last executing test programs: 2m17.935308075s ago: executing program 1 (id=2007): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r0, 0x2def, 0x0, 0xe, 0x0, 0x0) 2m17.771196878s ago: executing program 1 (id=2010): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="c000000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800b000100677265746170"], 0xc0}}, 0x0) 2m17.567833571s ago: executing program 1 (id=2012): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3bf}}}}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000580)}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m15.709699081s ago: executing program 1 (id=2031): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[], 0xde, 0x4b1, &(0x7f0000001d00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000380)='./file0\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) 2m15.378251247s ago: executing program 1 (id=2034): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0xffffffffffffff96, 0x0, 0x8, {0x0, @dev, @rand_addr=0x64010102}}}], 0x20}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) 2m14.5615969s ago: executing program 1 (id=2042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001480)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xfd, 0x9, 0x2, 0x1, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0x1, 0x1, 0xfff9, 0x3]}}, {{0x1c, 0x1, {0x2, 0x3, 0x7fff, 0x7, 0x1, 0xf, 0x4}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x90}}, 0x0) 2m14.152501387s ago: executing program 32 (id=2042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001480)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xfd, 0x9, 0x2, 0x1, 0x4, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0x1, 0x1, 0xfff9, 0x3]}}, {{0x1c, 0x1, {0x2, 0x3, 0x7fff, 0x7, 0x1, 0xf, 0x4}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x90}}, 0x0) 8.906112255s ago: executing program 0 (id=3200): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 8.627402869s ago: executing program 0 (id=3204): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000800)=@caif=@rfm={0x25, 0x14, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0) 8.325889595s ago: executing program 0 (id=3216): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sendmmsg$unix(r1, 0x0, 0x0, 0x8000) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfd, {"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", 0x1000}}, 0x1006) 8.120280768s ago: executing program 0 (id=3210): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x3210842, &(0x7f0000001800)={[{@errors_remount}, {@noquota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@errors_continue}, {@noquota}, {@quota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x24, 0x6297, &(0x7f00000089c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 6.838826259s ago: executing program 0 (id=3222): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 5.471972841s ago: executing program 3 (id=3227): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$eJzs2zFrE2EYB/DnahrTOiSDkzjc6BSafoIGqSAGBCWDgqDYBqQnBQsBHWw3B7+EH8bBVT+JYwfhpLk0aUKEGpocJL/fkodc/rnnfcMleQJ5ff/90cHxSe9V70fUkiQ29iKN8yQasRGXzgIAWCXneR6/8zzPb5/F1rfI87zsjgCARfP5DwDr5/mLl0/anc7+szStRWRf+t1+t7gtjrd78S6yOIydqMefuPiCMFTUjx539nfSgUZ8zU6H+dN+99ZkvhX1aMzOt4p8OpnfjO2r+d2ox93Z+d2Z+Wo8qI7ymxFRj19v4ziyOIiL7Dj/uZWmD592pvJ3Bo8DAACAVdBMRwbzezUm5/dmc/L4eD4u8u3k2r8PTM3XlbhXKXftALCuTj5+OnqTZYcf5ihqw+eYM3694ud2cZIFnuKGisstHd2zt4z9+d+ierXDqWJrwa1Wlr7kJCLK2vDvEVH6yz3XRT0oSngzApZqfPWX3QkAAAAAAAAAAAAAAPAvy/hfUdlrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9/A0AAP//W1+CbQ==") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x4400008c) chmod(&(0x7f0000000080)='./file0\x00', 0x1) 5.257798254s ago: executing program 0 (id=3228): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.138701486s ago: executing program 3 (id=3229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.740427383s ago: executing program 33 (id=3228): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4.697328894s ago: executing program 3 (id=3233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000006a40), 0x0, 0x120, 0x0) 4.578573466s ago: executing program 3 (id=3235): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) 3.816697388s ago: executing program 3 (id=3238): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011) 3.536426073s ago: executing program 2 (id=3239): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) 3.425181764s ago: executing program 4 (id=3240): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f0000000100)={0x11, 0x3}, 0x14) 3.282039307s ago: executing program 2 (id=3241): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) 3.262668287s ago: executing program 4 (id=3242): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) tkill(r0, 0x11) 2.967077142s ago: executing program 2 (id=3243): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x6, "4f82509a85b7"}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 2.958973672s ago: executing program 4 (id=3244): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0xc0800) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa2, 0xe5, 0xed, 0x20, 0x7c4, 0xa004, 0xb4df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x8a, 0x0, 0x2, 0x24, 0xda, 0xe5, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 2.666344517s ago: executing program 3 (id=3245): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x4811, &(0x7f0000000400)={[{@noautodefrag}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x25, 0x33, 0x37, 0x37, 0x31, 0x1, 0x74, 0x65]}}, {@space_cache}, {@noinode_cache}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@flushoncommit}, {@ssd}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x32, 0x6b, 0x38, 0x35, 0x39, 0x0]}}, {@autodefrag}]}, 0xff, 0x50f3, &(0x7f000000a2c0)="$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") open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1260a9, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000c40)) 2.665057677s ago: executing program 2 (id=3246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000978000/0x2000)=nil, 0x2000, 0x4, 0x0, 0x4000000000000000, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 939.388045ms ago: executing program 4 (id=3247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 939.156245ms ago: executing program 2 (id=3248): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = fcntl$dupfd(r0, 