last executing test programs: 3.253252798s ago: executing program 2 (id=775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x34040006}, 0x20000000) 2.863657586s ago: executing program 1 (id=780): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @loopback}, {0xa, 0x4e21, 0x101, @mcast2, 0x7}, r1, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 2.72624651s ago: executing program 2 (id=782): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r1, @ANYBLOB="00e900000243010024001a8009000100766c616e0000000014000480100004800c"], 0x44}}, 0x0) 2.587817004s ago: executing program 1 (id=785): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.490380293s ago: executing program 2 (id=786): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1805"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000009ae4"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 2.398191002s ago: executing program 1 (id=789): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.323767489s ago: executing program 0 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="050006"], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) 2.106976891s ago: executing program 0 (id=793): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.92468546s ago: executing program 2 (id=794): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x1}, {&(0x7f0000000180)="f3aa7a115f7a61fa44491e71ca40a1d0b1343c48cf53d147ee49c4d0dca59dc6515a70216f097c814d60b225e028e55696145ca4806e59c1cf52e5ff1299f3b8f7c395ee2baa1740722a700982c0bd8f5d10756a36bb68bd2db1ae64db8cb8f3c6b88b35db173ede59f6a59feb4bad7a5a5dd61e57e355a1ee31505fe5b5861ef5dbb54efaac4194e213b7731a39d72db2f056423ab256c03e64ef32de6721475c33d51a44b617b005a08a436e061b057143ece2d3c261a93f370a2e2862190f78c542868757ea2defd0e601c687a55c678914ce60229775692e02c2c621f86d", 0xe0}, {&(0x7f0000000440)="0c1b614de429416dcfd3a32e21e28866d5f5", 0x12}], 0x4, 0x0, 0x0, 0x8000}, 0x0) 1.822598099s ago: executing program 3 (id=795): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6d276b17) 1.81517741s ago: executing program 1 (id=796): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r1 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file2\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.740092357s ago: executing program 0 (id=797): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x4040000}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 1.684266623s ago: executing program 2 (id=798): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2000, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r0, 0x622f, 0x9803, 0x9, 0x0, 0x0) 1.62068678s ago: executing program 3 (id=799): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 1.545699467s ago: executing program 0 (id=801): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x7, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) 1.427718398s ago: executing program 2 (id=802): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1bb9ec930dabfc165907d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31c0971007f269f873e14e5fe3c46c0ac2b22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b98ade053b2f9b7918"], 0x1, 0x625c, &(0x7f000000bdc0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 1.394856512s ago: executing program 3 (id=803): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB='showexec,shortname=winnt,shortname=lower,utf8=1,iocharset=cp865,shortname=win95,uni_xlate=1,shortname=win95,check=strict,shortname=winnt,utf8=0,iocharset=iso8859-5,codepage=874,shortname=mixed,shortname=win95,shortname=mixed,nonumtail=0,shortname=mixed,shortname=mixed,uni_xlate=1,rodir,nnonuni_xlate=1,shortname=win95,shortname=win95,utf8=0,nnonumtail=1,shortname=win95,shortname=win95,nnonumtail=1,uni_xlate=1,nfs=nostale_ro,\x00'/444], 0x6, 0x2e7, &(0x7f00000007c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.389730502s ago: executing program 4 (id=804): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffa}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4024}, 0x0) 1.357968365s ago: executing program 0 (id=805): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x2, 0x1}}, 0x0) 1.158202275s ago: executing program 4 (id=806): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) close(0x3) 1.148960126s ago: executing program 3 (id=807): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 906.46308ms ago: executing program 4 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x400, 0x43, 0x1}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x6c}}, 0x0) 835.984417ms ago: executing program 4 (id=809): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac14141bbd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 749.989076ms ago: executing program 1 (id=810): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6d276b17) 534.642197ms ago: executing program 4 (id=811): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 483.456322ms ago: executing program 1 (id=812): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 452.496265ms ago: executing program 0 (id=813): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) 365.753423ms ago: executing program 3 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 47.746645ms ago: executing program 3 (id=815): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1}, 0x18) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) 0s ago: executing program 4 (id=816): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x0) kernel console output (not intermixed with test programs): NF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.955111][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 77.962523][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.988711][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.000983][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.018921][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 78.026144][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.092290][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.099708][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 78.102977][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.105993][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 78.115485][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.129601][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.138153][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.148102][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.158400][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.196770][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.207449][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.219209][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.227962][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.253757][ T4270] device veth0_macvtap entered promiscuous mode [ 78.277868][ T4277] device veth0_vlan entered promiscuous mode [ 78.285556][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.294693][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.303947][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.317141][ T4270] device veth1_macvtap entered promiscuous mode [ 78.335179][ T4277] device veth1_vlan entered promiscuous mode [ 78.344459][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.353955][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.416713][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.447668][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.458580][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.470355][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.481615][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.494374][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.511831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.521039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.530358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.540174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.569155][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.571764][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.583785][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.602578][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.607312][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.620688][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.632142][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.642934][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.651730][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.661677][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.670465][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.697274][ T4277] device veth0_macvtap entered promiscuous mode [ 78.705619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.715646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.725417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.735110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.744902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.754034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.767953][ T4276] device veth0_vlan entered promiscuous mode [ 78.786933][ T4277] device veth1_macvtap entered promiscuous mode [ 78.796153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.806602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.816463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.844124][ T4276] device veth1_vlan entered promiscuous mode [ 78.865273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.865547][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.879118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.889765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.926236][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.949104][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.951033][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.970767][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.982552][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.992835][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.006260][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.029255][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.046047][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.066106][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.075503][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.086547][ T4374] loop3: detected capacity change from 0 to 128 [ 79.088274][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.097456][ T4374] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.135169][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.150634][ T4374] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.168317][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.194987][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.209919][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.226173][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.239003][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.253106][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.271041][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.284729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.287017][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.309457][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.321525][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.336890][ T4277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.348252][ T4277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.357689][ T4277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.367031][ T4277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.388064][ T4276] device veth0_macvtap entered promiscuous mode [ 79.402404][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.417686][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.461162][ T4276] device veth1_macvtap entered promiscuous mode [ 79.469571][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.477611][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.514290][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.597066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.629309][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.671858][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.687562][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.698390][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.708998][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.720003][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.729918][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.740589][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.751995][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.788351][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.809549][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.826231][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.844545][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.855965][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.858842][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 79.867134][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.908797][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.965351][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.995785][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.016800][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.019167][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 80.035306][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.049626][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.060157][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.088982][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.092112][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.097185][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.113957][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 80.132678][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.141699][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.151051][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.178941][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 80.180528][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.185082][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 80.229313][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.263368][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.273842][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.321639][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.425761][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.528637][ T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.539692][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.598965][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.659683][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.674909][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.715160][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.725117][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.729494][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 80.739384][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.768122][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.801589][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.845846][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.876296][ T22] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.919480][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.953462][ T4401] loop4: detected capacity change from 0 to 256 [ 80.960641][ T22] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 80.968044][ T4401] ======================================================= [ 80.968044][ T4401] WARNING: The mand mount option has been deprecated and [ 80.968044][ T4401] and is ignored by this kernel. Remove the mand [ 80.968044][ T4401] option from the mount to silence this warning. [ 80.968044][ T4401] ======================================================= [ 81.007792][ T22] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.027429][ T4401] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.041656][ T4401] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 81.043757][ T22] usb 2-1: Manufacturer: syz [ 81.072573][ T4401] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 81.107354][ T22] usb 2-1: config 0 descriptor?? [ 81.544510][ T4392] loop0: detected capacity change from 0 to 32768 [ 81.570565][ T4392] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4392) [ 81.578748][ T22] rc_core: IR keymap rc-hauppauge not found [ 81.609918][ T22] Registered IR keymap rc-empty [ 81.615443][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.664867][ T4392] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.712531][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.724308][ T4392] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 81.757544][ T4411] loop3: detected capacity change from 0 to 256 [ 81.765861][ T22] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 81.769504][ T4392] BTRFS info (device loop0): enabling disk space caching [ 81.794629][ T4413] loop4: detected capacity change from 0 to 512 [ 81.827303][ T4411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f78e84, utbl_chksum : 0xe619d30d) [ 81.832508][ T22] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 81.868532][ T4392] BTRFS info (device loop0): enabling auto defrag [ 81.875034][ T4392] BTRFS info (device loop0): turning on flush-on-commit [ 81.941718][ T4392] BTRFS info (device loop0): use no compression [ 81.965977][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 81.995856][ T4392] BTRFS info (device loop0): force clearing of disk cache [ 82.040290][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.046792][ T4392] BTRFS info (device loop0): disabling disk space caching [ 82.089388][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.138824][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.170391][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.259853][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.340369][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.398576][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.416235][ T4392] BTRFS info (device loop0): enabling ssd optimizations [ 82.428544][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.463121][ T4392] BTRFS info (device loop0): rebuilding free space tree [ 82.470574][ T22] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 82.520863][ T22] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 82.546352][ T22] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 82.576928][ T4392] BTRFS info (device loop0): disabling free space tree [ 82.612305][ T22] usb 2-1: USB disconnect, device number 2 [ 82.619404][ T4392] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.642469][ T4392] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.709595][ T4413] EXT4-fs (loop4): Test dummy encryption mode enabled [ 82.736464][ T4413] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.777913][ T4413] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.817353][ T4413] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 83.243434][ T4270] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 83.586952][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 83.608376][ T4465] loop4: detected capacity change from 0 to 512 [ 83.655683][ T4465] EXT4-fs: Ignoring removed bh option [ 83.744307][ T4465] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 83.841611][ T4465] EXT4-fs (loop4): 1 truncate cleaned up [ 83.847336][ T4465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.924267][ T4473] loop2: detected capacity change from 0 to 16 [ 83.987094][ T4473] erofs: (device loop2): mounted with root inode @ nid 36. [ 84.271379][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 84.447421][ T4485] loop2: detected capacity change from 0 to 1024 [ 84.610859][ T4490] loop3: detected capacity change from 0 to 64 [ 84.655527][ T4485] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 84.730092][ T4485] syz.2.27: attempt to access beyond end of device [ 84.730092][ T4485] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 84.789698][ T4485] Buffer I/O error on dev loop2, logical block 458752, async page read [ 84.825615][ T4496] can0: slcan on ttyS3. [ 84.837642][ T4485] syz.2.27: attempt to access beyond end of device [ 84.837642][ T4485] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 84.906084][ T4485] Buffer I/O error on dev loop2, logical block 458752, async page read [ 84.943647][ T4497] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 84.970925][ T4497] syz.2.27: attempt to access beyond end of device [ 84.970925][ T4497] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 85.040215][ T4498] can0 (unregistered): slcan off ttyS3. [ 85.054156][ T4497] Buffer I/O error on dev loop2, logical block 458752, async page read [ 85.088741][ T4500] can0: slcan on ttyS3. [ 85.106882][ T4497] syz.2.27: attempt to access beyond end of device [ 85.106882][ T4497] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 85.211464][ T4497] Buffer I/O error on dev loop2, logical block 458752, async page read [ 85.251252][ T4512] loop1: detected capacity change from 0 to 128 [ 85.259076][ T4494] can0 (unregistered): slcan off ttyS3. [ 85.275066][ T4511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39'. [ 85.287490][ T4501] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 85.304884][ T4512] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 85.324277][ T4501] syz.2.27: attempt to access beyond end of device [ 85.324277][ T4501] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 85.364582][ T4512] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.389489][ T4501] Buffer I/O error on dev loop2, logical block 458752, async page read [ 85.397872][ T4501] syz.2.27: attempt to access beyond end of device [ 85.397872][ T4501] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 85.508547][ T4501] Buffer I/O error on dev loop2, logical block 458752, async page read [ 85.575771][ T4512] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only [ 86.786883][ T4535] loop3: detected capacity change from 0 to 8192 [ 86.848443][ C1] sched: RT throttling activated [ 86.857157][ T27] cfg80211: failed to load regulatory.db [ 86.916987][ T4535] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 86.994635][ T4535] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 87.068799][ T4535] REISERFS (device loop3): using ordered data mode [ 87.075374][ T4535] reiserfs: using flush barriers [ 87.208631][ T4535] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.339252][ T4535] REISERFS (device loop3): checking transaction log (loop3) [ 87.479342][ T4535] REISERFS (device loop3): Using r5 hash to sort names [ 87.597361][ T4535] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 87.915339][ T4526] loop2: detected capacity change from 0 to 262144 [ 87.975201][ T4531] loop0: detected capacity change from 0 to 32768 [ 88.034967][ T4526] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.062492][ T4531] XFS (loop0): Mounting V5 Filesystem [ 88.128771][ T4526] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.153398][ T26] audit: type=1800 audit(1760745505.823:2): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.44" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 88.188162][ T4534] loop1: detected capacity change from 0 to 32768 [ 88.357672][ T4531] XFS (loop0): Ending clean mount [ 88.406447][ T4531] XFS (loop0): Quotacheck needed: Please wait. [ 88.565611][ T4531] XFS (loop0): Quotacheck: Done. [ 88.988191][ T4270] XFS (loop0): Unmounting Filesystem [ 89.013849][ T4570] can0: slcan on ttyS3. [ 89.030239][ T4548] loop4: detected capacity change from 0 to 32768 [ 89.138550][ T4548] (syz.4.51,4548,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.222699][ T4548] (syz.4.51,4548,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 89.259054][ T4571] can0 (unregistered): slcan off ttyS3. [ 89.294917][ T4570] can0: slcan on ttyS3. [ 89.388531][ T4548] JBD2: Ignoring recovery information on journal [ 89.588304][ T4548] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 90.109277][ T4568] can0 (unregistered): slcan off ttyS3. [ 90.142362][ T4276] ocfs2: Unmounting device (7,4) on (node local) [ 90.433154][ T4592] misc userio: Begin command sent, but we're already running [ 90.596931][ T4593] loop2: detected capacity change from 0 to 4096 [ 90.616709][ T4593] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker. [ 90.686778][ T4593] ntfs: volume version 3.1. [ 91.431095][ T4607] loop2: detected capacity change from 0 to 4096 [ 91.571007][ T4607] ntfs: volume version 3.1. [ 91.630683][ T4618] loop3: detected capacity change from 0 to 8 [ 91.726765][ T4620] loop4: detected capacity change from 0 to 1024 [ 91.846210][ T4600] loop1: detected capacity change from 0 to 32768 [ 91.932336][ T4618] SQUASHFS error: xz decompression failed, data probably corrupt [ 91.958677][ T4618] SQUASHFS error: Failed to read block 0xa8: -5 [ 91.999694][ T4390] hfsplus: bad catalog file entry [ 92.005221][ T4390] hfsplus: b-tree write err: -5, ino 3 [ 92.061528][ T4618] SQUASHFS error: xz decompression failed, data probably corrupt [ 92.069482][ T4618] SQUASHFS error: Failed to read block 0xa8: -5 [ 92.075967][ T26] audit: type=1800 audit(1760745509.753:3): pid=4618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.69" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 92.107993][ T4600] XFS (loop1): Mounting V5 Filesystem [ 92.139584][ T4631] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 92.313399][ T4600] XFS (loop1): Ending clean mount [ 92.379640][ T4600] XFS (loop1): Quotacheck needed: Please wait. [ 92.521402][ T4600] XFS (loop1): Quotacheck: Done. [ 92.609782][ T4644] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.619150][ T4644] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.721594][ T4266] XFS (loop1): Unmounting Filesystem [ 93.188730][ T4455] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.340288][ T4659] loop2: detected capacity change from 0 to 4096 [ 93.393376][ T4455] usb 1-1: Using ep0 maxpacket: 16 [ 93.401780][ T4455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.433916][ T4659] ntfs: volume version 3.1. [ 93.443714][ T4455] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 93.470095][ T4455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.488563][ T4455] usb 1-1: Product: syz [ 93.492795][ T4455] usb 1-1: Manufacturer: syz [ 93.496388][ T4659] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 93.497407][ T4455] usb 1-1: SerialNumber: syz [ 93.523065][ T4455] usb 1-1: config 0 descriptor?? [ 93.549835][ T4455] hub 1-1:0.0: bad descriptor, ignoring hub [ 93.566104][ T4455] hub: probe of 1-1:0.0 failed with error -5 [ 93.584238][ T4455] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 93.588747][ T4659] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 93.939021][ T4455] usb 1-1: USB disconnect, device number 2 [ 94.069815][ T4661] loop4: detected capacity change from 0 to 32768 [ 94.124503][ T4661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.83 (4661) [ 94.163744][ T4661] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.163827][ T4661] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 94.163857][ T4661] BTRFS info (device loop4): using free space tree [ 94.369521][ T4682] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.555068][ T4661] BTRFS info (device loop4): enabling ssd optimizations [ 94.723098][ T4703] capability: warning: `syz.2.92' uses deprecated v2 capabilities in a way that may be insecure [ 94.789498][ T4705] overlayfs: './file2' not a directory [ 95.116944][ T4276] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.687562][ T4734] loop7: detected capacity change from 0 to 7 [ 95.727013][ T4734] Dev loop7: unable to read RDB block 7 [ 95.757839][ T4734] loop7: unable to read partition table [ 95.795056][ T4734] loop7: partition table beyond EOD, truncated [ 95.817460][ T4734] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 96.721728][ T4739] loop4: detected capacity change from 0 to 32768 [ 96.892693][ T4750] loop2: detected capacity change from 0 to 32768 [ 96.905138][ T4739] XFS (loop4): Mounting V5 Filesystem [ 96.916119][ T4750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.109 (4750) [ 97.012703][ T4745] loop0: detected capacity change from 0 to 32768 [ 97.027953][ T4750] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.054168][ T4772] loop3: detected capacity change from 0 to 2048 [ 97.116310][ T4750] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 97.127072][ T4774] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.145020][ T4750] BTRFS info (device loop2): using free space tree [ 97.225699][ T4745] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 97.244156][ T4772] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 97.257991][ T4739] XFS (loop4): Ending clean mount [ 97.305619][ T4739] XFS (loop4): Quotacheck needed: Please wait. [ 97.321538][ T4772] Remounting filesystem read-only [ 97.373186][ T4278] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.385995][ T4739] XFS (loop4): Quotacheck: Done. [ 97.429576][ T4772] syz.3.115 (4772) used greatest stack depth: 19728 bytes left [ 97.534051][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 97.552664][ T4750] BTRFS info (device loop2): enabling ssd optimizations [ 97.558698][ T4278] usb 2-1: Using ep0 maxpacket: 16 [ 97.567354][ T4278] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 97.586484][ T4271] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 97.611794][ T4278] usb 2-1: config 0 has no interface number 0 [ 97.617966][ T4278] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 97.668554][ T4278] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 97.711005][ T4278] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 97.753473][ T4278] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 97.773376][ T4276] XFS (loop4): Unmounting Filesystem [ 97.777684][ T4278] usb 2-1: Product: syz [ 97.785833][ T4278] usb 2-1: SerialNumber: syz [ 97.818035][ T4278] usb 2-1: config 0 descriptor?? [ 97.872647][ T4799] block nbd3: shutting down sockets [ 97.896644][ T4278] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 97.935687][ T4278] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 98.191269][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 98.197721][ T4456] usb 2-1: USB disconnect, device number 3 [ 98.198614][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 98.257573][ T4456] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 98.479572][ T4277] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.485360][ T4806] loop3: detected capacity change from 0 to 128 [ 98.923189][ T4817] netlink: 2 bytes leftover after parsing attributes in process `syz.1.126'. [ 99.047264][ T4416] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop2 scanned by udevd (4416) [ 99.161785][ T4822] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.210045][ T4822] MINIX-fs: unable to read superblock [ 99.223830][ T4825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.130'. [ 99.743916][ T4840] device batadv_slave_0 entered promiscuous mode [ 99.759276][ T4839] device batadv_slave_0 left promiscuous mode [ 99.846270][ T4842] loop1: detected capacity change from 0 to 2048 [ 99.974673][ T4845] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.635808][ T4861] loop4: detected capacity change from 0 to 512 [ 100.829477][ T4861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.874845][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 100.894599][ T4861] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.131712][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 101.281857][ T4863] loop3: detected capacity change from 0 to 32768 [ 101.411799][ T4884] Zero length message leads to an empty skb [ 101.608616][ T4257] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.800295][ T4257] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.818730][ T4257] usb 1-1: config 0 has no interface number 0 [ 101.834607][ T4257] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 101.854581][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.884921][ T4257] usb 1-1: Product: syz [ 101.889747][ T4257] usb 1-1: Manufacturer: syz [ 101.894389][ T4257] usb 1-1: SerialNumber: syz [ 101.919329][ T4894] loop2: detected capacity change from 0 to 2048 [ 101.938079][ T4257] usb 1-1: config 0 descriptor?? [ 101.994637][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.152363][ T4257] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 102.186581][ T4257] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.213774][ T4257] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 102.246662][ T4257] usb 1-1: media controller created [ 102.272986][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 102.287300][ T4257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.363489][ T4257] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 102.473276][ T4257] usb 1-1: USB disconnect, device number 3 [ 102.590829][ T4886] loop4: detected capacity change from 0 to 40427 [ 102.638512][ T4886] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 102.655616][ T4886] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 102.734954][ T4886] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.798652][ T4456] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.843262][ T4886] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 102.863608][ T4886] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.990576][ T4456] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 103.010015][ T4456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.046582][ T4276] syz-executor: attempt to access beyond end of device [ 103.046582][ T4276] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 103.062072][ T4456] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 103.093154][ T4456] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 103.118469][ T4456] usb 3-1: Manufacturer: syz [ 103.146743][ T4456] usb 3-1: config 0 descriptor?? [ 103.196353][ T4916] netlink: 'syz.1.169': attribute type 2 has an invalid length. [ 103.221535][ T4919] loop0: detected capacity change from 0 to 512 [ 103.359850][ T4919] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 103.368881][ T4919] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 103.376995][ T4919] System zones: 0-1, 15-15, 18-18, 34-34 [ 103.423816][ T4919] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.448806][ T4456] rc_core: IR keymap rc-hauppauge not found [ 103.460294][ T4456] Registered IR keymap rc-empty [ 103.475528][ T4919] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 103.485190][ T4456] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 103.493993][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 103.507178][ T4456] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 103.520425][ T4919] EXT4-fs warning (device loop0): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.545761][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 103.564176][ T4456] usb 3-1: USB disconnect, device number 2 [ 103.571088][ T4919] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 103.613201][ T4919] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.171: bg 0: block 40: padding at end of block bitmap is not set [ 103.641549][ T4919] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 103.659708][ T4919] EXT4-fs (loop0): 1 truncate cleaned up [ 103.665888][ T4919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 103.700443][ T4919] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.171: bad symlink. [ 103.732242][ T4930] Dead loop on virtual device ip6_vti0, fix it urgently! [ 103.806961][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 104.214232][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 104.295386][ T4945] loop2: detected capacity change from 0 to 7 [ 104.343466][ T4945] Dev loop2: unable to read RDB block 7 [ 104.360337][ T4945] loop2: unable to read partition table [ 104.366228][ T4945] loop2: partition table beyond EOD, truncated [ 104.404236][ T4945] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 104.524383][ T4954] loop4: detected capacity change from 0 to 128 [ 104.652201][ T4257] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.856950][ T4257] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.894145][ T4257] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.919155][ T4257] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 104.958521][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.985765][ T4257] usb 2-1: config 0 descriptor?? [ 105.142459][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.194'. [ 105.194842][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 105.254203][ T4257] usb 2-1: USB disconnect, device number 4 [ 105.376900][ T4978] loop3: detected capacity change from 0 to 512 [ 105.417654][ T4978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.492516][ T4978] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.517738][ T4980] loop0: detected capacity change from 0 to 4096 [ 105.524443][ T4978] EXT4-fs (loop3): 1 truncate cleaned up [ 105.530216][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 105.544197][ T4430] udevd[4430]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.549971][ T26] audit: type=1800 audit(1760745523.223:4): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.196" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 105.605961][ T4980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.649396][ T4990] loop4: detected capacity change from 0 to 1024 [ 105.682802][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 105.753577][ T4990] gfs2: path_lookup on c::;NL;o$: returned error -2 [ 106.018279][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 106.453111][ T5009] loop1: detected capacity change from 0 to 64 [ 107.133385][ T4257] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.217046][ T5034] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 107.220262][ T5013] loop4: detected capacity change from 0 to 32768 [ 107.311311][ T5013] XFS (loop4): Mounting V5 Filesystem [ 107.352665][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.368533][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.378729][ T4257] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 107.387807][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.398679][ T4257] usb 1-1: config 0 descriptor?? [ 107.529604][ T5013] XFS (loop4): Ending clean mount [ 107.556435][ T5048] loop1: detected capacity change from 0 to 512 [ 107.605532][ T5048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.696194][ T5048] EXT4-fs (loop1): 1 truncate cleaned up [ 107.725752][ T5048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 107.727617][ T4276] XFS (loop4): Unmounting Filesystem [ 107.837031][ T4257] logitech-djreceiver 0003:046D:C71F.0001: ignoring exceeding usage max [ 107.897278][ T5027] loop2: detected capacity change from 0 to 32768 [ 107.912034][ T5027] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.216 (5027) [ 107.914782][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 107.940615][ T4257] logitech-djreceiver 0003:046D:C71F.0001: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 107.959859][ T5027] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 107.981742][ T5027] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 108.033015][ T4257] usb 1-1: USB disconnect, device number 4 [ 108.051301][ T5027] BTRFS info (device loop2): using free space tree [ 108.329633][ T5057] fido_id[5057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 108.448571][ T5027] BTRFS info (device loop2): enabling ssd optimizations [ 108.528167][ T26] audit: type=1800 audit(1760745526.193:5): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.216" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 108.740787][ T4277] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 108.906374][ T5088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.244'. [ 109.238814][ T5094] loop2: detected capacity change from 0 to 4096 [ 109.291887][ T5096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.576888][ T5099] loop4: detected capacity change from 0 to 736 [ 109.802479][ T5090] loop0: detected capacity change from 0 to 32768 [ 109.836462][ T5107] loop2: detected capacity change from 0 to 512 [ 109.878809][ T5107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.914148][ T5107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.990196][ T5090] XFS (loop0): Mounting V5 Filesystem [ 110.124181][ T5123] loop4: detected capacity change from 0 to 1024 [ 110.131541][ T5123] EXT4-fs: inline encryption not supported [ 110.137409][ T5123] EXT4-fs: Ignoring removed i_version option [ 110.144799][ T5123] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.170490][ T5107] EXT4-fs (loop2): 1 truncate cleaned up [ 110.180715][ T5107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.279700][ T5090] XFS (loop0): Ending clean mount [ 110.306038][ T5090] XFS (loop0): Quotacheck needed: Please wait. [ 110.389104][ T5090] XFS (loop0): Quotacheck: Done. [ 110.420850][ T5123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.470931][ T5105] loop3: detected capacity change from 0 to 32768 [ 110.495206][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 110.502522][ T5105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.235 (5105) [ 110.608211][ T5105] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.663702][ T5105] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 110.679013][ T4270] XFS (loop0): Unmounting Filesystem [ 110.728134][ T5105] BTRFS info (device loop3): using free space tree [ 110.785757][ T5123] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.241: Allocating blocks 497-513 which overlap fs metadata [ 110.842681][ T5123] EXT4-fs (loop4): pa ffff88807188a540: logic 256, phys. 385, len 8 [ 110.851404][ T5123] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 110.958630][ T4456] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.067350][ T5105] BTRFS info (device loop3): enabling ssd optimizations [ 111.149212][ T4456] usb 3-1: Using ep0 maxpacket: 8 [ 111.164261][ T4456] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.218639][ T4456] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.221270][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 111.248587][ T4456] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.271094][ T4456] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.313435][ T4456] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.338730][ T4456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.576887][ T4456] usb 3-1: GET_CAPABILITIES returned 0 [ 111.583046][ T4456] usbtmc 3-1:16.0: can't read capabilities [ 111.637458][ T4271] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.881247][ T4456] usb 3-1: USB disconnect, device number 3 [ 112.808530][ T4722] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.008552][ T4722] usb 3-1: Using ep0 maxpacket: 16 [ 113.053027][ T4722] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 113.068547][ T4722] usb 3-1: config 0 has no interface number 0 [ 113.082674][ T4722] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.105348][ T4722] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 113.129127][ T4722] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 113.162523][ T4722] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 113.182757][ T4722] usb 3-1: Product: syz [ 113.196485][ T4722] usb 3-1: SerialNumber: syz [ 113.203723][ T5217] loop4: detected capacity change from 0 to 256 [ 113.221463][ T4722] usb 3-1: config 0 descriptor?? [ 113.232016][ T4722] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 113.250128][ T4722] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10 [ 113.259963][ T5217] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 113.288740][ T5203] loop0: detected capacity change from 0 to 32768 [ 113.346929][ T5203] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.265 (5203) [ 113.384376][ T5217] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 113.398861][ T5203] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.424779][ T5203] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 113.445709][ T5203] BTRFS info (device loop0): using free space tree [ 113.458283][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 113.459210][ T4394] usb 3-1: USB disconnect, device number 4 [ 113.465283][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 113.491794][ T4394] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 113.559617][ T4459] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.607069][ T5203] BTRFS info (device loop0): enabling ssd optimizations [ 113.773672][ T4459] usb 4-1: Using ep0 maxpacket: 8 [ 113.782139][ T4459] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 113.839373][ T4459] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.858602][ T4459] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.884385][ T4459] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.936700][ T4459] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.969026][ T4459] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.025048][ T4459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.076309][ T4270] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.275298][ T5249] program syz.1.