last executing test programs: 3.138617708s ago: executing program 0 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.086158531s ago: executing program 3 (id=713): setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setuid(0xee01) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 2.960579128s ago: executing program 1 (id=715): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 2.916923891s ago: executing program 0 (id=716): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f80)="4f7d669ddbee291bffe1f05ba4ddbda9", 0x10}, {&(0x7f0000000080)="b097daea750d345cb5c6b2c996201d5e", 0x10}], 0x2}}], 0x1, 0x0) 2.836984905s ago: executing program 3 (id=718): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e1c, @remote}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfe3a) 2.727172001s ago: executing program 1 (id=719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0xe1, 0x0, 0x480000008}]}) 2.713824953s ago: executing program 0 (id=720): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.559874351s ago: executing program 3 (id=722): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 2.391520221s ago: executing program 1 (id=725): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semop(0x0, 0x0, 0x0) 2.345699824s ago: executing program 3 (id=726): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.958628086s ago: executing program 4 (id=729): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4002, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe4) close(r0) 1.907267209s ago: executing program 2 (id=730): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.769069247s ago: executing program 4 (id=731): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 1.634082625s ago: executing program 4 (id=732): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.464444095s ago: executing program 4 (id=733): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = gettid() sigaltstack(&(0x7f0000000080)={&(0x7f0000002200)=""/4104, 0x1, 0x1008}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000)) 1.418188308s ago: executing program 3 (id=734): io_setup(0x8, &(0x7f00000002c0)) io_setup(0x40, &(0x7f0000000500)=0x0) io_destroy(r0) io_pgetevents(r0, 0x3, 0x0, 0x0, 0x0, 0x0) 1.254332467s ago: executing program 4 (id=735): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="98", 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x41, 0x5}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xf}}], 0x38, 0x4048800}, 0x810) 1.254077157s ago: executing program 1 (id=736): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001200)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @local}], 0x20) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000740), &(0x7f0000000300)=0x8) 1.2097535s ago: executing program 1 (id=737): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)="e5", 0x1, 0x20000094, 0x0, 0x0) 1.084284118s ago: executing program 3 (id=738): ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x500, 0x2d0, 0x0, @discrete={0xb, 0x7}}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 970.460674ms ago: executing program 4 (id=739): syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d69736f383835392d362c696e746567726974792c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c67727071756f74612c67727071756f7461006e6f71756f74612c6572726f72733d63612297e375d3f66f6e74696e75652c756d61736b3d30783030303030303030303030303062fe78ddf30ffefff4ac7aa80df8d01d61b9e725256adec93aec6e89bfd090cfa8412cc716e10a0136247338e0909723773ad2e4b40e96d3ed8a0498cc0cdf859f6d675c279e2b91000000000c00000000", @ANYBLOB="c8d796a118403d6bd392656849d17f4a700037e774a58dd131f4e573d9aa94a887e90ff8fc3e6256916b7e4e5f3f2e6bcca0cf953b6e17443773a2d217b7080d47d674b1149f6f2ee77547c95bb5c6ff901ad3ed4e8f1ac3a040a17406b32d36457030e31a4feba2c6b26747928f73a18b8191ac706118096d53465fc0c1ffeae7af6663a5d000c8175ec2f28a7501b8a5c87e7e68eaad0bd857a4aee05f9bec9500d61faa50360fd95d2bd973427f066ee09258c7063588de1bff563da1b6783c93711a38042665699476209bad96ea79a0d09c589c9f685c7f1299d985647f95fab103ac7c40a5af64fe9af1fcbc", @ANYBLOB=',resize=0x0000000000000003,nointegrity,iocharset=ascii,usrquota,func=MMAP_CHECK,pcr=00000000000000000004,fowner>', @ANYRESDEC=0x0, @ANYBLOB="b5f7"], 0x1, 0x61aa, &(0x7f0000006880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 965.760084ms ago: executing program 1 (id=740): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 882.817419ms ago: executing program 2 (id=741): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000007c0)=@req={0x3f8, 0x4000, 0x0, 0x1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 714.496799ms ago: executing program 2 (id=742): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x7e) 614.465955ms ago: executing program 0 (id=743): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x2b100, 0x0, 0x30, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00006b2000/0xc000)=nil, 0xc000, &(0x7f00000010c0)='(}:\x00') 539.753759ms ago: executing program 2 (id=744): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd056fea56a888e", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 404.861867ms ago: executing program 2 (id=745): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) 173.73487ms ago: executing program 0 (id=746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x40}}, 0x0) 132.859512ms ago: executing program 2 (id=747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 0s ago: executing program 0 (id=748): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) kernel console output (not intermixed with test programs): ready [ 90.571214][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.589882][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.600364][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.615727][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.628595][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.666239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.676583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.694253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.712067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.745682][ T4268] device veth0_macvtap entered promiscuous mode [ 90.760476][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.780761][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.796889][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.809461][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.831166][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.871421][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.879481][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.887469][ T4268] device veth1_macvtap entered promiscuous mode [ 90.914050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.930890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.939192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.969409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.982627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.995315][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.012825][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.026880][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.039573][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.132690][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.164545][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.175949][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.187448][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.198298][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.209318][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.221668][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.260633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.296881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.308175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.322617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.335255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.344072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.356576][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.368192][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 91.368580][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 91.374275][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 91.374305][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 91.375509][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.410363][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.426170][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.430446][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.460323][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.470502][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.492539][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.504451][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.521168][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 91.529796][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.549011][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.558282][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.570520][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.582379][ T4385] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 91.593359][ T4282] device veth0_vlan entered promiscuous mode [ 91.602493][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.613169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.621302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.629466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.638796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.726722][ T4282] device veth1_vlan entered promiscuous mode [ 91.753712][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.770896][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.803217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.821813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.842803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.947211][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.957331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.978613][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.001198][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.009262][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.044887][ T4282] device veth0_macvtap entered promiscuous mode [ 92.089025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.102385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.131632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.146603][ T4282] device veth1_macvtap entered promiscuous mode [ 92.185685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.203253][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.222984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.256460][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.275931][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.304635][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.318635][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.328275][ T4396] loop0: detected capacity change from 0 to 8 [ 92.344396][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.355927][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.389199][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.407221][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.418071][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.437679][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.447144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.462122][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.466135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.489396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.503631][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.522109][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.536458][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.554168][ T4315] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.568313][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.579252][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.590243][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.600615][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.611564][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.627905][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.640588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.653355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.662062][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 92.681199][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.697127][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724216][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.734607][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.744943][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.748557][ T4315] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 92.755072][ T4316] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 92.772769][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.783114][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.785335][ T4315] usb 2-1: config 0 has no interface number 0 [ 92.821997][ T4316] usb 3-1: config 0 descriptor?? [ 92.847278][ T4315] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 92.887009][ T4315] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.936742][ T4315] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 92.968733][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.995757][ T4315] usb 2-1: Product: syz [ 93.006947][ T4315] usb 2-1: Manufacturer: syz [ 93.024905][ T4315] usb 2-1: SerialNumber: syz [ 93.056329][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.086516][ T4315] usb 2-1: config 0 descriptor?? [ 93.093743][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.129984][ T4395] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.151767][ T4315] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 93.188353][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.209496][ T4315] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 93.246983][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.296963][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.311785][ T4316] wacom 0003:056A:0325.0001: hidraw0: USB HID v0.08 Device [HID 056a:0325] on usb-dummy_hcd.2-1/input0 [ 93.372560][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.465818][ T4408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 93.518224][ T126] usb 3-1: USB disconnect, device number 2 [ 93.708045][ T4316] usb 2-1: USB disconnect, device number 2 [ 93.720096][ T4410] loop0: detected capacity change from 0 to 1024 [ 93.740155][ T4316] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 93.765220][ T4407] fido_id[4407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.800212][ T4316] cyberjack 2-1:0.69: device disconnected [ 94.001868][ T4414] syz.3.15 (4414) used greatest stack depth: 19376 bytes left [ 94.134454][ T4418] loop0: detected capacity change from 0 to 512 [ 94.153172][ T4418] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 94.184373][ T4418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 94.270624][ T4418] System zones: 1-12 [ 94.308031][ T4418] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #15: comm syz.0.17: corrupted in-inode xattr [ 94.321132][ T4316] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.337045][ T4418] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.17: couldn't read orphan inode 15 (err -117) [ 94.352093][ T4418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.503111][ T4316] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.525213][ T4316] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 94.573213][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 94.589892][ T4316] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 94.620458][ T4316] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 94.662757][ T4316] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.741164][ T4316] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.765357][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.781509][ T4316] usb 5-1: SerialNumber: syz [ 94.813072][ T4416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.829436][ T4416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.837915][ T4416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.024878][ T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.074749][ T4416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.106263][ T4416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.130689][ T4416] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.155582][ T4437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.176090][ T4437] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.204838][ T4429] loop1: detected capacity change from 0 to 32768 [ 95.220386][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 95.232333][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.249247][ T4437] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 95.272112][ T4429] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.21 (4429) [ 95.295310][ T4437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.306237][ T4437] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.318089][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.337604][ T126] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.368902][ T126] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.388382][ T4437] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 95.406208][ T4429] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 95.409634][ T4437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.423835][ T4429] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 95.428026][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.454023][ T126] usb 4-1: config 0 descriptor?? [ 95.461220][ T4429] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 95.518914][ T4429] BTRFS info (device loop1): use zstd compression, level 3 [ 95.530868][ T4437] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.550396][ T4429] BTRFS info (device loop1): using free space tree [ 95.568326][ T4437] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 95.583387][ T4316] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 95.605945][ T4437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.620592][ T4437] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.679017][ T4437] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 95.717246][ T4437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 95.729399][ T4437] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 95.748855][ T4437] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 95.782583][ T4256] usb 5-1: USB disconnect, device number 2 [ 95.807064][ T4256] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 95.875834][ T126] HID 045e:07da: Invalid code 65791 type 1 [ 95.900723][ T126] HID 045e:07da: Invalid code 768 type 1 [ 95.906509][ T126] HID 045e:07da: Invalid code 769 type 1 [ 95.940749][ T4466] loop0: detected capacity change from 0 to 256 [ 95.948635][ T4466] ======================================================= [ 95.948635][ T4466] WARNING: The mand mount option has been deprecated and [ 95.948635][ T4466] and is ignored by this kernel. Remove the mand [ 95.948635][ T4466] option from the mount to silence this warning. [ 95.948635][ T4466] ======================================================= [ 95.988467][ T126] HID 045e:07da: Invalid code 770 type 1 [ 96.020477][ T4429] BTRFS info (device loop1): enabling ssd optimizations [ 96.039429][ T126] HID 045e:07da: Invalid code 771 type 1 [ 96.096944][ T126] HID 045e:07da: Invalid code 772 type 1 [ 96.106663][ T4466] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 96.122507][ T126] HID 045e:07da: Invalid code 773 type 1 [ 96.128251][ T126] HID 045e:07da: Invalid code 774 type 1 [ 96.156462][ T126] HID 045e:07da: Invalid code 775 type 1 [ 96.178079][ T126] HID 045e:07da: Invalid code 776 type 1 [ 96.221163][ T126] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input8 [ 96.333579][ T126] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 96.398658][ T126] usb 4-1: USB disconnect, device number 2 [ 96.627772][ T4480] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.681103][ T4478] loop4: detected capacity change from 0 to 256 [ 96.756455][ T4483] loop2: detected capacity change from 0 to 256 [ 96.832338][ T4478] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 96.917866][ T4483] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 96.940243][ T4481] fido_id[4481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 97.039788][ T4267] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 97.111640][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.350803][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.431329][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.508942][ T4506] loop4: detected capacity change from 0 to 256 [ 97.581942][ T4506] exfat: Deprecated parameter 'utf8' [ 97.587418][ T4506] exfat: Deprecated parameter 'utf8' [ 97.664693][ T4506] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 97.680948][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.719874][ T4513] loop2: detected capacity change from 0 to 128 [ 97.750507][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 97.762867][ T4513] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 97.820902][ T4509] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 97.891202][ T4513] hpfs: filesystem error: improperly stopped [ 97.898148][ T4513] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 97.901350][ T4509] syzkaller1: linktype set to 778 [ 98.000737][ T4513] hpfs: You really don't want any checks? You are crazy... [ 98.008841][ T4513] hpfs: hpfs_map_sector(): read error [ 98.037508][ T4517] loop0: detected capacity change from 0 to 1024 [ 98.046286][ T4513] hpfs: code page support is disabled [ 98.061655][ T4513] hpfs: hpfs_map_4sectors(): unaligned read [ 98.117726][ T4513] hpfs: hpfs_map_4sectors(): unaligned read [ 98.143517][ T4513] hpfs: filesystem error: unable to find root dir [ 98.157111][ T4517] hfsplus: request for non-existent node 211 in B*Tree [ 98.229718][ T4517] hfsplus: request for non-existent node 211 in B*Tree [ 98.383523][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.432653][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.472468][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.479530][ T4527] [U] ^G„ [ 98.502101][ T4525] [U] ^G [ 98.519832][ T9] hfsplus: b-tree write err: -5, ino 8 [ 98.520804][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.578127][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.610335][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.617828][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.670801][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.698847][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.738149][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.755996][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.786432][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.820369][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.838417][ T4536] loop3: detected capacity change from 0 to 256 [ 98.861758][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.889597][ T4256] hid-generic 00A1:0009:0003.0003: unknown main item tag 0x0 [ 98.898329][ T4536] exfat: Deprecated parameter 'namecase' [ 98.913333][ T4536] exfat: Deprecated parameter 'namecase' [ 98.948808][ T4256] hid-generic 00A1:0009:0003.0003: hidraw0: HID v0.05 Device [syz1] on syz0 [ 98.974832][ T4536] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 99.095329][ T4541] loop0: detected capacity change from 0 to 64 [ 99.196338][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 99.430486][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 99.512522][ T11] kworker/u4:1: attempt to access beyond end of device [ 99.512522][ T11] loop0: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 99.526555][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 99.633227][ T11] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 99.750562][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 99.780111][ T4556] loop4: detected capacity change from 0 to 1024 [ 99.830428][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 99.877877][ T4556] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.919346][ T4548] fido_id[4548]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 100.188976][ T4556] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.57: inode #93: comm syz.4.57: iget: illegal inode # [ 100.244381][ T4556] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.57: error while reading EA inode 93 err=-117 [ 100.436376][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 100.708568][ T4575] loop1: detected capacity change from 0 to 1024 [ 100.774410][ T4575] EXT4-fs: Ignoring removed oldalloc option [ 100.819199][ T4575] EXT4-fs: Ignoring removed bh option [ 100.850572][ T4575] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.928543][ T4552] loop2: detected capacity change from 0 to 32768 [ 100.958071][ T4575] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.980302][ T4582] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 100.988046][ T4582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 101.067831][ T4552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.55 (4552) [ 101.146514][ T4552] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.179955][ T4575] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.61: Allocating blocks 481-513 which overlap fs metadata [ 101.200673][ T4552] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 101.221694][ T4552] BTRFS info (device loop2): setting nodatasum [ 101.251722][ T4552] BTRFS info (device loop2): force zlib compression, level 3 [ 101.289842][ T4552] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 101.311887][ T4552] BTRFS info (device loop2): use lzo compression, level 0 [ 101.320061][ T4552] BTRFS info (device loop2): turning on flush-on-commit [ 101.362186][ T4552] BTRFS info (device loop2): enabling auto defrag [ 101.380809][ T4552] BTRFS info (device loop2): max_inline at 4096 [ 101.413223][ T4552] BTRFS info (device loop2): using free space tree [ 101.435787][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 101.603479][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.655162][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.693594][ T4590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.715672][ T4552] BTRFS info (device loop2): enabling ssd optimizations [ 101.755247][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 101.830771][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.875638][ T4593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.918218][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 102.674339][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.240276][ C1] sched: RT throttling activated [ 104.229095][ T4620] loop3: detected capacity change from 0 to 262144 [ 104.304507][ T4620] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.369829][ T4620] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.478828][ T4620] F2FS-fs (loop3): inconsistent node block, nid:8, node_footer[nid:134217736,ino:8,ofs:0,cpver:58012970595321314,blkaddr:30726] [ 104.816173][ T4664] lo: Caught tx_queue_len zero misconfig [ 104.837283][ T4664] netlink: 48 bytes leftover after parsing attributes in process `syz.4.86'. [ 105.462063][ T4658] loop2: detected capacity change from 0 to 32768 [ 105.538175][ T4658] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 105.538175][ T4658] [ 105.557701][ T4658] ERROR: (device loop2): remounting filesystem as read-only [ 105.566268][ T4658] jfs_lookup: dtSearch returned -5 [ 105.596063][ T4658] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 105.596063][ T4658] [ 106.225425][ T4690] capability: warning: `syz.1.99' uses deprecated v2 capabilities in a way that may be insecure [ 106.936252][ T4704] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 106.965172][ T4704] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 106.992242][ T4704] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.021562][ T4704] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 107.028772][ T4704] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 107.090671][ T4704] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 107.116730][ T4704] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 107.150525][ T4704] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.164679][ T4704] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 107.189326][ T4704] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 107.202116][ T4704] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 107.255855][ T4704] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 107.287728][ T4704] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 107.306890][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 107.336832][ T4713] loop0: detected capacity change from 0 to 64 [ 107.341446][ T4704] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 107.753077][ T4721] loop0: detected capacity change from 0 to 2048 [ 107.794021][ T4721] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.963154][ T4727] Zero length message leads to an empty skb [ 107.970596][ T4725] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.999869][ T4728] loop3: detected capacity change from 0 to 256 [ 108.093799][ T4728] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.192298][ T4728] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.517770][ T4737] IPVS: nq: FWM 3 0x00000003 - no destination available [ 108.557962][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 108.573324][ T4739] process 'syz.0.120' launched '/dev/fd/3' with NULL argv: empty string added [ 108.875543][ T4745] netlink: 'syz.2.123': attribute type 10 has an invalid length. [ 108.906091][ T4745] bond0: (slave