last executing test programs: 4.436466428s ago: executing program 0 (id=853): r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) read(r0, 0x0, 0x18) fanotify_mark(r0, 0x101, 0x8000031, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x80943, 0x0) 4.182618426s ago: executing program 0 (id=856): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)) 3.925376174s ago: executing program 0 (id=860): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 3.656512283s ago: executing program 4 (id=868): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_emit_ethernet(0x2c, &(0x7f0000000380)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x35, 0x1e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xa, 0x0, @opaque="6cca"}}}}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0xe) 3.44582905s ago: executing program 4 (id=872): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 3.317938804s ago: executing program 4 (id=874): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r0, &(0x7f0000004dc0)={0x2020}, 0x2020) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x6) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x205e) 3.083982021s ago: executing program 4 (id=878): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x81) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.927987626s ago: executing program 2 (id=881): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x207a) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 2.734500223s ago: executing program 4 (id=882): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000040)={&(0x7f0000001080)={{@my=0x1, 0x2}, {@host, 0x6}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c47baa2c46464183ead798b1af0ba7ad5db77735e5329e7297e674242854f87ef03b0fba724523133529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a80700000076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717edf6b43f7c235fae47730ff2d435ed29dc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba19660300a0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69b8752ea01c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4ccb20e0517c03e7b46839f4c0601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50119bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa150000cfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865073177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36b4ab36b378cb71a762461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309977816048f2400"}, 0x418, 0x1008}) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000100)={0x4ed489e9, 0x3, 0xb7}) 2.50425537s ago: executing program 4 (id=884): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd, 0x6, &(0x7f0000000100)={0x21, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 1.993387336s ago: executing program 2 (id=886): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x4a, 0xc11, &(0x7f0000003e80)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = open(&(0x7f0000000340)='./file1\x00', 0x86442, 0x10) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) 1.992690047s ago: executing program 3 (id=897): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 1.837186001s ago: executing program 3 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="001004000100000008001b"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 1.702897925s ago: executing program 2 (id=889): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000640)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000004}) 1.664639947s ago: executing program 3 (id=890): syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x2, "94c47900001023660f0000000000005800000000000400", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.57647359s ago: executing program 1 (id=891): getpgid(0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000540)=@v2={0x2, @adiantum, 0x18, '\x00', @auto="60a00c8f0ff36959cf8f59b49f4d1862"}) 1.555835221s ago: executing program 0 (id=892): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x1001) wait4(0x0, 0x0, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xeff, 0x0, &(0x7f0000000080)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.446982004s ago: executing program 2 (id=893): socket(0x1d, 0x80802, 0x6) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 1.446088214s ago: executing program 1 (id=905): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x519, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0xfffffff1, 0x800, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40], [0x1, 0x4, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x9, 0xfffffffd, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x2, 0x0, 0x0, 0x31c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x4, 0x0, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7], [0x0, 0xfffffffe, 0xff, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3f35e3b2, 0x200000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 1.275203379s ago: executing program 0 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f0000015a80), &(0x7f0000015ac0)='./file1\x00', 0x50, &(0x7f0000015b00), 0x1, 0x15a5c, &(0x7f0000015b40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) 1.2442077s ago: executing program 1 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1.159817683s ago: executing program 1 (id=898): r0 = epoll_create(0x7) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) 741.600396ms ago: executing program 3 (id=899): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = syz_io_uring_setup(0x1077, &(0x7f00000003c0)={0x0, 0xf054, 0x40, 0x2, 0x9}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000004c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) 740.988396ms ago: executing program 1 (id=910): openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 511.903854ms ago: executing program 1 (id=900): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="c028e8d681cadbf41abb4bd3a355efd01f2fa46a1685090c002a734dd638b7f63b5ff96ff38579074a4281ac91309583dcb8f2eabe834e523afac2c11b429cb8f18fc0b041c0c58c9cf2c99de66cc73761dea813d32ffbd2ccb07c1dd17dde5076b719a561affd2edd86dab31580e480d5565519c240b338eef84a15dd16903bb7806c99dc1c9bb71cd2517a31187189a431282383827020b72dbc103fc07e0cab2bd1178ad7c1742160bbf86875fde202fc3dd3322286c66f1730337d700f4d2f37b3e1d8b0f39ec3700ed481e6cd939afaeca9bea9a8", @ANYBLOB="5a4eb35f3efee96fc6dff22f2d758f88ecfab5eb9746c0a23d0d67841fa2ac460a2fe9bea490a8d71e88c19a6edcaa15c3e8e1df7ab2a8959b13fa22d83fc401ab62f5946375029c5df3473c3e2a305d938749601a4759e1d17b7edf91c627cb38af3331076f0b6cf17aa556d817fe2a06ff2a5a2d0d667ae97f", @ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT], 0x41, 0x5e97, &(0x7f0000005e00)="$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") write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) 455.548936ms ago: executing program 2 (id=901): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 401.760497ms ago: executing program 3 (id=902): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) times(&(0x7f0000000040)) 175.746645ms ago: executing program 2 (id=903): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x170, &(0x7f00000008c0)={[{0xad, 0x4e00, "a6abab894c3265bdc7fc71f365c8a4a329d5ebebcbc7936198f207ea92992fe26d4bb809dd3c31013d80d39ac8d10d2d2ece6b76e00e538472601a9a532903d576016aacfe5b3752bff467d33e8a8a5bfe2ae96da029c78bf00342fae8ea7df90c1e9b0c79a5d3700ef739c45ae3f943f4aecf0b5505528379d6ab699b88314c021ff6cd54afcc961c11bbcf0ee5c2b3dcb325cfb59fce618dbf06c7309a2df356be245aa1c3a22a98790ab08e"}, {0xb5, 0x4e00, "5edf7f3b377d5ce1a81ab0329d66b56e3c39d6aeb13b236486a733960a3d2e78ced1a21f4312c29424c235444fd707709c18b8042bfccb2996c026b63ae837fe4085b171e5f2a441c5036fe6165ade0799ceb2da4effff2955dc719d773a79729076b0470fdfb44e9cda583879a339d752db9083b9c54c58a61406629fc7197eaffdbd31eb7e236f6db2b22d8c18400c16b20b35c23c28587df129b3d6c57c3e93b5c4dc836c0652ce82189ffe0d59e00550eebc75"}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x294, &(0x7f0000000fc0)={[{0x5d, 0x4e00, "01040000000000004b267429aa6d4b0c9f01aa3d328565d0010b90fbe62d51859154ab1fcbc55f9161b571527fac9ed03a2e74305dfd65058f19e82faec59e944ada44b2fa3325138e20a33a8c46d1356b43841bcabcfc4a460893041e"}, {0xa9, 0x4e00, "d881d49ab66afcfd797e873b4376089920aa5dfde0dacabbd931fb370c190fc30b41cdbcefc7aca4ea2d8ac7b4339c4b132231398735271bae106aa59bca04acc0cbd530ff8e5c75d582982257d5867f588dd8c616fecabadde9c5411caec5d4608ea2ca3257897ada7454b7bb48284c9deb90c0438ada07d6db8a214b81704409765408f24fa3b41f1d28dbc08aa2d72a4405aa909cd09b3a638018a23b33f4633011710c81f336c0"}, {0xb1, 0x4e00, "2a1a725692e66b63d59671bd67c004855a93ad55fb34e85253de24683a4aad51e6d2f45b98b562ea859f34656792c448425fa670e715e2581b7f80ce2aa8334649981d21f00bfc93fa5e726b086d669f7b4314888a0b2e59eaf2980a1e69e89b2fc11ad6d29c3ba6342cf13fe83336c36ba4203e86e29ab0d56ef69e96fcb3485af8f8227d854aa559468767b1ead74668116dd0ec0e3511807866949665b013fb4e02f46a4e81f2c75b2da317b5eb3259"}, {0x9, 0x4e00, "866e0505000000a37b"}, {0x3d, 0x4e00, "f13f0d4379727af8f7502ed9753282414cf2341ad8eb7f1aff131ae38700ffd76a7313b5b78948cb1909d3114da8eb6752e3d3e8098cdf692a8c639bd7"}, {}, {0x31, 0x4e00, "58ecd9e27fa008152b84c087d97f24bb6c680480c08eeac655e2be4595f3a27bc9408b5bcb52003ed849820ac71276b1a1"}, {0x31, 0x4e00, "870e8d26e1cac17916a86620680926cda04166438d1e0bb19e288532a017bcd2f56ef310240eb816f4a23930b768170000"}]}) 675.75µs ago: executing program 0 (id=904): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x3010052, &(0x7f0000000600)=ANY=[], 0x41, 0x1509, &(0x7f0000009c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc2}}) 0s ago: executing program 3 (id=916): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$sndseq(r0, &(0x7f00000000c0)=[{0x9, 0xa, 0x9, 0x8, @time={0x7, 0x3}, {0x0, 0x71}, {0x7f, 0x8}, @addr={0x4, 0x8}}], 0x1c) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): lready exists on: batadv_slave_1 [ 76.903781][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.915366][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.939587][ T4287] device veth1_vlan entered promiscuous mode [ 76.963202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.979458][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.995811][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.008390][ T4279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.018150][ T4279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.027470][ T4279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.037586][ T4279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.140169][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.173426][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.215886][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.229039][ T4287] device veth0_macvtap entered promiscuous mode [ 77.277342][ T4287] device veth1_macvtap entered promiscuous mode [ 77.319232][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.340616][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.397065][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.409483][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.425301][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.430599][ T4369] loop1: detected capacity change from 0 to 4096 [ 77.437954][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.457497][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.468286][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.478529][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.480762][ T4369] EXT4-fs (loop1): Test dummy encryption mode enabled [ 77.492826][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.509165][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.533864][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.544060][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.545565][ T4369] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.557246][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.574916][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.596658][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.616105][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.642858][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.654274][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.665794][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.677312][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.688187][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.698099][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.708837][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.718849][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.729340][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.741597][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.753388][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.765456][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.776241][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.785912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.795838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.805612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.818861][ T4287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.836091][ T4287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.848639][ T4287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.863712][ T4287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.907128][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.953243][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.012174][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.070246][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 78.076480][ T4274] Bluetooth: hci1: command 0x0419 tx timeout [ 78.088812][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.150808][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 78.152254][ T4383] loop3: detected capacity change from 0 to 128 [ 78.157878][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 78.173489][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 78.181325][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.197386][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.263574][ T4383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.273122][ T4369] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 78.282160][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.282179][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.302469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.313161][ T4383] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.369196][ T4383] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x18) [ 78.407039][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.488378][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 78.566197][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 78.620412][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 78.658341][ T126] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.675502][ T4395] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 78.688937][ T126] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.711075][ T126] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.734907][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.820380][ T4401] device batadv_slave_1 entered