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.283533][ T4459] usb 4-1: GET_CAPABILITIES returned 0 [ 114.301108][ T5247] loop2: detected capacity change from 0 to 2048 [ 114.301138][ T4459] usbtmc 4-1:16.0: can't read capabilities [ 114.323064][ T5247] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.468597][ T5251] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.500854][ T4320] usb 4-1: USB disconnect, device number 2 [ 114.635252][ T5257] netlink: 'syz.4.285': attribute type 2 has an invalid length. [ 114.851701][ T5263] loop1: detected capacity change from 0 to 128 [ 114.879149][ T5263] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.059088][ T4269] Bluetooth: hci3: command 0x0405 tx timeout [ 115.116772][ T4345] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.271706][ T4320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.428671][ T4718] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.474454][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 115.483608][ T4320] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 115.514479][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.528602][ T4320] usb 3-1: Product: syz [ 115.538662][ T4320] usb 3-1: Manufacturer: syz [ 115.543308][ T4320] usb 3-1: SerialNumber: syz [ 115.562363][ T5272] loop4: detected capacity change from 0 to 32768 [ 115.571472][ T4320] usb 3-1: config 0 descriptor?? [ 115.588644][ T5272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.290 (5272) [ 115.628596][ T4718] usb 4-1: Using ep0 maxpacket: 16 [ 115.637997][ T4718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.650154][ T4718] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.679851][ T4718] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.700236][ T4718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.718856][ T4718] usb 4-1: Product: syz [ 115.723393][ T4718] usb 4-1: Manufacturer: syz [ 115.728030][ T4718] usb 4-1: SerialNumber: syz [ 115.744984][ T5272] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.782657][ T5272] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 115.798548][ T4722] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.806326][ T5272] BTRFS info (device loop4): using free space tree [ 115.989369][ T4722] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 115.997972][ T4320] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 116.007505][ T4722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.023527][ T4722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.038530][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.046650][ T4320] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.049273][ T4722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.065616][ T4722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.077466][ T5272] BTRFS info (device loop4): enabling ssd optimizations [ 116.085006][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.085495][ T4320] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 116.094281][ T4722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.128507][ T4320] usb 3-1: media controller created [ 116.129125][ T4722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.162166][ T4718] usb 4-1: 0:2 : does not exist [ 116.168581][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.189064][ T4722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.197142][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.208721][ T4722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.221830][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.246161][ T4722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.283700][ T4722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.308860][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.317029][ T4722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.336493][ T4722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.348142][ T4320] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 116.353230][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.382285][ T4320] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 116.391827][ T4722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.442117][ T4722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.478320][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.494238][ T4276] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.508655][ T4722] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.520576][ T4722] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.531856][ T4722] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.593672][ T4722] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.603431][ T4722] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.603876][ T4718] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 116.607208][ T4320] usb 3-1: USB disconnect, device number 5 [ 116.626391][ T4722] usb 1-1: Product: syz [ 116.631084][ T4722] usb 1-1: Manufacturer: syz [ 116.636008][ T4722] usb 1-1: SerialNumber: syz [ 116.660437][ T4320] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 116.685830][ T4722] usb 1-1: config 0 descriptor?? [ 116.696621][ T4718] usb 4-1: USB disconnect, device number 3 [ 116.713036][ T4722] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 116.932068][ T4416] udevd[4416]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.967448][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 116.977344][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 116.999738][ T5309] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.009453][ T5309] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.018288][ T5309] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.027145][ T5309] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.065239][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 117.075420][ T4718] usb 1-1: USB disconnect, device number 5 [ 117.087790][ T4718] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 117.237651][ T5314] can0: slcan on ttyS3. [ 117.318892][ T5314] can0 (unregistered): slcan off ttyS3. [ 117.373938][ T5319] loop2: detected capacity change from 0 to 1024 [ 117.525892][ T5327] process 'syz.4.304' launched './file1' with NULL argv: empty string added [ 117.554573][ T5319] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.746053][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 118.072569][ T5346] loop4: detected capacity change from 0 to 256 [ 118.138678][ T5253] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.328501][ T5253] usb 2-1: Using ep0 maxpacket: 8 [ 118.336123][ T5253] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.376852][ T5253] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.416789][ T5253] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.451570][ T5253] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.517693][ T5253] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.558203][ T5253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.804327][ T5253] usb 2-1: GET_CAPABILITIES returned 0 [ 118.815776][ T5253] usbtmc 2-1:16.0: can't read capabilities [ 118.867349][ T5359] loop2: detected capacity change from 0 to 4096 [ 118.934299][ T5359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.986188][ T5341] loop3: detected capacity change from 0 to 32768 [ 119.019528][ T5252] usb 2-1: USB disconnect, device number 5 [ 119.162509][ T5359] EXT4-fs: Cannot change quota options when quota turned on [ 119.182865][ T5341] XFS (loop3): Mounting V5 Filesystem [ 119.350220][ T5341] XFS (loop3): Ending clean mount [ 119.407349][ T5341] XFS (loop3): Quotacheck needed: Please wait. [ 119.431032][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 119.483612][ T5341] XFS (loop3): Quotacheck: Done. [ 119.696266][ T5385] loop2: detected capacity change from 0 to 2048 [ 119.748018][ T4271] XFS (loop3): Unmounting Filesystem [ 119.808076][ T5385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.841500][ T5385] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.051281][ T5398] loop1: detected capacity change from 0 to 1024 [ 120.129608][ T5398] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 120.180850][ T5398] EXT4-fs (loop1): orphan cleanup on readonly fs [ 120.226994][ T5398] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.325: Invalid inode table block 0 in block_group 0 [ 120.243647][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 120.284742][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 120.310962][ T5398] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 120.388098][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 120.419284][ T5398] EXT4-fs error (device loop1): ext4_quota_write:7228: inode #3: comm syz.1.325: mark_inode_dirty error [ 120.475030][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 120.523222][ T5398] Quota error (device loop1): write_blk: dquota write failed [ 120.570387][ T5398] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 120.603144][ T5398] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.325: Failed to acquire dquot type 0 [ 120.666920][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 120.691903][ T5398] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.325: Invalid inode table block 0 in block_group 0 [ 120.768149][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 120.768532][ T4724] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.803633][ T5398] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 120.855738][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 120.862672][ T5398] EXT4-fs error (device loop1): ext4_ext_truncate:4454: inode #15: comm syz.1.325: mark_inode_dirty error [ 120.937437][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 120.969863][ T5398] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.325: Invalid inode table block 0 in block_group 0 [ 120.978810][ T4724] usb 5-1: Using ep0 maxpacket: 16 [ 121.001071][ T4724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.020269][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 121.026852][ T5398] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 121.063030][ T4724] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 121.068204][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 121.100528][ T4724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.108545][ T5398] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 121.135612][ T4724] usb 5-1: config 0 descriptor?? [ 121.141460][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 121.158258][ T5398] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz.1.325: Invalid inode table block 0 in block_group 0 [ 121.190460][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 121.218207][ T5398] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 121.268719][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 121.323509][ T5398] EXT4-fs error (device loop1): ext4_truncate:4312: inode #15: comm syz.1.325: mark_inode_dirty error [ 121.374899][ T5092] kernel read not supported for file /rfkill (pid: 5092 comm: kworker/1:17) [ 121.400989][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 121.407751][ T5398] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 121.433411][ T5398] EXT4-fs (loop1): Remounting filesystem read-only [ 121.440245][ T5398] EXT4-fs (loop1): 1 truncate cleaned up [ 121.447042][ T5398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.576192][ T4724] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 121.614797][ T5398] EXT4-fs (loop1): shut down requested (1) [ 121.661972][ T5439] EXT4-fs error (device loop1): ext4_search_dir:1549: inode #2: block 16: comm syz.1.325: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 121.723126][ T5441] loop0: detected capacity change from 0 to 256 [ 121.892807][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 122.101986][ T22] usb 5-1: USB disconnect, device number 2 [ 122.149916][ T5429] loop3: detected capacity change from 0 to 32768 [ 122.210564][ T5429] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 122.225487][ T5429] XFS (loop3): Mounting V5 Filesystem [ 122.312720][ T5429] XFS (loop3): Ending clean mount [ 122.330978][ T5429] XFS (loop3): Quotacheck needed: Please wait. [ 122.395626][ T5429] XFS (loop3): Quotacheck: Done. [ 122.450246][ T5429] XFS (loop3): User initiated shutdown received. [ 122.457112][ T5429] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 