0x0, r0) syz_fuse_handle_req(r1, &(0x7f0000000840)="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", 0x2000, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 719.414769ms ago: executing program 2 (id=3249): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x34, r0, 0x1, 0x10000000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x54a1a7b10b474a1b}, 0x8004) 529.838621ms ago: executing program 4 (id=3250): r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3251): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x4014) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) kernel console output (not intermixed with test programs): 0): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12246 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c78e929 code=0x7ffc0000 [ 350.085424][ T5087] Bluetooth: hci1: command tx timeout [ 350.162750][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2122'. [ 350.560357][T12271] loop4: detected capacity change from 0 to 16 [ 350.579883][T12271] erofs: (device loop4): mounted with root inode @ nid 36. [ 350.587629][ T5865] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 350.813057][ T5865] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 350.822374][ T5865] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 350.833143][ T5865] usb 3-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 350.856903][ T5865] usb 3-1: config 220 has no interface number 2 [ 350.873912][ T5865] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 350.919750][ T5865] usb 3-1: config 220 interface 0 has no altsetting 0 [ 350.943855][ T5865] usb 3-1: config 220 interface 76 has no altsetting 0 [ 350.971115][ T5865] usb 3-1: config 220 interface 1 has no altsetting 0 [ 350.991423][ T5865] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 351.001047][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.009105][ T5865] usb 3-1: Product: syz [ 351.032579][ T5865] usb 3-1: Manufacturer: syz [ 351.047176][ T5865] usb 3-1: SerialNumber: syz [ 351.089962][T12285] loop4: detected capacity change from 0 to 64 [ 351.189029][T12285] hfs: walked past end of dir [ 351.226491][T12276] loop0: detected capacity change from 0 to 32768 [ 351.238643][T12276] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2131 (12276) [ 351.261646][T12276] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 351.286869][ T5865] usb 3-1: selecting invalid altsetting 0 [ 351.290417][T12276] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 351.296650][ T5865] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 351.309874][ T5865] usb 3-1: No valid video chain found. [ 351.326565][T12276] BTRFS info (device loop0): enabling auto defrag [ 351.333099][T12276] BTRFS info (device loop0): doing ref verification [ 351.337919][ T5865] usb 3-1: selecting invalid altsetting 0 [ 351.354107][ T5865] usbtest: probe of 3-1:220.1 failed with error -22 [ 351.362351][T12276] BTRFS info (device loop0): use no compression [ 351.368982][T12276] BTRFS info (device loop0): force clearing of disk cache [ 351.379676][T12276] BTRFS info (device loop0): setting nodatacow, compression disabled [ 351.389064][T12276] BTRFS info (device loop0): disabling free space tree [ 351.397638][ T5865] usb 3-1: USB disconnect, device number 20 [ 351.511996][T12276] BTRFS info (device loop0): enabling ssd optimizations [ 351.535186][T12276] BTRFS info (device loop0): auto enabling async discard [ 351.558265][T12276] BTRFS info (device loop0): rebuilding free space tree [ 351.586908][T12276] BTRFS info (device loop0): disabling free space tree [ 351.614950][T12276] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 351.626086][T12276] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 351.899763][ T5777] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 352.083310][T12322] loop4: detected capacity change from 0 to 1764 [ 352.199167][T12322] loop4: detected capacity change from 0 to 256 [ 352.473826][T12336] loop4: detected capacity change from 0 to 256 [ 352.525454][T12332] loop3: detected capacity change from 0 to 4096 [ 352.966436][ T5865] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 353.171831][ T5865] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 353.196616][ T5865] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 353.216216][ T5865] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 353.237450][ T5865] usb 5-1: config 220 has no interface number 2 [ 353.243856][ T5865] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 353.262470][ T5865] usb 5-1: config 220 interface 0 has no altsetting 0 [ 353.272455][ T5865] usb 5-1: config 220 interface 76 has no altsetting 0 [ 353.286555][ T5865] usb 5-1: config 220 interface 1 has no altsetting 0 [ 353.294185][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 353.299098][ T5865] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 353.319017][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.327838][ T5865] usb 5-1: Product: syz [ 353.337835][ T5865] usb 5-1: Manufacturer: syz [ 353.342907][ T5865] usb 5-1: SerialNumber: syz [ 353.457850][T12348] loop2: detected capacity change from 0 to 32768 [ 353.517416][T12364] loop0: detected capacity change from 0 to 128 [ 353.526032][T12364] FAT-fs (loop0): Unrecognized mount option "dos1xfloppy=win95" or missing value [ 353.558471][ T12] kworker/u4:1: attempt to access beyond end of device [ 353.558471][ T12] loop2: rw=1, sector=2621792, nr_sectors = 8 limit=32768 [ 353.565705][ T5865] usb 5-1: selecting invalid altsetting 0 [ 353.594826][ T5865] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 353.595021][ T112] blkno = 5002c, nblocks = 1 [ 353.603161][ T5865] usb 5-1: No valid video chain found. [ 353.624754][ T5865] usb 5-1: selecting invalid altsetting 0 [ 353.631874][ T112] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 353.631874][ T112] [ 353.647405][ T5865] usbtest: probe of 5-1:220.1 failed with error -22 [ 353.653236][ T112] ERROR: (device loop2): remounting filesystem as read-only [ 353.675314][ T5865] usb 5-1: USB disconnect, device number 2 [ 353.877341][T12371] loop0: detected capacity change from 0 to 256 [ 353.903899][T12371] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 355.081849][ T5843] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 355.282369][ T5843] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 355.301058][ T5843] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 355.312141][ T5843] usb 3-1: Product: syz [ 355.318901][ T5843] usb 3-1: Manufacturer: syz [ 355.323847][ T5843] usb 3-1: SerialNumber: syz [ 355.336977][ T5843] usb 3-1: config 0 descriptor?? [ 355.926861][ T5843] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 356.114165][ T5843] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 356.144465][ T5843] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 356.173159][ T5843] asix: probe of 3-1:0.0 failed with error -71 [ 356.210521][ T5843] usb 3-1: USB disconnect, device number 21 [ 356.552568][T12401] loop3: detected capacity change from 0 to 2048 [ 357.061940][T12426] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2191'. [ 357.428270][T12440] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 357.438086][T12440] netlink: 'syz.3.2197': attribute type 4 has an invalid length. [ 357.446203][T12440] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2197'. [ 357.827595][T12424] loop0: detected capacity change from 0 to 32768 [ 357.858358][T12424] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 357.868343][T12424] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 357.906759][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.990553][T12424] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 358.031031][ T5815] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 358.043387][ T5815] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 358.129552][ T5815] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 92ms [ 358.138740][ T5815] gfs2: fsid=syz:syz.0: jid=0: Done [ 358.152497][T12424] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 358.512582][ T5843] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 358.707814][ T5843] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.732782][ T5843] usb 5-1: no configurations [ 358.741738][ T5843] usb 5-1: can't read configurations, error -22 [ 358.895895][T12479] loop3: detected capacity change from 0 to 512 [ 358.944606][T12479] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 358.957673][T12479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.085539][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.235119][T12491] loop3: detected capacity change from 0 to 1024 [ 359.535428][T12502] loop4: detected capacity change from 0 to 512 [ 359.544268][T12502] EXT4-fs: Ignoring removed oldalloc option [ 359.574990][T12487] loop2: detected capacity change from 0 to 32768 [ 359.583836][T12502] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.2224: error while reading EA inode 32 err=-116 [ 359.588011][T12487] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2218 (12487) [ 359.624276][T12487] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 359.650481][T12507] loop0: detected capacity change from 0 to 64 [ 359.658242][T12502] EXT4-fs (loop4): Remounting filesystem read-only [ 359.658977][T12487] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 359.674904][T12487] BTRFS info (device loop2): enabling auto defrag [ 359.681496][T12487] BTRFS info (device loop2): doing ref verification [ 359.688364][T12487] BTRFS info (device loop2): use no compression [ 359.691204][T12502] EXT4-fs (loop4): 1 orphan inode deleted [ 359.694636][T12487] BTRFS info (device loop2): force clearing of disk cache [ 359.694666][T12487] BTRFS info (device loop2): setting nodatacow, compression disabled [ 359.694685][T12487] BTRFS info (device loop2): disabling free space tree [ 359.728057][T12502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.748712][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 359.748730][ T28] audit: type=1800 audit(1750791005.765:143): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2226" name="file2" dev="loop0" ino=21 res=0 errno=0 [ 359.782870][T12507] hfs: request for non-existent node 131072 in B*Tree [ 359.791256][T12507] hfs: request for non-existent node 131072 in B*Tree [ 359.847888][T12052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.876866][T12487] BTRFS info (device loop2): enabling ssd optimizations [ 359.886462][T12487] BTRFS info (device loop2): auto enabling async discard [ 359.896661][T12487] BTRFS info (device loop2): rebuilding free space tree [ 359.938010][T12487] BTRFS info (device loop2): disabling free space tree [ 359.945316][T12527] loop0: detected capacity change from 0 to 256 [ 359.952203][T12487] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 359.962680][T12487] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 360.029234][T12527] FAT-fs (loop0): Directory bread(block 64) failed [ 360.049920][T12527] FAT-fs (loop0): Directory bread(block 65) failed [ 360.083719][T12527] FAT-fs (loop0): Directory bread(block 66) failed [ 360.102579][T12527] FAT-fs (loop0): Directory bread(block 67) failed [ 360.125764][T12527] FAT-fs (loop0): Directory bread(block 68) failed [ 360.148912][T12527] FAT-fs (loop0): Directory bread(block 69) failed [ 360.173841][T12527] FAT-fs (loop0): Directory bread(block 70) failed [ 360.178715][T12531] tap0: tun_chr_ioctl cmd 1074025677 [ 360.197694][T12531] tap0: linktype set to 825 [ 360.197709][T12527] FAT-fs (loop0): Directory bread(block 71) failed [ 360.197839][T12527] FAT-fs (loop0): Directory bread(block 72) failed [ 360.216734][T12527] FAT-fs (loop0): Directory bread(block 73) failed [ 360.238235][ T5786] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 362.394488][T12572] loop0: detected capacity change from 0 to 32768 [ 362.449853][T12572] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 362.531756][T12572] XFS (loop0): Ending clean mount [ 362.567746][T12572] XFS (loop0): Quotacheck needed: Please wait. [ 362.645166][T12606] loop2: detected capacity change from 0 to 164 [ 362.670615][T12572] XFS (loop0): Quotacheck: Done. [ 362.769507][T12599] loop4: detected capacity change from 0 to 8192 [ 362.834983][T12588] loop3: detected capacity change from 0 to 40427 [ 362.843158][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 362.860317][T12599] loop4: p3 < > p4 < > [ 362.865804][T12599] loop4: partition table partially beyond EOD, truncated [ 362.875605][T12599] loop4: p3 start 100859904 is beyond EOD, truncated [ 363.492584][T12622] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 363.525284][T12626] loop0: detected capacity change from 0 to 128 [ 363.582557][ T5764] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 363.784208][ T5764] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.802885][ T5764] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 