promiscuous mode [ 78.836710][ T4400] device batadv_slave_1 left promiscuous mode [ 79.205977][ T126] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 79.240214][ T4318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.430995][ T4318] usb 2-1: Using ep0 maxpacket: 8 [ 79.449025][ T4318] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 79.495540][ T4412] loop3: detected capacity change from 0 to 2048 [ 79.498069][ T4318] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 79.521323][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.529444][ T4318] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.530336][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.561015][ T4322] usb 3-1: USB disconnect, device number 2 [ 79.588446][ T4318] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.621569][ T4412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.654716][ T4318] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.672621][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.689296][ T4412] EXT4-fs (loop3): shut down requested (0) [ 79.890855][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 79.913503][ T4318] usb 2-1: GET_CAPABILITIES returned 0 [ 79.919275][ T4318] usbtmc 2-1:16.0: can't read capabilities [ 80.129445][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 80.142934][ T4322] usb 2-1: USB disconnect, device number 2 [ 80.150213][ T4319] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.177827][ T4425] loop3: detected capacity change from 0 to 2048 [ 80.233649][ T4425] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.282112][ T26] audit: type=1800 audit(1781193210.886:2): pid=4425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.25" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 80.330244][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 80.350829][ T4319] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 80.374215][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.382376][ T4319] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 80.400337][ T4319] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 80.419591][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.439567][ T4319] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 80.451411][ T4429] loop8: detected capacity change from 0 to 1 [ 80.480446][ T4319] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 80.492384][ T4429] Dev loop8: unable to read RDB block 1 [ 80.502353][ T4319] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 80.512331][ T4429] loop8: unable to read partition table [ 80.518243][ T4429] loop8: partition table beyond EOD, truncated [ 80.526639][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.526772][ T4429] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 80.571612][ T4319] usb 5-1: config 0 descriptor?? [ 80.617194][ T4432] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 80.617324][ T4406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.792158][ T4319] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 80.889696][ T4439] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 81.008699][ T4317] usb 5-1: USB disconnect, device number 2 [ 81.034315][ T4317] usblp0: removed [ 81.338749][ T4406] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.351058][ T4406] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.367474][ T4406] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.377440][ T4406] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.536723][ T4450] netlink: 'syz.3.33': attribute type 29 has an invalid length. [ 81.588377][ T4450] netlink: 'syz.3.33': attribute type 29 has an invalid length. [ 81.800387][ T4451] netlink: 'syz.3.33': attribute type 29 has an invalid length. [ 81.870108][ T4450] netlink: 'syz.3.33': attribute type 29 has an invalid length. [ 81.920186][ T4453] netlink: 'syz.3.33': attribute type 29 has an invalid length. [ 81.998323][ T4459] device syzkaller1 entered promiscuous mode [ 82.018888][ T4461] loop0: detected capacity change from 0 to 256 [ 82.048042][ T4461] ======================================================= [ 82.048042][ T4461] WARNING: The mand mount option has been deprecated and [ 82.048042][ T4461] and is ignored by this kernel. Remove the mand [ 82.048042][ T4461] option from the mount to silence this warning. [ 82.048042][ T4461] ======================================================= [ 82.259168][ T4461] FAT-fs (loop0): Directory bread(block 64) failed [ 82.297175][ T4461] FAT-fs (loop0): Directory bread(block 65) failed [ 82.320604][ T4461] FAT-fs (loop0): Directory bread(block 66) failed [ 82.327293][ T4461] FAT-fs (loop0): Directory bread(block 67) failed [ 82.386998][ T4461] FAT-fs (loop0): Directory bread(block 68) failed [ 82.451046][ T4461] FAT-fs (loop0): Directory bread(block 69) failed [ 82.457757][ T4461] FAT-fs (loop0): Directory bread(block 70) failed [ 82.494985][ T4461] FAT-fs (loop0): Directory bread(block 71) failed [ 82.538258][ T4461] FAT-fs (loop0): Directory bread(block 72) failed [ 82.561493][ T4461] FAT-fs (loop0): Directory bread(block 73) failed [ 82.625067][ T4475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 82.678383][ T4461] FAT-fs (loop0): Filesystem has been set read-only [ 82.776820][ T4482] loop3: detected capacity change from 0 to 256 [ 82.831208][ T4482] exfat: Deprecated parameter 'utf8' [ 82.860326][ T4482] exfat: Deprecated parameter 'namecase' [ 82.873243][ T4482] exfat: Deprecated parameter 'namecase' [ 82.918826][ T4482] exfat: Deprecated parameter 'utf8' [ 83.012529][ T4482] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 83.742505][ T4515] loop4: detected capacity change from 0 to 128 [ 83.791757][ T4517] loop0: detected capacity change from 0 to 512 [ 84.115938][ T4525] loop4: detected capacity change from 0 to 8 [ 84.231889][ T4525] SQUASHFS error: zstd decompression error: 10 [ 84.262282][ T4525] SQUASHFS error: zstd decompression failed, data probably corrupt [ 84.308068][ T4525] SQUASHFS error: Failed to read block 0x62b: -5 [ 84.351389][ T4530] SQUASHFS error: Unable to read metadata cache entry [629] [ 84.367804][ T4507] loop2: detected capacity change from 0 to 32768 [ 84.374789][ T4525] SQUASHFS error: Unable to read metadata cache entry [629] [ 84.386416][ T4530] SQUASHFS error: Unable to read directory block [629:ff26] [ 84.424513][ T4525] SQUASHFS error: Unable to read directory block [629:ff26] [ 84.517904][ T4507] XFS (loop2): Mounting V5 Filesystem [ 84.629607][ T4507] XFS (loop2): Ending clean mount [ 84.722843][ T4507] XFS (loop2): User initiated shutdown received. [ 84.759822][ T4507] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 84.800145][ T4507] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 84.900217][ T4318] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.971275][ T4277] XFS (loop2): Unmounting Filesystem [ 85.078488][ T4555] loop3: detected capacity change from 0 to 8192 [ 85.100095][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 85.115574][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.138116][ T4318] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 85.145565][ T4557] loop0: detected capacity change from 0 to 4096 [ 85.159185][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.169880][ T4557] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 85.188471][ T4318] usb 5-1: config 0 descriptor?? [ 85.421130][ T4318] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 85.455821][ T4560] device syzkaller1 entered promiscuous mode [ 85.476115][ T4557] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update [ 85.624917][ T46] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 86.058151][ T4354] usb 5-1: USB disconnect, device number 3 [ 86.161508][ T4577] input: syz0 as /devices/virtual/input/input8 [ 86.164080][ T4318] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.198611][ T4579] loop3: detected capacity change from 0 to 256 [ 86.232251][ T4579] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.256965][ T4579] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 86.291328][ T4579] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001003e, chksum : 0x7b40f5c9, utbl_chksum : 0xe619d30d) [ 86.370719][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 86.378609][ T4318] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 86.393791][ T4579] exFAT-fs (loop3): hint_cluster is invalid (17) [ 86.401761][ T4318] usb 3-1: config 0 has no interface number 0 [ 86.407901][ T4318] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 86.423657][ T4318] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 86.440512][ T4579] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 86.449266][ T4579] exFAT-fs (loop3): Filesystem has been set read-only [ 86.458908][ T4318] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 86.470057][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.478327][ T4318] usb 3-1: Product: syz [ 86.485191][ T4318] usb 3-1: Manufacturer: syz [ 86.502989][ T4318] usb 3-1: SerialNumber: syz [ 86.520590][ T4318] usb 3-1: config 0 descriptor?? [ 86.527112][ T4566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.545043][ T4566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.723105][ T954] cfg80211: failed to load regulatory.db [ 86.810561][ T4566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.817876][ T4566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 87.043005][ T4583] loop0: detected capacity change from 0 to 32768 [ 87.076137][ T4318] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 87.114586][ T4601] netlink: 96 bytes leftover after parsing attributes in process `syz.1.99'. [ 87.691583][ T4318] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 87.727772][ T4318] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 87.780687][ T4318] asix: probe of 3-1:0.34 failed with error -71 [ 87.796149][ T4318] usb 3-1: USB disconnect, device number 3 [ 88.311323][ T4630] loop4: detected capacity change from 0 to 4096 [ 88.365799][ T4632] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.454850][ T4634] 9pnet: p9_errstr2errno: server reported unknown error @b§)ð_4¶c^ŒÞí†FÞRšRå2è¸00000000000000000000003 [ 88.595325][ T4287] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 88.650148][ T4287] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 88.807670][ T4628] loop0: detected capacity change from 0 to 32768 [ 89.009189][ T108] ERROR: (device loop0): diFree: numfree > numinos [ 89.009189][ T108] [ 89.120520][ T4648] loop2: detected capacity change from 0 to 512 [ 89.237601][ T4648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.403453][ T4650] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 306: padding at end of block bitmap is not set [ 89.486550][ T4651] EXT4-fs (loop2): unmounting filesystem. [ 89.919350][ T4646] loop4: detected capacity change from 0 to 131072 [ 89.961660][ T4644] loop3: detected capacity change from 0 to 32768 [ 89.987129][ T4646] XFS (loop4): Mounting V5 Filesystem [ 90.067302][ T4644] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 90.067302][ T4644] [ 90.111120][ T4664] loop0: detected capacity change from 0 to 256 [ 90.121024][ T4646] XFS (loop4): Starting recovery (logdev: internal) [ 90.153358][ T4646] XFS (loop4): Ending recovery (logdev: internal) [ 90.175303][ T4644] ERROR: (device loop3): remounting filesystem as read-only [ 90.195444][ T4664] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.383400][ T4287] XFS (loop4): Unmounting Filesystem [ 91.115235][ T4689] loop0: detected capacity change from 0 to 64 [ 91.214801][ T4689] syz.0.132: attempt to access beyond end of device [ 91.214801][ T4689] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 91.261599][ T4689] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 91.544086][ T4696] process 'syz.1.135' launched './file0' with NULL argv: empty string added [ 91.903567][ T4708] loop3: detected capacity change from 0 to 512 [ 92.036966][ T4708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.084740][ T4708] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.268878][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 93.256647][ T4767] loop3: detected capacity change from 0 to 128 [ 93.330282][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.355278][ T4767] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 93.382891][ T4767] FAT-fs (loop3): Filesystem has been set read-only [ 93.417125][ T4773] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 93.441297][ T4767] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 93.533307][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 93.540919][ T4318] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.606472][ T4318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.621284][ T4318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.639928][ T4318] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.668275][ T4785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 93.691463][ T4318] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.710347][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.865517][ T4793] loop4: detected capacity change from 0 to 512 [ 93.892921][ T4793] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.902690][ T4793] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.950570][ T4318] usb 1-1: GET_CAPABILITIES returned 0 [ 93.956129][ T4318] usbtmc 1-1:16.0: can't read capabilities [ 94.000134][ T954] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.011449][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 94.060071][ T4322] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.120076][ T4318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.167469][ T4354] usb 1-1: USB disconnect, device number 2 [ 94.187106][ T4801] netlink: 'syz.4.183': attribute type 38 has an invalid length. [ 94.198536][ T4801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.183'. [ 94.200111][ T954] usb 2-1: Using ep0 maxpacket: 8 [ 94.230100][ T954] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 94.244721][ T954] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.255418][ T954] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.266959][ T954] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.271887][ T4322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.277480][ T954] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.306802][ T4322] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 94.318574][ T954] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.328487][ T954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.328993][ T4322] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.338464][ T4318] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.351393][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.357785][ T4318] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.371880][ T4322] usb 3-1: Product: syz [ 94.377606][ T4322] usb 3-1: Manufacturer: syz [ 94.379327][ T4318] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 94.386351][ T4322] usb 3-1: SerialNumber: syz [ 94.392411][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.405659][ T4318] usb 4-1: Product: syz [ 94.409927][ T4318] usb 4-1: Manufacturer: syz [ 94.415929][ T4318] usb 4-1: SerialNumber: syz [ 94.426888][ T4322] cdc_mbim 3-1:1.0: skipping garbage [ 94.435351][ T4318] usb 4-1: config 0 descriptor?? [ 94.447969][ T4318] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 94.464067][ T4318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 94.474406][ T4318] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 94.485715][ T4318] usb 4-1: media controller created [ 94.516252][ T4318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.573156][ T4808] loop4: detected capacity change from 0 to 64 [ 94.627533][ T4789] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 94.658865][ T4318] DVB: Unable to find symbol tda10046_attach() [ 94.671076][ T4318] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 94.679759][ T4318] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 95.080225][ T954] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.268451][ T4789] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 95.276196][ T954] usb 1-1: Using ep0 maxpacket: 16 [ 95.283664][ T954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.297515][ T4322] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 95.302367][ T954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.321960][ T954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.324946][ T4322] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 95.337780][ T954] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.350680][ T954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.366997][ T126] usb 2-1: USB disconnect, device number 3 [ 95.374221][ T954] usb 1-1: config 0 descriptor?? [ 95.442317][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.442317][ T56] loop4: rw=1, sector=161, nr_sectors = 1 limit=64 [ 95.456104][ T56] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 95.465336][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.465336][ T56] loop4: rw=1, sector=162, nr_sectors = 1 limit=64 [ 95.478898][ T56] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 95.487640][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.487640][ T56] loop4: rw=1, sector=163, nr_sectors = 1 limit=64 [ 95.501864][ T4322] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 95.508147][ T56] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 95.516958][ T4322] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 95.520090][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.520090][ T56] loop4: rw=1, sector=167, nr_sectors = 1 limit=64 [ 95.537529][ T56] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 95.549388][ T4318] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 95.563840][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.563840][ T56] loop4: rw=1, sector=169, nr_sectors = 1 limit=64 [ 95.577816][ T56] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 95.589821][ T4318] usb 4-1: USB disconnect, device number 2 [ 95.602970][ T4322] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, c6:44:89:e0:80:f0 [ 95.614215][ T4811] loop0: detected capacity change from 0 to 256 [ 95.620678][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.620678][ T56] loop4: rw=1, sector=171, nr_sectors = 1 limit=64 [ 95.635852][ T4811] exfat: Deprecated parameter 'namecase' [ 95.654956][ T4811] exfat: Bad value for 'namecase' [ 95.660764][ T4322] usb 3-1: USB disconnect, device number 4 [ 95.687640][ T56] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 95.705219][ T4322] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 95.722107][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.722107][ T56] loop4: rw=1, sector=172, nr_sectors = 1 limit=64 [ 95.764001][ T56] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 95.764681][ T4266] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.780506][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.780506][ T56] loop4: rw=1, sector=173, nr_sectors = 1 limit=64 [ 95.802802][ T56] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 95.816574][ T56] kworker/u4:4: attempt to access beyond end of device [ 95.816574][ T56] loop4: rw=1, sector=174, nr_sectors = 1 limit=64 [ 95.842779][ T56] Buffer I/O error on dev loop4, logical block 174, lost async page write [ 96.001353][ T954] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.008637][ T954] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 96.060202][ T954] microsoft 0003:045E:07DA.0002: report is too long [ 96.066904][ T954] microsoft 0003:045E:07DA.0002: item 0 4 0 11 parsing failed [ 96.093392][ T954] microsoft 0003:045E:07DA.0002: parse failed [ 96.118761][ T954] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 96.206117][ T4322] usb 1-1: USB disconnect, device number 3 [ 97.089836][ T4853] loop4: detected capacity change from 0 to 256 [ 97.111207][ T4853] exfat: Deprecated parameter 'utf8' [ 97.124280][ T4853] exfat: Deprecated parameter 'utf8' [ 97.204121][ T4853] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 97.306974][ T4858] Illegal XDP return value 3129069288 on prog (id 19) dev syz_tun, expect packet loss! [ 97.359557][ T4856] loop0: detected capacity change from 0 to 8192 [ 97.399784][ T4856] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.439066][ T4856] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 97.516837][ T4856] REISERFS (device loop0): using ordered data mode [ 97.570276][ T4856] reiserfs: using flush barriers [ 97.608876][ T4856] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.671038][ T4856] REISERFS (device loop0): checking transaction log (loop0) [ 97.731070][ T4856] REISERFS (device loop0): Using r5 hash to sort names [ 97.743434][ T4872] loop4: detected capacity change from 0 to 1024 [ 97.785757][ T4856] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 97.936586][ T4856] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 97.959233][ T4872] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 97.981390][ T4872] hfsplus: xattr searching failed [ 98.016457][ T4856] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 98.051125][ T4881] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 98.076621][ T4856] REISERFS (device loop0): Remounting filesystem read-only [ 98.097201][ T4881] hfsplus: xattr search failed [ 98.116032][ T4856] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 98.154863][ T4881] hfsplus: b-tree write err: -5, ino 2 [ 98.200374][ T954] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.335304][ T4672] hfsplus: b-tree write err: -5, ino 25 [ 98.353458][ T4672] hfsplus: b-tree write err: -5, ino 4 [ 98.388093][ T4672] hfsplus: b-tree write err: -5, ino 2 [ 98.400155][ T954] usb 2-1: Using ep0 maxpacket: 32 [ 98.407119][ T954] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 98.421813][ T4672] hfsplus: b-tree write err: -5, ino 28 [ 98.435773][ T954] usb 2-1: config 0 has no interface number 0 [ 98.469010][ T954] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 98.508771][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.540294][ T4319] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 98.569934][ T954] usb 2-1: Product: syz [ 98.579901][ T954] usb 2-1: Manufacturer: syz [ 98.601864][ T954] usb 2-1: SerialNumber: syz [ 98.625981][ T954] usb 2-1: config 0 descriptor?? [ 98.653794][ T954] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 98.744487][ T4319] usb 3-1: Using ep0 maxpacket: 16 [ 98.746578][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.746609][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.746629][ T4319] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 98.746695][ T4319] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 98.746716][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.748981][ T4319] usb 3-1: config 0 descriptor?? [ 98.861062][ T954] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 98.871154][ T954] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 99.162027][ T4319] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 99.189518][ T4319] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 99.197975][ T4319] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 99.205463][ T4319] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 99.214358][ T4319] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 99.224787][ T4319] appleir 0003:05AC:8241.0003: No inputs registered, leaving [ 99.254813][ T4319] appleir 0003:05AC:8241.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 99.270693][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 99.301275][ T4319] usb 2-1: USB disconnect, device number 4 [ 99.324238][ T4319] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 99.370581][ T4319] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 99.393278][ T4319] quatech2 2-1:0.51: device disconnected [ 99.435163][ T4354] usb 3-1: USB disconnect, device number 5 [ 99.488002][ T4921] fido_id[4921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 99.529746][ T4925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 100.231945][ T4941] netlink: 710 bytes leftover after parsing attributes in process `syz.2.228'. [ 100.507698][ T4952] loop0: detected capacity change from 0 to 4096 [ 100.755933][ T4278] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 100.770430][ T4278] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 100.869630][ T4964] loop0: detected capacity change from 0 to 128 [ 100.926472][ T4964] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.946886][ T4964] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.978661][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.121998][ T4964] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 20: comm syz.0.237: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 101.153855][ T4964] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 101.341308][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 101.453976][ T4974] loop4: detected capacity change from 0 to 32768 [ 101.485900][ T4974] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.241 (4974) [ 101.860242][ T4319] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.089805][ T4319] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 102.143908][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 102.190207][ T4319] usb 1-1: Product: syz [ 102.239897][ T4319] usb 1-1: config 0 descriptor?? [ 102.278072][ T4319] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 102.339531][ T4319] usb 1-1: Detected FT232H [ 102.481516][ T4319] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 102.565865][ T4974] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.577139][ T4974] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 102.586350][ T4974] BTRFS info (device loop4): turning on sync discard [ 102.594028][ T4974] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.603991][ T4974] BTRFS info (device loop4): use zstd compression, level 3 [ 102.611434][ T4974] BTRFS info (device loop4): turning on async discard [ 102.619042][ T4974] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 102.629776][ T4974] BTRFS info (device loop4): trying to use backup root at mount time [ 102.638178][ T4974] BTRFS info (device loop4): enabling auto defrag [ 102.644791][ T4974] BTRFS info (device loop4): using free space tree [ 102.699246][ T4991] Invalid argument reading file caps for ./file0 [ 102.854481][ T56] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 102.888803][ T4974] BTRFS error (device loop4): failed to load root extent [ 102.896087][ T4974] BTRFS warning (device loop4): try to load backup roots slot 1 [ 102.908032][ T4319] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 102.920180][ T4340] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 102.970088][ T4318] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.983501][ T5014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.989645][ T4974] BTRFS warning (device loop4): couldn't read tree root [ 102.998333][ T4974] BTRFS warning (device loop4): try to load backup roots slot 2 [ 103.007430][ T5014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.020395][ T4974] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 103.034692][ T4974] BTRFS warning (device loop4): couldn't read tree root [ 103.041721][ T4974] BTRFS warning (device loop4): try to load backup roots slot 3 [ 103.084788][ T4974] BTRFS info (device loop4): enabling ssd optimizations [ 103.093602][ T4974] BTRFS info (device loop4): rebuilding free space tree [ 103.134457][ T4319] usb 1-1: USB disconnect, device number 4 [ 103.142948][ T4974] BTRFS info (device loop4): checking UUID tree [ 103.160314][ T4318] usb 3-1: Using ep0 maxpacket: 8 [ 103.177573][ T4319] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 103.187487][ T4318] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 103.208601][ T4319] ftdi_sio 1-1:0.0: device disconnected [ 103.225823][ T4318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.269104][ T4318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.300381][ T4318] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.316121][ T4318] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.333418][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.358347][ T5021] loop3: detected capacity change from 0 to 64 [ 103.398739][ T4287] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.559933][ T4318] usb 3-1: GET_CAPABILITIES returned 0 [ 103.577399][ T4318] usbtmc 3-1:16.0: can't read capabilities [ 103.786166][ T4318] usb 3-1: USB disconnect, device number 6 [ 104.190513][ T5040] loop4: detected capacity change from 0 to 128 [ 104.219738][ T5040] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 104.300665][ T5040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.385941][ T26] audit: type=1804 audit(1781193234.986:3): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.260" name="/newroot/47/file1/file1" dev="loop4" ino=94 res=1 errno=0 [ 104.694158][ T5048] loop3: detected capacity change from 0 to 8192 [ 104.773386][ T5061] loop0: detected capacity change from 0 to 128 [ 104.826111][ T5061] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.839889][ T5061] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.860363][ T4318] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.063996][ T4318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.067456][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 105.082186][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.104106][ T4318] usb 2-1: Product: syz [ 105.118270][ T4318] usb 2-1: Manufacturer: syz [ 105.128752][ T4318] usb 2-1: SerialNumber: syz [ 105.162517][ T4318] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.300815][ T5077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 105.364489][ T4318] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 105.509734][ T5083] netlink: 116 bytes leftover after parsing attributes in process `syz.0.276'. [ 105.531363][ T5083] Zero length message leads to an empty skb [ 105.559206][ T5085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.277'. [ 105.585013][ T5085] netlink: 'syz.3.277': attribute type 32 has an invalid length. [ 105.651217][ T5085] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 