bond_slave_0): Releasing backup interface [ 108.996314][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.091716][ T4751] loop0: detected capacity change from 0 to 128 [ 109.163936][ T4730] loop1: detected capacity change from 0 to 32768 [ 109.193637][ T4730] XFS: attr2 mount option is deprecated. [ 109.212983][ T4751] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 109.298581][ T4751] hpfs: filesystem error: improperly stopped [ 109.315821][ T4751] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 109.337162][ T4730] XFS (loop1): Mounting V5 Filesystem [ 109.339742][ T4751] hpfs: You really don't want any checks? You are crazy... [ 109.363830][ T4754] loop2: detected capacity change from 0 to 2048 [ 109.376464][ T4754] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.447110][ T4751] hpfs: hpfs_map_sector(): read error [ 109.453822][ T4754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.476269][ T4751] hpfs: code page support is disabled [ 109.498893][ T4751] hpfs: hpfs_map_4sectors(): unaligned read [ 109.526756][ T4751] hpfs: hpfs_map_4sectors(): unaligned read [ 109.567011][ T4751] hpfs: filesystem error: unable to find root dir [ 109.617531][ T4754] overlayfs: failed to set xattr on upper [ 109.646262][ T4730] XFS (loop1): Ending clean mount [ 109.666782][ T4754] overlayfs: ...falling back to index=off,metacopy=off. [ 109.714057][ T4730] XFS (loop1): Quotacheck needed: Please wait. [ 109.866760][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 109.874293][ T4730] XFS (loop1): Quotacheck: Done. [ 110.137603][ T4774] loop2: detected capacity change from 0 to 164 [ 110.227902][ T4774] rock: directory entry would overflow storage [ 110.251465][ T4774] rock: sig=0x66, size=4, remaining=3 [ 110.262134][ T4267] XFS (loop1): Unmounting Filesystem [ 110.290485][ T4491] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.325340][ T4774] rock: directory entry would overflow storage [ 110.347994][ T4774] rock: sig=0x66, size=4, remaining=3 [ 110.465953][ T4750] loop3: detected capacity change from 0 to 40427 [ 110.476693][ T4491] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 110.495202][ T4491] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 110.523433][ T4750] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 110.532312][ T4491] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 110.543617][ T4750] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.552936][ T4491] usb 5-1: config 220 has no interface number 2 [ 110.562144][ T4750] F2FS-fs (loop3): invalid crc value [ 110.567628][ T4491] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 110.595333][ T4491] usb 5-1: config 220 interface 0 has no altsetting 0 [ 110.604663][ T4750] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.623451][ T4491] usb 5-1: config 220 interface 76 has no altsetting 0 [ 110.644590][ T4491] usb 5-1: config 220 interface 1 has no altsetting 0 [ 110.691353][ T4491] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 110.716826][ T4491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.725474][ T4491] usb 5-1: Product: syz [ 110.746103][ T4491] usb 5-1: Manufacturer: syz [ 110.754901][ T4750] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.767617][ T4491] usb 5-1: SerialNumber: syz [ 110.772782][ T4750] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.934264][ T4750] F2FS-fs (loop3): Corrupted max_depth of 3: 255 [ 110.967926][ T4750] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 111.023415][ T4491] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 111.053658][ T4491] usb 5-1: No valid video chain found. [ 111.059843][ T4491] usb 5-1: selecting invalid altsetting 0 [ 111.150729][ T4491] usb 5-1: selecting invalid altsetting 0 [ 111.156574][ T4491] usbtest: probe of 5-1:220.1 failed with error -22 [ 111.204346][ T4491] usb 5-1: USB disconnect, device number 3 [ 111.342463][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 111.353925][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 111.576188][ T4798] input: syz1 as /devices/virtual/input/input9 [ 112.503050][ T4796] loop0: detected capacity change from 0 to 32768 [ 113.050482][ T4810] loop4: detected capacity change from 0 to 32768 [ 113.152844][ T4810] XFS (loop4): Mounting V5 Filesystem [ 113.212268][ T4815] loop2: detected capacity change from 0 to 32768 [ 113.322600][ T4815] XFS (loop2): Mounting V5 Filesystem [ 113.397234][ T4810] XFS (loop4): Ending clean mount [ 113.452762][ T4856] loop0: detected capacity change from 0 to 8192 [ 113.464604][ T4810] XFS (loop4): Quotacheck needed: Please wait. [ 113.487678][ T4856] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.501653][ T4856] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 113.512869][ T4856] REISERFS (device loop0): using ordered data mode [ 113.519729][ T4856] reiserfs: using flush barriers [ 113.528348][ T4856] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.632693][ T4815] XFS (loop2): Ending clean mount [ 113.669957][ T4815] XFS (loop2): Quotacheck needed: Please wait. [ 113.705415][ T4856] REISERFS (device loop0): checking transaction log (loop0) [ 113.786151][ T4810] XFS (loop4): Quotacheck: Done. [ 113.843835][ T4815] XFS (loop2): Quotacheck: Done. [ 114.054895][ T4863] loop3: detected capacity change from 0 to 2048 [ 114.119186][ T4856] REISERFS (device loop0): Using tea hash to sort names [ 114.143461][ T4272] XFS (loop2): Unmounting Filesystem [ 114.175322][ T4863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.195338][ T4856] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 114.302762][ T4282] XFS (loop4): Unmounting Filesystem [ 115.149976][ T4861] loop1: detected capacity change from 0 to 32768 [ 115.406487][ T4877] loop4: detected capacity change from 0 to 1024 [ 115.419119][ T4877] EXT4-fs: inline encryption not supported [ 115.435800][ T4880] loop3: detected capacity change from 0 to 256 [ 115.437472][ T4877] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.504198][ T4861] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 115.621291][ T4877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.699160][ T27] audit: type=1800 audit(1769779810.082:2): pid=4877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.165" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 115.776383][ T4877] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.165: Allocating blocks 497-513 which overlap fs metadata [ 115.837011][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 115.852764][ T4877] EXT4-fs (loop4): Remounting filesystem read-only [ 115.926576][ T4888] loop0: detected capacity change from 0 to 4096 [ 116.027221][ T4893] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.099221][ T4895] loop3: detected capacity change from 0 to 1024 [ 116.125111][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 116.478470][ T4299] hfsplus: bad catalog file entry [ 116.495428][ T4299] hfsplus: b-tree write err: -5, ino 3 [ 116.700352][ T4316] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.916463][ T4316] usb 1-1: Using ep0 maxpacket: 8 [ 116.951607][ T4316] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 116.961283][ T4316] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.997475][ T4316] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.017985][ T4316] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.044885][ T4316] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.101016][ T4316] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.118849][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.172703][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 117.373428][ T4316] usb 1-1: GET_CAPABILITIES returned 0 [ 117.379025][ T4316] usbtmc 1-1:16.0: can't read capabilities [ 117.431144][ T4923] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.186'. [ 117.504374][ T4906] loop4: detected capacity change from 0 to 32768 [ 117.519254][ T4923] netlink: zone id is out of range [ 117.564243][ T4923] netlink: del zone limit has 4 unknown bytes [ 117.672982][ T4316] usb 1-1: USB disconnect, device number 2 [ 117.754362][ T4906] XFS (loop4): Mounting V5 Filesystem [ 117.900085][ T4906] XFS (loop4): Ending clean mount [ 117.960770][ T4906] XFS (loop4): Quotacheck needed: Please wait. [ 118.130046][ T4906] XFS (loop4): Quotacheck: Done. [ 118.215078][ T4939] loop2: detected capacity change from 0 to 256 [ 118.322796][ T4939] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 118.350563][ T4316] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.571568][ T4316] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 118.618354][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.677767][ T4316] usb 2-1: Product: syz [ 118.709423][ T4316] usb 2-1: Manufacturer: syz [ 118.734876][ T4316] usb 2-1: SerialNumber: syz [ 118.759813][ T4942] loop0: detected capacity change from 0 to 2048 [ 118.788223][ T4316] usb 2-1: config 0 descriptor?? [ 118.827288][ T4282] XFS (loop4): Unmounting Filesystem [ 118.841763][ T4316] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 003 [ 118.889315][ T4942] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.090406][ T4943] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.243044][ T4316] (null): failure reading functionality [ 119.331956][ T4316] i2c i2c-1: connected i2c-tiny-usb device [ 119.478680][ T4316] usb 2-1: USB disconnect, device number 3 [ 119.529216][ T4925] loop3: detected capacity change from 0 to 262144 [ 119.538545][ T4925] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.187 (4925) [ 119.570622][ T4925] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 119.580970][ T4925] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 119.590480][ T4925] BTRFS info (device loop3): using free space tree [ 119.809802][ T4961] device dummy0 entered promiscuous mode [ 119.824863][ T46] BTRFS warning (device loop3): checksum verify failed on logical 30654464 mirror 1 wanted 0x6191332ca3bfabbd found 0x1eb22ab8dd59a02d level 0 [ 119.843744][ T4955] loop0: detected capacity change from 0 to 2048 [ 119.858894][ T4955] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504 [ 119.884173][ T4925] BTRFS info (device loop3): read error corrected: ino 0 off 30654464 (dev /dev/loop3 sector 76256) [ 119.886032][ T4961] device macvlan2 entered promiscuous mode [ 119.912463][ T4925] BTRFS info (device loop3): read error corrected: ino 0 off 30658560 (dev /dev/loop3 sector 76264) [ 119.924328][ T4925] BTRFS info (device loop3): read error corrected: ino 0 off 30662656 (dev /dev/loop3 sector 76272) [ 119.936136][ T4925] BTRFS info (device loop3): read error corrected: ino 0 off 30666752 (dev /dev/loop3 sector 76280) [ 119.947791][ T4955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.981508][ T4925] BTRFS info (device loop3): enabling ssd optimizations [ 120.144632][ T4268] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 120.287867][ T4971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.196'. [ 120.499662][ T4981] loop2: detected capacity change from 0 to 128 [ 120.571266][ T4981] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.635211][ T4981] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.716237][ T27] audit: type=1800 audit(1769779815.102:3): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.199" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 120.801469][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 120.860380][ T4632] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.970394][ T4256] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.049552][ T4998] netlink: 228 bytes leftover after parsing attributes in process `syz.3.205'. [ 121.090389][ T4632] usb 2-1: Using ep0 maxpacket: 32 [ 121.097889][ T4632] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 121.136418][ T4632] usb 2-1: config 0 has no interface number 0 [ 121.163151][ T4256] usb 1-1: Using ep0 maxpacket: 16 [ 121.177413][ T4632] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.190051][ T4256] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 121.235437][ T4632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.243734][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.260421][ T4632] usb 2-1: Product: syz [ 121.264824][ T4256] usb 1-1: Product: syz [ 121.269076][ T4256] usb 1-1: Manufacturer: syz [ 121.274128][ T4632] usb 2-1: Manufacturer: syz [ 121.279016][ T4632] usb 2-1: SerialNumber: syz [ 121.283842][ T4256] usb 1-1: SerialNumber: syz [ 121.301423][ T4256] r8152-cfgselector 1-1: config 0 descriptor?? [ 121.307926][ T4632] usb 2-1: config 0 descriptor?? [ 121.328474][ T4632] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.541282][ T4256] r8152-cfgselector 1-1: Unknown version 0x0000 [ 121.558595][ T4632] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 121.594060][ T4632] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 121.785435][ T4256] r8152-cfgselector 1-1: Unknown version 0x0000 [ 121.830611][ T4256] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 121.840922][ T4985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.901260][ T4985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.135690][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 122.149807][ T4256] usb 2-1: USB disconnect, device number 4 [ 122.180762][ T4256] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 122.231779][ T4256] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.271290][ T5002] loop2: detected capacity change from 0 to 32768 [ 122.283984][ T4256] quatech2 2-1:0.51: device disconnected [ 122.322756][ T5002] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.207 (5002) [ 122.370923][ T5002] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.450875][ T5002] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 122.490472][ T5002] BTRFS info (device loop2): turning off barriers [ 122.510669][ T5002] BTRFS info (device loop2): setting nodatasum [ 122.537248][ T5002] BTRFS info (device loop2): use zlib compression, level 3 [ 122.577404][ T5002] BTRFS info (device loop2): using free space tree [ 123.010370][ T4491] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.230544][ T4491] usb 5-1: Using ep0 maxpacket: 16 [ 123.242395][ T4491] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 123.284105][ T4491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.314154][ T4491] usb 5-1: Product: syz [ 123.326220][ T4491] usb 5-1: Manufacturer: syz [ 123.354702][ T4491] usb 5-1: SerialNumber: syz [ 123.378838][ T4491] usb 5-1: config 0 descriptor?? [ 123.410808][ T4491] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 123.437331][ T4272] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.623121][ T4491] gp8psk: usb in 128 operation failed. [ 123.642641][ T4491] gp8psk: usb in 137 operation failed. [ 123.648236][ T4491] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.701952][ T4491] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 123.756057][ T4491] usb 5-1: media controller created [ 123.879681][ T4261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4261) [ 