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 220.938191][ T9029] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 220.943040][ T9063] loop4: detected capacity change from 0 to 1024 [ 220.961982][ T9029] F2FS-fs (loop1): invalid crc value [ 221.009493][ T9029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 221.105242][ T9037] loop5: detected capacity change from 0 to 40427 [ 221.168620][ T9037] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 221.198862][ T9037] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 221.259135][ T9037] F2FS-fs (loop5): Found nat_bits in checkpoint [ 221.268747][ T9029] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 221.299674][ T9029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 221.381147][ T59] hfsplus: b-tree write err: -5, ino 4 [ 221.504788][ T9037] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 221.524331][ T9037] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 221.784828][ T8733] syz-executor: attempt to access beyond end of device [ 221.784828][ T8733] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.839621][ T8733] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 223.482149][ T9122] netlink: 368 bytes leftover after parsing attributes in process `syz.5.1066'. [ 223.514947][ T9088] loop1: detected capacity change from 0 to 40427 [ 223.573942][ T9088] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 223.622303][ T9088] F2FS-fs (loop1): invalid crc value [ 223.670368][ T9088] F2FS-fs (loop1): Found nat_bits in checkpoint [ 223.887691][ T9088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 223.971836][ T27] audit: type=1800 audit(1753311912.738:53): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1053" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 224.027020][ T9139] sock: sock_timestamping_bind_phc: sock not bind to device [ 224.091978][ T5804] syz-executor: attempt to access beyond end of device [ 224.091978][ T5804] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 224.150089][ T5804] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 225.066855][ T9161] raw_sendmsg: syz.2.1079 forgot to set AF_INET. Fix it! [ 225.280660][ T9145] loop5: detected capacity change from 0 to 40427 [ 225.336794][ T9145] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 225.359463][ T9145] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 225.410029][ T9145] F2FS-fs (loop5): invalid crc value [ 225.687333][ T9145] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 225.694464][ T9145] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 225.775182][ T9145] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 226.402401][ T9186] loop2: detected capacity change from 0 to 1024 [ 226.577149][ T59] hfsplus: b-tree write err: -5, ino 4 [ 227.219117][ T9211] loop5: detected capacity change from 0 to 256 [ 227.226450][ T9211] exfat: Deprecated parameter 'utf8' [ 227.232350][ T9211] exfat: Deprecated parameter 'utf8' [ 227.238688][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 227.255563][ T9211] exfat: Deprecated parameter 'utf8' [ 227.354889][ T9211] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 227.653167][ T9218] loop2: detected capacity change from 0 to 1024 [ 227.714815][ T9218] syz.2.1102: attempt to access beyond end of device [ 227.714815][ T9218] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 227.791252][ T9218] syz.2.1102: attempt to access beyond end of device [ 227.791252][ T9218] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 227.963399][ T9203] loop1: detected capacity change from 0 to 40427 [ 228.003979][ T9203] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 228.028724][ T9203] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 228.073859][ T9203] F2FS-fs (loop1): invalid crc value [ 228.137996][ T9203] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.327335][ T9203] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 228.346894][ T9203] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 228.946969][ T9225] loop4: detected capacity change from 0 to 32768 [ 229.033734][ T9225] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 229.380297][ T9225] XFS (loop4): Ending clean mount [ 229.400227][ T9242] loop5: detected capacity change from 0 to 32768 [ 229.425081][ T9] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 229.445750][ T9242] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1110 (9242) [ 229.458197][ T5905] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 229.487310][ T9] XFS (loop4): Unmount and run xfs_repair [ 229.493239][ T9] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 229.532745][ T9] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 229.550992][ T9242] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 229.577538][ T9] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 229.586944][ T9] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 229.596203][ T9242] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 229.606318][ T9] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 229.623630][ T9242] BTRFS info (device loop5): force zlib compression, level 3 [ 229.633301][ T9] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 229.653491][ T9242] BTRFS info (device loop5): force clearing of disk cache [ 229.663599][ T9] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 229.676113][ T5905] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.696879][ T9242] BTRFS info (device loop5): turning off barriers [ 229.703385][ T9242] BTRFS info (device loop5): doing ref verification [ 229.710093][ T5905] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.727348][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 229.743045][ T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 229.752058][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.763069][ T9242] BTRFS info (device loop5): enabling disk space caching [ 229.775119][ T9225] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x20 len 8 error 74 [ 229.797272][ T9242] BTRFS info (device loop5): disk space caching is enabled [ 229.806450][ T5905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 229.846614][ T9225] XFS (loop4): Failed to initialize disk quotas. [ 229.857317][ T5905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 229.880281][ T5905] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.890074][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.899082][ T5905] usb 3-1: Product: syz [ 229.903296][ T5905] usb 3-1: Manufacturer: syz [ 229.918576][ T5905] cdc_wdm 3-1:1.0: skipping garbage [ 229.925648][ T5905] cdc_wdm 3-1:1.0: skipping garbage [ 229.941335][ T5905] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 229.949010][ T5905] cdc_wdm 3-1:1.0: Unknown control protocol [ 230.001505][ T9242] BTRFS info (device loop5): enabling ssd optimizations [ 230.009502][ T6126] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 230.017059][ T9242] BTRFS info (device loop5): auto enabling async discard [ 230.045967][ T9242] BTRFS info (device loop5): rebuilding free space tree [ 230.148630][ T5905] usb 3-1: USB disconnect, device number 10 [ 230.207826][ T9242] BTRFS info (device loop5): disabling free space tree [ 230.248878][ T9242] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.311455][ T9242] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 230.751408][ T9242] BTRFS info (device loop5): balance: start -d -m [ 230.787955][ T9242] BTRFS info (device loop5): balance: paused [ 230.994354][ T8733] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 231.067232][ T5905] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 231.282754][ T5905] usb 5-1: config 0 has an invalid interface number: 181 but max is 0 [ 231.295551][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.322042][ T5905] usb 5-1: config 0 has no interface number 0 [ 231.345051][ T5905] usb 5-1: too many endpoints for config 0 interface 181 altsetting 6: 156, using maximum allowed: 30 [ 231.361027][ T5905] usb 5-1: config 0 interface 181 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 156 [ 231.378142][ T9311] loop5: detected capacity change from 0 to 128 [ 231.392582][ T5905] usb 5-1: config 0 interface 181 has no altsetting 0 [ 231.415005][ T9311] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 231.419166][ T5905] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 231.440768][ T9311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.451360][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.473393][ T5905] usb 5-1: config 0 descriptor?? [ 231.556876][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 231.695757][ T5905] usb 5-1: string descriptor 0 read error: -71 [ 231.759263][ T5905] usb 5-1: USB disconnect, device number 10 [ 231.786029][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.807199][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.815356][ T9] usb 2-1: Product: syz [ 231.834049][ T9] usb 2-1: Manufacturer: syz [ 231.841969][ T9] usb 2-1: SerialNumber: syz [ 231.871696][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.936675][ T8] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.125255][ T7760] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.152521][ T5778] usb 2-1: USB disconnect, device number 15 [ 232.234245][ T9317] loop2: detected capacity change from 0 to 40427 [ 232.260983][ T9317] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 232.287697][ T9317] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 232.306838][ T7760] usb 6-1: Using ep0 maxpacket: 8 [ 232.313302][ T9317] F2FS-fs (loop2): invalid crc value [ 232.320783][ T7760] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.348574][ T9317] F2FS-fs (loop2): Found nat_bits in checkpoint [ 232.352642][ T7760] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 232.376782][ T7760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.390000][ T7760] usb 6-1: config 0 descriptor?? [ 232.473826][ T9317] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 232.482462][ T9317] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 232.719540][ T9329] netlink: 'syz.4.1135': attribute type 2 has an invalid length. [ 232.822168][ T7760] kye 0003:0458:4018.0017: unbalanced collection at end of report description [ 232.862426][ T7760] kye 0003:0458:4018.0017: parse failed [ 232.897431][ T7760] kye: probe of 0003:0458:4018.0017 failed with error -22 [ 233.006116][ T8] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 233.048351][ T8] ath9k_htc: Failed to initialize the device [ 233.062410][ T7760] usb 6-1: USB disconnect, device number 2 [ 233.066981][ T5778] usb 2-1: ath9k_htc: USB layer deinitialized [ 233.494797][ T9347] loop1: detected capacity change from 0 to 2048 [ 233.532768][ T9347] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 233.571759][ T9347] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.777618][ T9356] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 233.777618][ T9356] program syz.2.1134 not setting count and/or reply_len properly [ 234.101545][ T9363] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 234.361394][ T5778] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 234.424771][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'. [ 234.574841][ T5778] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 234.600563][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.607041][ T9381] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.1153'. [ 234.619056][ T5778] usb 3-1: Product: syz [ 234.623877][ T5778] usb 3-1: Manufacturer: syz [ 234.636913][ T5778] usb 3-1: SerialNumber: syz [ 234.654450][ T5778] usb 3-1: config 0 descriptor?? [ 234.677650][ T5778] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 011 [ 234.874440][ T9355] loop4: detected capacity change from 0 to 40427 [ 234.921636][ T9355] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 234.941586][ T9355] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 234.974083][ T9355] F2FS-fs (loop4): invalid crc value [ 235.009000][ T9355] F2FS-fs (loop4): Found nat_bits in checkpoint [ 235.212381][ T9355] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 235.240500][ T9355] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 235.299863][ T5778] i2c i2c-1: failure reading functionality [ 235.332561][ T5778] i2c i2c-1: connected i2c-tiny-usb device [ 235.364349][ T5778] usb 3-1: USB disconnect, device number 11 [ 235.543300][ T9404] random: crng reseeded on system resumption [ 236.135179][ T9414] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 236.751522][ T9435] loop2: detected capacity change from 0 to 1024 [ 236.830128][ T9435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.861745][ T9435] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.948718][ T9446] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 236.960506][ T9446] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 236.968968][ T9446] CPU: 1 PID: 9446 Comm: syz.5.1171 Not tainted 6.6.99-syzkaller #0 [ 236.976986][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.987093][ T9446] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 236.992693][ T9446] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 d2 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 d2 e0 f9 4d 8b 24 24 48 83 c3 [ 237.012348][ T9446] RSP: 0018:ffffc900039b7a78 EFLAGS: 00010206 [ 237.018508][ T9446] RAX: 0000000000000005 RBX: ffff88801dfbd180 RCX: 0000000000080000 [ 237.026596][ T9446] RDX: ffffc90012e1b000 RSI: 00000000000007da RDI: 00000000000007db [ 237.034614][ T9446] RBP: 0000000000000001 R08: ffff88802c2b712f R09: 1ffff11005856e25 [ 237.042647][ T9446] R10: dffffc0000000000 R11: ffffed1005856e26 R12: 0000000000000028 [ 237.050671][ T9446] R13: dffffc0000000000 R14: ffff88802c2b7000 R15: dffffc0000000000 [ 237.058687][ T9446] FS: 00007f7f9d7e56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 237.067736][ T9446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.074338][ T9446] CR2: 0000001b2c21fffc CR3: 000000004b79d000 CR4: 00000000003506e0 [ 237.082323][ T9446] Call Trace: [ 237.085611][ T9446] [ 237.088582][ T9446] pcl818_detach+0x66/0xd0 [ 237.093023][ T9446] comedi_device_detach+0x131/0x6f0 [ 237.098246][ T9446] comedi_unlocked_ioctl+0xc35/0xf00 [ 237.103553][ T9446] ? comedi_poll+0x8c0/0x8c0 [ 237.108188][ T9446] ? __fget_files+0x28/0x4d0 [ 237.112813][ T9446] ? bpf_lsm_file_ioctl+0x9/0x10 [ 237.117758][ T9446] ? security_file_ioctl+0x80/0xa0 [ 237.122892][ T9446] ? comedi_poll+0x8c0/0x8c0 [ 237.127499][ T9446] __se_sys_ioctl+0xfd/0x170 [ 237.132107][ T9446] do_syscall_64+0x55/0xb0 [ 237.136534][ T9446] ? clear_bhb_loop+0x40/0x90 [ 237.141228][ T9446] ? clear_bhb_loop+0x40/0x90 [ 237.145916][ T9446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.151830][ T9446] RIP: 0033:0x7f7f9c98e9a9 [ 237.156272][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.176154][ T9446] RSP: 002b:00007f7f9d7e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.184587][ T9446] RAX: ffffffffffffffda RBX: 00007f7f9cbb5fa0 RCX: 00007f7f9c98e9a9 [ 237.192657][ T9446] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 237.200763][ T9446] RBP: 00007f7f9ca10d69 R08: 0000000000000000 R09: 0000000000000000 [ 237.208762][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.216749][ T9446] R13: 0000000000000000 R14: 00007f7f9cbb5fa0 R15: 00007ffc1fe76238 [ 237.224738][ T9446] [ 237.227788][ T9446] Modules linked in: [ 237.259482][ T9446] ---[ end trace 0000000000000000 ]--- [ 237.269688][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.274735][ T9446] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 237.308288][ T9446] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 d2 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 d2 e0 f9 4d 8b 24 24 48 83 c3 [ 237.330411][ T9446] RSP: 0018:ffffc900039b7a78 EFLAGS: 00010206 [ 237.336609][ T9446] RAX: 0000000000000005 RBX: ffff88801dfbd180 RCX: 0000000000080000 [ 237.345974][ T9446] RDX: ffffc90012e1b000 RSI: 00000000000007da RDI: 00000000000007db [ 237.354404][ T9446] RBP: 0000000000000001 R08: ffff88802c2b712f R09: 1ffff11005856e25 [ 237.364824][ T9446] R10: dffffc0000000000 R11: ffffed1005856e26 R12: 0000000000000028 [ 237.374651][ T9446] R13: dffffc0000000000 R14: ffff88802c2b7000 R15: dffffc0000000000 [ 237.383106][ T9446] FS: 00007f7f9d7e56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 237.393961][ T9446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.403263][ T9446] CR2: 00007f7f9d7c3f98 CR3: 000000004b79d000 CR4: 00000000003506f0 [ 237.413274][ T9446] Kernel panic - not syncing: Fatal exception [ 237.419728][ T9446] Kernel Offset: disabled [ 237.424090][ T9446] Rebooting in 86400 seconds..