122.505449][ T5461] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 122.529970][ T5429] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 122.685177][ T4271] XFS (loop3): Unmounting Filesystem [ 122.878384][ T5443] loop2: detected capacity change from 0 to 32768 [ 123.076850][ T5443] XFS (loop2): Mounting V5 Filesystem [ 123.316374][ T5443] XFS (loop2): Ending clean mount [ 123.345336][ T5443] XFS (loop2): Quotacheck needed: Please wait. [ 123.364369][ T5484] loop0: detected capacity change from 0 to 4096 [ 123.466599][ T5443] XFS (loop2): Quotacheck: Done. [ 123.705712][ T4277] XFS (loop2): Unmounting Filesystem [ 123.821716][ T5494] netlink: 56 bytes leftover after parsing attributes in process `syz.1.355'. [ 124.287099][ T5482] loop3: detected capacity change from 0 to 32768 [ 124.405993][ T5513] loop4: detected capacity change from 0 to 512 [ 124.423657][ T5513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.494304][ T5482] XFS (loop3): Mounting V5 Filesystem [ 124.571448][ T5513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 124.614840][ T5513] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.668650][ T5513] EXT4-fs (loop4): 1 truncate cleaned up [ 124.674491][ T5513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.801010][ T5528] Bluetooth: MGMT ver 1.22 [ 124.812325][ T5482] XFS (loop3): Ending clean mount [ 124.940358][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 125.093504][ T4271] XFS (loop3): Unmounting Filesystem [ 125.388689][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.418538][ T5539] loop0: detected capacity change from 0 to 256 [ 125.447829][ T5539] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.469006][ T5539] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 125.496257][ T5539] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x000001d0, checksum : 0x1119abd0) [ 125.517240][ T5539] exFAT-fs (loop0): invalid boot region [ 125.525697][ T5539] exFAT-fs (loop0): failed to recognize exfat type [ 125.594193][ T22] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 125.616739][ T5541] loop3: detected capacity change from 0 to 64 [ 125.633930][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.666284][ T22] usb 5-1: config 0 descriptor?? [ 125.917971][ T22] kaweth 5-1:0.0: Firmware present in device. [ 126.129336][ T22] kaweth 5-1:0.0: Statistics collection: 0 [ 126.135335][ T22] kaweth 5-1:0.0: Multicast filter limit: 0 [ 126.160483][ T22] kaweth 5-1:0.0: MTU: 0 [ 126.164815][ T22] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 126.217580][ T26] audit: type=1326 audit(1760745543.883:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb278efc9 code=0x7ffc0000 [ 126.278801][ T26] audit: type=1326 audit(1760745543.933:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fecb278efc9 code=0x7ffc0000 [ 126.291825][ T5554] loop1: detected capacity change from 0 to 256 [ 126.328510][ T26] audit: type=1326 audit(1760745543.933:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb278efc9 code=0x7ffc0000 [ 126.424569][ T26] audit: type=1326 audit(1760745543.933:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fecb278efc9 code=0x7ffc0000 [ 126.494839][ T26] audit: type=1326 audit(1760745543.933:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 126.554451][ T22] kaweth 5-1:0.0: Error setting SOFS wait [ 126.561777][ T22] kaweth: probe of 5-1:0.0 failed with error -5 [ 126.591967][ T22] usb 5-1: USB disconnect, device number 3 [ 126.601223][ T26] audit: type=1326 audit(1760745543.933:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5551 comm="syz.3.377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb278efc9 code=0x7ffc0000 [ 126.948600][ T4724] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 126.961740][ T5574] loop2: detected capacity change from 0 to 64 [ 127.078077][ T5577] loop0: detected capacity change from 0 to 164 [ 127.108895][ T5577] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 127.142359][ T4724] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 127.153799][ T5577] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 127.171906][ T4724] usb 2-1: config 1 has no interface number 0 [ 127.178150][ T4724] usb 2-1: config 1 interface 105 has no altsetting 0 [ 127.223445][ T4724] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 127.253400][ T5577] Symlink component flag not implemented [ 127.263787][ T4724] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 127.279785][ T5577] Symlink component flag not implemented [ 127.298125][ T4724] usb 2-1: Product: syz [ 127.303635][ T5577] Symlink component flag not implemented (7) [ 127.313887][ T4724] usb 2-1: Manufacturer: syz [ 127.324761][ T4724] usb 2-1: SerialNumber: syz [ 127.330641][ T5577] Symlink component flag not implemented (116) [ 127.511936][ T5587] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 127.828696][ T5595] loop3: detected capacity change from 0 to 256 [ 128.199199][ T4724] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 128.218732][ T4724] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 128.241996][ T4724] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 128.255902][ T5583] loop4: detected capacity change from 0 to 32768 [ 128.310085][ T4724] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ee:e2:5e:b2:4f:95 [ 128.354909][ T4724] usb 2-1: USB disconnect, device number 6 [ 128.388272][ T4724] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 128.433541][ T5583] XFS (loop4): Mounting V5 Filesystem [ 128.456154][ T5597] loop0: detected capacity change from 0 to 32768 [ 128.462828][ T5253] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.505861][ T5583] XFS (loop4): Ending clean mount [ 128.510361][ T4724] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 128.542843][ T4724] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 128.543940][ T5597] XFS (loop0): Mounting V5 Filesystem [ 128.572394][ T4724] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 128.606397][ T4276] XFS (loop4): Unmounting Filesystem [ 128.642594][ T5597] XFS (loop0): Ending clean mount [ 128.665440][ T5253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.678723][ T5253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.691764][ T5253] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 128.705822][ T5253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.722381][ T5253] usb 3-1: config 0 descriptor?? [ 128.753934][ T5597] XFS (loop0): Quotacheck needed: Please wait. [ 128.858461][ T5597] XFS (loop0): Quotacheck: Done. [ 128.894559][ T5620] loop1: detected capacity change from 0 to 128 [ 128.968389][ T5620] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.099787][ T5620] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.131561][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.139599][ T5253] cypress 0003:04B4:DE61.0003: unknown main item tag 0x5 [ 129.150272][ T4270] XFS (loop0): Unmounting Filesystem [ 129.159636][ T5253] cypress 0003:04B4:DE61.0003: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 129.262976][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 129.346115][ T5252] usb 3-1: USB disconnect, device number 6 [ 129.498579][ T5253] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.678557][ T5253] usb 4-1: Using ep0 maxpacket: 8 [ 129.686603][ T5253] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.696499][ T5253] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.706291][ T5253] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.716260][ T5253] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.729398][ T5253] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.738550][ T5253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.958000][ T5253] usb 4-1: GET_CAPABILITIES returned 0 [ 129.969533][ T5253] usbtmc 4-1:16.0: can't read capabilities [ 130.058467][ T5636] loop1: detected capacity change from 0 to 64 [ 130.199616][ T4724] usb 4-1: USB disconnect, device number 4 [ 130.504046][ T5649] loop1: detected capacity change from 0 to 512 [ 130.532487][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 130.548379][ T5649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.590190][ T5649] EXT4-fs (loop1): orphan cleanup on readonly fs [ 130.607796][ T5649] EXT4-fs (loop1): 1 truncate cleaned up [ 130.613657][ T5649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 130.677419][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 131.113091][ T5656] loop2: detected capacity change from 0 to 4096 [ 131.144650][ T5656] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 131.252722][ T5656] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 131.341877][ T26] audit: type=1800 audit(1760745549.013:12): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.413" name="file0" dev="loop2" ino=0 res=0 errno=0 [ 131.544226][ T5680] loop4: detected capacity change from 0 to 64 [ 132.099283][ T5253] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.130084][ T5678] loop0: detected capacity change from 0 to 32768 [ 132.155157][ T5678] (syz.0.422,5678,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heart&Ck/e" or missing value [ 132.190064][ T5678] (syz.0.422,5678,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 132.310679][ T5253] usb 4-1: Using ep0 maxpacket: 16 [ 132.327702][ T5253] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.373818][ T5253] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.394534][ T5682] loop1: detected capacity change from 0 to 32768 [ 132.404385][ T5253] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.440787][ T5253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.483400][ T5253] usb 4-1: Product: syz [ 132.492004][ T5253] usb 4-1: Manufacturer: syz [ 132.496677][ T5253] usb 4-1: SerialNumber: syz [ 132.514269][ T5695] loop0: detected capacity change from 0 to 512 [ 132.533849][ T5695] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.555598][ T5682] XFS (loop1): Mounting V5 Filesystem [ 132.570758][ T5684] loop2: detected capacity change from 0 to 32768 [ 132.601729][ T5695] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.650492][ T5684] XFS (loop2): Mounting V5 Filesystem [ 132.718731][ T5695] EXT4-fs (loop0): 1 truncate cleaned up [ 132.724557][ T5695] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.741603][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.748086][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.812046][ T5682] XFS (loop1): Ending clean mount [ 132.814706][ T5684] XFS (loop2): Ending clean mount [ 132.832291][ T5682] XFS (loop1): Quotacheck needed: Please wait. [ 132.889998][ T5684] XFS (loop2): Quotacheck needed: Please wait. [ 132.942041][ T5682] XFS (loop1): Quotacheck: Done. [ 132.979759][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 132.993711][ T5253] usb 4-1: 0:2 : does not exist [ 133.026122][ T5684] XFS (loop2): Quotacheck: Done. [ 133.191462][ T4277] XFS (loop2): Unmounting Filesystem [ 133.287861][ T5711] loop0: detected capacity change from 0 to 1024 [ 133.305174][ T26] audit: type=1800 audit(1760745550.973:13): pid=5682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.424" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 133.406793][ T5253] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 133.413992][ T5688] loop4: detected capacity change from 0 to 32768 [ 133.501641][ T4266] XFS (loop1): Unmounting Filesystem [ 133.525905][ T5253] usb 4-1: USB disconnect, device number 5 [ 133.655579][ T11] hfsplus: bad catalog file entry [ 133.660978][ T11] hfsplus: b-tree write err: -5, ino 3 [ 133.865917][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.221377][ T5723] loop4: detected capacity change from 0 to 128 [ 134.238900][ T5723] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.321881][ T5723] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.721864][ T5735] loop3: detected capacity change from 0 to 128 [ 134.829463][ T5735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.841214][ T5735] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.025966][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 135.149679][ T5746] loop3: detected capacity change from 0 to 1024 [ 135.314480][ T5730] loop1: detected capacity change from 0 to 32768 [ 135.317262][ T4348] hfsplus: bad catalog file entry [ 135.351673][ T5092] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.382066][ T4348] hfsplus: b-tree write err: -5, ino 3 [ 135.485071][ T5730] XFS (loop1): Mounting V5 Filesystem [ 135.534862][ T5761] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 135.578731][ T5092] usb 1-1: Using ep0 maxpacket: 16 [ 135.589875][ T5092] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.640676][ T5092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.667533][ T5092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.681398][ T5092] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 135.693734][ T5092] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.751852][ T5730] XFS (loop1): Ending clean mount [ 135.758287][ T5092] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.793423][ T5092] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.822263][ T5092] usb 1-1: Manufacturer: syz [ 135.862856][ T5092] usb 1-1: config 0 descriptor?? [ 135.932982][ T4266] XFS (loop1): Unmounting Filesystem [ 136.298690][ T5092] rc_core: IR keymap rc-hauppauge not found [ 136.304669][ T5092] Registered IR keymap rc-empty [ 136.347773][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.418607][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.449383][ T5092] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 136.494217][ T5092] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 136.560125][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.588956][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.618683][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.650188][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.688575][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.738671][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.778661][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.818665][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.848604][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.857394][ T5770] loop4: detected capacity change from 0 to 32768 [ 136.888771][ T5092] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 136.919903][ T5092] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 