123.920740][ T4491] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.986578][ T4491] gp8psk_fe: Frontend revision 1 attached [ 124.005586][ T4491] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 124.036678][ T4491] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 124.068779][ T5032] loop0: detected capacity change from 0 to 32768 [ 124.185864][ T5032] XFS (loop0): Mounting V5 Filesystem [ 124.210673][ T5048] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 124.251299][ T5032] XFS (loop0): Ending clean mount [ 124.273232][ T5032] XFS (loop0): Quotacheck needed: Please wait. [ 124.339238][ T5032] XFS (loop0): Quotacheck: Done. [ 124.377978][ T4491] gp8psk: usb in 137 operation failed. [ 124.386912][ T4491] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 124.417548][ T4491] gp8psk: found Genpix USB device pID = 201 (hex) [ 124.426092][ T5048] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 124.470589][ T4491] usb 5-1: USB disconnect, device number 4 [ 124.472056][ T5048] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 124.546047][ T5048] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.600328][ T5048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.649732][ T5051] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.665401][ T5051] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.685588][ T4491] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 124.769934][ T4269] XFS (loop0): Unmounting Filesystem [ 124.798260][ T5067] loop3: detected capacity change from 0 to 64 [ 125.098091][ T5048] usb 3-1: USB disconnect, device number 3 [ 125.519872][ T5075] loop3: detected capacity change from 0 to 2048 [ 125.566044][ T5079] loop4: detected capacity change from 0 to 512 [ 125.594505][ T5075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.618288][ T5080] loop0: detected capacity change from 0 to 2048 [ 125.645567][ T5080] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 125.669503][ T5079] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.709045][ T5080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.810426][ T5048] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.982388][ T5079] EXT4-fs (loop4): 1 truncate cleaned up [ 126.016173][ T75] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 126.040358][ T5079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.050165][ T5079] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.090561][ T5048] usb 2-1: Using ep0 maxpacket: 32 [ 126.104907][ T5048] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.119248][ T75] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 1 [ 126.142365][ T5048] usb 2-1: config 0 has no interface number 0 [ 126.156589][ T5088] loop2: detected capacity change from 0 to 128 [ 126.171438][ T5048] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.193615][ T5048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.224687][ T5048] usb 2-1: Product: syz [ 126.246274][ T5048] usb 2-1: Manufacturer: syz [ 126.265209][ T5048] usb 2-1: SerialNumber: syz [ 126.325185][ T5048] usb 2-1: config 0 descriptor?? [ 126.331970][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'. [ 126.364538][ T5048] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 126.572154][ T5048] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 126.589256][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 126.610794][ T5048] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 126.722049][ T5096] netlink: 52 bytes leftover after parsing attributes in process `syz.2.232'. [ 126.761266][ T5096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.232'. [ 126.804128][ T5100] loop4: detected capacity change from 0 to 256 [ 127.016336][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 127.030621][ T5048] usb 2-1: USB disconnect, device number 5 [ 127.056700][ T5048] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 127.096893][ T5048] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 127.140849][ T5048] quatech2 2-1:0.51: device disconnected [ 127.286471][ T5104] vcan0: tx address claim with dlc 0 [ 127.374018][ T5106] loop2: detected capacity change from 0 to 2048 [ 127.781935][ T5112] loop1: detected capacity change from 0 to 16 [ 127.895730][ T5112] erofs: (device loop1): mounted with root inode @ nid 36. [ 128.130720][ T4316] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.335346][ T4316] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 128.354965][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.385341][ T4316] usb 5-1: Product: syz [ 128.389665][ T4316] usb 5-1: Manufacturer: syz [ 128.433910][ T4316] usb 5-1: SerialNumber: syz [ 128.658439][ T4316] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 128.693758][ T4316] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 128.737756][ T4316] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 128.740824][ T4636] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.768549][ T4316] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 128.801433][ T4316] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 128.825239][ T4316] lan78xx: probe of 5-1:1.0 failed with error -71 [ 128.845078][ T4316] usb 5-1: USB disconnect, device number 5 [ 128.960578][ T4636] usb 1-1: Using ep0 maxpacket: 8 [ 128.973584][ T4636] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 128.992138][ T4636] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.027278][ T4636] pvrusb2: Hardware description: Terratec Grabster AV400 [ 129.050225][ T4636] pvrusb2: ********** [ 129.056718][ T4636] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 129.072405][ T4636] pvrusb2: Important functionality might not be entirely working. [ 129.083213][ T4636] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 129.095301][ T4636] pvrusb2: ********** [ 129.121037][ T5126] loop3: detected capacity change from 0 to 32768 [ 129.219723][ T5126] XFS (loop3): Mounting V5 Filesystem [ 129.241137][ T2309] pvrusb2: Invalid write control endpoint [ 129.327114][ T5126] XFS (loop3): Ending clean mount [ 129.354217][ T2309] pvrusb2: Invalid write control endpoint [ 129.360934][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 129.371706][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 129.379406][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 129.392952][ T2309] pvrusb2: Device being rendered inoperable [ 129.416406][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 129.438304][ T5126] XFS (loop3): Quotacheck needed: Please wait. [ 129.445022][ T5047] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.472726][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 129.485424][ T5131] pvrusb2: Attempted to execute control transfer when device not ok [ 129.546681][ T5126] XFS (loop3): Quotacheck: Done. [ 129.555154][ T2309] pvrusb2: Attached sub-driver cx25840 [ 129.585177][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 129.595597][ T4315] usb 1-1: USB disconnect, device number 4 [ 129.632702][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 129.642850][ T5047] usb 3-1: Using ep0 maxpacket: 32 [ 129.653349][ T5047] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.715112][ T5047] usb 3-1: config 0 has no interface number 0 [ 129.752909][ T5047] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.800314][ T5047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.828874][ T5047] usb 3-1: Product: syz [ 129.836745][ T5047] usb 3-1: Manufacturer: syz [ 129.851928][ T5047] usb 3-1: SerialNumber: syz [ 129.878190][ T5047] usb 3-1: config 0 descriptor?? [ 129.883567][ T4268] XFS (loop3): Unmounting Filesystem [ 129.907022][ T5047] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 130.113332][ T5047] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 130.151944][ T5047] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 130.532926][ T5167] mmap: syz.4.263 (5167) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.565460][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 130.574649][ T5048] usb 3-1: USB disconnect, device number 4 [ 130.593842][ T5048] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 130.646581][ T5048] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 130.705572][ T5048] quatech2 3-1:0.51: device disconnected [ 130.946805][ T5159] loop1: detected capacity change from 0 to 32768 [ 131.026173][ T5159] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 131.273856][ T5159] (syz.1.259,5159,0):ocfs2_rename:1282 ERROR: status = -2 [ 131.333148][ T5185] capability: warning: `syz.2.269' uses 32-bit capabilities (legacy support in use) [ 131.370900][ T5159] (syz.1.259,5159,0):ocfs2_rename:1687 ERROR: status = -2 [ 131.395407][ T5185] program syz.2.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.579923][ T4267] ocfs2: Unmounting device (7,1) on (node local) [ 131.682593][ T5192] netlink: 'syz.2.274': attribute type 6 has an invalid length. [ 131.704256][ T5195] loop0: detected capacity change from 0 to 128 [ 131.808594][ T5195] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.864158][ T5195] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.972193][ T5204] loop2: detected capacity change from 0 to 256 [ 131.992559][ T5195] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 132.086250][ T5204] FAT-fs (loop2): Directory bread(block 64) failed [ 132.124585][ T5204] FAT-fs (loop2): Directory bread(block 65) failed [ 132.151735][ T5204] FAT-fs (loop2): Directory bread(block 66) failed [ 132.158377][ T5204] FAT-fs (loop2): Directory bread(block 67) failed [ 132.170342][ T4491] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.205937][ T5204] FAT-fs (loop2): Directory bread(block 68) failed [ 132.214380][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 132.236770][ T5204] FAT-fs (loop2): Directory bread(block 69) failed [ 132.277435][ T5204] FAT-fs (loop2): Directory bread(block 70) failed [ 132.297474][ T5206] loop1: detected capacity change from 0 to 512 [ 132.319391][ T5204] FAT-fs (loop2): Directory bread(block 71) failed [ 132.339686][ T5204] FAT-fs (loop2): Directory bread(block 72) failed [ 132.360414][ T5204] FAT-fs (loop2): Directory bread(block 73) failed [ 132.380415][ T4491] usb 5-1: Using ep0 maxpacket: 8 [ 132.394544][ T4491] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 132.436848][ T4491] usb 5-1: config 179 has no interface number 0 [ 132.450664][ T5206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.470081][ T4491] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 132.489156][ T5206] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.533794][ T4491] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 132.565899][ T5206] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 132.586198][ T5206] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 132.626273][ T4491] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.626560][ T5212] loop0: detected capacity change from 0 to 512 [ 132.650780][ T5206] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.278: Failed to acquire dquot type 0 [ 132.676258][ T4491] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 132.700656][ T5213] Quota error (device loop1): do_check_range: Getting block 67108864 out of range 0-8 [ 132.710860][ T4491] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 132.826166][ T5212] EXT4-fs (loop0): 1 orphan inode deleted [ 132.838627][ T4491] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 132.848481][ T5212] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.867282][ T5212] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.880724][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887699][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.911779][ T4491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.939844][ T5200] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.948035][ T41] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.979773][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:2: Failed to release dquot type 1 [ 133.008850][ T27] audit: type=1800 audit(1769779827.392:4): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.280" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 133.089081][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 133.213949][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 133.271320][ T5200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.305353][ T5225] program syz.1.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.330748][ T5200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.616193][ T4491] usb 5-1: USB disconnect, device number 6 [ 133.622255][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 133.630692][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 133.946593][ T5245] loop1: detected capacity change from 0 to 128 [ 133.989440][ T5245] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 134.030356][ T4507] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.049413][ T5245] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.191666][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 134.227469][ T4507] usb 3-1: Using ep0 maxpacket: 32 [ 134.235679][ T4507] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.291147][ T4507] usb 3-1: config 0 has no interface number 0 [ 134.322700][ T4507] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 134.349429][ T4507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.368367][ T4507] usb 3-1: Product: syz [ 134.372784][ T4507] usb 3-1: Manufacturer: syz [ 134.377523][ T4507] usb 3-1: SerialNumber: syz [ 134.403272][ T4507] usb 3-1: config 0 descriptor?? [ 134.434897][ T4507] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 134.463708][ T4507] usb 3-1: selecting invalid altsetting 1 [ 134.465529][ T5249] loop0: detected capacity change from 0 to 4096 [ 134.489996][ T4507] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 134.519118][ T5249] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 134.547733][ T4507] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.601302][ T4507] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 134.644769][ T4507] usb 3-1: media controller created [ 134.685046][ T5249] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 134.731895][ T4507] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.808694][ T5259] loop4: detected capacity change from 0 to 512 [ 134.859955][ T5259] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.872146][ T4507] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 134.910091][ T4507] zl10353_read_register: readreg error (reg=127, ret==-71) [ 134.920197][ T27] audit: type=1800 audit(1769779829.302:5): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.295" name="file0" dev="loop0" ino=0 res=0 errno=0 [ 134.935431][ T4507] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 134.989405][ T5259] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.019409][ T5259] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.299: bg 0: block 248: padding at end of block bitmap is not set [ 135.107296][ T4507] usb 3-1: USB