last executing test programs: 2.677059104s ago: executing program 2 (id=1055): syz_mount_image$msdos(&(0x7f0000000680), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r0, 0x1, 0x13, 0xfffe) 2.311950298s ago: executing program 2 (id=1059): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x5) 2.304326778s ago: executing program 0 (id=1060): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 2.221477404s ago: executing program 3 (id=1064): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1}}], 0x4, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.98330791s ago: executing program 0 (id=1066): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 1.924994304s ago: executing program 2 (id=1068): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000640)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x8100, 0x4000, 0x4, 0x9, 0x0, 0x1, 0x0, 0x3, 0xfff9, 0x0, 0x2, 0x8003, "d209ddda1d02b90a2de76eec7967fe7f751ff8ffff2037fffffd1c2251560ed1"}}) 1.773337223s ago: executing program 1 (id=1069): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) 1.773153853s ago: executing program 3 (id=1070): syz_mount_image$msdos(&(0x7f0000000680), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r0, 0x1, 0x13, 0xfffe) 1.766156014s ago: executing program 2 (id=1071): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf2511000000080015000100000008000100"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) 1.614289174s ago: executing program 2 (id=1072): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.611796904s ago: executing program 0 (id=1073): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000240)=[{0x0, 0x8002, 0x1000}], 0x1) semop(r0, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0xb7]) 1.353749871s ago: executing program 3 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x54}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.347242141s ago: executing program 2 (id=1075): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r0 = syz_io_uring_setup(0x881, &(0x7f0000000580)={0x0, 0x3cfc, 0x10100, 0x0, 0x16c}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 1.197617921s ago: executing program 3 (id=1076): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.169804823s ago: executing program 1 (id=1077): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000640)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x4, {0x0, 0x0, 0x8100, 0x4000, 0x4, 0x9, 0x0, 0x1, 0x0, 0x3, 0xfff9, 0x0, 0x2, 0x8003, "d209ddda1d02b90a2de76eec7967fe7f751ff8ffff2037fffffd1c2251560ed1"}}) 1.081579739s ago: executing program 3 (id=1078): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0', 0x3a, [0x46]}, 0x30) execve(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0) 1.076057609s ago: executing program 1 (id=1079): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r0, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x40}}, 0x20000000) 954.194577ms ago: executing program 1 (id=1080): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/98, 0x62}], 0x1}}], 0x4, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 810.218827ms ago: executing program 1 (id=1081): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="df63d5bf8c2ce7f83782363ee6e3cbc4ae7e38d42873ea8db9", @ANYRESOCT, @ANYRES32, @ANYBLOB="783fc5668fb88b4c44a3a6e092ef78ac6889e59a5b7a58645cefbcc1ab0aef07b483cfd6941834d1bdc0a33d2a1ed403868a4ca3196056fb8d12bbcd25d977d6dc333b1e570ae094dd91ec10a8a95356f7e40cce207995311db3b987bfcf2035b314e1077548"], 0xa, 0x5e1a, &(0x7f000000be40)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 699.249144ms ago: executing program 0 (id=1082): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) 372.368916ms ago: executing program 0 (id=1083): syz_mount_image$msdos(&(0x7f0000000680), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r0, 0x1, 0x13, 0xfffe) 206.314036ms ago: executing program 3 (id=1084): r0 = socket(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000140)={0x0, 0xea60}, 0x10) 76.546435ms ago: executing program 1 (id=1085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3067, 0x2025}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x107}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x20, {0x1, 0x5a3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040082) 0s ago: executing program 0 (id=1086): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) kernel console output (not intermixed with test programs): lready exists on: batadv_slave_0 [ 116.928051][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.938211][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.947979][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 116.948970][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.980388][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.000340][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 117.009120][ T6603] loop2: detected capacity change from 0 to 256 [ 117.017681][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.028970][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.041442][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 117.048852][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.065099][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.075800][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 117.085005][ T6455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.088880][ T6605] syz.1.277 uses obsolete (PF_INET,SOCK_PACKET) [ 117.097010][ T6455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.111338][ T6603] FAT-fs (loop2): Directory bread(block 64) failed [ 117.113095][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 117.119454][ T6603] FAT-fs (loop2): Directory bread(block 65) failed [ 117.130521][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.150477][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 117.157910][ T6603] FAT-fs (loop2): Directory bread(block 66) failed [ 117.173294][ T6455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.182431][ T6455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.185813][ T6603] FAT-fs (loop2): Directory bread(block 67) failed [ 117.192146][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 117.211898][ T6455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.218548][ T6603] FAT-fs (loop2): Directory bread(block 68) failed [ 117.221843][ T6455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.230086][ T6603] FAT-fs (loop2): Directory bread(block 69) failed [ 117.250275][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 117.258034][ T6603] FAT-fs (loop2): Directory bread(block 70) failed [ 117.273853][ T6603] FAT-fs (loop2): Directory bread(block 71) failed [ 117.281464][ T5857] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 117.296382][ T6603] FAT-fs (loop2): Directory bread(block 72) failed [ 117.317870][ T6603] FAT-fs (loop2): Directory bread(block 73) failed [ 117.332937][ T5857] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 117.367633][ T5857] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 117.395157][ T5857] usb 1-1: USB disconnect, device number 8 [ 117.409943][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.436588][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.502130][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.527281][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.053859][ T6607] loop1: detected capacity change from 0 to 32768 [ 118.135400][ T6607] find_entry called with index >= next_index [ 118.160936][ T6607] find_entry called with index >= next_index [ 118.175035][ T6607] find_entry called with index >= next_index [ 118.255455][ T6624] loop2: detected capacity change from 0 to 256 [ 118.709910][ T6637] mmap: syz.1.285 (6637) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.808831][ T6638] loop0: detected capacity change from 0 to 4096 [ 118.879444][ T6644] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.886756][ T6644] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 119.016031][ T6638] ntfs3: loop0: MFT: r=1b, expect seq=1 instead of 0! [ 119.464305][ T6662] loop0: detected capacity change from 0 to 128 [ 119.928944][ T6649] loop3: detected capacity change from 0 to 40427 [ 119.940270][ T5857] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.943215][ T6649] F2FS-fs (loop3): invalid crc value [ 119.983108][ T6649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.076091][ T6649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.093914][ T6672] tap0: tun_chr_ioctl cmd 1074025677 [ 120.099481][ T6672] tap0: linktype set to 768 [ 120.120297][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 120.132948][ T5857] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 120.150087][ T5857] usb 1-1: config 179 has no interface number 0 [ 120.156464][ T5857] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 120.190086][ T28] audit: type=1804 audit(1759882010.058:36): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.294" name="/newroot/5/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 120.220367][ T5857] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 120.242770][ T5857] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.254511][ T5857] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 120.266817][ T6455] syz-executor: attempt to access beyond end of device [ 120.266817][ T6455] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.272350][ T5857] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.294334][ T6455] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 120.350401][ T5857] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.359583][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.375904][ T6678] loop2: detected capacity change from 0 to 16 [ 120.394497][ T6666] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 120.431171][ T6678] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.887729][ T8] usb 1-1: USB disconnect, device number 9 [ 120.887802][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.902710][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 121.697089][ T6717] kvm: kvm [6716]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002e) = 0x0 [ 121.986812][ T6734] loop0: detected capacity change from 0 to 256 [ 122.054377][ T6734] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d) [ 122.090903][ T6734] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 122.158363][ T28] audit: type=1800 audit(1759882012.028:37): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.330" name="file2" dev="loop0" ino=1048617 res=0 errno=0 [ 122.472124][ T28] audit: type=1326 audit(1759882012.348:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46f98eec9 code=0x7ffc0000 [ 122.547345][ T28] audit: type=1326 audit(1759882012.368:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46f98eec9 code=0x7ffc0000 [ 122.596939][ T28] audit: type=1326 audit(1759882012.368:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46f98eec9 code=0x7ffc0000 [ 122.660271][ T28] audit: type=1326 audit(1759882012.368:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46f98eec9 code=0x7ffc0000 [ 122.735080][ T28] audit: type=1326 audit(1759882012.368:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46f98eec9 code=0x7ffc0000 [ 122.757206][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.830169][ T28] audit: type=1326 audit(1759882012.388:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46f98eec9 code=0x7ffc0000 [ 122.910500][ T28] audit: type=1326 audit(1759882012.388:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46f98eec9 code=0x7ffc0000 [ 122.970558][ T28] audit: type=1326 audit(1759882012.388:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd46f985d67 code=0x7ffc0000 [ 122.992590][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.040449][ T6773] loop3: detected capacity change from 0 to 512 [ 123.077341][ T6773] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.347: casefold flag without casefold feature [ 123.093743][ T6773] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.347: couldn't read orphan inode 15 (err -117) [ 123.111553][ T6773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.250989][ T6455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.491239][ T6794] misc userio: The device must be registered before sending interrupts [ 123.690717][ T5795] Bluetooth: hci3: command tx timeout [ 123.783652][ T6805] loop3: detected capacity change from 0 to 8 [ 123.833934][ T6807] serio: Serial port ptm0 [ 123.887991][ T6805] SQUASHFS error: Failed to read block 0x2fc: -5 [ 123.896686][ T6805] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 123.916064][ T6805] SQUASHFS error: read_indexes: reading block [2fa:0] [ 123.950276][ T6805] SQUASHFS error: Failed to read block 0xfc: -5 [ 123.957288][ T6805] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 123.970471][ T6805] SQUASHFS error: read_indexes: reading block [2fa:0] [ 123.978052][ T6805] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 124.010380][ T6805] SQUASHFS error: read_indexes: reading block [2fa:0] [ 124.071439][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 124.105107][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 124.301219][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 124.422023][ T6827] bond0: entered allmulticast mode [ 124.427306][ T6827] bond_slave_0: entered allmulticast mode [ 124.455225][ T6827] bond_slave_1: entered allmulticast mode [ 124.460085][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 124.514296][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 124.698671][ T6835] loop9: detected capacity change from 0 to 8 [ 124.743270][ T6835] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 124.748780][ T6835] loop9: partition table partially beyond EOD, truncated [ 124.770306][ T6839] process 'syz.3.376' launched '/dev/fd/3' with NULL argv: empty string added [ 124.786061][ T6835] loop9: p1 size 81768186 extends beyond EOD, truncated [ 124.798464][ T6838] syz.0.375 (6838) used greatest stack depth: 20840 bytes left [ 124.981141][ T6819] loop2: detected capacity change from 0 to 32768 [ 125.010578][ T6819] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 