105.680898][ T5087] input: syz0 as /devices/virtual/input/input9 [ 105.988650][ T5098] netlink: 'syz.4.284': attribute type 4 has an invalid length. [ 106.015416][ T5101] IPVS: nq: FWM 3 0x00000003 - no destination available [ 106.028547][ T5095] input: syz1 as /devices/virtual/input/input10 [ 106.207547][ T954] usb 2-1: USB disconnect, device number 5 [ 106.647752][ T5122] loop3: detected capacity change from 0 to 512 [ 106.775254][ T5122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.823815][ T5128] loop4: detected capacity change from 0 to 128 [ 106.871634][ T5122] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.986389][ T5128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.040599][ T4318] usb 2-1: Service connection timeout for: 258 [ 107.046829][ T4318] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 107.060089][ T5128] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.095659][ T5143] loop2: detected capacity change from 0 to 164 [ 107.108900][ T4318] ath9k_htc: Failed to initialize the device [ 107.159486][ T954] usb 2-1: ath9k_htc: USB layer deinitialized [ 107.240795][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 107.248018][ T4263] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.316807][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 107.371119][ T14] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.462496][ T5150] loop3: detected capacity change from 0 to 1024 [ 107.572001][ T14] usb 1-1: config 0 has no interfaces? [ 107.576654][ T5150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.579611][ T14] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 107.590543][ T5150] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.622110][ T5150] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 3) [ 107.644394][ T5150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 107.657462][ T5150] EXT4-fs (loop3): This should not happen!! Data will be lost [ 107.657462][ T5150] [ 107.667458][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.677887][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.699525][ T5159] loop2: detected capacity change from 0 to 512 [ 107.715936][ T14] usb 1-1: Product: syz [ 107.724553][ T14] usb 1-1: Manufacturer: syz [ 107.725315][ T5159] EXT4-fs: Ignoring removed oldalloc option [ 107.739019][ T14] usb 1-1: SerialNumber: syz [ 107.748805][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.763128][ T4283] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.780472][ T14] usb 1-1: config 0 descriptor?? [ 107.790495][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.822681][ T5159] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.306: Parent and EA inode have the same ino 15 [ 107.827076][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.865604][ T5159] EXT4-fs (loop2): 1 orphan inode deleted [ 107.873099][ T5159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 107.875696][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.900492][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 107.944020][ T5159] EXT4-fs warning (device loop2): __ext4_unlink:3335: inode #15: comm syz.2.306: Deleting file 'file1' with no links [ 107.958284][ T4283] usb 5-1: Using ep0 maxpacket: 32 [ 107.973576][ T4283] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 108.010653][ T4283] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 108.027538][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 108.050648][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 108.052699][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.070955][ T5160] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.303: lblock 3 mapped to illegal pblock 3 (length 1) [ 108.091349][ T4283] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 108.117633][ T4283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.144972][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 108.158892][ T4283] usb 5-1: config 0 descriptor?? [ 108.213623][ T5145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.246703][ T5145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.272100][ T14] usb 1-1: USB disconnect, device number 5 [ 108.325596][ T2912] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 108.339717][ T2912] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.339717][ T2912] [ 108.366047][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 108.641734][ T5153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.665010][ T5153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.698857][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.720240][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.738905][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.756222][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.769356][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.777499][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.785193][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.803056][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.820135][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.827734][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.843894][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.860295][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.867842][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.900316][ T5027] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.902591][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.921869][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.929412][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.942144][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.950338][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 108.955671][ T5185] loop0: detected capacity change from 0 to 128 [ 108.960492][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 109.014883][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 109.044459][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 109.070563][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 109.078126][ T4283] nzxt-kraken2 0003:1E71:170E.0004: unknown main item tag 0x0 [ 109.090220][ T5027] usb 4-1: Using ep0 maxpacket: 32 [ 109.107461][ T5027] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 109.112792][ T4283] nzxt-kraken2 0003:1E71:170E.0004: item fetching failed at offset 39/40 [ 109.144859][ T5027] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 109.146423][ T4283] nzxt-kraken2 0003:1E71:170E.0004: hid parse failed with -22 [ 109.178729][ T4283] nzxt-kraken2: probe of 0003:1E71:170E.0004 failed with error -22 [ 109.185155][ T5027] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 109.215310][ T4283] usb 5-1: USB disconnect, device number 4 [ 109.216434][ T5027] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 109.240881][ T5027] usb 4-1: config 0 interface 0 has no altsetting 0 [ 109.290783][ T5027] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 109.302349][ T5027] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 109.312100][ T5027] usb 4-1: Product: syz [ 109.316327][ T5027] usb 4-1: Manufacturer: syz [ 109.326087][ T5027] usb 4-1: SerialNumber: syz [ 109.344580][ T5027] usb 4-1: config 0 descriptor?? [ 109.367231][ T5027] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 109.389576][ T5027] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 109.587167][ T5027] usb 4-1: USB disconnect, device number 3 [ 109.593275][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 109.604163][ T5027] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 109.742579][ T5206] loop4: detected capacity change from 0 to 64 [ 110.065692][ T5217] loop0: detected capacity change from 0 to 2048 [ 110.106795][ T5217] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 110.118740][ T5219] loop4: detected capacity change from 0 to 16 [ 110.175369][ T5219] erofs: (device loop4): mounted with root inode @ nid 36. [ 110.203847][ T4816] udevd[4816]: incorrect nilfs2 checksum on /dev/loop0 [ 110.225174][ T5222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.253873][ T5219] erofs: (device loop4): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 110.996173][ T5252] Bluetooth: MGMT ver 1.22 [ 111.059444][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 111.152736][ T4319] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 111.352386][ T4319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.373910][ T4319] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 111.394465][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.434340][ T4319] usb 2-1: Product: syz [ 111.438577][ T4319] usb 2-1: Manufacturer: syz [ 111.464301][ T4319] usb 2-1: SerialNumber: syz [ 111.477304][ T4319] usb 2-1: config 0 descriptor?? [ 111.496832][ T4319] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 112.304252][ T4319] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 112.372206][ T5286] loop4: detected capacity change from 0 to 32768 [ 112.388374][ T5283] loop3: detected capacity change from 0 to 32768 [ 112.458637][ T5283] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.359 (5283) [ 112.518474][ T4283] usb 2-1: USB disconnect, device number 6 [ 112.575432][ T5283] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 112.591714][ T5286] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 112.643885][ T5283] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 112.673986][ T5297] binder: 5296:5297 ioctl c0306201 0 returned -14 [ 112.700101][ T5283] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 112.730104][ T5283] BTRFS info (device loop3): use zstd compression, level 3 [ 112.762885][ T5283] BTRFS info (device loop3): using free space tree [ 113.064128][ T5283] BTRFS info (device loop3): enabling ssd optimizations [ 113.155660][ T4287] ocfs2: Unmounting device (7,4) on (node local) [ 113.222397][ T26] audit: type=1800 audit(1781193243.786:4): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 113.384780][ T4279] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.515908][ T5295] loop2: detected capacity change from 0 to 131072 [ 113.523305][ T5295] XFS: ikeep mount option is deprecated. [ 113.810430][ T5295] XFS (loop2): Mounting V5 Filesystem [ 113.825557][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 113.888819][ T26] audit: type=1326 audit(1781193244.486:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.032283][ T5295] XFS (loop2): Starting recovery (logdev: internal) [ 114.040159][ T26] audit: type=1326 audit(1781193244.526:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.061055][ T5295] XFS (loop2): Ending recovery (logdev: internal) [ 114.179263][ T26] audit: type=1326 audit(1781193244.526:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.229024][ T26] audit: type=1326 audit(1781193244.526:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.297462][ T26] audit: type=1326 audit(1781193244.526:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.390831][ T26] audit: type=1326 audit(1781193244.536:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.420458][ T26] audit: type=1326 audit(1781193244.536:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.461794][ T26] audit: type=1326 audit(1781193244.536:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.487192][ T26] audit: type=1326 audit(1781193244.536:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5335 comm="syz.4.365" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdef4d9ce59 code=0x7ffc0000 [ 114.517302][ T5343] vivid-004: disconnect [ 114.561385][ T5343] vivid-004: reconnect [ 114.589517][ T4277] XFS (loop2): Unmounting Filesystem [ 114.811638][ T5351] loop0: detected capacity change from 0 to 64 [ 115.132332][ T5359] loop0: detected capacity change from 0 to 128 [ 115.616837][ T5375] loop0: detected capacity change from 0 to 512 [ 115.655562][ T5375] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 115.710344][ T5375] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.810514][ T5375] EXT4-fs (loop0): 1 orphan inode deleted [ 115.836650][ T5375] EXT4-fs (loop0): 1 truncate cleaned up [ 115.861346][ T5375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.962008][ T5375] EXT4-fs error (device loop0): ext4_check_all_de:666: inode #12: block 7: comm syz.0.387: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 116.036084][ T5375] EXT4-fs (loop0): Remounting filesystem read-only [ 116.153542][ T5391] netlink: 116 bytes leftover after parsing attributes in process `syz.2.391'. [ 116.166551][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 116.598869][ T5409] IPVS: Scheduler module ip_vs_ not found [ 117.093062][ T5437] netlink: 'syz.1.413': attribute type 11 has an invalid length. [ 117.117114][ T5437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.413'. [ 117.360308][ T954] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 117.393111][ T5443] loop2: detected capacity change from 0 to 32768 [ 117.403561][ T5443] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.415 (5443) [ 117.417423][ T4280] Bluetooth: hci5: command 0x1003 tx timeout [ 117.420854][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.454255][ T5443] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.464721][ T5443] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 117.473593][ T5443] BTRFS info (device loop2): setting nodatasum [ 117.479794][ T5443] BTRFS info (device loop2): force zlib compression, level 3 [ 117.487263][ T5443] BTRFS info (device loop2): turning on flush-on-commit [ 117.494336][ T5443] BTRFS info (device loop2): max_inline at 4096 [ 117.500707][ T5443] BTRFS info (device loop2): using free space tree [ 117.571756][ T954] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.581864][ T954] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.648000][ T954] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.674344][ T5458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.420'. [ 117.688571][ T954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.756506][ T5469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 117.826688][ T5443] BTRFS info (device loop2): enabling ssd optimizations [ 117.914494][ T4277] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.924428][ T954] usb 1-1: usb_control_msg returned -32 [ 117.939816][ T954] usbtmc 1-1:16.0: can't read capabilities [ 118.150851][ T954] usb 1-1: USB disconnect, device number 6 [ 118.629169][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 118.674706][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 118.862552][ T5497] loop0: detected capacity change from 0 to 256 [ 118.928613][ T5497] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.037597][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 119.037612][ T26] audit: type=1800 audit(1781193250.642:20): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.432" name="bus" dev="loop0" ino=1048604 res=0 errno=0 [ 119.469562][ T5511] loop4: detected capacity change from 0 to 1024 [ 119.923878][ T5514] loop0: detected capacity change from 0 to 32768 [ 119.973762][ T5514] [ 119.973762][ T5514] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.973762][ T5514] [ 120.000514][ T26] audit: type=1800 