363.831142][T12636] loop3: detected capacity change from 0 to 512 [ 363.840976][ T5764] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 363.857057][ T5764] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.868260][ T5764] usb 5-1: config 0 descriptor?? [ 363.885672][ T5764] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 364.112103][ T5764] usb 5-1: USB disconnect, device number 5 [ 364.224432][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'. [ 364.266114][T12650] loop3: detected capacity change from 0 to 512 [ 364.298763][T12650] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.394917][T12650] Trying to write to read-only block-device loop3 [ 364.454373][T12650] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 364.477684][T12650] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 364.513816][T12663] loop0: detected capacity change from 0 to 16 [ 364.534009][T12663] erofs: (device loop0): mounted with root inode @ nid 36. [ 364.552324][ T5788] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 364.784930][ T5764] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 364.800219][T12675] loop4: detected capacity change from 0 to 512 [ 364.869614][T12675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.901192][T12675] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.977453][T12675] EXT4-fs error (device loop4): ext4_xattr_block_find:1886: inode #12: comm syz.4.2288: corrupted xattr block 6: invalid header [ 364.991873][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 365.013418][ T5764] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 365.033773][ T5764] usb 3-1: config 0 has no interface number 0 [ 365.063681][ T5764] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 365.078292][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.092794][ T5764] usb 3-1: Product: syz [ 365.100627][ T5764] usb 3-1: Manufacturer: syz [ 365.110014][T12052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.111015][ T5764] usb 3-1: SerialNumber: syz [ 365.133269][ T5764] usb 3-1: config 0 descriptor?? [ 365.143451][ T5764] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 365.204868][ T5843] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 365.353315][ T5764] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 365.367081][ T5764] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 365.400548][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 365.411223][ T5843] usb 4-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 365.428154][ T5843] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 365.446486][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.465222][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.484103][ T5843] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 365.493231][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.514840][ T5843] usb 4-1: config 0 descriptor?? [ 365.521106][ T5815] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 365.716773][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 365.744671][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 365.751511][ T5815] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 365.770005][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.774445][ T5829] usb 3-1: USB disconnect, device number 22 [ 365.778250][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 365.792967][ T5829] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 365.808072][ T5829] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 365.824449][ T5829] quatech2 3-1:0.51: device disconnected [ 365.848674][ T5815] usb 5-1: config 0 descriptor?? [ 365.941092][ T5843] playstation 0003:054C:05C4.0016: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 366.111325][ T5843] playstation 0003:054C:05C4.0016: Invalid reportID received, expected 18 got 0 [ 366.127062][ T5843] playstation 0003:054C:05C4.0016: Failed to retrieve DualShock4 pairing info: -22 [ 366.155241][ T5843] playstation 0003:054C:05C4.0016: Failed to get MAC address from DualShock4 [ 366.165666][ T5843] playstation 0003:054C:05C4.0016: Failed to create dualshock4. [ 366.187028][ T5843] playstation: probe of 0003:054C:05C4.0016 failed with error -22 [ 366.252237][ T5815] hid (null): global environment stack overflow [ 366.275874][ T5815] hid (null): invalid report_size 18151 [ 366.283030][ T5815] hid (null): global environment stack overflow [ 366.306958][ T5764] usb 4-1: USB disconnect, device number 22 [ 366.439584][ T5815] usb 5-1: USB disconnect, device number 6 [ 366.902251][ T5764] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 367.105408][ T5764] usb 1-1: Using ep0 maxpacket: 16 [ 367.120610][ T5764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.132551][ T5764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.143364][ T5764] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 367.153310][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.164743][ T5764] usb 1-1: config 0 descriptor?? [ 367.582931][ T5764] gt683r_led 0003:1770:FF00.0018: unknown main item tag 0x0 [ 367.599673][ T5764] gt683r_led 0003:1770:FF00.0018: item fetching failed at offset 4/5 [ 367.619285][ T5764] gt683r_led 0003:1770:FF00.0018: hid parsing failed [ 367.626165][ T5764] gt683r_led: probe of 0003:1770:FF00.0018 failed with error -22 [ 367.743771][T12725] loop3: detected capacity change from 0 to 32768 [ 367.821685][ T5829] usb 1-1: USB disconnect, device number 28 [ 367.867951][T12734] loop4: detected capacity change from 0 to 4096 [ 367.877530][T12734] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 367.930294][T12734] ntfs3: loop4: failed to convert "c46c" to cp864 [ 368.345541][ T8] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 368.552902][ T8] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 368.571876][ T8] usb 5-1: config 1 has no interface number 0 [ 368.584926][ T8] usb 5-1: config 1 interface 105 has no altsetting 0 [ 368.600116][ T8] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 368.628235][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.644503][ T8] usb 5-1: Product: syz [ 368.653323][ T8] usb 5-1: Manufacturer: syz [ 368.658006][ T8] usb 5-1: SerialNumber: syz [ 369.202080][T12741] loop3: detected capacity change from 0 to 32768 [ 369.446812][ T8] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 369.474123][ T8] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 369.499087][ T8] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 