125.051815][ T6819] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.096146][ T6849] netlink: 64 bytes leftover after parsing attributes in process `syz.1.378'. [ 125.301765][ T6861] loop0: detected capacity change from 0 to 512 [ 125.313592][ T6819] XFS (loop2): Ending clean mount [ 125.339580][ T6819] XFS (loop2): Quotacheck needed: Please wait. [ 125.439640][ T6819] XFS (loop2): Quotacheck: Done. [ 125.693542][ T5785] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.778166][ T6871] xt_bpf: check failed: parse error [ 125.860671][ T5826] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 125.955097][ T6876] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 126.072549][ T5826] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.099226][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.128100][ T5826] usb 1-1: config 0 descriptor?? [ 126.140506][ T5826] cp210x 1-1:0.0: cp210x converter detected [ 126.561412][ T5826] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 126.599785][ T5826] usb 1-1: cp210x converter now attached to ttyUSB0 [ 126.756233][ T6882] loop3: detected capacity change from 0 to 32768 [ 126.828467][ T3064] usb 1-1: USB disconnect, device number 10 [ 126.836538][ T6882] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 126.846058][ T3064] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.867621][ T3064] cp210x 1-1:0.0: device disconnected [ 126.915521][ T6882] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.232213][ T6882] syz.3.392 (6882) used greatest stack depth: 19248 bytes left [ 127.351744][ T6455] ocfs2: Unmounting device (7,3) on (node local) [ 127.765562][ T6926] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 127.838378][ T6929] loop0: detected capacity change from 0 to 2048 [ 127.853762][ T6931] loop3: detected capacity change from 0 to 256 [ 127.881864][ T6929] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 127.900837][ T6929] UDF-fs: Scanning with blocksize 512 failed [ 127.938293][ T6935] loop1: detected capacity change from 0 to 764 [ 127.941271][ T6929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.967854][ T6934] loop6: detected capacity change from 0 to 524287999 [ 127.977568][ T6935] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 128.633437][ T6958] batadv_slave_1: entered promiscuous mode [ 128.654443][ T6957] batadv_slave_1: left promiscuous mode [ 128.877023][ T6940] loop1: detected capacity change from 0 to 32768 [ 128.885527][ T6966] loop3: detected capacity change from 0 to 256 [ 128.925240][ T6940] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.940772][ T6966] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 129.004010][ T6966] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 129.049670][ T6966] exFAT-fs (loop3): Filesystem has been set read-only [ 129.084596][ T6940] XFS (loop1): Ending clean mount [ 129.330204][ T5786] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.579005][ T6978] loop0: detected capacity change from 0 to 32768 [ 129.628108][ T6978] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.429 (6978) [ 129.668751][ T6978] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.699116][ T6978] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 129.726601][ T6978] BTRFS info (device loop0): force clearing of disk cache [ 129.740042][ T6978] BTRFS info (device loop0): use zlib compression, level 3 [ 129.770325][ T6978] BTRFS info (device loop0): turning on sync discard [ 129.777252][ T6978] BTRFS info (device loop0): metadata ratio 5 [ 129.790054][ T6978] BTRFS info (device loop0): using free space tree [ 129.910078][ T6978] BTRFS info (device loop0): enabling ssd optimizations [ 129.952907][ T6978] BTRFS info (device loop0): rebuilding free space tree [ 130.159849][ T6984] loop2: detected capacity change from 0 to 40427 [ 130.209118][ T6984] F2FS-fs (loop2): invalid crc value [ 130.237209][ T6984] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.290287][ T5791] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.355470][ T6984] F2FS-fs (loop2): Start checkpoint disabled! [ 130.379281][ T6984] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 130.760375][ T11] kworker/u4:0: attempt to access beyond end of device [ 130.760375][ T11] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.799771][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 131.214157][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 131.671122][ T7033] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 131.793668][ T7025] loop1: detected capacity change from 0 to 32768 [ 131.826350][ T7025] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.888982][ T7025] XFS (loop1): Ending clean mount [ 131.909008][ T7025] XFS (loop1): Quotacheck needed: Please wait. [ 131.998097][ T7025] XFS (loop1): Quotacheck: Done. [ 132.111635][ T5786] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.464168][ T7055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.478706][ T7055] team0: Port device batadv1 added [ 132.540368][ T7054] netlink: 'syz.2.454': attribute type 1 has an invalid length. [ 132.548099][ T7054] netlink: 6 bytes leftover after parsing attributes in process `syz.2.454'. [ 132.590512][ T7054] block nbd0: shutting down sockets [ 132.709719][ T7066] loop2: detected capacity change from 0 to 16 [ 132.729030][ T7066] erofs: (device loop2): mounted with root inode @ nid 36. [ 132.885368][ T7074] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 133.059550][ T7080] input: syz1 as /devices/virtual/input/input12 [ 133.266311][ T5857] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.266919][ T7090] netlink: 'syz.1.466': attribute type 14 has an invalid length. [ 133.288772][ T7089] loop0: detected capacity change from 0 to 256 [ 133.298783][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.318335][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.325617][ T7089] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 133.362433][ T7089] exFAT-fs (loop0): error, tried to truncate zeroed cluster. [ 133.369900][ T7089] exFAT-fs (loop0): Filesystem has been set read-only [ 133.449178][ T7093] loop1: detected capacity change from 0 to 256 [ 133.457980][ T7093] exfat: Deprecated parameter 'utf8' [ 133.480135][ T7093] exfat: Deprecated parameter 'namecase' [ 133.485965][ T7093] exfat: Deprecated parameter 'namecase' [ 133.500266][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 133.502104][ T7093] exfat: Deprecated parameter 'utf8' [ 133.521830][ T5857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.541368][ T5857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.566355][ T5857] usb 4-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 133.577226][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.589213][ T7093] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 133.596909][ T5857] usb 4-1: Product: syz [ 133.614090][ T7098] loop7: detected capacity change from 0 to 7 [ 133.615782][ T5857] usb 4-1: Manufacturer: syz [ 133.635255][ T5857] usb 4-1: SerialNumber: syz [ 133.648416][ T5857] usb 4-1: config 0 descriptor?? [ 133.650332][ T7098] Dev loop7: unable to read RDB block 7 [ 133.659172][ T7098] loop7: unable to read partition table [ 133.670434][ T7098] loop7: partition table beyond EOD, truncated [ 133.683482][ T11] loop: Write error at byte offset 4, length 3584. [ 133.686970][ T7098] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 133.700512][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 133.713198][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 133.928231][ T5857] usb 4-1: USB disconnect, device number 4 [ 134.018939][ T7096] loop0: detected capacity change from 0 to 32768 [ 134.028753][ T7096] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.470 (7096) [ 134.049945][ T7096] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 134.061956][ T7096] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 134.071912][ T7096] BTRFS info (device loop0): setting nodatasum [ 134.078134][ T7096] BTRFS info (device loop0): use zlib compression, level 3 [ 134.085968][ T7096] BTRFS info (device loop0): using free space tree [ 134.112307][ T7110] loop7: detected capacity change from 0 to 7 [ 134.123948][ T7110] Dev loop7: unable to read RDB block 7 [ 134.135103][ T7110] loop7: unable to read partition table [ 134.142112][ T7110] loop7: partition table beyond EOD, truncated [ 134.156252][ T7110] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 134.196977][ T7096] BTRFS info (device loop0): enabling ssd optimizations [ 134.198404][ T144] loop: Write error at byte offset 4, length 3584. [ 134.211261][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 134.220134][ T7096] BTRFS info (device loop0): auto enabling async discard [ 134.220813][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 134.280128][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 134.280145][ T28] audit: type=1800 audit(1759882024.148:105): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.470" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 134.390688][ T5857] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 134.398269][ T5791] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 134.400761][ T5857] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 134.430132][ T5857] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 134.461364][ T5857] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 134.702574][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.765663][ T7132] tmpfs: Bad value for 'mpol' [ 134.900134][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 134.917078][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.925184][ T27] usb 2-1: no configurations [ 134.929824][ T27] usb 2-1: can't read configurations, error -22 [ 135.491492][ T7134] loop1: detected capacity change from 0 to 256 [ 135.524817][ T7134] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 135.572976][ T7134] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 135.580732][ T7134] exFAT-fs (loop1): Filesystem has been set read-only [ 135.840427][ T5857] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.875328][ T7141] loop2: detected capacity change from 0 to 32768 [ 135.888016][ T7141] [ 135.888016][ T7141] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 135.888016][ T7141] [ 135.919477][ T7141] read_mapping_page failed! [ 135.924683][ T7141] ERROR: (device loop2): txCommit: [ 135.924683][ T7141] [ 135.936614][ T7141] ERROR: (device loop2): remounting filesystem as read-only [ 136.042463][ T5857] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.051279][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.069449][ T5857] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 136.098706][ T5857] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.113267][ T5857] usb 1-1: config 220 has no interface number 2 [ 136.126038][ T5857] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 136.137462][ T5857] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 136.158443][ T5857] usb 1-1: config 220 interface 0 has no altsetting 0 [ 136.165423][ T5857] usb 1-1: config 220 interface 76 has no altsetting 0 [ 136.179342][ T5857] usb 1-1: config 220 interface 1 has no altsetting 0 [ 136.191027][ T5857] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 136.210089][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.228680][ T5857] usb 1-1: Product: syz [ 136.233219][ T5857] usb 1-1: Manufacturer: syz [ 136.237885][ T5857] usb 1-1: SerialNumber: syz [ 136.262187][ T27] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.280929][ T27] usb 2-1: config 0 has no interface number 0 [ 136.295149][ T27] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 136.305047][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.325028][ T27] usb 2-1: Product: syz [ 136.335182][ T27] usb 2-1: Manufacturer: syz [ 136.341575][ T27] usb 2-1: SerialNumber: syz [ 136.349609][ T27] usb 2-1: config 0 descriptor?? [ 136.523937][ T5857] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 136.531426][ T7149] loop3: detected capacity change from 0 to 32768 [ 136.542921][ T5857] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 136.549400][ T5857] usb 1-1: No valid video chain found. [ 136.552808][ T7149] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.574543][ T5857] usb 1-1: selecting invalid altsetting 0 [ 136.585018][ T27] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 136.608668][ T5857] usb 1-1: selecting invalid altsetting 0 [ 136.616609][ T27] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 136.632625][ T5857] usbtest: probe of 1-1:220.1 failed with error -22 [ 136.635630][ T7149] XFS (loop3): Ending clean mount [ 136.643511][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 136.661374][ T5857] usb 1-1: USB disconnect, device number 11 [ 136.674240][ T27] usb 2-1: media controller created [ 136.734141][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.751310][ T6455] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.382458][ T7173] loop7: detected capacity change from 0 to 7 [ 137.406730][ T8] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 137.410197][ T7173] Dev loop7: unable to read RDB block 7 [ 137.418430][ T8] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 137.428242][ T8] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 137.437133][ T7173] loop7: unable to read partition table [ 137.451881][ T206] loop: Write error at byte offset 4, length 3584. [ 137.458586][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 137.468173][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 137.477064][ T7173] loop7: partition table beyond EOD, truncated [ 137.483639][ T7173] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 137.483997][ T8] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 137.655628][ T7167] loop3: detected capacity change from 0 to 32768 [ 137.666076][ T7167] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.490 (7167) [ 137.684228][ T7167] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 137.690183][ T5826] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.695290][ T7167] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 137.712249][ T7167] BTRFS info (device loop3): setting nodatasum [ 137.718652][ T7167] BTRFS info (device loop3): use zlib compression, level 3 [ 137.726325][ T7167] BTRFS info (device loop3): using free space tree [ 137.759889][ T7167] BTRFS info (device loop3): enabling ssd optimizations [ 137.770323][ T7167] BTRFS info (device loop3): auto enabling async discard [ 137.818475][ T28] audit: type=1800 audit(1759882027.688:106): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.490" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 137.881836][ T27] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 137.894697][ T6455] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 137.912242][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 137.932816][ T27] usb 2-1: USB disconnect, device number 7 [ 137.936722][ T5826] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.950605][ T5826] usb 3-1: no configurations [ 137.955582][ T5826] usb 3-1: can't read configurations, error -22 [ 139.104355][ T7215] bridge_slave_0: invalid flags given to default FDB implementation [ 139.319083][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 139.376302][ T7201] loop1: detected capacity change from 0 to 40427 [ 139.398557][ T7201] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.416939][ T7201] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.434513][ T7201] F2FS-fs (loop1): invalid crc value [ 139.490353][ T7201] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.559105][ T7205] loop0: detected capacity change from 0 to 32768 [ 139.576379][ T7205] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.589149][ T7201] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 139.596695][ T7201] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.632595][ T7205] XFS (loop0): Ending clean mount [ 139.649745][ T7205] XFS (loop0): Quotacheck needed: Please wait. [ 139.717849][ T7205] XFS (loop0): Quotacheck: Done. [ 139.794403][ T7235] loop7: detected capacity change from 0 to 7 [ 139.804353][ T7235] Dev loop7: unable to read RDB block 7 [ 139.865068][ T7235] loop7: unable to read partition table [ 139.873316][ T2920] loop: Write error at byte offset 4, length 3584. [ 139.881180][ T7235] loop7: partition table beyond EOD, truncated [ 139.888349][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 139.897913][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 139.908016][ T5791] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.918859][ T7235] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 140.703951][ T7238] loop3: detected capacity change from 0 to 32768 [ 140.755755][ T7238] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.794521][ T7238] XFS (loop3): Ending clean mount [ 140.805509][ T7238] XFS (loop3): Quotacheck needed: Please wait. [ 140.866397][ T7238] XFS (loop3): Quotacheck: Done. [ 140.935041][ T6455] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.040195][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 141.074533][ T7260] erspan0: entered promiscuous mode [ 141.101935][ T7260] macsec1: entered allmulticast mode [ 141.108988][ T7260] erspan0: entered allmulticast mode [ 141.136336][ T7248] loop1: detected capacity change from 0 to 32768 [ 141.139077][ T7260] erspan0: left allmulticast mode [ 141.146341][ T7248] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.512 (7248) [ 141.168776][ T7260] erspan0: left promiscuous mode [ 141.184222][ T7248] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 141.217905][ T7248] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 141.258207][ T7248] BTRFS info (device loop1): setting nodatasum [ 141.281659][ T7248] BTRFS info (device loop1): use zlib compression, level 3 [ 141.289684][ T7248] BTRFS info (device loop1): using free space tree [ 141.369580][ T7248] BTRFS info (device loop1): enabling ssd optimizations [ 141.377263][ T7248] BTRFS info (device loop1): auto enabling async discard [ 141.477376][ T28] audit: type=1800 audit(1759882031.338:107): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.512" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 141.498213][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.651453][ T5786] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 141.805716][ T7285] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 141.870216][ T7287] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 142.160459][ T7275] loop3: detected capacity change from 0 to 40427 [ 142.178124][ T7275] F2FS-fs (loop3): invalid crc value [ 142.203211][ T7275] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.300292][ T7275] F2FS-fs (loop3): Start checkpoint disabled! [ 142.320067][ T7275] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 142.363757][ T7301] loop2: detected capacity change from 0 to 128 [ 142.431511][ T7301] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.448158][ T7301] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.632207][ T2920] kworker/u4:8: attempt to access beyond end of device [ 142.632207][ T2920] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.660153][ T2920] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 142.717929][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.764146][ T7309] loop0: detected capacity change from 0 to 256 [ 142.786371][ T7309] exfat: Deprecated parameter 'utf8' [ 142.804536][ T7309] exfat: Deprecated parameter 'namecase' [ 142.810821][ T7309] exfat: Deprecated parameter 'namecase' [ 142.816526][ T7309] exfat: Deprecated parameter 'utf8' [ 142.844987][ T7309] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 143.274499][ T7313] loop3: detected capacity change from 0 to 32768 [ 143.282561][ T7313] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.534 (7313) [ 143.298761][ T7313] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.309090][ T7313] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 143.318761][ T7313] BTRFS info (device loop3): setting nodatasum [ 143.325138][ T7313] BTRFS info (device loop3): use zlib compression, level 3 [ 143.332559][ T7313] BTRFS info (device loop3): using free space tree [ 143.370353][ T7313] BTRFS info (device loop3): enabling ssd optimizations [ 143.378473][ T7313] BTRFS info (device loop3): auto enabling async discard [ 143.414386][ T28] audit: type=1800 audit(1759882033.288:108): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.534" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 143.515392][ T6455] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 143.840079][ T5777] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 144.062177][ T5777] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.080097][ T5777] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 144.111740][ T5777] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.137195][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.153600][ T7334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.167169][ T5777] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 144.187354][ T7333] loop0: detected capacity change from 0 to 32768 [ 144.237384][ T7333] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.547 (7333) [ 144.249025][ T7332] loop1: detected capacity change from 0 to 32768 [ 144.262781][ T7332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.546 (7332) [ 144.283392][ T7333] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.294361][ T7333] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 144.314546][ T7333] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 144.324394][ T7333] BTRFS info (device loop0): use zstd compression, level 3 [ 144.332875][ T7332] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.338206][ T7333] BTRFS info (device loop0): using free space tree [ 144.352728][ T7332] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 144.374485][ T7332] BTRFS info (device loop1): force clearing of disk cache [ 144.397262][ T7332] BTRFS info (device loop1): use zlib compression, level 3 [ 144.424641][ T7332] BTRFS info (device loop1): turning on sync discard [ 144.433758][ T7332] BTRFS info (device loop1): metadata ratio 5 [ 144.440724][ T7332] BTRFS info (device loop1): using free space tree [ 144.441298][ T5777] usb 3-1: USB disconnect, device number 8 [ 144.453642][ T7333] BTRFS info (device loop0): enabling ssd optimizations [ 144.471539][ T7333] BTRFS info (device loop0): auto enabling async discard [ 144.550728][ T7332] BTRFS info (device loop1): enabling ssd optimizations [ 144.565201][ T7373] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 144.585514][ T7332] BTRFS info (device loop1): rebuilding free space tree [ 144.818609][ T5791] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 144.847429][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.107899][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.302195][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.310845][ T9] usb 4-1: config 0 has no interface number 0 [ 145.344210][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 145.353667][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.380106][ T9] usb 4-1: Product: syz [ 145.384442][ T9] usb 4-1: Manufacturer: syz [ 145.389351][ T9] usb 4-1: SerialNumber: syz [ 145.415195][ T9] usb 4-1: config 0 descriptor?? [ 145.459864][ T7383] loop0: detected capacity change from 0 to 512 [ 145.477541][ T7383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.509269][ T7383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.544792][ T7383] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.598140][ T7383] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 145.660620][ T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 145.685330][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.699315][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.710494][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 145.718591][ T9] usb 4-1: media controller created [ 145.780128][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.951995][ T23] kernel read not supported for file /usbmon9 (pid: 23 comm: kworker/1:0) [ 146.079791][ T7382] loop2: detected capacity change from 0 to 32768 [ 146.478439][ T7394] loop1: detected capacity change from 0 to 32768 [ 146.497738][ T7394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.552 (7394) [ 146.518234][ T7394] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.529626][ T7394] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 146.539083][ T7394] BTRFS info (device loop1): setting nodatacow, compression disabled [ 146.547733][ T7394] BTRFS info (device loop1): max_inline at 0 [ 146.555790][ T7394] BTRFS info (device loop1): enabling disk space caching [ 146.565414][ T7394] BTRFS info (device loop1): turning off barriers [ 146.574991][ T7394] BTRFS info (device loop1): turning on flush-on-commit [ 146.582794][ T7394] BTRFS info (device loop1): doing ref verification [ 146.589500][ T7394] BTRFS info (device loop1): force clearing of disk cache [ 146.597474][ T7394] BTRFS info (device loop1): enabling ssd optimizations [ 146.605150][ T7394] BTRFS info (device loop1): max_inline at 4096 [ 146.612323][ T7394] BTRFS info (device loop1): disk space caching is enabled [ 146.668467][ T7394] BTRFS info (device loop1): auto enabling async discard [ 146.679592][ T7394] BTRFS info (device loop1): rebuilding free space tree [ 146.699722][ T7394] BTRFS info (device loop1): disabling free space tree [ 146.707760][ T7394] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.717927][ T7394] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.785355][ T28] audit: type=1800 audit(1759882036.658:109): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.552" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 146.856551][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.893817][ T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 146.984401][ T9] usb 4-1: USB disconnect, device number 5 [ 147.321055][ T7427] loop2: detected capacity change from 0 to 512 [ 147.341482][ T7427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.378262][ T7427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.396572][ T7427] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.445557][ T7427] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 147.499756][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.953662][ T7429] loop1: detected capacity change from 0 to 40427 [ 147.971481][ T7429] F2FS-fs (loop1): invalid crc value [ 147.996867][ T7429] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.088508][ T7429] F2FS-fs (loop1): Start checkpoint disabled! [ 148.110193][ T7429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 148.150633][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 148.203545][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 148.212882][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 148.306986][ T48] kworker/u4:3: attempt to access beyond end of device [ 148.306986][ T48] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 148.321205][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 148.328360][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 148.360274][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 148.379750][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 148.389113][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.398515][ T9] usb 1-1: Product: syz [ 148.402812][ T9] usb 1-1: Manufacturer: syz [ 148.407508][ T9] usb 1-1: SerialNumber: syz [ 148.414398][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 148.845356][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 148.859123][ T9] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 149.790274][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 149.902683][ T7459] loop2: detected capacity change from 0 to 32768 [ 149.914300][ T7459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.572 (7459) [ 149.934125][ T7459] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.944471][ T7459] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 149.954307][ T7459] BTRFS info (device loop2): force