audit(1781193251.612:21): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.440" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 120.036936][ T5514] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 120.036936][ T5514] [ 120.043763][ T5507] loop3: detected capacity change from 0 to 131072 [ 120.052962][ T5514] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 120.052962][ T5514] [ 120.064904][ T5514] xtLookup: xtSearch returned -5 [ 120.069888][ T5514] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 120.069888][ T5514] [ 120.081541][ T5507] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 120.090308][ T5507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.103848][ T5507] F2FS-fs (loop3): invalid crc value [ 120.114128][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 120.164101][ T56] [ 120.164101][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.164101][ T56] [ 120.224796][ T56] [ 120.224796][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.224796][ T56] [ 120.239927][ T5507] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.290934][ T4278] [ 120.290934][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.290934][ T4278] [ 120.306796][ T5507] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.314344][ T5507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 120.326402][ T107] [ 120.326402][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.326402][ T107] [ 120.368998][ T26] audit: type=1800 audit(1781193251.972:22): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.435" name="file2" dev="loop3" ino=8 res=0 errno=0 [ 120.383788][ T4278] [ 120.383788][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 120.383788][ T4278] [ 120.668438][ T5536] loop4: detected capacity change from 0 to 164 [ 120.762263][ T5536] rock: directory entry would overflow storage [ 120.801024][ T5536] rock: sig=0x66, size=4, remaining=3 [ 120.900247][ T954] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.092052][ T954] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.133105][ T5543] loop4: detected capacity change from 0 to 256 [ 121.139577][ T954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.181205][ T954] usb 1-1: config 0 descriptor?? [ 121.228326][ T954] cp210x 1-1:0.0: cp210x converter detected [ 121.466414][ T5553] loop4: detected capacity change from 0 to 1024 [ 121.505546][ T5553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.517978][ T5555] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 121.594614][ T954] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 121.617499][ T954] usb 1-1: cp210x converter now attached to ttyUSB0 [ 121.816428][ T954] usb 1-1: USB disconnect, device number 7 [ 121.847514][ T954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.919935][ T5564] loop8: detected capacity change from 0 to 7 [ 121.922230][ T954] cp210x 1-1:0.0: device disconnected [ 121.970140][ T5564] Dev loop8: unable to read RDB block 7 [ 121.975794][ T5564] loop8: unable to read partition table [ 121.993915][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'. [ 122.010450][ T5564] loop8: partition table beyond EOD, truncated [ 122.016702][ T5564] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.076407][ T3640] Dev loop8: unable to read RDB block 7 [ 122.085668][ T3640] loop8: unable to read partition table [ 122.098556][ T3640] loop8: partition table beyond EOD, truncated [ 122.462648][ T5581] loop0: detected capacity change from 0 to 256 [ 122.531675][ T5581] FAT-fs (loop0): Directory bread(block 64) failed [ 122.538376][ T5581] FAT-fs (loop0): Directory bread(block 65) failed [ 122.558894][ T5581] FAT-fs (loop0): Directory bread(block 66) failed [ 122.592061][ T5581] FAT-fs (loop0): Directory bread(block 67) failed [ 122.619118][ T5581] FAT-fs (loop0): Directory bread(block 68) failed [ 122.645496][ T5581] FAT-fs (loop0): Directory bread(block 69) failed [ 122.672795][ T5581] FAT-fs (loop0): Directory bread(block 70) failed [ 122.685060][ T5581] FAT-fs (loop0): Directory bread(block 71) failed [ 122.699506][ T5581] FAT-fs (loop0): Directory bread(block 72) failed [ 122.710244][ T5581] FAT-fs (loop0): Directory bread(block 73) failed [ 123.595930][ T5614] loop2: detected capacity change from 0 to 1024 [ 124.036834][ T5612] loop3: detected capacity change from 0 to 32768 [ 124.726695][ T5619] loop4: detected capacity change from 0 to 40427 [ 124.799841][ T5619] F2FS-fs (loop4): invalid crc value [ 124.841614][ T5619] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.870151][ T4274] Bluetooth: hci4: command 0x0405 tx timeout [ 125.020356][ T954] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.027082][ T5619] F2FS-fs (loop4): Start checkpoint disabled! [ 125.099367][ T5619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 125.103017][ T5658] device syzkaller1 entered promiscuous mode [ 125.232842][ T954] usb 2-1: Using ep0 maxpacket: 32 [ 125.240607][ T954] usb 2-1: config 1 has an invalid interface number: 229 but max is 0 [ 125.259065][ T954] usb 2-1: config 1 has no interface number 0 [ 125.271439][ T954] usb 2-1: config 1 interface 229 has no altsetting 0 [ 125.281232][ T954] usb 2-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=69.31 [ 125.292340][ T954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.300795][ T954] usb 2-1: Product: syz [ 125.305009][ T954] usb 2-1: Manufacturer: syz [ 125.309620][ T954] usb 2-1: SerialNumber: syz [ 125.466189][ T4672] bio_check_eod: 126 callbacks suppressed [ 125.466207][ T4672] kworker/u4:7: attempt to access beyond end of device [ 125.466207][ T4672] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 125.539677][ T954] keyspan 2-1:1.229: Keyspan 1 port adapter converter detected [ 125.568855][ T954] keyspan 2-1:1.229: found no endpoint descriptor for endpoint 87 [ 125.588321][ T954] keyspan 2-1:1.229: found no endpoint descriptor for endpoint 7 [ 125.599246][ T954] keyspan 2-1:1.229: found no endpoint descriptor for endpoint 81 [ 125.613021][ T954] keyspan 2-1:1.229: found no endpoint descriptor for endpoint 2 [ 125.628465][ T954] keyspan 2-1:1.229: found no endpoint descriptor for endpoint 85 [ 125.654091][ T954] keyspan 2-1:1.229: found no endpoint descriptor for endpoint 5 [ 125.673496][ T954] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 125.694518][ T954] usb 2-1: USB disconnect, device number 7 [ 125.725428][ T954] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 125.750898][ T954] keyspan 2-1:1.229: device disconnected [ 125.917658][ T4283] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.101964][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.112504][ T5689] loop4: detected capacity change from 0 to 256 [ 126.118258][ T4283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.154886][ T4283] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 126.172545][ T5689] FAT-fs (loop4): Directory bread(block 64) failed [ 126.174653][ T4283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.179129][ T5689] FAT-fs (loop4): Directory bread(block 65) failed [ 126.201094][ T5689] FAT-fs (loop4): Directory bread(block 66) failed [ 126.207776][ T5689] FAT-fs (loop4): Directory bread(block 67) failed [ 126.215008][ T4283] usb 1-1: config 0 descriptor?? [ 126.223023][ T5689] FAT-fs (loop4): Directory bread(block 68) failed [ 126.229790][ T5689] FAT-fs (loop4): Directory bread(block 69) failed [ 126.243813][ T5689] FAT-fs (loop4): Directory bread(block 70) failed [ 126.253786][ T5689] FAT-fs (loop4): Directory bread(block 71) failed [ 126.264991][ T5689] FAT-fs (loop4): Directory bread(block 72) failed [ 126.285612][ T5689] FAT-fs (loop4): Directory bread(block 73) failed [ 126.620151][ T5701] loop2: detected capacity change from 0 to 128 [ 126.640817][ T4283] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 126.654666][ T5699] loop3: detected capacity change from 0 to 4096 [ 126.661327][ T4283] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 126.669199][ T4283] hid-thrustmaster 0003:044F:B65D.0005: unexpected long global item [ 126.685852][ T5703] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 126.707836][ T5703] cramfs: wrong magic [ 126.711237][ T5699] EXT4-fs: Ignoring removed orlov option [ 126.726868][ T5701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.778362][ T5699] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.785776][ T4283] hid-thrustmaster 0003:044F:B65D.0005: parse failed with error -22 [ 126.807251][ T5701] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.853803][ T4283] hid-thrustmaster: probe of 0003:044F:B65D.0005 failed with error -22 [ 126.878575][ T5699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.889253][ T5709] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 126.975668][ T4283] usb 1-1: USB disconnect, device number 8 [ 127.212263][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 127.228600][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 127.674098][ T5736] tun0: tun_chr_ioctl cmd 1074025675 [ 127.710121][ T5736] tun0: persist enabled [ 127.728539][ T5736] tun0: tun_chr_ioctl cmd 1074025675 [ 127.750324][ T5736] tun0: persist enabled [ 127.948783][ T5750] loop9: detected capacity change from 0 to 7 [ 127.961902][ T4813] Dev loop9: unable to read RDB block 7 [ 127.967777][ T4813] loop9: unable to read partition table [ 127.974158][ T4813] loop9: partition table beyond EOD, truncated [ 127.984370][ T5750] Dev loop9: unable to read RDB block 7 [ 127.991483][ T5750] loop9: unable to read partition table [ 128.002390][ T5750] loop9: partition table beyond EOD, truncated [ 128.008925][ T5753] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 128.033066][ T5750] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.048568][ T5753] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 128.472785][ T4283] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.654723][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.675496][ T4283] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.695788][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.712753][ T5775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.720831][ T4283] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.763089][ T4283] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.783473][ T4283] usb 5-1: Product: syz [ 128.792641][ T4283] usb 5-1: Manufacturer: syz [ 128.807861][ T4283] usb 5-1: SerialNumber: syz [ 128.832294][ T4283] usb 5-1: config 0 descriptor?? [ 128.873741][ T4283] usb 5-1: selecting invalid altsetting 0 [ 128.971926][ T5768] loop3: detected capacity change from 0 to 32768 [ 129.003936][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.027303][ T5768] XFS (loop3): Mounting V5 Filesystem [ 129.050430][ T5776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.164550][ T5794] device gtp0 entered promiscuous mode [ 129.173740][ T14] usb 5-1: USB disconnect, device number 5 [ 129.179785][ T5794] team0: Device gtp0 is of different type [ 129.206842][ T5768] XFS (loop3): Ending clean mount [ 129.347623][ T4279] XFS (loop3): Unmounting Filesystem [ 129.489320][ T5801] loop0: detected capacity change from 0 to 512 [ 129.499020][ T5801] EXT4-fs: Ignoring removed bh option [ 129.515462][ T5801] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 129.533698][ T5801] EXT4-fs (loop0): 1 truncate cleaned up [ 129.539656][ T5801] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 129.555068][ T5801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.558: bg 0: block 465: padding at end of block bitmap is not set [ 129.625259][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 129.914787][ T4319] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 130.101672][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.119485][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.134443][ T4319] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 130.148373][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.170211][ T4319] usb 3-1: config 0 descriptor?? [ 130.485646][ T5819] loop0: detected capacity change from 0 to 32768 [ 130.490038][ T5483] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.596122][ T4319] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 130.686164][ T5819] XFS (loop0): Mounting V5 Filesystem [ 130.703671][ T5483] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 130.725402][ T5483] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.750247][ T5483] usb 5-1: Product: syz [ 130.799386][ T5483] usb 5-1: Manufacturer: syz [ 130.831418][ T5819] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 130.834886][ T5483] usb 5-1: SerialNumber: syz [ 130.861192][ T4319] usb 3-1: USB disconnect, device number 7 [ 130.906967][ T5819] XFS (loop0): Starting recovery (logdev: internal) [ 130.922938][ T5483] usb 5-1: config 0 descriptor?? [ 130.946912][ T5483] hub 5-1:0.0: bad descriptor, ignoring hub [ 130.974564][ T5483] hub: probe of 5-1:0.0 failed with error -5 [ 130.988570][ T5834] fido_id[5834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 131.006202][ T5819] XFS (loop0): Ending recovery (logdev: internal) [ 131.134094][ T5483] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 131.166757][ T5819] overlayfs: conflicting lowerdir path [ 131.170693][ T5332] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.183294][ T5483] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.210805][ T5483] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 131.219496][ T5483] usb 5-1: media controller created [ 131.238090][ T5483] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.279465][ T4278] XFS (loop0): Unmounting Filesystem [ 131.353341][ T5483] DVB: Unable to find symbol dib7000p_attach() [ 131.359586][ T5483] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 131.400147][ T5332] usb 4-1: Using ep0 maxpacket: 32 [ 131.411151][ T5332] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 131.419365][ T5332] usb 4-1: config 0 has no interface number 0 [ 131.465461][ T5332] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 131.488844][ T5332] usb 4-1: config 0 interface 196 has no altsetting 0 [ 131.520640][ T5483] rc_core: IR keymap rc-dib0700-rc5 not found [ 131.531993][ T5483] Registered IR keymap rc-empty [ 131.540343][ T5332] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 131.556638][ T5483] dvb-usb: could not initialize remote control. [ 131.563124][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.571853][ T5483] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 131.583474][ T5332] usb 4-1: Product: syz [ 131.592621][ T5332] usb 4-1: Manufacturer: syz [ 131.605090][ T5332] usb 4-1: SerialNumber: syz [ 131.614412][ T5332] usb 4-1: config 0 descriptor?? [ 131.627551][ T5838] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 131.818708][ T4319] usb 5-1: USB disconnect, device number 6 [ 131.879335][ T4319] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 132.068207][ T5862] loop0: detected capacity change from 0 to 128 [ 132.145848][ T5862] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.166668][ T5862] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.204742][ T5862] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop0' because it doesn't have stable inode