369.540866][ T8] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 86:a5:1a:2e:e2:8c [ 369.553449][T12753] loop0: detected capacity change from 0 to 2048 [ 369.557433][ T8] usb 5-1: USB disconnect, device number 7 [ 369.570676][ T8] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 369.596353][T12753] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 369.622124][T12753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 369.661510][ T8] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 369.679340][ T8] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 369.706372][ T8] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 370.138990][T12759] loop4: detected capacity change from 0 to 256 [ 370.246875][ T28] audit: type=1800 audit(1750791017.019:144): pid=12759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2323" name="file1" dev="loop4" ino=1048688 res=0 errno=0 [ 370.463433][T12762] @: renamed from vlan0 (while UP) [ 370.766331][T12757] loop0: detected capacity change from 0 to 40427 [ 370.780583][T12757] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 370.787267][T12757] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 370.798082][T12766] loop4: detected capacity change from 0 to 4096 [ 370.817113][T12757] F2FS-fs (loop0): Found nat_bits in checkpoint [ 370.845678][T12766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.902123][T12757] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 370.914589][T12757] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 370.957500][T12052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.137348][ T5777] syz-executor: attempt to access beyond end of device [ 371.137348][ T5777] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 371.173482][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 371.188991][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 371.205717][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 371.221381][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 371.241163][T12775] loop4: detected capacity change from 0 to 4096 [ 372.102842][T12804] bridge0: entered promiscuous mode [ 372.109062][T12804] macsec1: entered allmulticast mode [ 372.130583][T12804] bridge0: entered allmulticast mode [ 372.147731][T12804] bridge0: port 3(macsec1) entered blocking state [ 372.168116][T12804] bridge0: port 3(macsec1) entered disabled state [ 372.193754][T12808] loop2: detected capacity change from 0 to 1024 [ 372.202944][T12804] bridge0: left allmulticast mode [ 372.209051][T12804] bridge0: left promiscuous mode [ 372.317602][ T28] audit: type=1800 audit(1750791019.251:145): pid=12808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2343" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 372.599498][T12814] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2345'. [ 372.703544][T12801] loop0: detected capacity change from 0 to 32768 [ 372.730950][T12818] tap0: tun_chr_ioctl cmd 1074025677 [ 372.744644][T12818] tap0: linktype set to 0 [ 373.033563][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 373.220258][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 373.228887][ T8] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 373.244132][ T8] usb 5-1: config 0 has no interface number 0 [ 373.266190][ T8] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 373.275322][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.299409][ T8] usb 5-1: Product: syz [ 373.303705][ T8] usb 5-1: Manufacturer: syz [ 373.313516][ T8] usb 5-1: SerialNumber: syz [ 373.320938][ T8] usb 5-1: config 0 descriptor?? [ 373.335060][ T8] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 373.540347][ T8] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 373.571761][ T8] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 373.615438][T12844] input: syz1 as /devices/virtual/input/input40 [ 373.840531][T12836] loop0: detected capacity change from 0 to 32768 [ 373.947920][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 373.949071][ T55] usb 5-1: USB disconnect, device number 8 [ 373.963137][T12836] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 373.963137][T12836] [ 373.985443][T12836] ERROR: (device loop0): remounting filesystem as read-only [ 374.007044][ T55] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 374.046906][ T55] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 374.053178][T12848] loop3: detected capacity change from 0 to 4096 [ 374.069865][ T55] quatech2 5-1:0.51: device disconnected [ 374.071391][T12848] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 374.089851][ T113] blkno = 5002c, nblocks = 1 [ 374.095195][ T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 374.095195][ T113] [ 374.186648][T12848] ntfs3: loop3: failed to convert "c46c" to cp864 [ 374.350520][T12859] loop3: detected capacity change from 0 to 512 [ 374.606580][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2363'. [ 375.729676][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2386'. [ 375.749647][T12903] ip6tnl1: entered promiscuous mode [ 376.119087][ T5865] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 376.253451][T12925] loop3: detected capacity change from 0 to 1024 [ 376.314644][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 376.325046][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 376.349600][T12927] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 376.351459][T12925] loop3: detected capacity change from 0 to 1024 [ 376.365128][T12927] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 376.372565][ T5865] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 376.388947][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.397033][ T5865] usb 3-1: Product: syz [ 376.405898][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.433578][ T5865] usb 3-1: Manufacturer: syz [ 376.438797][ T5865] usb 3-1: SerialNumber: syz [ 376.449643][ T5865] usb 3-1: config 0 descriptor?? [ 376.458650][ T5865] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 376.467482][ T5865] usb 3-1: Detected FT232R [ 376.656663][ T5865] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 376.884260][ T5865] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 377.055768][ T5865] usb 3-1: USB disconnect, device number 23 [ 377.086317][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 377.101558][ T5865] ftdi_sio 3-1:0.0: device disconnected [ 377.200714][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 