clearing of disk cache [ 149.962697][ T7459] BTRFS info (device loop2): use zlib compression, level 3 [ 149.970324][ T7459] BTRFS info (device loop2): turning on sync discard [ 149.977171][ T7459] BTRFS info (device loop2): metadata ratio 5 [ 149.984064][ T7459] BTRFS info (device loop2): using free space tree [ 149.998303][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.006768][ T27] usb 1-1: config 0 has no interface number 0 [ 150.028757][ T27] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 150.038878][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.047080][ T27] usb 1-1: Product: syz [ 150.052489][ T27] usb 1-1: Manufacturer: syz [ 150.057178][ T27] usb 1-1: SerialNumber: syz [ 150.070774][ T27] usb 1-1: config 0 descriptor?? [ 150.071299][ T7459] BTRFS info (device loop2): enabling ssd optimizations [ 150.087842][ T7459] BTRFS info (device loop2): rebuilding free space tree [ 150.216137][ T5785] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.309296][ T27] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 150.348105][ T27] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.359723][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 150.376504][ T27] usb 1-1: media controller created [ 150.422414][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.757318][ T7504] loop1: detected capacity change from 0 to 1024 [ 150.815103][ T7504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 150.836799][ T7504] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.877073][ T7504] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.581: Freeing blocks not in datazone - block = 0, count = 16 [ 150.945767][ T48] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 150.977347][ T48] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 150.977382][ T48] EXT4-fs (loop1): This should not happen!! Data will be lost [ 150.977382][ T48] [ 150.977399][ T48] EXT4-fs (loop1): Total free blocks count 0 [ 150.977415][ T48] EXT4-fs (loop1): Free/Dirty block details [ 150.977430][ T48] EXT4-fs (loop1): free_blocks=4293918736 [ 150.977448][ T48] EXT4-fs (loop1): dirty_blocks=16 [ 150.977462][ T48] EXT4-fs (loop1): Block reservation details [ 150.977475][ T48] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 150.984581][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.330382][ T7503] loop2: detected capacity change from 0 to 40427 [ 151.338471][ T7503] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 151.346516][ T7503] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.357854][ T7503] F2FS-fs (loop2): invalid crc value [ 151.369014][ T7503] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.419409][ T7503] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.420408][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 151.434266][ T7503] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.535227][ T27] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 151.603925][ T27] usb 1-1: USB disconnect, device number 13 [ 151.620605][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 151.640134][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.649352][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.657640][ T9] usb 2-1: Product: syz [ 151.662042][ T9] usb 2-1: Manufacturer: syz [ 151.666768][ T9] usb 2-1: SerialNumber: syz [ 151.682126][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 152.113155][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 152.121383][ T9] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 152.363011][ T7522] loop3: detected capacity change from 0 to 64 [ 152.885353][ T7541] loop1: detected capacity change from 0 to 256 [ 153.007047][ T7527] loop0: detected capacity change from 0 to 32768 [ 153.017645][ T7527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.590 (7527) [ 153.043329][ T7527] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.066016][ T7527] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 153.086719][ T7527] BTRFS info (device loop0): setting nodatacow, compression disabled [ 153.096555][ T7527] BTRFS info (device loop0): max_inline at 0 [ 153.104772][ T7527] BTRFS info (device loop0): enabling disk space caching [ 153.112580][ T7527] BTRFS info (device loop0): turning off barriers [ 153.124869][ T7527] BTRFS info (device loop0): turning on flush-on-commit [ 153.133298][ T7527] BTRFS info (device loop0): doing ref verification [ 153.140757][ T7527] BTRFS info (device loop0): force clearing of disk cache [ 153.157399][ T7527] BTRFS info (device loop0): enabling ssd optimizations [ 153.174982][ T7527] BTRFS info (device loop0): max_inline at 4096 [ 153.188683][ T7527] BTRFS info (device loop0): disk space caching is enabled [ 153.289433][ T7527] BTRFS info (device loop0): auto enabling async discard [ 153.309134][ T7527] BTRFS info (device loop0): rebuilding free space tree [ 153.330113][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.338148][ T7527] BTRFS info (device loop0): disabling free space tree [ 153.345480][ T7527] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.355731][ T7527] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.411887][ T7569] loop2: detected capacity change from 0 to 64 [ 153.448284][ T28] audit: type=1800 audit(1759882043.318:110): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.590" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 153.552114][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 153.565849][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.591278][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.593317][ T5791] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.603197][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.633201][ T27] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.647882][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.683893][ T27] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.700341][ T27] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.708660][ T27] usb 4-1: Manufacturer: syz [ 153.749284][ T27] usb 4-1: config 0 descriptor?? [ 154.130496][ T27] rc_core: IR keymap rc-hauppauge not found [ 154.136492][ T27] Registered IR keymap rc-empty [ 154.160306][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.196268][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.230928][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 154.271320][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 154.325686][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.380246][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.440152][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.480344][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.520110][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.550179][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.593468][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.640174][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.689000][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.730183][ T27] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 154.771621][ T27] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.800105][ T27] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.834216][ T27] usb 4-1: USB disconnect, device number 6 [ 154.968992][ T7599] loop0: detected capacity change from 0 to 64 [ 155.463963][ T7601] loop2: detected capacity change from 0 to 32768 [ 155.479166][ T7601] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.617 (7601) [ 155.494706][ T7601] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.512299][ T7601] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 155.523274][ T7601] BTRFS info (device loop2): setting nodatacow, compression disabled [ 155.536485][ T7601] BTRFS info (device loop2): max_inline at 0 [ 155.548854][ T7601] BTRFS info (device loop2): enabling disk space caching [ 155.556574][ T7601] BTRFS info (device loop2): turning off barriers [ 155.565963][ T7601] BTRFS info (device loop2): turning on flush-on-commit [ 155.580362][ T7601] BTRFS info (device loop2): doing ref verification [ 155.587058][ T7601] BTRFS info (device loop2): force clearing of disk cache [ 155.610470][ T7601] BTRFS info (device loop2): enabling ssd optimizations [ 155.628205][ T7601] BTRFS info (device loop2): max_inline at 4096 [ 155.650379][ T7601] BTRFS info (device loop2): disk space caching is enabled [ 155.680174][ T7614] netlink: 45 bytes leftover after parsing attributes in process `syz.0.631'. [ 155.789695][ T7601] BTRFS info (device loop2): auto enabling async discard [ 155.826640][ T7601] BTRFS info (device loop2): rebuilding free space tree [ 155.867822][ T7601] BTRFS info (device loop2): disabling free space tree [ 155.880457][ T7601] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.911976][ T7601] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.064844][ T28] audit: type=1800 audit(1759882045.938:111): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.617" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 156.226509][ T5785] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.084504][ T7684] loop0: detected capacity change from 0 to 764 [ 157.099658][ T7684] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 157.328348][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 157.663669][ T7704] loop3: detected capacity change from 0 to 4096 [ 157.694316][ T7704] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 157.845579][ T2920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.983665][ T2920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.168592][ T2920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.269505][ T7706] loop2: detected capacity change from 0 to 32768 [ 158.286939][ T2920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.339118][ T7706] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.421797][ T7706] XFS (loop2): Ending clean mount [ 158.467393][ T7706] XFS (loop2): Quotacheck needed: Please wait. [ 158.589771][ T7706] XFS (loop2): Quotacheck: Done. [ 158.848661][ T5785] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.134423][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.152573][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.163218][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.171502][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.179317][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.190773][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.258363][ T7714] loop1: detected capacity change from 0 to 32768 [ 159.318483][ T7714] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.369890][ T7714] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 159.397009][ T7714] XFS (loop1): Starting recovery (logdev: internal) [ 159.434954][ T7714] XFS (loop1): Ending recovery (logdev: internal) [ 159.444310][ T7714] XFS (loop1): Quotacheck needed: Please wait. [ 159.502288][ T7714] XFS (loop1): Quotacheck: Done. [ 159.664836][ T5786] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.712409][ T7725] chnl_net:caif_netlink_parms(): no params data found [ 160.156345][ T28] audit: type=1326 audit(1759882050.028:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fecf8eec9 code=0x7ffc0000 [ 160.189218][ T28] audit: type=1326 audit(1759882050.028:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fecf8eec9 code=0x7ffc0000 [ 160.214448][ T28] audit: type=1326 audit(1759882050.038:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fecf8eec9 code=0x7ffc0000 [ 160.237531][ T28] audit: type=1326 audit(1759882050.038:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fecf8eec9 code=0x7ffc0000 [ 160.304916][ T28] audit: type=1326 audit(1759882050.038:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fecf8eec9 code=0x7ffc0000 [ 160.327319][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.375837][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.381995][ T7756] loop6: detected capacity change from 0 to 524287999 [ 160.400177][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.407510][ T7725] bridge_slave_0: entered allmulticast mode [ 160.420241][ T28] audit: type=1326 audit(1759882050.048:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fecf8eec9 code=0x7ffc0000 [ 160.426185][ T7725] bridge_slave_0: entered promiscuous mode [ 160.457087][ T28] audit: type=1326 audit(1759882050.158:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fecf8eec9 code=0x7ffc0000 [ 160.489124][ T28] audit: type=1326 audit(1759882050.208:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fecf85d67 code=0x7ffc0000 [ 160.513019][ T28] audit: type=1326 audit(1759882050.208:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fecf2af79 code=0x7ffc0000 [ 160.570779][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.577236][ T28] audit: type=1326 audit(1759882050.208:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fecf85d67 code=0x7ffc0000 [ 160.585849][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.608165][ T7725] bridge_slave_1: entered allmulticast mode [ 160.616023][ T7725] bridge_slave_1: entered promiscuous mode [ 160.698886][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.732680][ T2920] hsr_slave_0: left promiscuous mode [ 160.748633][ T2920] hsr_slave_1: left promiscuous mode [ 160.761425][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.776851][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.790659][ T7761] loop2: detected capacity change from 0 to 256 [ 160.798041][ T2920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.811308][ T2920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.817182][ T7761] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 160.832039][ T2920] bridge_slave_1: left allmulticast mode [ 160.842594][ T2920] bridge_slave_1: left promiscuous mode [ 160.848408][ T2920] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.874845][ T2920] bridge_slave_0: left allmulticast mode [ 160.882133][ T2920] bridge_slave_0: left promiscuous mode [ 160.897220][ T2920] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.997200][ T2920] veth1_macvtap: left promiscuous mode [ 161.003011][ T2920] veth0_macvtap: left promiscuous mode [ 