numbers [ 132.262657][ T5332] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 132.271793][ T5332] ipheth: probe of 4-1:0.196 failed with error -71 [ 132.297700][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 132.309780][ T5332] usb 4-1: USB disconnect, device number 4 [ 132.794792][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801241][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.046799][ T5894] loop0: detected capacity change from 0 to 8192 [ 133.095259][ T5898] loop3: detected capacity change from 0 to 2048 [ 133.101805][ T5894] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.117066][ T5894] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 133.128852][ T5894] REISERFS (device loop0): using ordered data mode [ 133.135931][ T5894] reiserfs: using flush barriers [ 133.155071][ T5894] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.174883][ T5894] REISERFS (device loop0): checking transaction log (loop0) [ 133.183784][ T5898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.209600][ T5894] REISERFS (device loop0): Using r5 hash to sort names [ 133.220798][ T5894] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 133.999378][ T5928] capability: warning: `syz.0.605' uses deprecated v2 capabilities in a way that may be insecure [ 134.008282][ T5926] device syzkaller1 entered promiscuous mode [ 134.230963][ T5937] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 134.257846][ T5937] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.316340][ T5937] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 134.587327][ T5946] loop0: detected capacity change from 0 to 2048 [ 134.697417][ T5950] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.934506][ T5946] syz.0.612 (5946) used greatest stack depth: 19216 bytes left [ 135.152378][ T5962] loop3: detected capacity change from 0 to 512 [ 135.699561][ T5979] loop4: detected capacity change from 0 to 512 [ 135.738787][ T5979] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.768300][ T5979] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.849238][ T5983] input: syz1 as /devices/virtual/input/input13 [ 135.865248][ T4319] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.882824][ T5979] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 135.897876][ T5979] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 135.908247][ T5979] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.624: Failed to acquire dquot type 0 [ 135.977123][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 136.071550][ T4319] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 136.094071][ T4319] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 136.140157][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.174639][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.204754][ T4319] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.220151][ T4319] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 136.251632][ T4319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.276818][ T4319] usb 1-1: config 0 descriptor?? [ 136.551349][ T5483] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 136.716444][ T4319] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0007/input/input14 [ 136.733740][ T5483] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 136.757459][ T5483] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.779485][ T5483] usb 4-1: config 0 has no interface number 0 [ 136.797110][ T5483] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 136.810727][ T5483] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 50380, setting to 64 [ 136.838800][ T5483] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 136.849033][ T5483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.849528][ T4319] uclogic 0003:28BD:0909.0007: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 136.859076][ T5483] usb 4-1: Product: syz [ 136.874077][ T5483] usb 4-1: Manufacturer: syz [ 136.878710][ T5483] usb 4-1: SerialNumber: syz [ 136.897383][ T5483] usb 4-1: config 0 descriptor?? [ 136.908129][ T5998] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.931448][ T5998] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.980117][ T5483] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 137.044903][ T6016] loop4: detected capacity change from 0 to 4096 [ 137.096792][ T6016] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 137.136044][ T4319] usb 1-1: USB disconnect, device number 9 [ 137.225732][ T6020] fido_id[6020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 137.241714][ T6016] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 137.297259][ T6016] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 137.357579][ T6016] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 137.411765][ T6016] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 137.431035][ T6016] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 137.457616][ T6029] loop2: detected capacity change from 0 to 64 [ 137.470617][ T4354] usb 4-1: USB disconnect, device number 5 [ 137.505811][ T6016] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 137.518519][ T6016] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 137.598818][ T6016] ntfs: volume version 3.1. [ 137.715240][ T6033] loop2: detected capacity change from 0 to 512 [ 137.780722][ T6033] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a817e02c, mo2=0102] [ 137.788770][ T6033] System zones: 1-12 [ 137.858495][ T6033] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.644: invalid indirect mapped block 8 (level 2) [ 137.892285][ T6039] syz.4.645 sent an empty control message without MSG_MORE. [ 137.903377][ T6033] EXT4-fs (loop2): Remounting filesystem read-only [ 137.936161][ T6033] EXT4-fs (loop2): 1 truncate cleaned up [ 137.942084][ T6033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.121321][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 138.250881][ T6045] loop4: detected capacity change from 0 to 8192 [ 138.737080][ T6060] loop2: detected capacity change from 0 to 32768 [ 138.754752][ T6060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.657 (6060) [ 138.769457][ T6060] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.780582][ T6060] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 138.789387][ T6060] BTRFS info (device loop2): force clearing of disk cache [ 138.796855][ T6060] BTRFS info (device loop2): enabling auto defrag [ 138.803407][ T6060] BTRFS info (device loop2): max_inline at 0 [ 138.809753][ T6060] BTRFS info (device loop2): enabling ssd optimizations [ 138.817459][ T6060] BTRFS info (device loop2): using spread ssd allocation scheme [ 138.825224][ T6060] BTRFS info (device loop2): using free space tree [ 138.864745][ T6047] loop3: detected capacity change from 0 to 32768 [ 138.892277][ T6047] XFS (loop3): Mounting V5 Filesystem [ 138.943798][ T6047] XFS (loop3): Ending clean mount [ 138.965800][ T6060] BTRFS info (device loop2): rebuilding free space tree [ 138.997998][ T6088] tipc: Started in network mode [ 139.071538][ T6088] tipc: Node identity a9b3, cluster identity 4711 [ 139.084927][ T6088] tipc: Node number set to 43443 [ 139.094576][ T6088] tipc: Cannot configure node identity twice [ 139.158461][ T2912] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 139.269673][ T4277] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.280299][ T4283] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 139.356132][ T4279] XFS (loop3): Unmounting Filesystem [ 139.525137][ T4283] usb 5-1: Using ep0 maxpacket: 16 [ 139.538227][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.586986][ T4283] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.617673][ T4283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.637974][ T4283] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 139.659299][ T4283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.714802][ T4283] usb 5-1: config 0 descriptor?? [ 140.137654][ T4283] hid (null): nested delimiters [ 140.157145][ T4283] hid (null): unknown global tag 0xd [ 140.168027][ T4283] hid (null): unknown global tag 0xe [ 140.194005][ T4283] hid (null): unknown global tag 0xc [ 140.208365][ T4283] hid (null): unknown global tag 0xc [ 140.225598][ T4283] hid (null): unknown global tag 0xc [ 140.348403][ T4319] usb 5-1: USB disconnect, device number 7 [ 140.779173][ T6131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.673'. [ 141.441785][ T6161] loop9: detected capacity change from 0 to 7 [ 141.449210][ T4813] Dev loop9: unable to read RDB block 7 [ 141.459030][ T4813] loop9: AHDI p1 p2 p3 [ 141.463495][ T4813] loop9: partition table partially beyond EOD, truncated [ 141.492469][ T4813] loop9: p1 start 1920169572 is beyond EOD, truncated [ 141.503862][ T4813] loop9: p2 start 1851744889 is beyond EOD, truncated [ 141.523409][ T6161] Dev loop9: unable to read RDB block 7 [ 141.529079][ T6161] loop9: AHDI p1 p2 p3 [ 141.543984][ T6161] loop9: partition table partially beyond EOD, truncated [ 141.578866][ T6161] loop9: p1 start 1920169572 is beyond EOD, truncated [ 141.606443][ T6161] loop9: p2 start 1851744889 is beyond EOD, truncated [ 141.764656][ T6169] loop0: detected capacity change from 0 to 2048 [ 141.843190][ T6169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.875505][ T6139] loop3: detected capacity change from 0 to 32768 [ 141.904725][ T6139] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.676 (6139) [ 141.953961][ T6173] loop2: detected capacity change from 0 to 2048 [ 141.963822][ T6177] input: syz1 as /devices/virtual/input/input15 [ 141.990164][ T6177] input: failed to attach handler leds to device input15, error: -6 [ 142.019091][ T6139] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 142.067538][ T6173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.076558][ T6139] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 142.113619][ T6139] BTRFS info (device loop3): using free space tree [ 142.140332][ T6173] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.258928][ T6173] fs-verity: sha512 using implementation "sha512-avx2" [ 142.503003][ T4277] EXT4-fs (loop2): unmounting filesystem. [ 142.510595][ T6139] BTRFS info (device loop3): enabling ssd optimizations [ 142.925019][ T4279] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 143.367260][ T6249] loop3: detected capacity change from 0 to 736 [ 143.416861][ T5329] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.610130][ T5329] usb 3-1: Using ep0 maxpacket: 32 [ 143.624189][ T5329] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 143.672749][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.690166][ T5329] usb 3-1: Product: syz [ 143.697963][ T5329] usb 3-1: Manufacturer: syz [ 143.712847][ T5329] usb 3-1: SerialNumber: syz [ 143.721241][ T5329] usb 3-1: config 0 descriptor?? [ 143.728362][ T4354] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.934873][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.960077][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.976121][ T4354] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.014961][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.048093][ T4354] usb 2-1: config 0 descriptor?? [ 144.142846][ T5329] airspy 3-1:0.0: Board ID: 00 [ 144.151590][ T5329] airspy 3-1:0.0: Firmware version: [ 144.470153][ T4354] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 144.509922][ T4354] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input16 [ 144.745345][ T5329] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 144.780455][ T5329] airspy 3-1:0.0: Registered as swradio24 [ 144.810158][ T5329] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 144.887441][ T5329] usb 3-1: USB disconnect, device number 8 [ 145.317257][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.327002][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.335378][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.343362][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.351291][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.358738][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.413513][ T6279] loop4: detected capacity change from 0 to 131072 [ 145.450636][ T4672] tipc: Left network mode [ 145.550409][ T6279] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.609799][ T4354] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 145.623761][ T6279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 145.643056][ T6279] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 145.672612][ T4354] usb 2-1: USB disconnect, device number 8 [ 145.696110][ T6279] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 145.696321][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 146.366710][ T6287] chnl_net:caif_netlink_parms(): no params data found [ 146.392629][ T6310] fido_id[6310]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 146.868535][ T6336] sctp: [Deprecated]: syz.4.726 (pid 6336) Use of int in max_burst socket option deprecated. [ 146.868535][ T6336] Use struct sctp_assoc_value instead [ 146.945290][ T6301] loop3: detected capacity change from 0 to 32768 [ 146.956951][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.002132][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.010724][ T6287] device bridge_slave_0 entered promiscuous mode [ 147.019737][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.037700][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.054266][ T6287] device bridge_slave_1 entered promiscuous mode [ 147.080205][ T6301] XFS (loop3): Mounting V5 Filesystem [ 147.223722][ T6301] XFS (loop3): Ending clean mount [ 147.247225][ T6352] mmap: syz.2.730 (6352) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 147.286932][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.425240][ T4279] XFS (loop3): Unmounting Filesystem [ 147.430185][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 147.470595][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.709372][ T4672] bond0: (slave wlan1): Releasing backup interface [ 147.870420][ T6287] team0: Port device team_slave_0 added [ 147.914340][ T6287] team0: Port device team_slave_1 added [ 148.129943][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.151323][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.192072][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.268809][ T4672] device hsr_slave_0 left promiscuous mode [ 148.295371][ T4672] device hsr_slave_1 left promiscuous mode [ 148.375093][ T4672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.389514][ T4672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.426897][ T4672] device bridge_slave_1 left promiscuous mode [ 148.443781][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.485622][ T4672] device bridge_slave_0 left promiscuous mode [ 148.496191][ T6386] loop3: detected capacity change from 0 to 256 [ 148.514078][ T6386] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.529883][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.547852][ T6382] loop4: detected capacity change from 0 to 2048 [ 148.558361][ T6386] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 148.608549][ T6382] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 