377.216380][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 377.437922][T12960] loop3: detected capacity change from 0 to 2048 [ 377.572940][T12966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2415'. [ 377.638815][T12969] loop3: detected capacity change from 0 to 512 [ 378.274444][ T5815] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 378.427294][T12997] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2429'. [ 378.494114][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 378.508789][ T5815] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 378.532484][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.567063][ T5815] usb 3-1: config 0 descriptor?? [ 378.673557][T13003] loop0: detected capacity change from 0 to 1024 [ 378.700084][T13003] EXT4-fs: inline encryption not supported [ 378.710885][T13003] EXT4-fs: Ignoring removed bh option [ 378.775971][ T5815] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 378.791967][T13003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.806240][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.817352][ T5815] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 378.825104][ T5815] usb 3-1: media controller created [ 378.851219][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.969315][ T5815] az6027: usb out operation failed. (-71) [ 378.983770][ T5815] az6027: usb out operation failed. (-71) [ 378.998875][ T5815] stb0899_attach: Driver disabled by Kconfig [ 379.004946][ T5815] az6027: no front-end attached [ 379.004946][ T5815] [ 379.016723][ T5815] az6027: usb out operation failed. (-71) [ 379.043168][ T5815] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 379.069491][T13018] loop4: detected capacity change from 0 to 1024 [ 379.079230][ T5815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 379.094432][ T5815] dvb-usb: schedule remote query interval to 400 msecs. [ 379.102292][ T5815] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 379.115300][ T5815] usb 3-1: USB disconnect, device number 24 [ 379.207920][ T5815] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 379.235321][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.517856][T13029] loop4: detected capacity change from 0 to 256 [ 379.587107][T13029] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 379.639607][ T28] audit: type=1800 audit(1750791027.105:146): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2443" name="file1" dev="loop4" ino=1048689 res=0 errno=0 [ 379.712125][T13029] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 379.748213][T13029] exFAT-fs (loop4): Filesystem has been set read-only [ 379.772637][T13029] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805f8c0160 iblock : 8, err : -5) [ 379.813108][T13029] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 379.818709][ T55] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 379.838605][T13029] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 379.850745][T13029] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805f8c0160 iblock : 8, err : -5) [ 379.861454][T13029] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 379.881778][T13031] loop0: detected capacity change from 0 to 8192 [ 379.931565][T13031] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 379.961597][T13031] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 380.015205][T13031] REISERFS (device loop0): using ordered data mode [ 380.021813][T13031] reiserfs: using flush barriers [ 380.042780][T13031] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 380.060320][T13031] REISERFS (device loop0): checking transaction log (loop0) [ 380.070663][ T55] usb 4-1: config 0 has no interfaces? [ 380.078302][T13031] REISERFS (device loop0): Using r5 hash to sort names [ 380.087170][ T55] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 380.105086][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.126714][ T55] usb 4-1: Product: syz [ 380.130963][ T55] usb 4-1: Manufacturer: syz [ 380.135681][ T55] usb 4-1: SerialNumber: syz [ 380.143154][ T55] usb 4-1: config 0 descriptor?? [ 380.179010][T13031] reiserfs: enabling write barrier flush mode [ 380.219280][T13031] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 380.244533][T13031] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 380.257269][T13031] REISERFS (device loop0): Remounting filesystem read-only [ 380.264560][T13031] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 380.280435][T13031] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 380.299247][T13031] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 380.355965][T13031] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 380.375419][T13031] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 380.398701][ T5815] usb 4-1: USB disconnect, device number 23 [ 380.412239][T13031] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 380.423473][T13031] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data [ 380.442857][T13031] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 380.495173][T13031] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2 [ 380.519756][T13031] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 380.531334][T13031] REISERFS (device loop0): Remounting filesystem read-only [ 380.540896][T13031] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 380.833429][T13051] loop2: detected capacity change from 0 to 4096 [ 381.434808][T13066] IPv6: NLM_F_REPLACE set, but no existing node found! [ 381.807158][T13079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2463'. [ 381.979119][T13087] loop2: detected capacity change from 0 to 256 [ 381.981412][T13086] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2467'. [ 382.018336][T13087] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 383.732335][T13124] loop2: detected capacity change from 0 to 128 [ 383.759207][T13124] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 383.788104][T13124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.063944][T13129] sctp: [Deprecated]: syz.2.2485 (pid 13129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.063944][T13129] Use struct sctp_sack_info instead [ 384.379922][T13100] loop0: detected capacity change from 0 to 65536 [ 384.396381][T13100] XFS: ikeep mount option is deprecated. [ 384.441664][T13100] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 384.530511][T13100] XFS (loop0): Ending clean mount [ 384.666220][T13153] loop3: detected capacity