161.011249][ T2920] veth1_vlan: left promiscuous mode [ 161.022208][ T2920] veth0_vlan: left promiscuous mode [ 161.299208][ T5795] Bluetooth: hci2: command tx timeout [ 161.407383][ T2920] team0 (unregistering): Port device batadv1 removed [ 161.616208][ T7765] loop2: detected capacity change from 0 to 32768 [ 161.662894][ T7765] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.728144][ T7765] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 161.755064][ T7765] XFS (loop2): Starting recovery (logdev: internal) [ 161.819918][ T7765] XFS (loop2): Ending recovery (logdev: internal) [ 161.830346][ T7765] XFS (loop2): Quotacheck needed: Please wait. [ 161.919014][ T7765] XFS (loop2): Quotacheck: Done. [ 162.015412][ T5785] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.297127][ T7780] loop2: detected capacity change from 0 to 128 [ 162.316284][ T2920] team0 (unregistering): Port device team_slave_1 removed [ 162.325729][ T7780] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 162.346614][ T7780] hpfs: filesystem error: improperly stopped [ 162.352948][ T7780] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 162.361158][ T7780] hpfs: You really don't want any checks? You are crazy... [ 162.376731][ T7780] hpfs: hpfs_map_sector(): read error [ 162.382650][ T7780] hpfs: code page support is disabled [ 162.389822][ T7780] hpfs: hpfs_map_4sectors(): unaligned read [ 162.396206][ T7780] hpfs: hpfs_map_4sectors(): unaligned read [ 162.402383][ T7780] hpfs: filesystem error: unable to find root dir [ 162.413762][ T2920] team0 (unregistering): Port device team_slave_0 removed [ 162.492125][ T2920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.556513][ T2920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.185455][ T2920] bond0 (unregistering): Released all slaves [ 163.281537][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.294574][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.685'. [ 163.370558][ T5795] Bluetooth: hci2: command tx timeout [ 163.459288][ T7725] team0: Port device team_slave_0 added [ 163.460921][ T7788] loop3: detected capacity change from 0 to 128 [ 163.483126][ T7788] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 163.489031][ T7725] team0: Port device team_slave_1 added [ 163.501436][ T7788] hpfs: filesystem error: improperly stopped [ 163.507625][ T7788] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 163.520073][ T7788] hpfs: You really don't want any checks? You are crazy... [ 163.528226][ T7788] hpfs: hpfs_map_sector(): read error [ 163.538411][ T7788] hpfs: code page support is disabled [ 163.551627][ T7788] hpfs: hpfs_map_4sectors(): unaligned read [ 163.557740][ T7788] hpfs: hpfs_map_4sectors(): unaligned read [ 163.580558][ T7788] hpfs: filesystem error: unable to find root dir [ 163.621140][ T7788] hpfs: hpfs_map_4sectors(): unaligned read [ 163.627376][ T7788] hpfs: hpfs_map_sector(): read error [ 163.639439][ T7788] hpfs: hpfs_map_sector(): read error [ 163.682521][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.689563][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.766813][ T7725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.776197][ T7792] loop1: detected capacity change from 0 to 256 [ 163.794557][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.822203][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.831597][ T7794] loop3: detected capacity change from 0 to 256 [ 163.882900][ T7725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.887568][ T7791] loop2: detected capacity change from 0 to 4096 [ 163.911570][ T7791] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 163.948048][ T7791] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 163.959841][ T7794] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 164.055286][ T7725] hsr_slave_0: entered promiscuous mode [ 164.064295][ T7725] hsr_slave_1: entered promiscuous mode [ 164.071803][ T7725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.080357][ T7725] Cannot create hsr debugfs directory [ 164.251641][ T7799] loop3: detected capacity change from 0 to 128 [ 164.258701][ T7800] loop1: detected capacity change from 0 to 256 [ 164.279607][ T7799] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.300343][ T7799] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.387606][ T7799] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 164.448774][ T6455] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.517914][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.690'. [ 164.940430][ T7725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.952782][ T7725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.964423][ T7725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.978591][ T7725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.107378][ T7725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.135612][ T7813] loop1: detected capacity change from 0 to 40427 [ 165.143993][ T7813] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 165.145022][ T7725] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.157697][ T7813] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 165.171107][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.178313][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.197162][ T7813] F2FS-fs (loop1): invalid crc value [ 165.206160][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.213462][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.232587][ T7813] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.331235][ T7813] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 165.347811][ T7813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.448398][ T5786] syz-executor: attempt to access beyond end of device [ 165.448398][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.470289][ T5795] Bluetooth: hci2: command tx timeout [ 165.475736][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 165.560163][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.770169][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 165.781823][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.792644][ T7725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.810139][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.840071][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 165.880290][ T23] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 165.889429][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.899707][ T7725] veth0_vlan: entered promiscuous mode [ 165.928064][ T7725] veth1_vlan: entered promiscuous mode [ 165.931473][ T23] usb 4-1: config 0 descriptor?? [ 166.001279][ T7725] veth0_macvtap: entered promiscuous mode [ 166.026046][ T7725] veth1_macvtap: entered promiscuous mode [ 166.065707][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.071806][ T7827] loop2: detected capacity change from 0 to 32768 [ 166.081976][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.103821][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.119161][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.133342][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.147523][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.167068][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.181850][ T7827] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 166.204610][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.225012][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.239558][ T7827] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 166.271107][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.292021][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.340018][ T7725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.363718][ T7725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.376266][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.405547][ T7725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.417947][ T5785] ocfs2: Unmounting device (7,2) on (node local) [ 166.421184][ T23] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0007/input/input15 [ 166.436267][ T7725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.460052][ T7725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.480341][ T7725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.514442][ T23] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0007/input/input16 [ 166.553971][ T23] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 166.747137][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.779781][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.851112][ T8] usb 4-1: USB disconnect, device number 7 [ 166.874530][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.894897][ T7842] loop1: detected capacity change from 0 to 128 [ 166.903152][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.964671][ T7842] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.016208][ T7842] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.037795][ T7846] loop2: detected capacity change from 0 to 4096 [ 167.076827][ T7842] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 167.156160][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.237889][ T7846] ntfs3: loop2: MFT: r=1b, expect seq=1 instead of 0! [ 167.530367][ T5795] Bluetooth: hci2: command tx timeout [ 168.068336][ T7862] loop3: detected capacity change from 0 to 32768 [ 168.087571][ T7862] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 168.099619][ T7862] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.174368][ T7862] XFS (loop3): Ending clean mount [ 168.201723][ T7862] XFS (loop3): Quotacheck needed: Please wait. [ 168.284794][ T7862] XFS (loop3): Quotacheck: Done. [ 168.407542][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 168.426896][ T6455] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.581596][ T7878] loop0: detected capacity change from 0 to 128 [ 168.625209][ T7878] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.680688][ T7878] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.764277][ T7886] loop3: detected capacity change from 0 to 128 [ 168.781202][ T7883] loop1: detected capacity change from 0 to 4096 [ 168.817421][ T7878] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 168.930234][ T7883] ntfs3: loop1: MFT: r=1b, expect seq=1 instead of 0! [ 168.933580][ T7725] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.100112][ T5777] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.190214][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 169.300044][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 169.312160][ T5777] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.320840][ T5777] usb 3-1: config 179 has no interface number 0 [ 169.327183][ T5777] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 169.338654][ T5777] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 169.350128][ T5777] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 169.362007][ T5777] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 169.374020][ T5777] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.388389][ T5777] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.397627][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 169.403051][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.413403][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.424962][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.437348][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 169.447794][ T7888] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.486652][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 169.496605][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.525970][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 169.539528][ T23] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.553953][ T23] usb 4-1: Manufacturer: syz [ 169.567590][ T23] usb 4-1: config 0 descriptor?? [ 169.642386][ T7899] loop0: detected capacity change from 0 to 32768 [ 169.655732][ T7899] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 169.666420][ T7899] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.727144][ T7899] XFS (loop0): Ending clean mount [ 169.747067][ T7899] XFS (loop0): Quotacheck needed: Please wait. [ 169.844235][ T27] usb 3-1: USB disconnect, device number 9 [ 169.844302][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.851843][ T7899] XFS (loop0): Quotacheck: Done. [ 169.858545][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 169.946820][ T7725] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.959274][ T23] rc_core: IR keymap rc-hauppauge not found [ 169.967973][ T23] Registered IR keymap rc-empty [ 169.974251][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.010281][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.051179][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 170.071787][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 170.100983][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.150493][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.180424][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.227705][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.260555][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.302431][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.353127][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.390162][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.430300][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.472949][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 170.523051][ T23] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 170.550342][ T23] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 170.577085][ T23] usb 4-1: USB disconnect, device number 8 [ 170.728465][ T7930] loop1: detected capacity change from 0 to 256 [ 170.760539][ T7930] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d) [ 170.773987][ T7930] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 170.805430][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 170.805447][ T28] audit: type=1800 audit(1759882060.678:197): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.728" name="file2" dev="loop1" ino=1048648 