disconnect, device number 5 [ 135.118351][ T5259] Quota error (device loop4): write_blk: dquota write failed [ 135.132052][ T5259] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 135.142694][ T5259] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.299: Failed to acquire dquot type 1 [ 135.220563][ T5259] EXT4-fs (loop4): 1 truncate cleaned up [ 135.239179][ T5259] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.315846][ T5259] EXT4-fs (loop4): shut down requested (0) [ 135.369529][ T5266] loop1: detected capacity change from 0 to 4096 [ 135.479748][ T5266] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 135.495308][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 135.731736][ T5271] loop0: detected capacity change from 0 to 256 [ 135.777569][ T5271] exfat: Deprecated parameter 'utf8' [ 135.842007][ T5271] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 135.994959][ T5280] loop2: detected capacity change from 0 to 512 [ 136.009145][ T41] ntfs3: loop1: ntfs3_write_inode r=9 failed, -22. [ 136.066138][ T4267] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 136.079108][ T4267] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 136.096761][ T5280] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.308: inode has both inline data and extents flags [ 136.212983][ T5280] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.308: couldn't read orphan inode 15 (err -117) [ 136.291239][ T5280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.367349][ T5291] loop0: detected capacity change from 0 to 256 [ 136.488381][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 136.724757][ T5295] loop2: detected capacity change from 0 to 1024 [ 136.778402][ T5295] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.801743][ T5295] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.823012][ T5295] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 136.840827][ T5295] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 136.886893][ T5300] loop0: detected capacity change from 0 to 512 [ 136.895715][ T5295] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 136.936234][ T5300] EXT4-fs (loop0): 1 truncate cleaned up [ 136.948766][ T5295] EXT4-fs (loop2): 1 truncate cleaned up [ 136.955085][ T5300] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.960750][ T5295] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.192441][ T5308] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 137.222199][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 137.230826][ T5308] syzkaller0: linktype set to 769 [ 137.318120][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 137.554588][ T5314] loop0: detected capacity change from 0 to 4096 [ 137.570415][ T5314] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 137.672714][ T5320] MPI: mpi too large (16392 bits) [ 137.687482][ T5314] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 137.829081][ T46] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 137.886221][ T4269] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 137.905486][ T4269] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 137.946468][ T4269] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 137.967539][ T4299] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 137.998297][ T4269] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 138.029898][ T4269] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 138.108897][ T5324] loop2: detected capacity change from 0 to 8192 [ 138.167218][ T5324] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 138.210600][ T4507] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.245947][ T5324] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 138.263482][ T5324] REISERFS (device loop2): using ordered data mode [ 138.270228][ T5324] reiserfs: using flush barriers [ 138.284370][ T5324] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.301554][ T5324] REISERFS (device loop2): checking transaction log (loop2) [ 138.412224][ T4507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.449887][ T4507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.479167][ T4507] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 138.499680][ T4507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.512294][ T5324] REISERFS (device loop2): Using tea hash to sort names [ 138.545463][ T5324] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 138.564250][ T4507] usb 5-1: config 0 descriptor?? [ 138.576488][ T5342] netlink: 'syz.0.333': attribute type 2 has an invalid length. [ 138.952892][ T5350] netlink: 340 bytes leftover after parsing attributes in process `syz.3.337'. [ 138.998033][ T4507] cypress 0003:04B4:DE61.0004: unknown main item tag 0x5 [ 139.040635][ T4507] cypress 0003:04B4:DE61.0004: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 139.242605][ T4316] usb 5-1: USB disconnect, device number 7 [ 139.477601][ T5362] loop1: detected capacity change from 0 to 256 [ 139.507479][ T5357] fido_id[5357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 139.543751][ T5359] loop2: detected capacity change from 0 to 4096 [ 139.564524][ T5366] loop0: detected capacity change from 0 to 1024 [ 139.587585][ T5359] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 139.605290][ T5362] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 139.658610][ T5366] EXT4-fs: Ignoring removed bh option [ 139.705528][ T5366] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.766199][ T27] audit: type=1800 audit(1769779834.152:6): pid=5359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.338" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 139.802455][ T5366] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e018, mo2=0080] [ 139.902400][ T5366] System zones: 0-1, 3-12 [ 139.967506][ T5366] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #3: block 1: comm syz.0.342: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.967571][ T5372] overlayfs: upper fs does not support file handles, falling back to index=off. [ 140.016039][ T5372] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 140.045287][ T5366] Quota error (device loop0): write_blk: dquota write failed [ 140.085285][ T5366] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 140.147831][ T5366] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.342: Failed to acquire dquot type 0 [ 140.187098][ T5366] EXT4-fs error (device loop0): ext4_free_blocks:6221: comm syz.0.342: Freeing blocks not in datazone - block = 0, count = 4096 [ 140.217255][ T5366] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.342: Invalid inode bitmap blk 0 in block_group 0 [ 140.250467][ T9] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.254426][ T5366] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 140.348835][ T9] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 140.376136][ T5366] EXT4-fs (loop0): 1 orphan inode deleted [ 140.396389][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:0: Failed to release dquot type 0 [ 140.425421][ T5366] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 140.585648][ T5366] EXT4-fs (loop0): unmounting filesystem. [ 140.621576][ T5387] program syz.3.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.008477][ T5401] loop2: detected capacity change from 0 to 256 [ 141.265040][ T5406] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 141.357255][ T5412] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 141.396787][ T5412] netlink: 'syz.3.357': attribute type 2 has an invalid length. [ 142.029027][ T5394] loop4: detected capacity change from 0 to 32768 [ 142.191329][ T5394] XFS (loop4): Mounting V5 Filesystem [ 142.398698][ T5394] XFS (loop4): Ending clean mount [ 142.405700][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.443117][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 142.445582][ T5394] XFS (loop4): Quotacheck needed: Please wait. [ 142.580694][ T5394] XFS (loop4): Quotacheck: Done. [ 142.892956][ T4282] XFS (loop4): Unmounting Filesystem [ 143.656369][ T5444] loop3: detected capacity change from 0 to 32768 [ 143.718903][ T5444] XFS: noikeep mount option is deprecated. [ 143.859968][ T5452] loop0: detected capacity change from 0 to 32768 [ 144.048095][ T5458] syz.2.371 (5458): drop_caches: 2 [ 144.105602][ T5452] XFS (loop0): Mounting V5 Filesystem [ 144.126200][ T5444] XFS (loop3): Mounting V5 Filesystem [ 144.140404][ T4491] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.245990][ T5452] XFS (loop0): Ending clean mount [ 144.317863][ T5452] XFS (loop0): Quotacheck needed: Please wait. [ 144.319090][ T5444] XFS (loop3): Ending clean mount [ 144.355970][ T4491] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.367661][ T5444] XFS (loop3): Quotacheck needed: Please wait. [ 144.380763][ T4491] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 144.388442][ T4491] usb 2-1: can't read configurations, error -71 [ 144.482460][ T5444] XFS (loop3): Quotacheck: Done. [ 144.534641][ T5452] XFS (loop0): Quotacheck: Done. [ 144.730743][ T4269] XFS (loop0): Unmounting Filesystem [ 144.764571][ T4268] XFS (loop3): Unmounting Filesystem [ 145.265670][ T5509] netlink: 44 bytes leftover after parsing attributes in process `syz.2.384'. [ 145.959689][ T5527] loop3: detected capacity change from 0 to 512 [ 145.972114][ T5527] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 146.155128][ T5530] netlink: 64 bytes leftover after parsing attributes in process `syz.2.391'. [ 146.195295][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 146.236745][ T75] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 146.338124][ T5532] netlink: set zone limit has 4 unknown bytes [ 146.704936][ T5547] loop3: detected capacity change from 0 to 64 [ 146.785359][ T5547] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 147.510720][ T5048] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.700381][ T5048] usb 1-1: Using ep0 maxpacket: 16 [ 147.707643][ T5048] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 147.727331][ T5048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.758569][ T5048] usb 1-1: config 0 descriptor?? [ 147.800009][ T5048] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 147.864669][ T5578] loop3: detected capacity change from 0 to 512 [ 147.907950][ T5578] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.413: inode #1: comm syz.3.413: iget: illegal inode # [ 147.927289][ T5578] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.413: error while reading EA inode 1 err=-117 [ 147.941789][ T5578] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 147.955467][ T5578] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.413: inode #1: comm syz.3.413: iget: illegal inode # [ 147.972937][ T5578] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.413: error while reading EA inode 1 err=-117 [ 147.986662][ T5578] EXT4-fs (loop3): 1 orphan inode deleted [ 147.992738][ T5578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.067312][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 148.427861][ T5588] o2cb: This node has not been configured. [ 148.454513][ T5588] o2cb: Cluster check failed. Fix errors before retrying. [ 148.466507][ T4507] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.481629][ T5588] (syz.4.417,5588,1):user_dlm_register:674 ERROR: status = -22 [ 148.497682][ T5588] (syz.4.417,5588,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 148.625590][ T5048] gspca_sonixj: reg_r err -71 [ 148.630613][ T5048] sonixj: probe of 1-1:0.0 failed with error -71 [ 148.655791][ T5048] usb 1-1: USB disconnect, device number 5 [ 148.670505][ T4507] usb 4-1: Using ep0 maxpacket: 8 [ 148.682478][ T4507] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 148.723417][ T4507] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 148.753120][ T4507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.793697][ T4507] usb 4-1: Product: syz [ 148.797961][ T4507] usb 4-1: Manufacturer: syz [ 148.830657][ T4507] usb 4-1: SerialNumber: syz [ 148.851836][ T4507] usb 4-1: config 0 descriptor?? [ 148.876799][ T4507] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 148.900422][ T4507] usb 4-1: setting power ON [ 148.905683][ T4507] dvb-usb: bulk message failed: -22 (2/0) [ 148.923712][ T5596] loop4: detected capacity change from 0 to 4096 [ 148.947101][ T5596] EXT4-fs: Ignoring removed bh option [ 148.979157][ T4507] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.026152][ T4507] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 149.045393][ T4507] usb 4-1: media controller created [ 149.084704][ T5584] dvb-usb: bulk message failed: -22 (3/0) [ 149.114487][ T5584] dvb-usb: bulk message failed: -22 (3/0) [ 149.143449][ T4507] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.171423][ T5608] cxusb: i2c rd: len=159 is too big! [ 149.171423][ T5608] [ 149.238244][ T4507] usb 4-1: selecting invalid altsetting 6 [ 149.255225][ T4507] usb 4-1: digital interface selection failed (-22) [ 149.281939][ T4507] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 149.318580][ T4507] usb 4-1: setting power OFF [ 149.337981][ T4507] dvb-usb: bulk message failed: -22 (2/0) [ 149.361540][ T4507] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 149.393552][ T4507] (NULL device *): no alternate interface [ 149.469459][ T4507] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 149.494845][ T5596] EXT4-fs (loop4): Test dummy encryption mode enabled [ 149.558200][ T5596] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 149.561301][ T4507] usb 4-1: USB disconnect, device number 3 [ 149.580486][ T5596] System zones: 0-5 [ 149.627843][ T5596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 149.898181][ T5622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.906383][ T5622] IPv6: NLM_F_CREATE should be set when creating new route [ 149.913859][ T5622] IPv6: NLM_F_CREATE should be set when creating new route [ 149.921244][ T5622] IPv6: NLM_F_CREATE should be set when creating new route [ 150.045053][ T5624] loop1: detected capacity change from 0 to 256 [ 150.091501][ T5622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.260859][ T5596] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 150.467460][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 150.482730][ T5639] loop0: detected capacity change from 0 to 1024 [ 150.677990][ T5644] tunl0: Caught tx_queue_len zero misconfig [ 150.709762][ T46] hfsplus: bad catalog file entry [ 150.723433][ T46] hfsplus: b-tree write err: -5, ino 3 [ 151.001507][ T5650] netlink: 'syz.3.440': attribute type 3 has an invalid length. [ 151.284516][ T5642] loop2: detected capacity change from 0 to 32768 [ 151.320383][ T4507] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 151.390912][ T5642] XFS (loop2): Mounting V5 Filesystem [ 151.487450][ T5642] XFS (loop2): Ending clean mount [ 151.540492][ T4507] usb 5-1: Using ep0 maxpacket: 32 [ 151.548503][ T4507] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.580910][ T4507] usb 5-1: config 0 has no interface number 0 [ 151.609353][ T4507] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.627062][ T5676] loop1: detected capacity change from 0 to 1024 [ 151.642475][ T4507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.664481][ T4507] usb 5-1: Product: syz [ 151.668858][ T4507] usb 5-1: Manufacturer: syz [ 151.711420][ T4507] usb 5-1: SerialNumber: syz [ 151.729005][ T5676] hfsplus: keylen 65060 too large [ 151.744506][ T4507] usb 5-1: config 0 descriptor?? [ 151.750836][ T5676] hfsplus: xattr search failed [ 151.775459][ T4507] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 151.821663][ T4272] XFS (loop2): Unmounting Filesystem [ 151.983836][ T4507] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 152.041028][ T4507] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 152.252564][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 152.290687][ T5685] device bridge0 entered promiscuous mode [ 152.297469][ T5685] device macvlan2 entered promiscuous mode [ 152.457803][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 152.468770][ T4507] usb 5-1: USB disconnect, device number 8 [ 152.498901][ T4507] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 152.551032][ T4507] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 152.608553][ T4507] quatech2 5-1:0.51: device disconnected [ 152.620322][ T5696] device dummy0 entered promiscuous mode [ 152.626311][ T5696] device macvlan3 entered promiscuous mode [ 152.656765][ T5698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 153.017963][ T5710] loop0: detected capacity change from 0 to 128 [ 153.054303][ T5710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.071692][ T5710] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.145692][ T27] audit: type=1800 audit(1769779847.532:7): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.461" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 153.205668][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 153.541949][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 153.635712][ T5703] loop3: detected capacity change from 0 to 32768 [ 153.669713][ T5703] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.459 (5703) [ 153.720099][ T5703] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 153.741615][ T5703] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 153.754199][ T5703] BTRFS info (device loop3): force zlib compression, level 3 [ 153.764025][ T5703] BTRFS info (device loop3): turning on flush-on-commit [ 153.771267][ T4507] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.777123][ T5703] BTRFS info (device loop3): max_inline at 4096 [ 153.785705][ T5703] BTRFS info (device loop3): using free space tree [ 153.915112][ T5703] BTRFS info (device loop3): enabling ssd optimizations [ 153.975232][ T4507] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.996472][ T4507] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 154.024525][ T4507] usb 5-1: can't read configurations, error -71 [ 154.090085][ T5703] BTRFS info (device loop3): balance: start -d -m [ 154.146561][ T5703] BTRFS info (device loop3): balance: paused [ 154.209183][ T5752] loop2: detected capacity change from 0 to 2048 [ 154.272245][ T5752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.328378][ T4268] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 154.764519][ T5756] loop4: detected capacity change from 0 to 256 [ 154.823691][ T5756] exfat: Deprecated parameter 'namecase' [ 154.864658][ T5756] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 155.112675][ T5763] io-wq is not configured for unbound workers [ 155.148396][ T5761] loop0: detected capacity change from 0 to 4096 [ 155.258848][ T5761] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 155.329130][ T5761] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 155.456250][ T5768] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.474332][ T5770] loop4: detected capacity change from 0 to 256 [ 155.613987][ T5770] FAT-fs (loop4): Directory bread(block 64) failed [ 155.650475][ T5770] FAT-fs (loop4): Directory bread(block 65) failed [ 155.657256][ T5770] FAT-fs (loop4): Directory bread(block 66) failed [ 155.746048][ T5770] FAT-fs (loop4): Directory bread(block 67) failed [ 155.764610][ T5774] loop2: detected capacity change from 0 to 64 [ 155.790510][ T5770] FAT-fs (loop4): Directory bread(block 68) failed [ 155.797169][ T5770] FAT-fs (loop4): Directory bread(block 69) failed [ 155.832338][ T5770] FAT-fs (loop4): Directory bread(block 70) failed [ 155.838993][ T5770] FAT-fs (loop4): Directory bread(block 71) failed [ 155.879612][ T5770] FAT-fs (loop4): Directory bread(block 72) failed [ 155.916069][ T5770] FAT-fs (loop4): Directory bread(block 73) failed [ 156.270346][ T4507] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.454529][ T5772] loop1: detected capacity change from 0 to 32768 [ 156.477279][ T4507] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 156.498165][ T4507] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 156.517013][ T4507] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.542061][ T5772] [ 156.542061][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 156.542061][ T5772] [ 156.561445][ T4507] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 156.589378][ T4507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.611588][ T4507] usb 1-1: Product: syz [ 156.615903][ T4507] usb 1-1: Manufacturer: syz [ 156.634742][ T5782] loop4: detected capacity change from 0 to 4096 [ 156.641896][ T4507] usb 1-1: SerialNumber: syz [ 156.647549][ T27] audit: type=1800 audit(1769779851.032:8): pid=5772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.481" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 156.687246][ T4507] hub 1-1:1.0: bad descriptor, ignoring hub [ 156.708830][ T4507] hub: probe of 1-1:1.0 failed with error -5 [ 156.745184][ T5785] ERROR: (device loop1): diWrite: ixpxd invalid [ 156.745184][ T5785] [ 156.797781][ T5782] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 156.896591][ T4507] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 156.912459][ T5785] ERROR: (device loop1): txCommit: [ 156.912459][ T5785] [ 157.025122][ T5785] ERROR: (device loop1): diFree: invalid inoext [ 157.025122][ T5785] [ 157.228070][ T5772] JFS: metapage_get_blocks failed [ 157.274253][ T5772] [ 157.274253][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.274253][ T5772] [ 157.305904][ T5772] [ 157.305904][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.305904][ T5772] [ 157.348480][ T5772] [ 157.348480][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.348480][ T5772] [ 157.372119][ T5047] usb 1-1: USB disconnect, device number 6 [ 157.399417][ T5047] usblp0: removed [ 157.403991][ T5772] [ 157.403991][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.403991][ T5772] [ 157.442698][ T5772] [ 157.442698][ T5772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.442698][ T5772] [ 157.465177][ T5784] loop2: detected capacity change from 0 to 32768 [ 157.510043][ T4297] ERROR: (device loop1): diWrite: ixpxd invalid [ 157.510043][ T4297] [ 157.526304][ T4297] ERROR: (device loop1): txCommit: [ 157.526304][ T4297] [ 157.534641][ T4297] jfs_write_inode: jfs_commit_inode failed! [ 157.541793][ T4267] [ 157.541793][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.541793][ T4267] [ 157.554923][ T4267] [ 157.554923][ T4267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 157.554923][ T4267] [ 157.569068][ T5784] XFS (loop2): Mounting V5 Filesystem [ 157.663339][ T5784] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 157.729371][ T5784] XFS (loop2): Starting recovery (logdev: internal) [ 157.784810][ T5784] XFS (loop2): Ending recovery (logdev: internal) [ 157.806828][ T5784] XFS (loop2): Quotacheck needed: Please wait. [ 157.903232][ T5784] XFS (loop2): Quotacheck: Done. [ 158.109478][ T5810] loop9: detected capacity change from 0 to 7 [ 158.138247][ T4272] XFS (loop2): Unmounting Filesystem [ 158.172281][ T5810] Dev loop9: unable to read RDB block 7 [ 158.246807][ T5810] loop9: unable to read partition table [ 158.259282][ T5810] loop9: partition table beyond EOD, truncated [ 158.282420][ T5810] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 158.719770][ T5819] loop0: detected capacity change from 0 to 8192 [ 158.757128][ T5819] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 158.770699][ T5819] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 158.825638][ T5819] REISERFS (device loop0): using ordered data mode [ 158.826958][ T5827] loop2: detected capacity change from 0 to 1024 [ 158.886556][ T5819] reiserfs: using flush barriers [ 158.935671][ T5819] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 158.998641][ T5819] REISERFS (device loop0): checking transaction log (loop0) [ 159.043249][ T5819] REISERFS (device loop0): Using r5 hash to sort names [ 159.070762][ T5819] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 159.197652][ T5831] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.280370][ T4636] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.431379][ T5818] loop4: detected capacity change from 0 to 32768 [ 159.478509][ T4636] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 159.503968][ T4636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.546177][ T4400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.548955][ T4636] usb 4-1: Product: syz [ 159.573345][ T4400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.607009][ T4400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.622117][ T4636] usb 4-1: Manufacturer: syz [ 159.626807][ T4636] usb 4-1: SerialNumber: syz [ 159.658544][ T4400] rtc_cmos 00:00: Alarms can be up to one day in the future [ 159.716681][ T4400] rtc rtc0: __rtc_set_alarm: err=-22 [ 159.848487][ T5844] loop2: detected capacity change from 0 to 2048 [ 159.932035][ T5843] loop1: detected capacity change from 0 to 4096 [ 159.956846][ T5844] loop2: p1 < > p3 [ 159.967392][ T5844] loop2: p3 size 134217728 extends beyond EOD, truncated [ 160.020924][ T5847] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.067127][ T27] audit: type=1800 audit(1769779854.452:9): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.506" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 160.230525][ T5047] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 160.319758][ T4636] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 160.450491][ T5047] usb 5-1: Using ep0 maxpacket: 32 [ 160.473460][ T5047] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.537724][ T4636] usb 4-1: USB disconnect, device number 4 [ 160.546306][ T5047] usb 5-1: config 3 has an invalid interface number: 38 but max is 0 [ 160.586214][ T5047] usb 5-1: config 3 has no interface number 0 [ 160.616261][ T5047] usb 5-1: config 3 interface 38 has no altsetting 0 [ 160.649717][ T5047] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=ed.35 [ 160.687100][ T5047] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.727595][ T5047] usb 5-1: Product: syz [ 160.743594][ T5047] usb 5-1: Manufacturer: syz [ 160.768844][ T5047] usb 5-1: SerialNumber: syz [ 161.017336][ T5862] Illegal XDP return value 4294967294 on prog (id 27) dev N/A, expect packet loss! [ 161.030968][ T5047] usb 5-1: Invalid firmware size=18. [ 161.064272][ T5047] usb 5-1: USB disconnect, device number 11 [ 161.446879][ T5851] loop0: detected capacity change from 0 to 32768 [ 161.464611][ T5851] XFS: noikeep mount option is deprecated. [ 161.500463][ T5851] XFS: ikeep mount option is deprecated. [ 161.550351][ T4507] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 161.616528][ T5851] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 161.638714][ T5851] XFS (loop0): Mounting V5 Filesystem [ 161.752325][ T4507] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.774456][ T4507] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.821513][ T4507] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.837859][ T5851] XFS (loop0): Ending clean mount [ 161.861436][ T4507] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.869538][ T4507] usb 3-1: SerialNumber: syz [ 161.949055][ T5851] XFS (loop0): Quotacheck needed: Please wait. [ 161.957539][ T5896] loop1: detected capacity change from 0 to 8 [ 161.969859][ T5887] loop3: detected capacity change from 0 to 8192 [ 162.062399][ T5851] XFS (loop0): Quotacheck: Done. [ 162.072472][ T5887] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 162.096721][ T5896] SQUASHFS error: Unable to read directory block [249:c] [ 162.140423][ T5887] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 162.191895][ T4507] usb 3-1: 0:2 : does not exist [ 162.200626][ T5887] REISERFS (device loop3): using journaled data mode [ 162.207397][ T5887] reiserfs: using flush barriers [ 162.272948][ T4507] usb 3-1: 5:0: cannot get min/max values for control 1 (id 5) [ 162.319394][ T4507] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 162.354641][ T4507] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 162.366171][ T5887] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.400680][ T4507] usb 3-1: unit 1 not found! [ 162.443001][ T4507] usb 3-1: 5:0: cannot get min/max values for control 7 (id 5) [ 162.457706][ T5887] REISERFS (device loop3): checking transaction log (loop3) [ 162.509421][ T4269] XFS (loop0): Unmounting Filesystem [ 162.523027][ T5887] REISERFS (device loop3): Using r5 hash to sort names [ 162.537557][ T4507] usb 3-1: USB disconnect, device number 6 [ 162.560896][ T5887] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 162.636528][ T5887] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 162.815154][ T27] audit: type=1326 audit(1769779857.202:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.1.526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a4df9aeb9 code=0x0 [ 162.847846][ T5069] udevd[5069]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.885421][ T5905] loop4: detected capacity change from 0 to 32768 [ 164.114274][ T5905] XFS (loop4): Mounting V5 Filesystem [ 164.297660][ T5905] XFS (loop4): Ending clean mount [ 164.317506][ T5905] XFS (loop4): Quotacheck needed: Please wait. [ 164.468247][ T5905] XFS (loop4): Quotacheck: Done. [ 164.658520][ T4282] XFS (loop4): Unmounting Filesystem [ 164.678903][ T5918] loop2: detected capacity change from 0 to 32768 [ 165.067791][ T5918] XFS (loop2): Mounting V5 Filesystem [ 165.356846][ T5918] XFS (loop2): Ending clean mount [ 165.389665][ T5918] XFS (loop2): Quotacheck needed: Please wait. [ 165.564742][ T5918] XFS (loop2): Quotacheck: Done. [ 165.628886][ T5982] loop1: detected capacity change from 0 to 1024 [ 165.662313][ T5982] EXT4-fs: inline encryption not supported [ 165.717110][ T5982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.864124][ T4272] XFS (loop2): Unmounting Filesystem [ 165.922608][ T5982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 165.965972][ T27] audit: type=1800 audit(1769779860.352:11): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.546" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 