change from 0 to 512 [ 384.758554][ T5777] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 384.914120][T13157] loop2: detected capacity change from 0 to 2048 [ 385.012154][T13157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.065311][T13157] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.116453][T13157] fs-verity: sha256 using implementation "sha256-avx2" [ 385.144321][T13157] fs-verity (loop2, inode 13): fs-verity keyring is empty, rejecting signed file! [ 385.215983][ T5843] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 385.267836][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.396629][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.417999][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.448145][ T5843] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 385.468064][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.498111][ T5843] usb 5-1: config 0 descriptor?? [ 385.558668][T13161] loop3: detected capacity change from 0 to 40427 [ 385.672127][T13170] loop0: detected capacity change from 0 to 1024 [ 385.705984][T13170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.752204][T13170] ext4 filesystem being mounted at /619/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.844812][T13170] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 385.904863][T13170] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 385.937430][T13170] EXT4-fs (loop0): This should not happen!! Data will be lost [ 385.937430][T13170] [ 385.955923][ T5843] hid-led 0003:1D34:000A.0019: unknown main item tag 0x2 [ 385.998881][T13170] EXT4-fs (loop0): Total free blocks count 0 [ 386.005378][T13170] EXT4-fs (loop0): Free/Dirty block details [ 386.026490][T13170] EXT4-fs (loop0): free_blocks=4293918720 [ 386.040972][T13170] EXT4-fs (loop0): dirty_blocks=80 [ 386.046541][T13166] loop2: detected capacity change from 0 to 32768 [ 386.053730][T13170] EXT4-fs (loop0): Block reservation details [ 386.065264][T13170] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 386.085436][T13166] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 386.149310][ T5843] hid-led 0003:1D34:000A.0019: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 386.169359][ T5843] hid-led 0003:1D34:000A.0019: Dream Cheeky Webmail Notifier initialized [ 386.187717][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.229845][T13166] XFS (loop2): Ending clean mount [ 386.266735][T13166] XFS (loop2): Quotacheck needed: Please wait. [ 386.285990][ T28] audit: type=1326 audit(1750791802.237:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.0.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c158e929 code=0x7ffc0000 [ 386.346841][ T5829] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 386.359492][ T5829] XFS (loop2): Unmount and run xfs_repair [ 386.366023][ T5829] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 386.373703][ T28] audit: type=1326 audit(1750791802.237:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.0.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c158e929 code=0x7ffc0000 [ 386.409550][ T5829] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 386.419910][ T5829] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 386.433281][ T8] usb 5-1: USB disconnect, device number 9 [ 386.434242][ T28] audit: type=1326 audit(1750791802.237:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.0.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f34c158e929 code=0x7ffc0000 [ 386.465376][ T5829] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 386.474303][ T5829] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 386.488865][ T5829] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 386.499278][ T28] audit: type=1326 audit(1750791802.237:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.0.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c158e929 code=0x7ffc0000 [ 386.522442][ T5829] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 386.531951][ T5829] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 386.535107][T13190] loop0: detected capacity change from 0 to 1024 [ 386.541190][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.551033][ T5829] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 386.567558][ T28] audit: type=1326 audit(1750791802.270:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.0.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c158e929 code=0x7ffc0000 [ 386.592944][ T12] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 386.653166][T13166] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 386.681270][ T3464] hfsplus: b-tree write err: -5, ino 8 [ 386.768991][T13166] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 386.790920][T13166] XFS (loop2): Unmount and run xfs_repair [ 386.800230][T13166] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 386.838786][T13166] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 386.865954][T13166] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 386.900351][T13166] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 386.913131][T13166] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 386.922495][T13166] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 386.931574][T13166] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 386.940707][T13166] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 386.950530][T13166] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 386.965045][T13166] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 387.068433][T13166] XFS (loop2): page discard on page ffffea0001b7c9c0, inode 0x2446, pos 2048. [ 387.122363][ T55] loop2: writeback error on inode 9286, offset 0, sector 18692 [ 387.222748][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 387.584037][T13221] vivid-001: disconnect [ 387.622404][T13219] vivid-001: reconnect [ 387.811270][T13226] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 389.050256][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 389.059997][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2535'. [ 389.104373][T13259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 389.130245][T13261] IPVS: set_ctl: invalid protocol: 127 127.0.0.1:20001 [ 389.136419][T13259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2535'. [ 389.334930][T13267] loop2: detected capacity change from 0 to 512 [ 389.368828][T13263] loop4: detected capacity change from 0 to 4096 [ 