res=0 errno=0 [ 170.891510][ T7936] io-wq is not configured for unbound workers [ 170.947024][ T7938] loop1: detected capacity change from 0 to 1024 [ 171.072203][ T7943] loop0: detected capacity change from 0 to 256 [ 171.079434][ T7943] exfat: Deprecated parameter 'utf8' [ 171.085475][ T7943] exfat: Deprecated parameter 'namecase' [ 171.091455][ T7943] exfat: Deprecated parameter 'namecase' [ 171.097317][ T7943] exfat: Deprecated parameter 'utf8' [ 171.135939][ T7943] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 171.260526][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 171.458468][ T9] usb 3-1: config 0 has an invalid interface number: 104 but max is 0 [ 171.467092][ T9] usb 3-1: config 0 has no interface number 0 [ 171.479007][ T9] usb 3-1: config 0 interface 104 has no altsetting 0 [ 171.497208][ T9] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 171.508391][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.518528][ T9] usb 3-1: Product: syz [ 171.526835][ T9] usb 3-1: Manufacturer: syz [ 171.532976][ T9] usb 3-1: SerialNumber: syz [ 171.544592][ T9] usb 3-1: config 0 descriptor?? [ 171.554895][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 171.569827][ T7946] loop3: detected capacity change from 0 to 40427 [ 171.580814][ T7946] F2FS-fs (loop3): invalid crc value [ 171.591850][ T7946] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.642185][ T7946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 171.730808][ T6455] syz-executor: attempt to access beyond end of device [ 171.730808][ T6455] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.759363][ T7952] loop0: detected capacity change from 0 to 8 [ 171.768157][ T9] gspca_vc032x: reg_r err -71 [ 171.773909][ T6455] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 171.782727][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.788143][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.794161][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.799554][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.817232][ T7954] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 171.823907][ T7954] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 171.834579][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.840308][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.851884][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.867674][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.889263][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.894917][ T28] audit: type=1800 audit(1759882061.758:198): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.747" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 171.920222][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.933436][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.959106][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.959577][ T7952] SQUASHFS error: Failed to read block 0x2fc: -5 [ 171.976733][ T7952] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 171.979211][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 171.984152][ T7952] SQUASHFS error: read_indexes: reading block [2fa:0] [ 171.984224][ T7952] SQUASHFS error: Failed to read block 0xfc: -5 [ 171.989642][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 172.000265][ T7952] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 172.021072][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 172.022916][ T7952] SQUASHFS error: read_indexes: reading block [2fa:0] [ 172.030424][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 172.037733][ T7952] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 172.048848][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 172.056867][ T7952] SQUASHFS error: read_indexes: reading block [2fa:0] [ 172.058990][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 172.069677][ T9] gspca_vc032x: Unknown sensor... [ 172.075536][ T9] vc032x: probe of 3-1:0.104 failed with error -22 [ 172.085058][ T9] usb 3-1: USB disconnect, device number 10 [ 172.663550][ T5795] Bluetooth: hci2: command tx timeout [ 172.731965][ T7974] loop3: detected capacity change from 0 to 256 [ 172.764085][ T7974] exfat: Deprecated parameter 'utf8' [ 172.785751][ T7974] exfat: Deprecated parameter 'namecase' [ 172.805151][ T7974] exfat: Deprecated parameter 'namecase' [ 172.819877][ T7974] exfat: Deprecated parameter 'utf8' [ 172.848714][ T7974] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 172.901304][ T7977] loop0: detected capacity change from 0 to 512 [ 173.320792][ T7971] loop2: detected capacity change from 0 to 40427 [ 173.333833][ T7971] F2FS-fs (loop2): invalid crc value [ 173.345003][ T7971] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.409261][ T7971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 173.471497][ T28] audit: type=1804 audit(1759882063.348:199): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.746" name="/newroot/186/file0/file0" dev="loop2" ino=10 res=1 errno=0 [ 173.502814][ T5785] syz-executor: attempt to access beyond end of device [ 173.502814][ T5785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.517385][ T5785] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 173.570218][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 173.760345][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 173.772483][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.790080][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.805503][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 173.818641][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 173.828762][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 173.838308][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.849884][ T9] usb 1-1: config 0 descriptor?? [ 173.880143][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.986350][ T7998] loop2: detected capacity change from 0 to 1024 [ 173.995994][ T7998] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.019683][ T7998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.024567][ T8] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 174.032189][ T7998] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.048746][ T8] usb 4-1: config 0 has no interface number 0 [ 174.057510][ T8] usb 4-1: config 0 interface 104 has no altsetting 0 [ 174.085069][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 174.089011][ T8] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 174.098080][ T7998] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 174.107694][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.118071][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 174.132932][ T8] usb 4-1: Product: syz [ 174.133467][ T7998] EXT4-fs (loop2): Remounting filesystem read-only [ 174.137396][ T8] usb 4-1: Manufacturer: syz [ 174.146299][ T23] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 174.158869][ T23] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 174.162740][ T8] usb 4-1: SerialNumber: syz [ 174.167972][ T2920] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4868: inode #15: block 1: len 3: ext4_ext_map_blocks returned -5 [ 174.187563][ T23] usb 2-1: Product: syz [ 174.191909][ T23] usb 2-1: Manufacturer: syz [ 174.197460][ T23] usb 2-1: SerialNumber: syz [ 174.209892][ T23] usb 2-1: config 0 descriptor?? [ 174.214921][ T8] usb 4-1: config 0 descriptor?? [ 174.220295][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 174.268482][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.314173][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0008/input/input18 [ 174.395533][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0008/input/input19 [ 174.422961][ T9] kye 0003:0458:5011.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 174.437098][ T8] gspca_vc032x: reg_r err -71 [ 174.446775][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.447933][ T23] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 174.455676][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.465056][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.470548][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.475919][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.481351][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.486714][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.492430][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.497805][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.504332][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.509889][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.516048][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.521623][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.527017][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.532529][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.539583][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.545758][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.551219][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 174.556696][ T8] gspca_vc032x: Unknown sensor... [ 174.564082][ T8] vc032x: probe of 4-1:0.104 failed with error -22 [ 174.577440][ T8] usb 4-1: USB disconnect, device number 9 [ 174.604277][ T27] usb 1-1: USB disconnect, device number 14 [ 175.047691][ T8003] loop2: detected capacity change from 0 to 512 [ 175.064149][ T23] gspca_sunplus: reg_w_riv err -71 [ 175.066207][ T8005] loop3: detected capacity change from 0 to 256 [ 175.076566][ T23] sunplus: probe of 2-1:0.0 failed with error -71 [ 175.087522][ T23] usb 2-1: USB disconnect, device number 9 [ 175.107022][ T8005] FAT-fs (loop3): Directory bread(block 64) failed [ 175.116272][ T8005] FAT-fs (loop3): Directory bread(block 65) failed [ 175.129417][ T8005] FAT-fs (loop3): Directory bread(block 66) failed [ 175.138562][ T8005] FAT-fs (loop3): Directory bread(block 67) failed [ 175.145567][ T8005] FAT-fs (loop3): Directory bread(block 68) failed [ 175.152524][ T8005] FAT-fs (loop3): Directory bread(block 69) failed [ 175.159567][ T8005] FAT-fs (loop3): Directory bread(block 70) failed [ 175.166436][ T8005] FAT-fs (loop3): Directory bread(block 71) failed [ 175.173420][ T8005] FAT-fs (loop3): Directory bread(block 72) failed [ 175.185958][ T8005] FAT-fs (loop3): Directory bread(block 73) failed [ 175.727529][ T8026] loop2: detected capacity change from 0 to 128 [ 175.755719][ T8026] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.777678][ T8026] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.849730][ T8026] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.770: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 175.918139][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.181928][ T8044] loop1: detected capacity change from 0 to 256 [ 176.233478][ T8044] FAT-fs (loop1): Directory bread(block 64) failed [ 176.250276][ T8044] FAT-fs (loop1): Directory bread(block 65) failed [ 176.276335][ T8044] FAT-fs (loop1): Directory bread(block 66) failed [ 176.291171][ T8044] FAT-fs (loop1): Directory bread(block 67) failed [ 176.302821][ T5777] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.310285][ T8044] FAT-fs (loop1): Directory bread(block 68) failed [ 176.317053][ T8044] FAT-fs (loop1): Directory bread(block 69) failed [ 176.340717][ T8044] FAT-fs (loop1): Directory bread(block 70) failed [ 176.348830][ T8044] FAT-fs (loop1): Directory bread(block 71) failed [ 176.366528][ T8044] FAT-fs (loop1): Directory bread(block 72) failed [ 176.373532][ T8044] FAT-fs (loop1): Directory bread(block 73) failed [ 176.490909][ T5777] usb 3-1: Using ep0 maxpacket: 32 [ 176.500093][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.518301][ T5777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.536004][ T5777] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 176.566188][ T5777] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 176.576274][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.598621][ T5777] usb 3-1: config 0 descriptor?? [ 176.670378][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 176.690126][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.784'. [ 176.704375][ T5795] block nbd0: Receive control failed (result -107) [ 176.860248][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 176.879375][ T27] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 176.898913][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.931165][ T27] usb 1-1: config 0 descriptor?? [ 176.948042][ T27] gspca_main: sunplus-2.14.0 probing 041e:400b [ 177.083913][ T5777] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0009/input/input20 [ 177.125935][ T5777] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0009/input/input21 [ 177.159348][ T5777] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 177.758695][ T27] gspca_sunplus: reg_w_riv err -71 [ 177.769196][ T9] usb 3-1: USB disconnect, device number 11 [ 177.773909][ T27] sunplus: probe of 1-1:0.0 failed with error -71 [ 177.806401][ T27] usb 1-1: USB disconnect, device number 15 [ 178.378498][ T8068] loop1: detected capacity change from 0 to 40427 [ 178.421586][ T8068] F2FS-fs (loop1): invalid crc value [ 178.455116][ T8068] F2FS-fs (loop1): Found nat_bits in checkpoint [ 178.606490][ T8068] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 178.634155][ T8077] loop0: detected capacity change from 0 to 8192 [ 178.686760][ T8077] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 178.705427][ T8086] loop2: detected capacity change from 0 to 256 [ 178.721819][ T8077] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 178.739790][ T8077] REISERFS (device loop0): using ordered data mode [ 178.746759][ T8077] reiserfs: using flush barriers [ 178.764471][ T8077] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.801368][ T8077] REISERFS (device loop0): checking transaction log (loop0) [ 178.803215][ T28] audit: type=1800 audit(1759882068.678:200): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.794" name="file1" dev="loop2" ino=1048659 res=0 errno=0 [ 178.850947][ T5786] syz-executor: attempt to access beyond end of device [ 178.850947][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.867730][ T8086] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 178.885667][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 178.899366][ T8086] FAT-fs (loop2): Filesystem has been set read-only [ 178.908288][ T8077] REISERFS (device loop0): Using r5 hash to sort names [ 178.930513][ T8089] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 178.944118][ T8077] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 178.946956][ T8086] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 179.012287][ T8077] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 179.170033][ T28] audit: type=1800 audit(1759882069.038:201): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.790" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 179.474301][ T8097] loop3: detected capacity change from 0 to 2048 [ 179.505341][ T8097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.785386][ T8112] input: syz1 as /devices/virtual/input/input22 [ 179.858854][ T8114] netlink: 277 bytes leftover after parsing attributes in process `syz.1.807'. [ 180.011588][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 180.083730][ T8124] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 180.200585][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 180.220751][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 180.243250][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.256087][ T9] usb 3-1: Product: syz [ 180.260591][ T9] usb 3-1: Manufacturer: syz [ 180.273344][ T9] usb 3-1: SerialNumber: syz [ 180.399277][ T8137] loop1: detected capacity change from 0 to 64 [ 180.511323][ T8139] loop3: detected capacity change from 0 to 1024 [ 180.517801][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 180.540245][ T8139] EXT4-fs (loop3): Test dummy encryption mode enabled [ 180.548003][ T8139] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 180.735869][ T5777] usb 3-1: USB disconnect, device number 12 [ 180.752229][ T5777] usblp0: removed [ 181.319526][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 181.449671][ T8173] macvtap1: entered allmulticast mode [ 181.455665][ T8173] veth0_macvtap: entered allmulticast mode [ 181.724967][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.837'. [ 181.840414][ T8182] program syz.0.838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.949753][ T8185] input: syz0 as /devices/virtual/input/input23 [ 182.159881][ T8189] loop2: detected capacity change from 0 to 1024 [ 182.215126][ T8194] loop0: detected capacity change from 0 to 16 [ 182.222685][ T8189] hfsplus: bad catalog entry type [ 182.230250][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 182.250607][ T8194] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 6000000, please upgrade kernel [ 182.309535][ T48] hfsplus: b-tree write err: -5, ino 4 [ 182.336519][ T8197] loop1: detected capacity change from 0 to 128 [ 182.376838][ T28] audit: type=1800 audit(1759882072.248:202): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.845" name="bus" dev="loop1" ino=1048660 res=0 errno=0 [ 182.821370][ T5777] IPVS: starting estimator thread 0... [ 182.933858][ T8213] IPVS: using max 20 ests per chain, 48000 per kthread [ 183.067026][ T8221] loop2: detected capacity change from 0 to 136 [ 183.095038][ T8194] loop0: detected capacity change from 0 to 32768 [ 183.131726][ T8194] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 183.157110][ T8194] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.167971][ T8221] rock: directory entry would overflow storage [ 183.176222][ T8221] rock: sig=0x4f50, size=4, remaining=3 [ 183.183516][ T8221] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 183.233979][ T8194] XFS (loop0): Ending clean mount [ 183.245680][ T8194] XFS (loop0): Quotacheck needed: Please wait. [ 183.320088][ T8194] XFS (loop0): Quotacheck: Done. [ 183.408254][ T8237] loop2: detected capacity change from 0 to 8192 [ 183.429346][ T7725] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.429572][ T8237] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.461666][ T8237] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 183.473270][ T8237] REISERFS (device loop2): using journaled data mode [ 183.481098][ T8237] reiserfs: using flush barriers [ 183.496746][ T8237] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.520823][ T8237] REISERFS (device loop2): checking transaction log (loop2) [ 183.534337][ T8237] REISERFS (device loop2): Using r5 hash to sort names [ 183.546071][ T8237] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 183.565929][ T8237] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 183.610332][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 183.832026][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.846911][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.860336][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.879100][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.896358][ T9] usb 2-1: Product: syz [ 183.910264][ T9] usb 2-1: Manufacturer: syz [ 183.915074][ T9] usb 2-1: SerialNumber: syz [ 184.056134][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.866'. [ 184.167110][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 184.179645][ T9] usb 2-1: 0:2 : does not exist [ 184.189570][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 184.234661][ T9] usb 2-1: USB disconnect, device number 10 [ 184.345512][ T8262] loop3: detected capacity change from 0 to 256 [ 184.372943][ T8262] FAT-fs (loop3): Directory bread(block 64) failed [ 184.385488][ T8262] FAT-fs (loop3): Directory bread(block 65) failed [ 184.394461][ T8262] FAT-fs (loop3): Directory bread(block 66) failed [ 184.402534][ T8262] FAT-fs (loop3): Directory bread(block 67) failed [ 184.409218][ T8262] FAT-fs (loop3): Directory bread(block 68) failed [ 184.427482][ T8262] FAT-fs (loop3): Directory bread(block 69) failed [ 184.437834][ T8262] FAT-fs (loop3): Directory bread(block 70) failed [ 184.449136][ T8262] FAT-fs (loop3): Directory bread(block 71) failed [ 184.457192][ T8262] FAT-fs (loop3): Directory bread(block 72) failed [ 184.466125][ T8262] FAT-fs (loop3): Directory bread(block 73) failed [ 184.486029][ T8257] loop2: detected capacity change from 0 to 32768 [ 184.494801][ T8231] XFS (loop0): SB summary counter sanity check failed [ 184.505788][ T8231] XFS (loop0): Metadata corruption detected at xfs_sb_write_verify+0x177/0x370, xfs_sb block 0x0 [ 184.524994][ T8231] XFS (loop0): Unmount and run xfs_repair [ 184.535488][ T8231] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 184.550342][ T8257] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 184.560197][ T8231] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 184.569162][ T8231] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 184.584119][ T8231] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 184.594933][ T8231] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 11 40 ...............@ [ 184.612646][ T8231] 00000040: 00 00 00 00 00 00 11 41 00 00 00 00 00 00 11 42 .......A.......B [ 184.625642][ T8231] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 184.639337][ T8231] 00000060: 00 00 04 3e b4 f5 02 00 04 00 00 04 00 00 00 00 ...>............ [ 184.644276][ T8272] macvlan2: entered allmulticast mode [ 184.660105][ T8272] veth1_vlan: entered allmulticast mode [ 184.668294][ T8231] 00000070: 00 00 00 00 00 00 00 00 0c 09 0a 02 0c 00 00 0a ................ [ 184.668969][ T8272] veth1_vlan: left allmulticast mode [ 184.684381][ T8231] XFS (loop0): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x203/0x670 (fs/xfs/xfs_buf.c:1559). Shutting down filesystem. [ 184.702210][ T8231] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 184.772647][ T8257] XFS (loop2): Ending clean mount [ 185.095695][ T5785] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.650205][ T5777] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 186.840082][ T5777] usb 1-1: Using ep0 maxpacket: 16 [ 186.847444][ T5777] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 186.860066][ T5777] usb 1-1: config 0 has no interface number 0 [ 186.877871][ T5777] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=90.06 [ 186.900100][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.919884][ T5777] usb 1-1: config 0 descriptor?? [ 186.936292][ T5777] asix: probe of 1-1:0.52 failed with error -22 [ 187.132763][ T5795] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 187.144663][ T5795] CPU: 0 PID: 5795 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 187.152297][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.162398][ T5795] Workqueue: hci1 hci_rx_work [ 187.167217][ T5795] Call Trace: [ 187.170515][ T5795] [ 187.173479][ T5795] dump_stack_lvl+0x16c/0x230 [ 187.178186][ T5795] ? show_regs_print_info+0x20/0x20 [ 187.183414][ T5795] ? load_image+0x3b0/0x3b0 [ 187.187948][ T5795] sysfs_create_dir_ns+0x256/0x280 [ 187.193093][ T5795] ? hci_rx_work+0x43a/0xd80 [ 187.197717][ T5795] ? sysfs_warn_dup+0xa0/0xa0 [ 187.202444][ T5795] ? do_raw_spin_unlock+0x121/0x230 [ 187.207687][ T5795] kobject_add_internal+0x6b8/0xc70 [ 187.212934][ T5795] kobject_add+0x156/0x220 [ 187.217742][ T5795] ? __rwlock_init+0x150/0x150 [ 187.222550][ T5795] ? kobject_init+0x1e0/0x1e0 [ 187.227352][ T5795] ? _raw_spin_unlock+0x28/0x40 [ 187.232318][ T5795] ? get_device_parent+0x366/0x390 [ 187.237460][ T5795] device_add+0x408/0xc20 [ 187.241825][ T5795] hci_conn_add_sysfs+0xd5/0x1e0 [ 187.246794][ T5795] le_conn_complete_evt+0xf36/0x1500 [ 187.252111][ T5795] ? hci_event_packet+0x4a7/0x1210 [ 187.257350][ T5795] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 187.263623][ T5795] ? __copy_skb_header+0xa7/0x550 [ 187.268694][ T5795] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 187.274356][ T5795] ? skb_pull_data+0xfb/0x200 [ 187.279244][ T5795] hci_le_conn_complete_evt+0x187/0x440 [ 187.284820][ T5795] ? hci_remote_host_features_evt+0x160/0x160 [ 187.291004][ T5795] hci_event_packet+0x795/0x1210 [ 187.295981][ T5795] ? bis_list+0x290/0x290 [ 187.300344][ T5795] ? lockdep_hardirqs_on+0x98/0x150 [ 187.305598][ T5795] ? hci_send_to_monitor+0xd7/0x4f0 [ 187.310900][ T5795] hci_rx_work+0x43a/0xd80 [ 187.315584][ T5795] ? process_scheduled_works+0x957/0x15b0 [ 187.321342][ T5795] process_scheduled_works+0xa45/0x15b0 [ 187.326968][ T5795] ? assign_work+0x400/0x400 [ 187.331944][ T5795] ? assign_work+0x39e/0x400 [ 187.336649][ T5795] worker_thread+0xa55/0xfc0 [ 187.341330][ T5795] kthread+0x2fa/0x390 [ 187.345419][ T5795] ? pr_cont_work+0x560/0x560 [ 187.350146][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 187.354794][ T5795] ret_from_fork+0x48/0x80 [ 187.359261][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 187.364233][ T5795] ret_from_fork_asm+0x11/0x20 [ 187.369269][ T5795] [ 187.374970][ T5795] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.389409][ T5795] Bluetooth: hci1: failed to register connection device [ 187.430037][ T8328] loop3: detected capacity change from 0 to 32768 [ 187.436399][ T5857] usb 1-1: USB disconnect, device number 16 [ 187.465757][ T8328] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.525898][ T8328] XFS (loop3): Ending clean mount [ 187.625668][ T6455] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.800564][ T27] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 188.002543][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.030788][ T27] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.039780][ T27] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 188.090214][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.112080][ T27] usb 3-1: config 0 descriptor?? [ 188.120645][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 188.129237][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 188.156840][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 188.197187][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 188.207725][ T27] usb 3-1: media controller created [ 188.217090][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.237518][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 188.247346][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 188.259373][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 188.287880][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 188.300096][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.440211][ T5857] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 188.463480][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 188.469861][ T23] dvb-usb: error while querying for an remote control event. [ 188.600616][ T27] usb 3-1: USB disconnect, device number 13 [ 188.622510][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 188.633613][ T5857] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.649305][ T5857] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.665776][ T5857] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.680072][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.688344][ T5857] usb 1-1: Product: syz [ 188.693056][ T5857] usb 1-1: Manufacturer: syz [ 188.697813][ T5857] usb 1-1: SerialNumber: syz [ 188.729672][ T8370] loop1: detected capacity change from 0 to 64 [ 188.927513][ T5857] usb 1-1: 0:2 : does not exist [ 188.941300][ T5857] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 188.992260][ T5857] usb 1-1: USB disconnect, device number 17 [ 189.117423][ T8382] netlink: 340 bytes leftover after parsing attributes in process `syz.1.908'. [ 190.008944][ T8412] macvlan2: entered allmulticast mode [ 190.018731][ T8412] veth1_vlan: entered allmulticast mode [ 190.032987][ T8412] veth1_vlan: left allmulticast mode [ 190.185463][ T8418] loop3: detected capacity change from 0 to 64 [ 191.044651][ T8450] loop3: detected capacity change from 0 to 512 [ 191.053407][ T8450] EXT4-fs: Ignoring removed bh option [ 191.061861][ T8450] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 191.083649][ T8450] EXT4-fs (loop3): 1 truncate cleaned up [ 191.094830][ T8450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.179126][ T6455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.270237][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.450280][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 