136.942054][ T5092] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 136.977228][ T5092] usb 1-1: USB disconnect, device number 6 [ 136.987443][ T5770] XFS (loop4): Mounting V5 Filesystem [ 137.156097][ T5770] XFS (loop4): Ending clean mount [ 137.231258][ T5803] loop3: detected capacity change from 0 to 1024 [ 137.267834][ T5803] EXT4-fs: Ignoring removed bh option [ 137.346147][ T5803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.440527][ T4276] XFS (loop4): Unmounting Filesystem [ 137.747539][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 138.185774][ T5826] loop4: detected capacity change from 0 to 4096 [ 138.339240][ T5826] ntfs: volume version 3.1. [ 138.474438][ T5816] loop2: detected capacity change from 0 to 32768 [ 138.521318][ T5816] (syz.2.469,5816,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 138.564245][ T5816] (syz.2.469,5816,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 138.649257][ T5816] JBD2: Ignoring recovery information on journal [ 138.742002][ T5816] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.770495][ T5834] loop3: detected capacity change from 0 to 4096 [ 138.944434][ T5834] ntfs: volume version 3.1. [ 139.134797][ T4277] ocfs2: Unmounting device (7,2) on (node local) [ 139.860521][ T5861] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 140.147790][ T5874] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.157417][ T5874] MINIX-fs: unable to read superblock [ 140.191552][ T5873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 140.504675][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 140.572235][ T5881] netlink: 152 bytes leftover after parsing attributes in process `syz.3.496'. [ 140.588710][ T5881] netlink: 152 bytes leftover after parsing attributes in process `syz.3.496'. [ 140.654451][ T5881] netlink: 152 bytes leftover after parsing attributes in process `syz.3.496'. [ 140.658157][ T5884] loop0: detected capacity change from 0 to 4096 [ 140.833423][ T5884] ntfs: volume version 3.1. [ 141.627013][ T5887] loop1: detected capacity change from 0 to 32768 [ 141.667654][ T5887] (syz.1.508,5887,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heart&Ck/e" or missing value [ 141.717376][ T5887] (syz.1.508,5887,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 142.150103][ T5919] loop4: detected capacity change from 0 to 1024 [ 142.377393][ T4390] hfsplus: bad catalog file entry [ 142.397821][ T4390] hfsplus: b-tree write err: -5, ino 3 [ 142.481267][ T5900] loop3: detected capacity change from 0 to 32768 [ 142.576040][ T5900] XFS (loop3): Mounting V5 Filesystem [ 142.677353][ T5900] XFS (loop3): Ending clean mount [ 142.705415][ T5900] XFS (loop3): Quotacheck needed: Please wait. [ 142.805180][ T5900] XFS (loop3): Quotacheck: Done. [ 142.895470][ T5910] loop0: detected capacity change from 0 to 32768 [ 142.959315][ T5933] block nbd1: shutting down sockets [ 142.964775][ T4271] XFS (loop3): Unmounting Filesystem [ 143.166934][ T5908] loop2: detected capacity change from 0 to 65536 [ 143.190015][ T5910] XFS (loop0): Mounting V5 Filesystem [ 143.433078][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.521'. [ 143.443928][ T5908] XFS (loop2): Mounting V5 Filesystem [ 143.556035][ T5910] XFS (loop0): Ending clean mount [ 143.582826][ T5910] XFS (loop0): Quotacheck needed: Please wait. [ 143.601847][ T4454] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.607667][ T5908] XFS (loop2): Ending clean mount [ 143.695535][ T5910] XFS (loop0): Quotacheck: Done. [ 143.808672][ T4454] usb 5-1: Using ep0 maxpacket: 16 [ 143.817863][ T4454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.871942][ T4454] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 143.899116][ T4454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.928164][ T4454] usb 5-1: Product: syz [ 143.935166][ T4270] XFS (loop0): Unmounting Filesystem [ 143.937787][ T4454] usb 5-1: Manufacturer: syz [ 143.958042][ T4454] usb 5-1: SerialNumber: syz [ 143.975626][ T4454] usb 5-1: config 0 descriptor?? [ 144.018602][ T5252] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 144.036959][ T4454] hub 5-1:0.0: bad descriptor, ignoring hub [ 144.046498][ T4454] hub: probe of 5-1:0.0 failed with error -5 [ 144.073282][ T4454] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 144.218527][ T5252] usb 2-1: Using ep0 maxpacket: 8 [ 144.226261][ T5252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.261978][ T5252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.272196][ T5252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 144.289178][ T5252] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 144.298346][ T5252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.308808][ T5252] usb 2-1: config 0 descriptor?? [ 144.313993][ T5253] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x240, xfs_agfl block 0x3 [ 144.332465][ T5253] XFS (loop2): Unmount and run xfs_repair [ 144.338264][ T5253] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 144.347766][ T5253] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 144.356962][ T5253] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 144.366289][ T5253] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 144.375278][ T5253] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 144.384220][ T5253] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.393246][ T5253] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.402320][ T5253] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.411281][ T5253] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.420885][ T5092] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1e7/0x3a0" at daddr 0x3 len 1 error 74 [ 144.449967][ T5092] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1784/0x1e50 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 144.468368][ T4277] XFS (loop2): Unmounting Filesystem [ 144.476762][ T5092] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 144.746178][ T5252] logitech 0003:046D:C293.0004: unknown main item tag 0x0 [ 144.758844][ T5252] logitech 0003:046D:C293.0004: unknown main item tag 0x0 [ 144.766236][ T5252] logitech 0003:046D:C293.0004: unknown main item tag 0x0 [ 144.773975][ T5252] logitech 0003:046D:C293.0004: unknown main item tag 0x0 [ 144.785066][ T5252] logitech 0003:046D:C293.0004: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 144.796863][ T5252] logitech 0003:046D:C293.0004: no inputs found [ 144.950309][ T5092] usb 2-1: USB disconnect, device number 7 [ 145.065039][ T5965] fido_id[5965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.153720][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 145.164485][ T5972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.526'. [ 145.174095][ T5972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.526'. [ 145.201200][ T5972] netlink: 152 bytes leftover after parsing attributes in process `syz.0.526'. [ 145.833092][ T5997] loop0: detected capacity change from 0 to 128 [ 145.872114][ T5999] loop3: detected capacity change from 0 to 512 [ 145.882111][ T5997] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 145.933235][ T5997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.987985][ T5999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.187381][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 146.604508][ T5252] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.644274][ T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.796202][ T5252] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.814958][ T5252] usb 4-1: config 0 has no interface number 0 [ 146.838766][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 146.844954][ T5252] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 146.847264][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.866671][ T5252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.895286][ T5252] usb 4-1: Product: syz [ 146.919696][ T5252] usb 4-1: Manufacturer: syz [ 146.925284][ T22] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 146.945712][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.946473][ T5252] usb 4-1: SerialNumber: syz [ 146.961548][ T6034] loop0: detected capacity change from 0 to 256 [ 146.968010][ T22] usb 2-1: Product: syz [ 146.977862][ T5252] usb 4-1: config 0 descriptor?? [ 146.996750][ T22] usb 2-1: Manufacturer: syz [ 147.001719][ T22] usb 2-1: SerialNumber: syz [ 147.034452][ T22] usb 2-1: config 0 descriptor?? [ 147.035360][ T6034] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 147.064021][ T22] hub 2-1:0.0: bad descriptor, ignoring hub [ 147.096721][ T22] hub: probe of 2-1:0.0 failed with error -5 [ 147.120743][ T22] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 147.224527][ T5252] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 147.289035][ T5252] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.310374][ T5252] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 147.368757][ T5252] usb 4-1: media controller created [ 147.411510][ T5252] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.463310][ T5252] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 147.551377][ T5252] usb 4-1: USB disconnect, device number 6 [ 147.735212][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 148.097945][ T6065] loop2: detected capacity change from 0 to 128 [ 148.160924][ T6065] binder: 6064:6065 ioctl c0306201 200000000380 returned -14 [ 148.457795][ T6075] sctp: [Deprecated]: syz.3.573 (pid 6075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.457795][ T6075] Use struct sctp_sack_info instead [ 148.837925][ T6089] loop2: detected capacity change from 0 to 4096 [ 148.894250][ T6089] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.077407][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 149.133370][ T6098] loop3: detected capacity change from 0 to 1024 [ 149.202437][ T4454] usb 5-1: USB disconnect, device number 4 [ 149.233754][ T6098] gfs2: path_lookup on c::;NL;o$: returned error -2 [ 149.611952][ T6109] loop0: detected capacity change from 0 to 512 [ 149.665475][ T6109] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.697463][ T6113] loop1: detected capacity change from 0 to 512 [ 149.719795][ T6109] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 149.750068][ T6109] EXT4-fs (loop0): 1 truncate cleaned up [ 149.766917][ T6109] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.822035][ T6113] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 149.841245][ T26] audit: type=1800 audit(1760745567.513:14): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.587" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 149.961329][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 150.070042][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 150.218367][ T6127] loop4: detected capacity change from 0 to 512 [ 150.344963][ T6127] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.593: invalid block [ 150.387395][ T6127] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.593: invalid indirect mapped block 10 (level 1) [ 150.472195][ T6127] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.593: invalid indirect mapped block 8 (level 1) [ 150.564229][ T6127] EXT4-fs (loop4): 1 truncate cleaned up [ 150.628582][ T6127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.691854][ T6127] EXT4-fs (loop4): shut down requested (1) [ 150.707023][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.599'. [ 150.750776][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 150.817767][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 150.915502][ T6107] loop2: detected capacity change from 0 to 40427 [ 150.933620][ T6107] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 150.962744][ T6107] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.015018][ T6107] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.029414][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.101304][ T6107] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.108249][ T6135] loop3: detected capacity change from 0 to 32768 [ 151.159352][ T6107] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.182899][ T6135] XFS (loop3): Mounting V5 Filesystem [ 151.248775][ T4454] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.260564][ T22] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 151.278827][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.300554][ T22] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 151.310086][ T22] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 151.318121][ T22] usb 1-1: Manufacturer: syz [ 151.336556][ T22] usb 1-1: config 0 descriptor?? [ 151.342066][ T6135] XFS (loop3): Ending clean mount [ 151.395360][ T6157] loop1: detected capacity change from 0 to 512 [ 151.422502][ T6157] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.460998][ T4454] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.477224][ T6157] EXT4-fs (loop1): 1 truncate cleaned up [ 151.488732][ T4454] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.519429][ T6157] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.534739][ T26] audit: type=1800 audit(1760745569.203:15): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.604" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 151.590055][ T4454] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 151.618629][ T22] rc_core: IR keymap rc-hauppauge not found [ 151.624620][ T22] Registered IR keymap rc-empty [ 151.635532][ T4454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.640127][ T22] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 151.660895][ T22] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 151.666337][ T4454] usb 5-1: config 0 descriptor?? [ 151.698956][ T4277] syz-executor: attempt to access beyond end of device [ 151.698956][ T4277] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 151.702270][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 151.724747][ T4271] XFS (loop3): Unmounting Filesystem [ 151.726613][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 151.901582][ T6162] program syz.1.