148.623632][ T6386] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 148.996728][ T6395] loop3: detected capacity change from 0 to 256 [ 149.030546][ T6395] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.050493][ T6395] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 149.097740][ T6395] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 149.510253][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 149.744001][ T4672] team0 (unregistering): Port device team_slave_1 removed [ 149.793813][ T6401] loop4: detected capacity change from 0 to 40427 [ 149.827668][ T6401] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 149.827877][ T4672] team0 (unregistering): Port device team_slave_0 removed [ 149.842325][ T6401] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 149.890482][ T4672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.902995][ T6401] F2FS-fs (loop4): Found nat_bits in checkpoint [ 149.983461][ T4672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.984967][ T6401] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 150.007706][ T6401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 150.179118][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 150.179134][ T26] audit: type=1800 audit(1781193281.772:23): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.756" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 150.539709][ T4672] bond0 (unregistering): Released all slaves [ 150.629303][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 150.641781][ T4284] CPU: 0 PID: 4284 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 150.646912][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.649348][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.656775][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.666308][ T4284] Workqueue: hci4 hci_rx_work [ 150.666354][ T4284] Call Trace: [ 150.692621][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.696898][ T4284] [ 150.696911][ T4284] dump_stack_lvl+0x188/0x24e [ 150.718445][ T4284] ? show_regs_print_info+0x12/0x12 [ 150.723660][ T4284] ? load_image+0x400/0x400 [ 150.728235][ T4284] sysfs_create_dir_ns+0x26a/0x290 [ 150.733360][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 150.738036][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 150.743236][ T4284] kobject_add_internal+0x61c/0xcc0 [ 150.748445][ T4284] kobject_add+0x160/0x230 [ 150.752859][ T4284] ? kobject_init+0x1d0/0x1d0 [ 150.757530][ T4284] ? klist_children_get+0x50/0x50 [ 150.762548][ T4284] ? get_device_parent+0x121/0x3f0 [ 150.767678][ T4284] device_add+0x48c/0x1000 [ 150.772101][ T4284] ? kmem_cache_free+0xf7/0x290 [ 150.776969][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 150.781909][ T4284] le_conn_complete_evt+0x1062/0x1670 [ 150.787286][ T4284] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 150.793529][ T4284] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 150.799161][ T4284] ? skb_pull_data+0xf7/0x200 [ 150.803841][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 150.809416][ T4284] ? hci_remote_host_features_evt+0x270/0x270 [ 150.815528][ T4284] hci_event_packet+0x7b9/0x1280 [ 150.820504][ T4284] ? bis_list+0x280/0x280 [ 150.824853][ T4284] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 150.830773][ T4284] ? kcov_remote_start+0x4c7/0x7e0 [ 150.835969][ T4284] ? mt_dump_node+0x750/0x1920 [ 150.840745][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 150.845962][ T4284] hci_rx_work+0x3eb/0xd40 [ 150.850377][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 150.855236][ T4284] ? process_one_work+0x7b0/0x1160 [ 150.860372][ T4284] process_one_work+0x8a2/0x1160 [ 150.865307][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 150.870960][ T4284] ? _raw_spin_lock_irq+0xb7/0xf0 [ 150.876036][ T4284] ? _raw_spin_lock_irqsave+0x100/0x100 [ 150.881604][ T4284] ? kthread_data+0x4b/0xc0 [ 150.886125][ T4284] worker_thread+0xaa2/0x1270 [ 150.890834][ T4284] kthread+0x29d/0x330 [ 150.894910][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 150.899946][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 150.904542][ T4284] ret_from_fork+0x1f/0x30 [ 150.908964][ T4284] [ 150.917302][ T4284] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 150.933719][ T4284] Bluetooth: hci4: failed to register connection device [ 151.002992][ T6287] device hsr_slave_0 entered promiscuous mode [ 151.030096][ T6287] device hsr_slave_1 entered promiscuous mode [ 151.050084][ T6287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.100247][ T6287] Cannot create hsr debugfs directory [ 151.594108][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 151.827064][ T6442] loop4: detected capacity change from 0 to 1024 [ 151.871871][ T6442] EXT4-fs: Ignoring removed orlov option [ 151.956853][ T6442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a00ec118, mo2=0002] [ 152.024130][ T6442] System zones: 0-1, 3-12 [ 152.026124][ T6448] loop3: detected capacity change from 0 to 512 [ 152.061990][ T6442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.104421][ T6448] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.758: invalid block [ 152.184924][ T6448] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.758: invalid indirect mapped block 10 (level 1) [ 152.255536][ T6448] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.758: invalid indirect mapped block 8 (level 1) [ 152.290842][ T6448] EXT4-fs (loop3): 1 truncate cleaned up [ 152.296543][ T6448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.343099][ T6287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.392915][ T6448] EXT4-fs (loop3): shut down requested (1) [ 152.416981][ T6287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.428345][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 152.489839][ T6287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.525631][ T6287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.600808][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 152.758303][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.783651][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.798856][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.819506][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.830311][ T4354] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.847876][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.871692][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.890689][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.897815][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.926076][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.947054][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.971099][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.980363][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.988812][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.005318][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.015204][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.027736][ T4354] usb 3-1: Using ep0 maxpacket: 32 [ 153.037739][ T6474] loop4: detected capacity change from 0 to 256 [ 153.039354][ T4354] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 153.066516][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.077506][ T4354] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 153.093225][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.104465][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.123639][ T4354] usb 3-1: string descriptor 0 read error: -22 [ 153.129901][ T4354] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 153.134498][ T6474] FAT-fs (loop4): Directory bread(block 64) failed [ 153.139790][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.153691][ T4354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.162761][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.170756][ T6474] FAT-fs (loop4): Directory bread(block 65) failed [ 153.177353][ T6474] FAT-fs (loop4): Directory bread(block 66) failed [ 153.186982][ T6458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.195420][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.206209][ T4354] usb 3-1: MIDIStreaming interface descriptor not found [ 153.217521][ T6287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.228125][ T6474] FAT-fs (loop4): Directory bread(block 67) failed [ 153.255733][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.263073][ T6474] FAT-fs (loop4): Directory bread(block 68) failed [ 153.269619][ T6474] FAT-fs (loop4): Directory bread(block 69) failed [ 153.285311][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.295468][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.332771][ T6474] FAT-fs (loop4): Directory bread(block 70) failed [ 153.339345][ T6474] FAT-fs (loop4): Directory bread(block 71) failed [ 153.346837][ T6474] FAT-fs (loop4): Directory bread(block 72) failed [ 153.353564][ T6474] FAT-fs (loop4): Directory bread(block 73) failed [ 153.361113][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.573596][ T126] kernel read not supported for file /video9 (pid: 126 comm: kworker/0:2) [ 153.586771][ T6246] usb 3-1: USB disconnect, device number 9 [ 153.670835][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 153.798716][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.766'. [ 154.190394][ T6504] device batadv_slave_1 entered promiscuous mode [ 154.235889][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.245653][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.276834][ T6503] device batadv_slave_1 left promiscuous mode [ 154.292502][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.349337][ T6507] loop3: detected capacity change from 0 to 4096 [ 154.366560][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.380714][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.407207][ T6507] EXT4-fs (loop3): Test dummy encryption mode enabled [ 154.453279][ T6507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 154.457637][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.521140][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.533251][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.541319][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.561016][ T6518] netlink: 76 bytes leftover after parsing attributes in process `syz.4.774'. [ 154.608870][ T6287] device veth0_vlan entered promiscuous mode [ 154.651986][ T6287] device veth1_vlan entered promiscuous mode [ 154.781995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 154.797786][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 154.803936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.862176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.897221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.942472][ T6287] device veth0_macvtap entered promiscuous mode [ 154.986949][ T6287] device veth1_macvtap entered promiscuous mode [ 155.038383][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.065073][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.077345][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.097163][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.114176][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.134173][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.145261][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.156339][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.168216][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.181450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.194621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.225714][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.246545][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.266752][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.314169][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.334169][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.360143][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.380543][ T6287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.401466][ T6287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.440942][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.468190][ T6287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.514180][ T6287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.538384][ T6287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.564181][ T6287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.592581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.605656][ T6552] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-22) [ 155.615698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.668213][ T6548] loop3: detected capacity change from 0 to 4096 [ 155.772697][ T6548] EXT4-fs (loop3): Test dummy encryption mode enabled [ 155.805810][ T6548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 155.833281][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.850254][ T6247] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 155.860751][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.879618][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.942441][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 155.957508][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.005168][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.043306][ T2912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.060354][ T6247] usb 5-1: Using ep0 maxpacket: 16 [ 156.068367][ T6247] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.096443][ T6247] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.114437][ T6247] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.130681][ T6247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.602296][ T6247] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 156.840407][ T4283] usb 5-1: USB disconnect, device number 8 [ 156.911879][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.919582][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.115814][ T6582] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 157.295509][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.338123][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.748512][ T6568] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.757587][ T6568] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.766630][ T6568] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.775634][ T6568] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.834068][ T6582] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 157.943528][ T6584] netlink: 'syz.0.798': attribute type 29 has an invalid length. [ 157.983049][ T6596] device syzkaller1 entered promiscuous mode [ 158.176600][ T6605] loop2: detected capacity change from 0 to 256 [ 158.264088][ T6605] FAT-fs (loop2): Directory bread(block 64) failed [ 158.295204][ T6605] FAT-fs (loop2): Directory bread(block 65) failed [ 158.305053][ T6605] FAT-fs (loop2): Directory bread(block 66) failed [ 158.320775][ T6605] FAT-fs (loop2): Directory bread(block 67) failed [ 158.327729][ T6605] FAT-fs (loop2): Directory bread(block 68) failed [ 158.339774][ T6605] FAT-fs (loop2): Directory bread(block 69) failed [ 158.368699][ T6605] FAT-fs (loop2): Directory bread(block 70) failed [ 158.388353][ T6605] FAT-fs (loop2): Directory bread(block 71) failed [ 158.399777][ T6605] FAT-fs (loop2): Directory bread(block 72) failed [ 158.406652][ T6605] FAT-fs (loop2): Directory bread(block 73) failed [ 158.494674][ T6605] FAT-fs (loop2): Filesystem has been set read-only [ 159.088822][ T6639] loop2: detected capacity change from 0 to 512 [ 159.417034][ T6650] loop4: detected capacity change from 0 to 4096 [ 159.441469][ T6653] device syzkaller1 entered promiscuous mode [ 159.456760][ T6650] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 159.690722][ T6650] ntfs3: loop4: ino=1f, "file2" failed to open parent directory r=5 to update [ 159.794039][ T2912] ntfs3: loop4: ino=1f, failed to open parent directory r=5 to update [ 160.015164][ T6672] loop4: detected capacity change from 0 to 4096 [ 160.080050][ T126] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 160.208070][ T4287] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 160.220067][ T5329] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 160.235340][ T4287] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 160.272099][ T126] usb 2-1: Using ep0 maxpacket: 8 [ 160.279097][ T126] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 160.316632][ T126] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.329206][ T126] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.348940][ T126] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.369102][ T126] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.378826][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.423082][ T5329] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 160.440116][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 160.448549][ T5329] usb 3-1: Product: syz [ 160.465159][ T5329] usb 3-1: config 0 descriptor?? [ 160.482822][ T5329] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 160.503523][ T5329] usb 3-1: Detected FT232H [ 160.615607][ T126] usb 2-1: GET_CAPABILITIES returned 0 [ 160.623202][ T126] usbtmc 2-1:16.0: can't read capabilities [ 160.623265][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 160.640370][ T6246] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 160.697275][ T5329] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 160.820104][ T6246] usb 5-1: Using ep0 maxpacket: 32 [ 160.827315][ T6246] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.836210][ T126] usb 2-1: USB disconnect, device number 9 [ 160.840959][ T6246] usb 5-1: config 0 has no interface number 0 [ 160.860417][ T6246] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 160.869613][ T6246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.884248][ T6246] usb 5-1: Product: syz [ 160.888488][ T6246] usb 5-1: Manufacturer: syz [ 160.894519][ T6246] usb 5-1: SerialNumber: syz [ 160.901589][ T6246] usb 5-1: config 0 descriptor?? [ 160.908560][ T6246] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 161.115142][ T6246] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 161.130126][ T6246] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 161.139904][ T5329] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 161.346256][ T6246] usb 3-1: USB disconnect, device number 10 [ 161.375383][ T6246] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 161.390599][ T6246] ftdi_sio 3-1:0.0: device disconnected [ 161.547607][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.556796][ T4354] usb 5-1: USB disconnect, device number 9 [ 161.572968][ T4354] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 161.587391][ T4354] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 161.599098][ T4354] quatech2 5-1:0.51: device disconnected [ 162.102399][ T6695] loop3: detected capacity change from 0 to 32768 [ 162.257950][ T6695] XFS (loop3): Mounting V5 Filesystem [ 162.440222][ T6695] XFS (loop3): Ending clean mount [ 162.520436][ T6695] XFS (loop3): User initiated shutdown received. [ 162.531159][ T6695] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 162.569813][ T6695] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 162.682819][ T4279] XFS (loop3): Unmounting Filesystem [ 162.900274][ T6246] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.110169][ T6246] usb 1-1: Using ep0 maxpacket: 8 [ 163.117216][ T6246] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 163.136775][ T6246] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.177268][ T6246] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.217776][ T6246] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.238079][ T6246] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.281698][ T6246] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.320313][ T6246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.457387][ T6762] loop4: detected capacity change from 0 to 512 [ 163.561603][ T6766] loop3: detected capacity change from 0 to 512 [ 163.603045][ T6766] EXT4-fs: Ignoring removed orlov option [ 163.638546][ T6762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.649620][ T6762] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.717660][ T6766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.730100][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 163.868806][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 164.290201][ T4354] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.353988][ T6246] usb 1-1: USB disconnect, device number 10 [ 164.486714][ T4354] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 164.511165][ T4354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.529614][ T4354] usb 5-1: Product: syz [ 164.539025][ T4354] usb 5-1: Manufacturer: syz [ 164.549369][ T4354] usb 5-1: SerialNumber: syz [ 164.567037][ T4354] usb 5-1: config 0 descriptor?? [ 164.574568][ T4354] hub 5-1:0.0: bad descriptor, ignoring hub [ 164.581080][ T6791] loop2: detected capacity change from 0 to 2048 [ 164.589527][ T4354] hub: probe of 5-1:0.0 failed with error -5 [ 164.620193][ T6791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.698491][ T26] audit: type=1800 audit(1781193296.302:24): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.886" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 164.726160][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 164.800494][ T4354] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 164.831809][ T4354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.845879][ T4354] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 164.871899][ T4354] usb 5-1: media controller created [ 164.933261][ T4354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.051261][ T4354] DVB: Unable to find symbol dib7000p_attach() [ 165.073744][ T4354] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 165.111426][ T6809] input: syz0 as /devices/virtual/input/input18 [ 166.169963][ C1] sched: RT throttling activated [ 166.170034][ T4354] rc_core: IR keymap rc-dib0700-rc5 not found [ 166.181241][ T4354] Registered IR keymap rc-empty [ 166.190488][ T4354] dvb-usb: could not initialize remote control. [ 166.196790][ T4354] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 166.314302][ T4354] usb 5-1: USB disconnect, device number 10 [ 166.335923][ T4354] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 166.608161][ T6834] [ 166.610564][ T6834] ====================================================== [ 166.617605][ T6834] WARNING: possible circular locking dependency detected [ 166.624660][ T6834] syzkaller #0 Not tainted [ 166.629085][ T6834] ------------------------------------------------------ [ 166.636120][ T6834] syz.0.904/6834 is trying to acquire lock: [ 166.642040][ T6834] ffff888075f353d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 166.651752][ T6834] [ 166.651752][ T6834] but task is already holding lock: [ 166.659132][ T6834] ffff88807f21fa80 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 166.670059][ T6834] [ 166.670059][ T6834] which lock already depends on the new lock. [ 166.670059][ T6834] [ 166.680482][ T6834] [ 166.680482][ T6834] the existing dependency chain (in reverse order) is: [ 166.689514][ T6834] [ 166.689514][ T6834] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 166.698244][ T6834] down_write+0x36/0x60 [ 166.702943][ T6834] process_measurement+0x3a2/0x1c30 [ 166.708681][ T6834] ima_file_mmap+0x102/0x150 [ 166.713817][ T6834] __se_sys_remap_file_pages+0x559/0x7b0 [ 166.720000][ T6834] do_syscall_64+0x4c/0xa0 [ 166.724959][ T6834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.731415][ T6834] [ 166.731415][ T6834] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 166.739003][ T6834] __lock_acquire+0x2d07/0x7d10 [ 166.744416][ T6834] lock_acquire+0x1bb/0x4a0 [ 166.749475][ T6834] down_read_killable+0x4c/0x340 [ 166.750853][ T126] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.754967][ T6834] mmap_read_lock_killable+0x1d/0x60 [ 166.754994][ T6834] lock_mm_and_find_vma+0x2b1/0x2f0 [ 166.755008][ T6834] do_user_addr_fault+0x2db/0xb10 [ 166.779598][ T6834] exc_page_fault+0x60/0x100 [ 166.784740][ T6834] asm_exc_page_fault+0x22/0x30 [ 166.790142][ T6834] fault_in_readable+0x13e/0x1f0 [ 166.795628][ T6834] fault_in_iov_iter_readable+0xbb/0x2e0 [ 166.801813][ T6834] generic_perform_write+0x1f1/0x5c0 [ 166.807645][ T6834] __generic_file_write_iter+0x148/0x2a0 [ 166.813821][ T6834] generic_file_write_iter+0xab/0x2e0 [ 166.819726][ T6834] vfs_write+0x4b1/0xa30 [ 166.824496][ T6834] __x64_sys_pwrite64+0x197/0x220 [ 166.830045][ T6834] do_syscall_64+0x4c/0xa0 [ 166.835060][ T6834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.841488][ T6834] [ 166.841488][ T6834] other info that might help us debug this: [ 166.841488][ T6834] [ 166.851726][ T6834] Possible unsafe locking scenario: [ 166.851726][ T6834] [ 166.859174][ T6834] CPU0 CPU1 [ 166.864537][ T6834] ---- ---- [ 166.869892][ T6834] lock(&sb->s_type->i_mutex_key#13); [ 166.875361][ T6834] lock(&mm->mmap_lock); [ 166.882210][ T6834] lock(&sb->s_type->i_mutex_key#13); [ 166.890193][ T6834] lock(&mm->mmap_lock); [ 166.894530][ T6834] [ 166.894530][ T6834] *** DEADLOCK *** [ 166.894530][ T6834] [ 166.902752][ T6834] 2 locks held by syz.0.904/6834: [ 166.907767][ T6834] #0: ffff88802d796460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 166.916643][ T6834] #1: ffff88807f21fa80 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 166.927957][ T6834] [ 166.927957][ T6834] stack backtrace: [ 166.933840][ T6834] CPU: 1 PID: 6834 Comm: syz.0.904 Not tainted syzkaller #0 [ 166.940089][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 166.941106][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.941118][ T6834] Call Trace: [ 166.941124][ T6834] [ 166.941131][ T6834] dump_stack_lvl+0x188/0x24e [ 166.949020][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.956197][ T6834] ? load_image+0x400/0x400 [ 166.956228][ T6834] ? show_regs_print_info+0x12/0x12 [ 166.956246][ T6834] ? print_circular_bug+0x12b/0x1a0 [ 166.956269][ T6834] check_noncircular+0x296/0x330 [ 166.956290][ T6834] ? add_chain_block+0x940/0x940 [ 166.956308][ T6834] ? lockdep_lock+0xf1/0x1f0 [ 166.956330][ T6834] ? _find_first_zero_bit+0xcf/0x100 [ 166.956349][ T6834] __lock_acquire+0x2d07/0x7d10 [ 166.956377][ T6834] ? verify_lock_unused+0x140/0x140 [ 166.964119][ T126] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.967238][ T6834] ? cgroup_rstat_updated+0xd7/0x350 [ 166.967267][ T6834] ? verify_lock_unused+0x140/0x140 [ 166.978567][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.982658][ T6834] ? verify_lock_unused+0x140/0x140 [ 166.982691][ T6834] ? mark_lock+0x94/0x320 [ 166.982711][ T6834] lock_acquire+0x1bb/0x4a0 [ 166.982730][ T6834] ? mmap_read_lock_killable+0x1d/0x60 [ 166.982748][ T6834] ? read_lock_is_recursive+0x10/0x10 [ 166.982765][ T6834] ? cmp_ex_search+0x1a/0x70 [ 166.982783][ T6834] ? bsearch+0x8a/0xb0 [ 166.982800][ T6834] ? fault_in_readable+0x13e/0x1f0 [ 166.982819][ T6834] ? search_extable+0x8c/0xd0 [ 167.050698][ T126] usb 3-1: config 0 descriptor?? [ 167.055605][ T6834] ? trim_init_extable+0x3b0/0x3b0 [ 167.055641][ T6834] ? mmap_read_lock_killable+0x1d/0x60 [ 167.109366][ T6834] down_read_killable+0x4c/0x340 [ 167.114334][ T6834] ? mmap_read_lock_killable+0x1d/0x60 [ 167.119801][ T6834] mmap_read_lock_killable+0x1d/0x60 [ 167.125100][ T6834] lock_mm_and_find_vma+0x2b1/0x2f0 [ 167.130316][ T6834] do_user_addr_fault+0x2db/0xb10 [ 167.135369][ T6834] ? _raw_spin_unlock_irq+0x1f/0x40 [ 167.140590][ T6834] exc_page_fault+0x60/0x100 [ 167.145207][ T6834] asm_exc_page_fault+0x22/0x30 [ 167.150064][ T6834] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 167.155816][ T6834] Code: c8 5b c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 a7 5b c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 8a 5b [ 167.175437][ T6834] RSP: 0018:ffffc900044b7ab0 EFLAGS: 00050287 [ 167.181525][ T6834] RAX: ffffffff81be1ff9 RBX: 0000000000001000 RCX: 0000000000080000 [ 167.189519][ T6834] RDX: ffffc9001cbf6000 RSI: 000000000006f45e RDI: 000000000006f45f [ 167.197605][ T6834] RBP: 0000000000000000 R08: ffff888078a89e00 R09: 0000000000000002 [ 167.205591][ T6834] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000412000 [ 167.213579][ T6834] R13: 0000000000000000 R14: 00002000004100c0 R15: 0000200000411000 [ 167.221563][ T6834] ? fault_in_readable+0x139/0x1f0 [ 167.226724][ T6834] fault_in_iov_iter_readable+0xbb/0x2e0 [ 167.232375][ T6834] generic_perform_write+0x1f1/0x5c0 [ 167.237696][ T6834] ? generic_file_direct_write+0x330/0x330 [ 167.243532][ T6834] ? __file_remove_privs+0x5f0/0x5f0 [ 167.248842][ T6834] ? rwsem_write_trylock+0x135/0x1c0 [ 167.254144][ T6834] ? clear_nonspinnable+0x60/0x60 [ 167.259178][ T6834] ? generic_write_checks_count+0x3d9/0x4c0 [ 167.265102][ T6834] __generic_file_write_iter+0x148/0x2a0 [ 167.270199][ T126] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 167.270751][ T6834] generic_file_write_iter+0xab/0x2e0 [ 167.287059][ T6834] vfs_write+0x4b1/0xa30 [ 167.291337][ T6834] ? file_end_write+0x250/0x250 [ 167.296243][ T6834] ? __fget_files+0x43d/0x4b0 [ 167.300980][ T6834] ? __fdget+0x17c/0x200 [ 167.305265][ T6834] ? __x64_sys_pwrite64+0xf2/0x220 [ 167.310431][ T6834] __x64_sys_pwrite64+0x197/0x220 [ 167.315466][ T6834] ? ksys_pwrite64+0x1b0/0x1b0 [ 167.320535][ T6834] ? lockdep_hardirqs_on+0x94/0x140 [ 167.326790][ T6834] do_syscall_64+0x4c/0xa0 [ 167.331227][ T6834] ? clear_bhb_loop+0x60/0xb0 [ 167.335942][ T6834] ? clear_bhb_loop+0x60/0xb0 [ 167.340626][ T6834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.346544][ T6834] RIP: 0033:0x7f5280d9ce59 [ 167.350992][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.370625][ T6834] RSP: 002b:00007f5281bf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 167.379065][ T6834] RAX: ffffffffffffffda RBX: 00007f5281015fa0 RCX: 00007f5280d9ce59 [ 167.387067][ T6834] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000003 [ 167.395055][ T6834] RBP: 00007f5280e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 167.403023][ T6834] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 167.410988][ T6834] R13: 00007f5281016038 R14: 00007f5281015fa0 R15: 00007fffb65110f8 [ 167.418957][ T6834] [ 167.914394][ T4354] usb 3-1: USB disconnect, device number 11