191.457948][ T27] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 191.466252][ T27] usb 3-1: config 0 has no interface number 0 [ 191.472530][ T27] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=90.06 [ 191.481751][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.492357][ T27] usb 3-1: config 0 descriptor?? [ 191.499442][ T27] asix: probe of 3-1:0.52 failed with error -22 [ 191.768442][ T27] usb 3-1: USB disconnect, device number 14 [ 191.801060][ T8462] loop0: detected capacity change from 0 to 64 [ 192.811489][ T27] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 193.005502][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.015916][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 193.025020][ T27] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 193.034286][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.048779][ T27] usb 1-1: config 0 descriptor?? [ 193.057330][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 193.064131][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 193.072905][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 193.082376][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 193.089522][ T27] usb 1-1: media controller created [ 193.112055][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.141252][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 193.145874][ T8496] loop2: detected capacity change from 0 to 512 [ 193.147135][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 193.156133][ T8496] EXT4-fs: Ignoring removed bh option [ 193.180646][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 193.192222][ T8496] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 193.205361][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 193.214216][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 193.232934][ T8496] EXT4-fs (loop2): 1 truncate cleaned up [ 193.248876][ T8496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.300936][ T8501] sctp: [Deprecated]: syz.3.962 (pid 8501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.300936][ T8501] Use struct sctp_sack_info instead [ 193.370283][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 193.379601][ T5857] dvb-usb: error while querying for an remote control event. [ 193.419755][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.550447][ T5857] dvb-usb: bulk message failed: -22 (1/0) [ 193.560101][ T5857] dvb-usb: error while querying for an remote control event. [ 193.609154][ T8505] loop3: detected capacity change from 0 to 4096 [ 193.639546][ T8505] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 193.661314][ T8505] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 193.680110][ T8505] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 193.710263][ T8505] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 193.726045][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 193.732396][ T27] dvb-usb: error while querying for an remote control event. [ 193.784485][ T8505] ntfs: volume version 3.1. [ 193.792600][ T5857] usb 1-1: USB disconnect, device number 18 [ 193.832080][ T5857] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 194.347695][ T8522] sctp: [Deprecated]: syz.2.971 (pid 8522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.347695][ T8522] Use struct sctp_sack_info instead [ 194.495691][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 194.574932][ T8529] loop0: detected capacity change from 0 to 1024 [ 194.706693][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.714559][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.782000][ T8533] loop3: detected capacity change from 0 to 4096 [ 195.168586][ T8547] sctp: [Deprecated]: syz.1.982 (pid 8547) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.168586][ T8547] Use struct sctp_sack_info instead [ 195.258661][ T8550] loop0: detected capacity change from 0 to 4096 [ 195.303074][ T8550] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 195.339847][ T8550] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 195.348809][ T8550] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 195.388760][ T8550] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 195.451667][ T8550] ntfs: volume version 3.1. [ 195.849465][ T8569] loop2: detected capacity change from 0 to 1024 [ 195.897866][ T8555] loop1: detected capacity change from 0 to 32768 [ 195.914063][ T8555] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.987 (8555) [ 195.951653][ T8555] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.969258][ T8555] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 195.980140][ T8555] BTRFS info (device loop1): using free space tree [ 196.036587][ T8555] BTRFS info (device loop1): enabling ssd optimizations [ 196.050694][ T8555] BTRFS info (device loop1): auto enabling async discard [ 196.148118][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.199163][ T8594] netlink: 277 bytes leftover after parsing attributes in process `syz.2.999'. [ 196.540712][ T8599] loop2: detected capacity change from 0 to 4096 [ 196.597708][ T8599] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 196.625444][ T8599] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 196.670103][ T8599] ntfs: volume version 3.1. [ 197.009134][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 197.367389][ T8621] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1009'. [ 197.403208][ T8623] loop1: detected capacity change from 0 to 4096 [ 197.483773][ T8623] ntfs: volume version 3.1. [ 197.958592][ T8629] loop3: detected capacity change from 0 to 32768 [ 197.968641][ T8629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1015 (8629) [ 197.984641][ T8629] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.995017][ T8629] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 198.003859][ T8629] BTRFS info (device loop3): using free space tree [ 198.034231][ T8629] BTRFS info (device loop3): enabling ssd optimizations [ 198.044762][ T788] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 198.044809][ T8629] BTRFS info (device loop3): auto enabling async discard [ 198.138298][ T6455] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.253571][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.292211][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 198.317744][ T788] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 198.327376][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.372123][ T788] usb 2-1: config 0 descriptor?? [ 198.413520][ T788] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 198.442074][ T788] dvb-usb: bulk message failed: -22 (3/0) [ 198.483615][ T788] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 198.513635][ T788] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 198.520828][ T788] usb 2-1: media controller created [ 198.564630][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.592615][ T788] dvb-usb: bulk message failed: -22 (6/0) [ 198.613962][ T8666] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1024'. [ 198.617065][ T788] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 198.647358][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 198.692551][ T788] dvb-usb: schedule remote query interval to 150 msecs. [ 198.699640][ T788] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 198.845997][ T788] dvb-usb: bulk message failed: -22 (1/0) [ 198.857610][ T788] dvb-usb: error while querying for an remote control event. [ 199.026108][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 199.031949][ T9] dvb-usb: error while querying for an remote control event. [ 199.097430][ T27] usb 2-1: USB disconnect, device number 11 [ 199.131979][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 199.742515][ T8698] loop2: detected capacity change from 0 to 512 [ 199.777923][ T8698] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.1038: corrupted in-inode xattr: invalid ea_ino [ 199.813675][ T8698] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1038: couldn't read orphan inode 15 (err -117) [ 199.829081][ T8698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.952825][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.079159][ T8707] loop3: detected capacity change from 0 to 4096 [ 200.107572][ T8707] __ntfs_error: 6 callbacks suppressed [ 200.107590][ T8707] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 200.126334][ T8707] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 200.136860][ T8707] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 200.168900][ T8707] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 200.246311][ T8707] ntfs: volume version 3.1. [ 200.610370][ T8723] loop2: detected capacity change from 0 to 128 [ 200.681585][ T8723] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 200.714568][ T8723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.003321][ T8734] loop0: detected capacity change from 0 to 128 [ 201.019290][ T8734] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 201.040816][ T8734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.376989][ T8748] loop2: detected capacity change from 0 to 128 [ 201.562695][ T5795] Bluetooth: hci1: command 0x0406 tx timeout [ 201.842623][ T8758] overlay: filesystem on ./file0 not supported as upperdir [ 201.944671][ T8763] loop1: detected capacity change from 0 to 128 [ 201.967821][ T8763] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 201.987569][ T8763] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.257125][ T8777] loop3: detected capacity change from 0 to 128 [ 202.850338][ T8793] overlay: filesystem on ./file0 not supported as upperdir [ 203.336955][ T8797] loop3: detected capacity change from 0 to 32768 [ 203.348262][ T8797] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1078 (8797) [ 203.379957][ T8797] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 203.400663][ T8797] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 203.416791][ T8797] BTRFS info (device loop3): using free space tree [ 203.448055][ T8806] loop0: detected capacity change from 0 to 512 [ 203.492038][ T8806] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1082: corrupted in-inode xattr: invalid ea_ino [ 203.512199][ T8806] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1082: couldn't read orphan inode 15 (err -117) [ 203.522125][ T8797] BTRFS info (device loop3): enabling ssd optimizations [ 203.536112][ T8806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.540795][ T8797] BTRFS info (device loop3): auto enabling async discard [ 203.612181][ T7725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.695039][ T8826] loop0: detected capacity change from 0 to 128 [ 203.812801][ T8804] loop1: detected capacity change from 0 to 32768 SYZFAIL: posix_spawnp failed (errno 8: Exec format error) [ 205.176442][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.278232][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.370768][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.435657][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.349389][ T35] hsr_slave_0: left promiscuous mode [ 206.357408][ T35] hsr_slave_1: left promiscuous mode [ 206.364010][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.371636][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.380343][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.387831][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.396026][ T35] bridge_slave_1: left allmulticast mode [ 206.401979][ T35] bridge_slave_1: left promiscuous mode [ 206.408076][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.417641][ T35] bridge_slave_0: left allmulticast mode [ 206.423586][ T35] bridge_slave_0: left promiscuous mode [ 206.429609][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.463362][ T35] veth0_macvtap: left allmulticast mode [ 206.469521][ T35] veth1_macvtap: left promiscuous mode [ 206.475180][ T35] veth0_macvtap: left promiscuous mode [ 206.480800][ T35] veth1_vlan: left promiscuous mode [ 206.488307][ T35] veth0_vlan: left promiscuous mode [ 207.186848][ T35] team0 (unregistering): Port device team_slave_1 removed [ 207.249260][ T35] team0 (unregistering): Port device team_slave_0 removed [ 207.304271][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.364574][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.071191][ T35] bond0 (unregistering): Released all slaves [ 208.431107][ T35] IPVS: stop unused estimator thread 0... [ 208.525275][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.609144][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.684500][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.761540][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.761106][ T35] hsr_slave_0: left promiscuous mode [ 209.768601][ T35] hsr_slave_1: left promiscuous mode [ 209.778592][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.786820][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.795273][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.802880][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.811153][ T35] bridge_slave_1: left allmulticast mode [ 209.816860][ T35] bridge_slave_1: left promiscuous mode [ 209.822754][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.833155][ T35] bridge_slave_0: left allmulticast mode [ 209.839970][ T35] bridge_slave_0: left promiscuous mode [ 209.845761][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.874265][ T35] veth1_macvtap: left promiscuous mode [ 209.880038][ T35] veth0_macvtap: left promiscuous mode [ 209.887709][ T35] veth1_vlan: left promiscuous mode [ 209.893176][ T35] veth0_vlan: left promiscuous mode [ 210.597775][ T35] team0 (unregistering): Port device team_slave_1 removed [ 210.662693][ T35] team0 (unregistering): Port device team_slave_0 removed [ 210.719039][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.729126][ T35] bond_slave_1 (unregistering): left allmulticast mode [ 210.784629][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.794034][ T35] bond_slave_0 (unregistering): left allmulticast mode [ 211.422769][ T35] bond0 (unregistering): Released all slaves