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.918037][ T5253] usb 1-1: USB disconnect, device number 7 [ 151.958988][ T4454] usb 5-1: USB disconnect, device number 5 [ 152.234452][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.315045][ T6166] netlink: 'syz.1.609': attribute type 2 has an invalid length. [ 152.565625][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'. [ 152.691805][ T4724] hid-generic 0005:15C2:3010.0005: item fetching failed at offset 0/1 [ 152.709347][ T4724] hid-generic: probe of 0005:15C2:3010.0005 failed with error -22 [ 152.937551][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 153.545860][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 153.594584][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 153.658719][ T4724] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.717964][ T5092] usb 2-1: USB disconnect, device number 8 [ 153.784082][ T6220] loop0: detected capacity change from 0 to 512 [ 153.824486][ T6220] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 153.857860][ T4724] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 153.874574][ T6220] EXT4-fs (loop0): shut down requested (1) [ 153.886205][ T4724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.970404][ T4724] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 154.028669][ T4724] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 154.036903][ T4724] usb 5-1: Manufacturer: syz [ 154.072556][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 154.095925][ T4724] usb 5-1: config 0 descriptor?? [ 154.388677][ T4724] rc_core: IR keymap rc-hauppauge not found [ 154.394697][ T4724] Registered IR keymap rc-empty [ 154.424525][ T4724] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 154.444729][ T6241] loop0: detected capacity change from 0 to 512 [ 154.457254][ T4724] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 154.472113][ T6241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.533607][ T6241] EXT4-fs (loop0): 1 truncate cleaned up [ 154.558480][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 154.573465][ T6241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 154.594719][ T4454] usb 5-1: USB disconnect, device number 6 [ 154.689860][ T6241] mmap: syz.0.639 (6241) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.795843][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 155.166729][ T6267] loop0: detected capacity change from 0 to 128 [ 155.201068][ T6267] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.411018][ T46] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.443659][ T6275] loop3: detected capacity change from 0 to 1024 [ 155.462053][ T6275] EXT4-fs: inline encryption not supported [ 155.467947][ T6275] EXT4-fs: Ignoring removed i_version option [ 155.506795][ T6275] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.633073][ T6275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.771417][ T6275] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.650: Allocating blocks 497-513 which overlap fs metadata [ 155.793532][ T6289] loop1: detected capacity change from 0 to 2048 [ 155.823641][ T6289] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 155.824182][ T6275] EXT4-fs (loop3): pa ffff888074799e00: logic 256, phys. 385, len 8 [ 155.841878][ T6275] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 155.913034][ T6292] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.084685][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 156.468900][ T6305] program syz.0.663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.545145][ T6311] netlink: 'syz.2.666': attribute type 2 has an invalid length. [ 156.700403][ T5253] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.896286][ T5253] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 156.918537][ T5253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.947571][ T5253] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 157.006803][ T5253] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 157.031681][ T5253] usb 2-1: Manufacturer: syz [ 157.087291][ T5253] usb 2-1: config 0 descriptor?? [ 157.498565][ T5253] rc_core: IR keymap rc-hauppauge not found [ 157.504569][ T5253] Registered IR keymap rc-empty [ 157.548900][ T5253] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 157.605807][ T5253] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 157.694248][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 157.720054][ T5253] usb 2-1: USB disconnect, device number 9 [ 157.984324][ T6323] loop4: detected capacity change from 0 to 131072 [ 157.998848][ T6323] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 158.005643][ T6323] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.019429][ T6323] F2FS-fs (loop4): invalid crc value [ 158.097036][ T6323] F2FS-fs (loop4): Found nat_bits in checkpoint [ 158.160460][ T6323] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 158.167580][ T6323] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 158.323482][ T6323] F2FS-fs (loop4): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:10232 [ 158.734144][ T6328] loop3: detected capacity change from 0 to 32768 [ 159.698528][ T5253] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 159.891322][ T5253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.913482][ T5253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.927270][ T6340] loop4: detected capacity change from 0 to 32768 [ 159.942995][ T5253] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 159.955838][ T6340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.675 (6340) [ 159.986411][ T5253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.010732][ T6340] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.030471][ T5253] usb 2-1: config 0 descriptor?? [ 160.074571][ T6364] loop0: detected capacity change from 0 to 256 [ 160.091581][ T6340] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 160.152833][ T6340] BTRFS info (device loop4): enabling auto defrag [ 160.208660][ T6340] BTRFS info (device loop4): turning on sync discard [ 160.223172][ T6340] BTRFS info (device loop4): force clearing of disk cache [ 160.257041][ T6340] BTRFS info (device loop4): using default commit interval 30s [ 160.278671][ T6340] BTRFS info (device loop4): max_inline at 0 [ 160.285237][ T6340] BTRFS info (device loop4): disabling free space tree [ 160.364888][ T6368] loop3: detected capacity change from 0 to 2048 [ 160.456716][ T5253] logitech-djreceiver 0003:046D:C71F.0006: ignoring exceeding usage max [ 160.467682][ T6368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.487733][ T6368] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.538102][ T5253] logitech-djreceiver 0003:046D:C71F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 160.585760][ T6340] BTRFS info (device loop4): enabling ssd optimizations [ 160.614109][ T6340] BTRFS info (device loop4): rebuilding free space tree [ 160.697817][ T4718] usb 2-1: USB disconnect, device number 10 [ 160.723454][ T6340] BTRFS info (device loop4): disabling free space tree [ 160.732317][ T6340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.755222][ T6340] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.887248][ T6396] fido_id[6396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 160.957659][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 161.113741][ T4276] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.308715][ T4320] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.539619][ T4320] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 161.561309][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.601880][ T4320] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.648271][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.665231][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.697768][ T4320] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.711029][ T6419] loop3: detected capacity change from 0 to 512 [ 161.718476][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.727773][ T6419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.746410][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.766762][ T4320] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.801504][ T6419] EXT4-fs (loop3): 1 truncate cleaned up [ 161.807416][ T6419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.828528][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.857262][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.899105][ T4320] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.940453][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 161.968820][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.001972][ T4320] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.020947][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.041924][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.050478][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 162.051506][ T4320] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.067676][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.118476][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 162.126553][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.151869][ T4320] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.167286][ T6433] loop0: detected capacity change from 0 to 2048 [ 162.189933][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.203286][ T4320] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.215324][ T4320] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.227935][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.235962][ T6433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 162.244828][ T6433] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.258186][ T4320] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 162.268266][ T4320] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 162.276961][ T4320] usb 3-1: Product: syz [ 162.281519][ T4320] usb 3-1: Manufacturer: syz [ 162.286252][ T4320] usb 3-1: SerialNumber: syz [ 162.302396][ T4320] usb 3-1: config 0 descriptor?? [ 162.326200][ T4320] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 162.338565][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 162.353531][ T27] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 162.427032][ T27] usb 2-1: config 0 has no interface number 0 [ 162.454113][ T27] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.508604][ T27] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.550751][ T27] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 162.587297][ T27] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 162.609335][ T27] usb 2-1: Product: syz [ 162.618805][ T27] usb 2-1: SerialNumber: syz [ 162.627073][ T27] usb 2-1: config 0 descriptor?? [ 162.640560][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 162.644044][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 162.648633][ T27] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 162.655959][ T4320] usb 3-1: USB disconnect, device number 7 [ 162.679492][ T27] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input17 [ 162.688924][ T4320] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 162.824819][ T6447] can0: slcan on ttyS3. [ 162.880000][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.890910][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.898155][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.908180][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.915834][ T4718] usb 2-1: USB disconnect, device number 11 [ 162.925899][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 162.932908][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 162.946887][ T4718] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 162.959474][ T6447] can0 (unregistered): slcan off ttyS3. [ 163.145678][ T6453] loop3: detected capacity change from 0 to 4096 [ 163.208071][ T6456] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.408218][ T6461] loop4: detected capacity change from 0 to 512 [ 163.452719][ T6461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.559773][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.718'. [ 163.578741][ T6461] EXT4-fs (loop4): 1 truncate cleaned up [ 163.653592][ T6461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.898836][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 163.970151][ T6475] loop1: detected capacity change from 0 to 2048 [ 164.049312][ T6475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.078308][ T6475] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.378206][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 164.603904][ T6487] can0: slcan on ttyS3. [ 164.678834][ T6487] can0 (unregistered): slcan off ttyS3. [ 164.914428][ T6495] loop1: detected capacity change from 0 to 512 [ 164.990767][ T6495] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 165.483153][ T5253] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.678555][ T5092] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.699863][ T5253] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 165.733284][ T5253] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.758464][ T5253] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.787342][ T6519] loop4: detected capacity change from 0 to 2048 [ 165.793872][ T5253] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.807155][ T5253] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.826866][ T5253] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.848451][ T5253] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.870346][ T5253] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.903665][ T5092] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 165.922842][ T5092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.941891][ T5253] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.960958][ T6519] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 165.963441][ T5092] usb 2-1: Product: syz [ 165.980153][ T5092] usb 2-1: Manufacturer: syz [ 165.995162][ T5092] usb 2-1: SerialNumber: syz [ 165.998734][ T6519] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.011941][ T5092] usb 2-1: config 0 descriptor?? [ 166.020942][ T5092] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 012 [ 166.033140][ T5253] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.060077][ T5253] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.097515][ T5253] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.154253][ T5253] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.180112][ T5253] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.213746][ T5253] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.240080][ T5253] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.277142][ T5253] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.296080][ T5253] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.308104][ T5253] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.328042][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 166.336426][ T5253] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.361948][ T5253] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.387084][ T5253] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.402127][ T5253] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.402170][ T5253] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.402197][ T5253] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.406466][ T5253] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 166.406498][ T5253] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 166.406522][ T5253] usb 4-1: Product: syz [ 166.406537][ T5253] usb 4-1: Manufacturer: syz [ 166.406553][ T5253] usb 4-1: SerialNumber: syz [ 166.417244][ T5253] usb 4-1: config 0 descriptor?? [ 166.430810][ T5092] (null): failure reading functionality [ 166.433909][ T5092] i2c i2c-1: failure reading functionality [ 166.452748][ T5092] i2c i2c-1: connected i2c-tiny-usb device [ 166.458656][ T5092] usb 2-1: USB disconnect, device number 12 [ 166.482591][ T5253] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 166.726220][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 166.732652][ T5092] usb 4-1: USB disconnect, device number 7 [ 166.737970][ T5092] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 166.805562][ T6531] loop2: detected capacity change from 0 to 32768 [ 166.892341][ T6531] XFS (loop2): Mounting V5 Filesystem [ 167.015375][ T6531] XFS (loop2): Ending clean mount [ 167.214288][ T6562] loop0: detected capacity change from 0 to 512 [ 167.246787][ T4277] XFS (loop2): Unmounting Filesystem [ 167.270235][ T6562] EXT4-fs: Ignoring removed oldalloc option [ 167.284252][ T6562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.530114][ T6562] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.745: Parent and EA inode have the same ino 15 [ 167.639922][ T6562] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.745: Parent and EA inode have the same ino 15 [ 167.713165][ T6562] EXT4-fs (loop0): 1 orphan inode deleted [ 167.728876][ T6562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 167.779077][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.751'. [ 167.965059][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 168.168560][ T4320] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.368682][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 168.382289][ T4320] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 168.411560][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.435700][ T6600] loop3: detected capacity change from 0 to 512 [ 168.447620][ T4320] pvrusb2: Hardware description: Terratec Grabster AV400 [ 168.475730][ T4320] pvrusb2: ********** [ 168.481998][ T4320] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 168.503545][ T4320] pvrusb2: Important functionality might not be entirely working. [ 168.520883][ T6600] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 168.560782][ T4320] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 168.618121][ T4320] pvrusb2: ********** [ 168.655571][ T2309] pvrusb2: Invalid write control endpoint [ 168.871669][ T6583] pvrusb2: Invalid write control endpoint [ 168.898716][ T4320] usb 5-1: USB disconnect, device number 7 [ 169.051556][ T2309] pvrusb2: Invalid write control endpoint [ 169.057770][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 169.090134][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 169.097747][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 169.117097][ T2309] pvrusb2: Device being rendered inoperable [ 169.128035][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 169.152236][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 169.170184][ T2309] pvrusb2: Attached sub-driver cx25840 [ 169.176106][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 169.183565][ T4454] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 169.197036][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 169.382606][ T6627] loop2: detected capacity change from 0 to 512 [ 169.388748][ T4454] usb 4-1: Using ep0 maxpacket: 16 [ 169.397355][ T4454] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 169.412316][ T4454] usb 4-1: config 0 has no interface number 0 [ 169.444014][ T6629] loop0: detected capacity change from 0 to 64 [ 169.460661][ T4454] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.482668][ T6627] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 169.488524][ T4454] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 169.534164][ T4454] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 169.545485][ T6627] System zones: 0-7 [ 169.546091][ T4454] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 169.557938][ T4454] usb 4-1: Product: syz [ 169.563049][ T4454] usb 4-1: SerialNumber: syz [ 169.569776][ T4454] usb 4-1: config 0 descriptor?? [ 169.576511][ T6627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 169.591727][ T4454] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 169.602977][ T4454] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input18 [ 169.752067][ T6629] Trying to free block not in datazone [ 169.949226][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.956447][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.966281][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.970006][ T5092] usb 4-1: USB disconnect, device number 8 [ 169.973263][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 170.055665][ T5092] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 170.134605][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 170.160330][ T6637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.172922][ T6637] bond0: (slave bond1): Enslaving as an active interface with an up link [ 170.495281][ T6650] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 170.584731][ T6650] SQUASHFS error: Failed to read block 0x0: -5 [ 170.673204][ T6654] overlayfs: filesystem on './file0' not supported as upperdir [ 171.055433][ T6673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.791'. [ 171.120916][ T6674] loop3: detected capacity change from 0 to 2048 [ 171.174526][ T6674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.892778][ T6696] loop3: detected capacity change from 0 to 256 [ 172.170127][ T6700] loop0: detected capacity change from 0 to 8192 [ 172.206180][ T6700] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 172.260065][ T6700] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 172.289747][ T6700] REISERFS (device loop0): using ordered data mode [ 172.296444][ T6700] reiserfs: using flush barriers [ 172.317183][ T6700] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.425541][ T6700] REISERFS (device loop0): checking transaction log (loop0) [ 172.439601][ T6700] REISERFS (device loop0): Using r5 hash to sort names [ 172.482205][ T6700] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 172.572595][ T6694] loop2: detected capacity change from 0 to 32768 [ 172.628118][ T6694] [ 172.628118][ T6694] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.628118][ T6694] [ 172.763516][ T26] audit: type=1800 audit(1760745590.433:16): pid=6694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.802" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 172.889933][ T6717] ERROR: (device loop2): diWrite: ixpxd invalid [ 172.889933][ T6717] [ 172.989906][ T6717] ERROR: (device loop2): txCommit: [ 172.989906][ T6717] [ 173.295590][ T6694] BUG at fs/jfs/jfs_dmap.c:3036 assert(bitno < 32) [ 173.318968][ T6729] loop4: detected capacity change from 0 to 512 [ 173.376982][ T6729] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 173.391381][ T6694] ------------[ cut here ]------------ [ 173.396956][ T6694] kernel BUG at fs/jfs/jfs_dmap.c:3036! [ 173.404827][ T6727] block device autoloading is deprecated and will be removed. [ 173.431543][ T6729] System zones: 0-7 [ 173.438041][ T6694] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 173.444183][ T6694] CPU: 0 PID: 6694 Comm: syz.2.802 Not tainted syzkaller #0 [ 173.451505][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.461597][ T6694] RIP: 0010:dbFindBits+0x193/0x1a0 [ 173.466769][ T6694] Code: 33 ea 21 07 0f 0b e8 5c 23 96 fe 48 c7 c7 20 f3 c5 8a 48 c7 c6 a0 f0 c5 8a ba dc 0b 00 00 48 c7 c1 60 fb c5 8a e8 0d ea 21 07 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 [ 173.486520][ T6694] RSP: 0018:ffffc90005bfebc8 EFLAGS: 00010246 [ 173.491875][ T6729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 173.492605][ T6694] RAX: 0000000000000030 RBX: 0000000000000000 RCX: 357c30e9202ccc00 [ 173.509044][ T6694] RDX: ffffc9000c6c9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 173.517052][ T6694] RBP: 00000000ffffffff R08: dffffc0000000000 R09: fffff52000b7fd19 [ 173.525059][ T6694] R10: fffff52000b7fd19 R11: 1ffff92000b7fd18 R12: 0000000000000001 [ 173.533071][ T6694] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000020 [ 173.541074][ T6694] FS: 00007fcf799916c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 173.550127][ T6694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.556751][ T6694] CR2: 0000001b2f913ff8 CR3: 0000000073ff7000 CR4: 00000000003506f0 [ 173.564771][ T6694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.572790][ T6694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.580823][ T6694] Call Trace: [ 173.584142][ T6694] [ 173.587112][ T6694] dbAllocDmapLev+0x169/0x3c0 [ 173.591845][ T6694] dbAllocCtl+0x148/0x9b0 [ 173.596313][ T6694] dbAllocAG+0x1e7/0xfe0 [ 173.600602][ T6694] ? rwsem_write_trylock+0x12f/0x1b0 [ 173.605939][ T6694] ? clear_nonspinnable+0x60/0x60 [ 173.611027][ T6694] dbAlloc+0x5a3/0xb90 [ 173.615148][ T6694] xtSplitUp+0x40c/0x1c20 [ 173.619542][ T6694] ? verify_lock_unused+0x140/0x140 [ 173.624789][ T6694] ? dquot_free_block+0xa0/0xa0 [ 173.629704][ T6694] xtInsert+0x455/0xbb0 [ 173.633927][ T6694] ? xtSearch+0x1880/0x1880 [ 173.638659][ T6694] ? lock_chain_count+0x20/0x20 [ 173.643557][ T6694] ? _raw_spin_lock_irq+0xab/0xe0 [ 173.648638][ T6694] ? rcu_is_watching+0x11/0xa0 [ 173.653476][ T6694] ? __mark_inode_dirty+0x3de/0xe90 [ 173.658715][ T6694] extAlloc+0x9f6/0xf30 [ 173.663184][ T6694] ? jfs_ioc_trim+0x660/0x660 [ 173.667906][ T6694] ? bio_add_page+0x3b4/0x730 [ 173.672648][ T6694] jfs_get_block+0x343/0xab0 [ 173.677279][ T6694] ? jfs_dirty_inode+0x240/0x240 [ 173.682257][ T6694] ? submit_page_section+0x5b0/0xa20 [ 173.687618][ T6694] ? jfs_dirty_inode+0x240/0x240 [ 173.692596][ T6694] __blockdev_direct_IO+0x16a9/0x3450 [ 173.698029][ T6694] ? sb_init_dio_done_wq+0x80/0x80 [ 173.703202][ T6694] ? jfs_dirty_inode+0x240/0x240 [ 173.708207][ T6694] ? __mark_inode_dirty+0x54e/0xe90 [ 173.713553][ T6694] ? reacquire_held_locks+0x2f9/0x590 [ 173.719004][ T6694] ? __mark_inode_dirty+0x54e/0xe90 [ 173.724274][ T6694] ? __mark_inode_dirty+0x76a/0xe90 [ 173.729603][ T6694] jfs_direct_IO+0x119/0x220 [ 173.734240][ T6694] generic_file_direct_write+0x3be/0x660 [ 173.740194][ T6694] ? dio_warn_stale_pagecache+0x1b0/0x1b0 [ 173.746042][ T6694] ? __file_update_time+0x228/0x240 [ 173.751285][ T6694] ? file_update_time+0x2d3/0x340 [ 173.756446][ T6694] ? __file_remove_privs+0x5b0/0x5b0 [ 173.761790][ T6694] ? preempt_count_add+0x8d/0x190 [ 173.766857][ T6694] ? rwsem_write_trylock+0x12f/0x1b0 [ 173.772193][ T6694] ? clear_nonspinnable+0x60/0x60 [ 173.777270][ T6694] ? generic_write_checks_count+0x3d9/0x4c0 [ 173.783219][ T6694] __generic_file_write_iter+0x1db/0x430 [ 173.788903][ T6694] generic_file_write_iter+0xab/0x2e0 [ 173.794328][ T6694] do_iter_write+0x62d/0xaf0 [ 173.798992][ T6694] ? vfs_iter_write+0xa0/0xa0 [ 173.803735][ T6694] ? rcu_read_lock_any_held+0xb0/0x120 [ 173.809247][ T6694] do_pwritev+0x201/0x340 [ 173.813975][ T6694] ? do_preadv+0x330/0x330 [ 173.818472][ T6694] ? do_sys_openat2+0x1fe/0x490 [ 173.823363][ T6694] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 173.829807][ T6694] ? lock_chain_count+0x20/0x20 [ 173.834682][ T6694] ? lockdep_hardirqs_on+0x94/0x140 [ 173.839938][ T6694] ? __x64_sys_pwritev2+0xba/0x100 [ 173.845100][ T6694] do_syscall_64+0x4c/0xa0 [ 173.849552][ T6694] ? clear_bhb_loop+0x60/0xb0 [ 173.854243][ T6694] ? clear_bhb_loop+0x60/0xb0 [ 173.858935][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.864922][ T6694] RIP: 0033:0x7fcf78b8efc9 [ 173.869353][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.888978][ T6694] RSP: 002b:00007fcf79991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 173.897511][ T6694] RAX: ffffffffffffffda RBX: 00007fcf78de5fa0 RCX: 00007fcf78b8efc9 [ 173.905501][ T6694] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 173.913604][ T6694] RBP: 00007fcf78c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.921603][ T6694] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000000 [ 173.929612][ T6694] R13: 00007fcf78de6038 R14: 00007fcf78de5fa0 R15: 00007ffc7b4a6b18 [ 173.937600][ T6694] [ 173.940644][ T6694] Modules linked in: [ 173.949930][ T6694] ---[ end trace 0000000000000000 ]--- [ 173.955443][ T6694] RIP: 0010:dbFindBits+0x193/0x1a0 [ 173.960756][ T6694] Code: 33 ea 21 07 0f 0b e8 5c 23 96 fe 48 c7 c7 20 f3 c5 8a 48 c7 c6 a0 f0 c5 8a ba dc 0b 00 00 48 c7 c1 60 fb c5 8a e8 0d ea 21 07 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 [ 173.980464][ T6694] RSP: 0018:ffffc90005bfebc8 EFLAGS: 00010246 [ 173.984798][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 173.986551][ T6694] RAX: 0000000000000030 RBX: 0000000000000000 RCX: 357c30e9202ccc00 [ 173.986570][ T6694] RDX: ffffc9000c6c9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 174.008481][ T6694] RBP: 00000000ffffffff R08: dffffc0000000000 R09: fffff52000b7fd19 [ 174.016606][ T6694] R10: fffff52000b7fd19 R11: 1ffff92000b7fd18 R12: 0000000000000001 [ 174.025567][ T6694] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000020 [ 174.033781][ T6694] FS: 00007fcf799916c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 174.042839][ T6694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.049599][ T6694] CR2: 0000001b2f913ff8 CR3: 0000000073ff7000 CR4: 00000000003506f0 [ 174.057600][ T6694] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.065658][ T6694] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.073720][ T6694] Kernel panic - not syncing: Fatal exception [ 174.080365][ T6694] Kernel Offset: disabled [ 174.084699][ T6694] Rebooting in 86400 seconds..