165.999165][ T5982] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3852: comm syz.1.546: Allocating blocks 497-513 which overlap fs metadata [ 166.110616][ T5982] EXT4-fs (loop1): Remounting filesystem read-only [ 166.216285][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 166.388117][ T5966] loop3: detected capacity change from 0 to 32768 [ 166.448222][ T5966] XFS: attr2 mount option is deprecated. [ 166.543847][ T5966] XFS (loop3): Mounting V5 Filesystem [ 166.624791][ T5966] XFS (loop3): Ending clean mount [ 166.643136][ T5966] XFS (loop3): Quotacheck needed: Please wait. [ 166.739775][ T5980] loop4: detected capacity change from 0 to 32768 [ 166.785166][ T5980] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 166.804770][ T5966] XFS (loop3): Quotacheck: Done. [ 167.000185][ T6006] loop2: detected capacity change from 0 to 256 [ 167.092183][ T6006] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.115460][ T4268] XFS (loop3): Unmounting Filesystem [ 167.131407][ T6006] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 167.204696][ T6006] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 167.225223][ T4261] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 168.314129][ T6030] loop3: detected capacity change from 0 to 256 [ 168.429186][ T6030] FAT-fs (loop3): Directory bread(block 64) failed [ 168.457208][ T6030] FAT-fs (loop3): Directory bread(block 65) failed [ 168.488691][ T6030] FAT-fs (loop3): Directory bread(block 66) failed [ 168.522506][ T6030] FAT-fs (loop3): Directory bread(block 67) failed [ 168.535167][ T6030] FAT-fs (loop3): Directory bread(block 68) failed [ 168.563179][ T6030] FAT-fs (loop3): Directory bread(block 69) failed [ 168.582528][ T6030] FAT-fs (loop3): Directory bread(block 70) failed [ 168.608794][ T6030] FAT-fs (loop3): Directory bread(block 71) failed [ 168.623597][ T6030] FAT-fs (loop3): Directory bread(block 72) failed [ 168.680705][ T6030] FAT-fs (loop3): Directory bread(block 73) failed [ 168.750365][ T4636] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 168.949368][ T4636] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.994619][ T4636] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 169.008606][ T4636] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 169.024280][ T4636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.065981][ T4636] usb 3-1: config 0 descriptor?? [ 169.086250][ T4636] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 169.131711][ T4636] dvb-usb: bulk message failed: -22 (3/0) [ 169.196104][ T4636] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 169.229656][ T4636] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 169.237313][ T4636] usb 3-1: media controller created [ 169.257783][ T4636] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.272681][ T6044] loop3: detected capacity change from 0 to 4096 [ 169.398998][ T4636] dvb-usb: bulk message failed: -22 (6/0) [ 169.419964][ T4636] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 169.477068][ T4636] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 169.520698][ T4636] dvb-usb: schedule remote query interval to 150 msecs. [ 169.527738][ T4636] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 169.621125][ T6051] loop4: detected capacity change from 0 to 8192 [ 169.700760][ T6051] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 169.719120][ T4636] dvb-usb: bulk message failed: -22 (1/0) [ 169.803095][ T4636] dvb-usb: error while querying for an remote control event. [ 169.803960][ T6051] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 169.835559][ T6051] REISERFS (device loop4): using ordered data mode [ 169.843631][ T6051] reiserfs: using flush barriers [ 169.850035][ T6051] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 169.907220][ T6051] REISERFS (device loop4): checking transaction log (loop4) [ 170.022558][ T5047] dvb-usb: bulk message failed: -22 (1/0) [ 170.028526][ T5047] dvb-usb: error while querying for an remote control event. [ 170.064438][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.576'. [ 170.215965][ T5047] dvb-usb: bulk message failed: -22 (1/0) [ 170.224875][ T5047] dvb-usb: error while querying for an remote control event. [ 170.272677][ T6051] REISERFS (device loop4): Using tea hash to sort names [ 170.280044][ T6051] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 170.430376][ T5047] dvb-usb: bulk message failed: -22 (1/0) [ 170.436265][ T5047] dvb-usb: error while querying for an remote control event. [ 170.539512][ T4976] usb 3-1: USB disconnect, device number 7 [ 170.613411][ T4976] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 170.646120][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.681924][ T6071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.735870][ T6072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.774967][ T6072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.292869][ T6077] loop4: detected capacity change from 0 to 4096 [ 171.362342][ T6077] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 171.470703][ T6077] ntfs3: loop4: Failed to load $Extend. [ 171.658834][ T6085] loop3: detected capacity change from 0 to 128 [ 171.707639][ T6085] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 171.772347][ T6085] hpfs: filesystem error: improperly stopped [ 171.790542][ T6085] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 171.814226][ T6085] hpfs: You really don't want any checks? You are crazy... [ 171.850717][ T6085] hpfs: hpfs_map_sector(): read error [ 171.856282][ T6085] hpfs: code page support is disabled [ 171.886890][ T6089] loop4: detected capacity change from 0 to 736 [ 171.909619][ T6085] hpfs: hpfs_map_4sectors(): unaligned read [ 171.946684][ T6085] hpfs: hpfs_map_4sectors(): unaligned read [ 171.971702][ T6063] loop0: detected capacity change from 0 to 32768 [ 171.981634][ T6085] hpfs: filesystem error: unable to find root dir [ 172.096439][ T6085] hpfs: hpfs_map_sector(): read error [ 172.206951][ T6085] hpfs: hpfs_map_sector(): read error [ 172.230404][ T4281] Bluetooth: hci4: command 0x0411 tx timeout [ 172.374900][ T6100] loop1: detected capacity change from 0 to 512 [ 172.411190][ T6063] XFS (loop0): Mounting V5 Filesystem [ 172.432357][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 172.479415][ T6100] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 172.669808][ T6063] XFS (loop0): Ending clean mount [ 172.865694][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 172.900639][ T4976] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.969080][ T4269] XFS (loop0): Unmounting Filesystem [ 173.069571][ T6120] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.079536][ T6120] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.088662][ T6120] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.097536][ T6120] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.134751][ T4976] usb 4-1: Using ep0 maxpacket: 16 [ 173.146039][ T4976] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 173.176245][ T4976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.202261][ T4976] usb 4-1: Product: syz [ 173.214938][ T4976] usb 4-1: Manufacturer: syz [ 173.230189][ T4976] usb 4-1: SerialNumber: syz [ 173.452533][ T4976] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 173.505771][ T4976] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 173.539099][ T4976] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 173.599496][ T4976] usb 4-1: media controller created [ 173.636029][ T4976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.695450][ T4976] zl10353_read_register: readreg error (reg=127, ret==-71) [ 173.775047][ T4976] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 173.817558][ T4976] usb 4-1: USB disconnect, device number 5 [ 173.995309][ T6139] loop2: detected capacity change from 0 to 128 [ 174.044280][ T6139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.064410][ T6139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.095411][ T6139] EXT4-fs (loop2): Test dummy encryption mode enabled [ 174.167647][ T6139] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.220597][ T6139] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.356233][ T6149] loop4: detected capacity change from 0 to 128 [ 174.453016][ T6149] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 174.503870][ T6149] hpfs: filesystem error: improperly stopped [ 174.517726][ T6149] hpfs: You really don't want any checks? You are crazy... [ 174.539232][ T6149] hpfs: hpfs_map_sector(): read error [ 174.580449][ T6149] hpfs: code page support is disabled [ 174.610752][ T6149] hpfs: hpfs_map_4sectors(): unaligned read [ 174.616907][ T6149] hpfs: hpfs_map_4sectors(): unaligned read [ 174.648259][ T6149] hpfs: filesystem error: unable to find root dir [ 174.697189][ T6149] hpfs: hpfs_map_4sectors(): unaligned read [ 174.724956][ T6149] hpfs: hpfs_map_sector(): read error [ 174.956477][ T129] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 174.968787][ T6139] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 175.020043][ T6139] overlayfs: upper fs does not support tmpfile. [ 175.101941][ T6139] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 175.154253][ T6173] loop1: detected capacity change from 0 to 512 [ 175.170596][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 175.177773][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.240134][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.254684][ T6173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.296923][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.348863][ T129] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.365345][ T6173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.374441][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.385638][ T6173] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.394794][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 175.402129][ T129] usb 4-1: config 0 descriptor?? [ 175.662820][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 175.833009][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.862305][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.899300][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x2 [ 175.917625][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.940383][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.959971][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.977983][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 175.985727][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 176.000313][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 176.028500][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 176.036254][ T129] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 176.061787][ T129] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input11 [ 176.083250][ T129] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 176.133887][ T129] usb 4-1: USB disconnect, device number 6 [ 176.373976][ T6160] loop4: detected capacity change from 0 to 32768 [ 176.417760][ T6187] fido_id[6187]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 176.526668][ T6160] XFS (loop4): Mounting V5 Filesystem [ 176.574684][ T6190] loop2: detected capacity change from 0 to 8192 [ 176.591014][ T6190] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.606503][ T6190] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 176.617184][ T6190] REISERFS (device loop2): using ordered data mode [ 176.649621][ T6190] reiserfs: using flush barriers [ 176.649653][ T6160] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 176.687797][ T6190] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.754636][ T6160] XFS (loop4): Starting recovery (logdev: internal) [ 176.761957][ T6190] REISERFS (device loop2): checking transaction log (loop2) [ 176.833814][ T6160] XFS (loop4): Ending recovery (logdev: internal) [ 176.867305][ T6160] XFS (loop4): Quotacheck needed: Please wait. [ 177.000841][ T6160] XFS (loop4): Quotacheck: Done. [ 177.060432][ T4491] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 177.149639][ T6190] REISERFS (device loop2): Using tea hash to sort names [ 177.178000][ T6190] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 177.217917][ T4282] XFS (loop4): Unmounting Filesystem [ 177.286406][ T4491] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.305389][ T4491] usb 2-1: config 0 has no interface number 0 [ 177.339216][ T4491] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 177.390338][ T4491] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 177.425123][ T4491] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.448510][ T4491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.479983][ T4491] usb 2-1: config 0 descriptor?? [ 177.508702][ T6203] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.522487][ T4491] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 177.792960][ T5047] usb 2-1: USB disconnect, device number 8 [ 177.793235][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 178.841206][ T6247] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 179.339732][ T6259] loop1: detected capacity change from 0 to 128 [ 179.426809][ T6241] loop4: detected capacity change from 0 to 32768 [ 179.489276][ T6241] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.635 (6241) [ 179.564375][ T6241] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 179.619155][ T6241] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 179.661684][ T6241] BTRFS info (device loop4): force zlib compression, level 3 [ 179.665186][ T6240] loop3: detected capacity change from 0 to 32768 [ 179.679909][ T6241] BTRFS info (device loop4): turning on flush-on-commit [ 179.698318][ T6241] BTRFS info (device loop4): max_inline at 4096 [ 179.745106][ T6241] BTRFS info (device loop4): using free space tree [ 179.826524][ T6240] XFS (loop3): Mounting V5 Filesystem [ 180.054440][ T6241] BTRFS info (device loop4): enabling ssd optimizations [ 180.124187][ T6241] BTRFS info (device loop4): balance: start -d -m [ 180.143672][ T6240] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 180.220838][ T6240] XFS (loop3): Starting recovery (logdev: internal) [ 180.232218][ T6253] loop2: detected capacity change from 0 to 32768 [ 180.262976][ T6241] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 180.322678][ T6240] XFS (loop3): Ending recovery (logdev: internal) [ 180.379719][ T6253] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 180.394189][ T6240] XFS (loop3): Quotacheck needed: Please wait. [ 180.412632][ T6253] XFS (loop2): Mounting V5 Filesystem [ 180.500843][ T6240] XFS (loop3): Quotacheck: Done. [ 180.649397][ T6253] XFS (loop2): Ending clean mount [ 180.752206][ T6253] XFS (loop2): Quotacheck needed: Please wait. [ 180.833048][ T6312] pimreg: tun_chr_ioctl cmd 35111 [ 180.890112][ T4268] XFS (loop3): Unmounting Filesystem [ 180.910816][ T6253] XFS (loop2): Quotacheck: Done. [ 180.942045][ T6241] BTRFS info (device loop4): balance: paused [ 181.193450][ T4272] XFS (loop2): Unmounting Filesystem [ 181.235734][ T4282] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 181.451002][ T6321] loop0: detected capacity change from 0 to 128 [ 182.731479][ T6346] loop4: detected capacity change from 0 to 128 [ 182.903207][ T6324] loop1: detected capacity change from 0 to 40427 [ 182.952142][ T6324] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 182.972026][ T6324] F2FS-fs (loop1): invalid crc value [ 183.032493][ T6324] F2FS-fs (loop1): Found nat_bits in checkpoint [ 183.125165][ T6333] loop0: detected capacity change from 0 to 32768 [ 183.237951][ T6333] JFS: Invalid stbl[2] = -55 for inode 2, block = 0 [ 183.257112][ T6324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 183.638350][ T6344] loop3: detected capacity change from 0 to 32768 [ 183.676535][ T4267] syz-executor: attempt to access beyond end of device [ 183.676535][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 183.699478][ T6344] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 184.026298][ T6348] loop2: detected capacity change from 0 to 32768 [ 184.069038][ T6348] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.666 (6348) [ 184.163196][ T5065] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5065) [ 184.177405][ T6348] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 184.201215][ T6348] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 184.229104][ T6348] BTRFS info (device loop2): force zlib compression, level 3 [ 184.249192][ T6348] BTRFS info (device loop2): turning on flush-on-commit [ 184.273146][ T6348] BTRFS info (device loop2): max_inline at 4096 [ 184.293161][ T6348] BTRFS info (device loop2): using free space tree [ 184.329562][ T6352] loop4: detected capacity change from 0 to 32768 [ 184.468668][ T6352] JBD2: Ignoring recovery information on journal [ 184.600375][ T6348] BTRFS info (device loop2): enabling ssd optimizations [ 184.640393][ T4491] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.706848][ T6348] BTRFS info (device loop2): balance: start -d -m [ 184.785041][ T6348] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 184.797327][ T6352] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 184.822633][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 184.864521][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.940325][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 184.989528][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 185.048439][ T6348] BTRFS info (device loop2): balance: paused [ 185.077918][ T4491] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 185.110407][ T4491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.118488][ T4491] usb 4-1: Product: syz [ 185.162297][ T4491] usb 4-1: Manufacturer: syz [ 185.166998][ T4491] usb 4-1: SerialNumber: syz [ 185.216654][ T4491] usb 4-1: config 0 descriptor?? [ 185.259103][ T4282] ocfs2: Unmounting device (7,4) on (node local) [ 185.372444][ T4272] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 185.445817][ T4491] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 185.617310][ T6401] loop0: detected capacity change from 0 to 512 [ 185.649204][ T6365] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 185.657882][ T6402] sctp: [Deprecated]: syz.1.680 (pid 6402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.657882][ T6402] Use struct sctp_sack_info instead [ 185.673466][ T4633] usb 4-1: USB disconnect, device number 7 [ 186.529142][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.688'. [ 186.569579][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.688'. [ 187.121271][ T6439] loop0: detected capacity change from 0 to 1024 [ 187.128592][ T6439] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.206356][ T6439] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.290316][ T6439] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.390547][ T6421] loop2: detected capacity change from 0 to 32768 [ 187.464538][ T6447] loop1: detected capacity change from 0 to 1024 [ 187.486253][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 187.625555][ T27] audit: type=1800 audit(1769779882.012:12): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.687" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 187.749647][ T11] hfsplus: b-tree write err: -5, ino 4 [ 187.771157][ T6431] loop4: detected capacity change from 0 to 32768 [ 187.939895][ T6431] XFS (loop4): Mounting V5 Filesystem [ 188.030163][ T6431] XFS (loop4): Ending clean mount [ 188.048316][ T6431] XFS (loop4): Quotacheck needed: Please wait. [ 188.120838][ T6431] XFS (loop4): Quotacheck: Done. [ 188.372037][ T4282] XFS (loop4): Unmounting Filesystem [ 188.702224][ T6478] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 189.244381][ T6494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.717'. [ 189.616625][ T5047] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.810342][ T5047] usb 1-1: Using ep0 maxpacket: 32 [ 189.817429][ T5047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.851106][ T5047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.870350][ T5047] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 189.879658][ T5047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.919069][ T5047] usb 1-1: config 0 descriptor?? [ 190.340943][ T5047] ft260 0003:0403:6030.0006: unknown main item tag 0x7 [ 190.370730][ T5047] ft260 0003:0403:6030.0006: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 190.538739][ T5047] ft260 0003:0403:6030.0006: chip code: 6424 8183 [ 190.739838][ T5047] ft260 0003:0403:6030.0006: failed to retrieve system status [ 190.769572][ T5047] ft260: probe of 0003:0403:6030.0006 failed with error -71 [ 190.830472][ T5047] usb 1-1: USB disconnect, device number 7 [ 191.171722][ T6542] fido_id[6542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 191.280492][ T4399] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 191.340340][ T4491] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 191.500393][ T4399] usb 4-1: Using ep0 maxpacket: 8 [ 191.509559][ T4399] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 191.539458][ T4399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.550571][ T4491] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 191.569406][ T4491] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 191.578978][ T4399] usb 4-1: Product: syz [ 191.588923][ T4399] usb 4-1: Manufacturer: syz [ 191.594371][ T4491] usb 2-1: config 150 has no interface number 0 [ 191.614598][ T4399] usb 4-1: SerialNumber: syz [ 191.624749][ T4491] usb 2-1: config 150 interface 204 has no altsetting 0 [ 191.643282][ T4399] usb 4-1: config 0 descriptor?? [ 191.652867][ T4491] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 191.673506][ T4399] gspca_main: se401-2.14.0 probing 047d:5003 [ 191.686501][ T4491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.700895][ T4491] usb 2-1: Product: syz [ 191.719410][ T4491] usb 2-1: Manufacturer: syz [ 191.739605][ T4491] usb 2-1: SerialNumber: syz [ 191.854547][ T6546] loop4: detected capacity change from 0 to 32768 [ 191.916375][ T6564] bridge: RTM_NEWNEIGH with invalid ether address [ 191.924852][ T4859] wlan1: Trigger new scan to find an IBSS to join [ 191.964706][ T6546] ERROR: (device loop4): jfs_readdir: DT_GETPAGE: dtree page corrupt [ 191.964706][ T6546] [ 191.985932][ T4491] xr_serial 2-1:150.204: skipping garbage [ 192.010559][ T4491] xr_serial 2-1:150.204: xr_serial converter detected [ 192.024473][ T11] ------------[ cut here ]------------ [ 192.030581][ T11] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 192.042139][ T11] WARNING: CPU: 0 PID: 11 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 192.052216][ T11] Modules linked in: [ 192.056182][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 192.063663][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.073817][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 192.077997][ T4399] gspca_se401: ExtraFeatures: 5 [ 192.080120][ T11] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 192.091454][ T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 8c a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4b 3e a6 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 192.111175][ T11] RSP: 0018:ffffc90000107400 EFLAGS: 00010246 [ 192.117300][ T11] RAX: b031ae7160639800 RBX: 000000000000000c RCX: ffff88813fec3b80 [ 192.125395][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 192.133469][ T11] RBP: 0000000000000084 R08: ffffc90000107087 R09: 1ffff92000020e10 [ 192.141553][ T11] R10: dffffc0000000000 R11: fffff52000020e11 R12: 0000000000000040 [ 192.149579][ T11] R13: dffffc0000000000 R14: ffff888076a3b378 R15: ffff88802ea027a8 [ 192.158119][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 192.167232][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.173926][ T11] CR2: 00007f2874165000 CR3: 000000005d264000 CR4: 00000000003506f0 [ 192.181997][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.190195][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.198383][ T11] Call Trace: [ 192.201767][ T11] [ 192.204778][ T11] rate_control_send_low+0x194/0x790 [ 192.210150][ T11] rate_control_get_rate+0x207/0x5c0 [ 192.215557][ T11] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 192.221313][ T11] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 192.227467][ T11] ? ieee80211_queue_skb+0xc2/0x21c0 [ 192.232949][ T11] invoke_tx_handlers_late+0xb6/0x1810 [ 192.238506][ T11] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 192.244593][ T11] ? sta_info_get+0x289/0x2a0 [ 192.249434][ T11] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 192.255348][ T11] ieee80211_tx+0x2d4/0x460 [ 192.259914][ T11] ? ieee80211_skb_resize+0x630/0x630 [ 192.265422][ T11] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 192.270995][ T11] ? __bpf_trace_tasklet+0x10/0x10 [ 192.276167][ T11] ? ieee80211_xmit+0x30c/0x3f0 [ 192.281116][ T11] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 192.287161][ T11] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 192.293058][ T11] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 192.297649][ T4399] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 192.299419][ T11] ieee80211_scan_state_send_probe+0x560/0x930 [ 192.313985][ T11] ieee80211_scan_work+0x4d3/0x1bc0 [ 192.319252][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 192.324399][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 192.330020][ T11] cfg80211_wiphy_work+0x221/0x260 [ 192.335258][ T11] ? process_one_work+0x7b0/0x1160 [ 192.340472][ T11] process_one_work+0x8a2/0x1160 [ 192.345486][ T11] ? worker_detach_from_pool+0x240/0x240 [ 192.351230][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 192.356320][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 192.361986][ T11] ? kthread_data+0x4b/0xc0 [ 192.366561][ T11] worker_thread+0xaa2/0x1270 [ 192.371363][ T11] kthread+0x29d/0x330 [ 192.375509][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 192.380630][ T11] ? kthread_blkcg+0xd0/0xd0 [ 192.385298][ T11] ret_from_fork+0x1f/0x30 [ 192.389785][ T11] [ 192.392889][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.400262][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 192.407680][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.417786][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 192.424095][ T11] Call Trace: [ 192.427431][ T11] [ 192.430410][ T11] dump_stack_lvl+0x188/0x24e [ 192.435149][ T11] ? memcpy+0x3c/0x60 [ 192.439184][ T11] ? show_regs_print_info+0x12/0x12 [ 192.444452][ T11] ? load_image+0x400/0x400 [ 192.449402][ T11] panic+0x2e5/0x730 [ 192.453394][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 192.458671][ T11] ? ret_from_fork+0x1f/0x30 [ 192.463336][ T11] __warn+0x2f8/0x4f0 [ 192.467431][ T11] ? __rate_control_send_low+0x635/0x880 [ 192.473147][ T11] ? __rate_control_send_low+0x635/0x880 [ 192.478844][ T11] report_bug+0x2ba/0x4f0 [ 192.483305][ T11] ? __rate_control_send_low+0x635/0x880 [ 192.489016][ T11] handle_bug+0x3a/0x70 [ 192.493222][ T11] exc_invalid_op+0x16/0x40 [ 192.497931][ T11] asm_exc_invalid_op+0x16/0x20 [ 192.502840][ T11] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 192.509240][ T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 8c a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4b 3e a6 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 192.528996][ T11] RSP: 0018:ffffc90000107400 EFLAGS: 00010246 [ 192.535555][ T11] RAX: b031ae7160639800 RBX: 000000000000000c RCX: ffff88813fec3b80 [ 192.544097][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 192.552112][ T11] RBP: 0000000000000084 R08: ffffc90000107087 R09: 1ffff92000020e10 [ 192.560138][ T11] R10: dffffc0000000000 R11: fffff52000020e11 R12: 0000000000000040 [ 192.568171][ T11] R13: dffffc0000000000 R14: ffff888076a3b378 R15: ffff88802ea027a8 [ 192.576312][ T11] rate_control_send_low+0x194/0x790 [ 192.581674][ T11] rate_control_get_rate+0x207/0x5c0 [ 192.587045][ T11] ieee80211_tx_h_rate_ctrl+0xb1a/0x1750 [ 192.592755][ T11] ? ieee80211_tx_h_select_key+0x17b0/0x17b0 [ 192.598808][ T11] ? ieee80211_queue_skb+0xc2/0x21c0 [ 192.604142][ T11] invoke_tx_handlers_late+0xb6/0x1810 [ 192.609659][ T11] ? ieee80211_tx_h_select_key+0x126d/0x17b0 [ 192.614155][ T4491] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 192.614269][ T4491] xr_serial: probe of ttyUSB0 failed with error -71 [ 192.628130][ T4491] usb 2-1: USB disconnect, device number 9 [ 192.634472][ T11] ? sta_info_get+0x289/0x2a0 [ 192.639209][ T11] ? invoke_tx_handlers_early+0xa11/0x1d40 [ 192.645069][ T11] ieee80211_tx+0x2d4/0x460 [ 192.649636][ T11] ? ieee80211_skb_resize+0x630/0x630 [ 192.655078][ T11] ? ieee80211_set_qos_hdr+0x1c6/0x510 [ 192.660595][ T11] ? __bpf_trace_tasklet+0x10/0x10 [ 192.665771][ T11] ? ieee80211_xmit+0x30c/0x3f0 [ 192.670693][ T11] ? __ieee80211_tx_skb_tid_band+0x48c/0x610 [ 192.676734][ T11] __ieee80211_tx_skb_tid_band+0x4d1/0x610 [ 192.682604][ T11] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 192.688988][ T11] ieee80211_scan_state_send_probe+0x560/0x930 [ 192.695259][ T11] ieee80211_scan_work+0x4d3/0x1bc0 [ 192.700527][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 192.705615][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 192.711257][ T11] cfg80211_wiphy_work+0x221/0x260 [ 192.713782][ T4491] xr_serial 2-1:150.204: device disconnected [ 192.722509][ T11] ? process_one_work+0x7b0/0x1160 [ 192.727705][ T11] process_one_work+0x8a2/0x1160 [ 192.732814][ T11] ? worker_detach_from_pool+0x240/0x240 [ 192.738505][ T11] ? _raw_spin_lock_irq+0xb7/0xf0 [ 192.743597][ T11] ? _raw_spin_lock_irqsave+0x100/0x100 [ 192.749245][ T11] ? kthread_data+0x4b/0xc0 [ 192.753819][ T11] worker_thread+0xaa2/0x1270 [ 192.758675][ T11] kthread+0x29d/0x330 [ 192.762812][ T11] ? worker_clr_flags+0x1a0/0x1a0 [ 192.767901][ T11] ? kthread_blkcg+0xd0/0xd0 [ 192.772576][ T11] ret_from_fork+0x1f/0x30 [ 192.777081][ T11] [ 192.780294][ T11] Kernel Offset: disabled [ 192.784758][ T11] Rebooting in 86400 seconds..