389.414627][T13267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.436614][T13267] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.596489][T13267] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 389.705245][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.813936][T13282] loop3: detected capacity change from 0 to 4096 [ 390.138303][T13297] ALSA: mixer_oss: invalid OSS volume '(' [ 390.283496][T13305] loop2: detected capacity change from 0 to 128 [ 390.322204][T13305] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.350648][T13305] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.395663][T13305] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 390.505187][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.773270][T13320] loop0: detected capacity change from 0 to 1024 [ 390.780781][T13320] EXT4-fs: Ignoring removed orlov option [ 390.830915][T13320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.947458][T13320] EXT4-fs (loop0): shut down requested (0) [ 391.003051][T13324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2564'. [ 391.095562][T13299] loop4: detected capacity change from 0 to 32768 [ 391.165615][T13299] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 391.256984][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.360183][T13299] XFS (loop4): Ending clean mount [ 391.378244][T13299] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 [ 391.434139][T13299] XFS (loop4): Unmount and run xfs_repair [ 391.461703][T13299] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 391.476297][T13299] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 391.501083][T13299] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 391.532283][T13339] loop2: detected capacity change from 0 to 256 [ 391.536724][T13299] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 391.563734][T13299] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 391.599059][T13299] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 391.611786][T13299] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 391.638474][ T28] audit: type=1800 audit(1750791807.977:152): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2567" name="file2" dev="loop2" ino=1048690 res=0 errno=0 [ 391.648817][T13299] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 391.691477][T13299] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 391.706004][T13339] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 391.720022][T13299] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x20 len 8 error 74 [ 391.722431][T13339] FAT-fs (loop2): Filesystem has been set read-only [ 391.756781][T13299] XFS (loop4): Failed to initialize disk quotas. [ 391.793690][T13339] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 391.961148][T13344] loop0: detected capacity change from 0 to 2048 [ 392.015160][T13344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.101771][T13327] loop3: detected capacity change from 0 to 40427 [ 392.113055][ T5815] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x8 [ 392.151157][ T5815] XFS (loop4): Unmount and run xfs_repair [ 392.167836][ T5815] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 392.189968][ T5815] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 392.207633][ T5815] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 392.211303][T12052] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 392.235196][ T5815] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 392.264356][ T5815] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02 ....r.oz........ [ 392.293123][ T5815] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50 ...............P [ 392.313548][T13350] netlink: 'syz.2.2573': attribute type 12 has an invalid length. [ 392.321971][ T5815] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 392.322058][ T5815] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 392.322075][ T5815] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 ................ [ 392.356266][ T5829] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x8 len 8 error 74 [ 392.385758][ T5829] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x182e/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598). Shutting down filesystem. [ 392.412900][ T5829] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 392.816035][T13363] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 393.084428][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2582'. [ 393.119263][T13371] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 393.157483][T13371] macvlan2: entered allmulticast mode [ 393.173210][T13371] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 393.514773][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2589'. [ 393.732328][T13397] tipc: Started in network mode [ 393.741280][T13397] tipc: Node identity ac1414aa, cluster identity 4711 [ 393.760936][T13397] tipc: Enabling of bearer rejected, failed to enable media [ 393.889173][T13403] loop3: detected capacity change from 0 to 1024 [ 394.446202][T13422] loop2: detected capacity change from 0 to 4096 [ 394.584264][ T5087] Bluetooth: hci3: Invalid handle: 0x6667 > 0x0eff [ 394.595198][ T5087] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 394.745395][T13422] overlayfs: upper fs does not support tmpfile. [ 394.781693][T13422] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 395.209927][T13442] loop0: detected capacity change from 0 to 8 [ 395.260951][T13442] SQUASHFS error: Failed to read block 0x4e8: -5 [ 395.282446][T13442] SQUASHFS error: Failed to read block 0x4de: -5 [ 395.299403][T13442] SQUASHFS error: Failed to read block 0x4de: -5 [ 395.316265][T13442] SQUASHFS error: Failed to read block 0x4de: -5 [ 395.355573][ T28] audit: type=1800 audit(1750791811.957:153): pid=13442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2613" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 395.741216][ T5815] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 395.775248][T13465] loop3: detected capacity change from 0 to 2048 [ 395.928545][ T5815] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 395.943613][ T5815] usb 5-1: config 0 has no interface number 0 [ 395.960300][ T5815] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 395.986656][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.004167][ T5815] usb 5-1: config 0 descriptor?? [ 396.020116][ T5815] usb 5-1: selecting invalid altsetting 1 [ 396.030855][ T5815] dvb_ttusb_budget: ttusb_init_controller: error [ 396.043458][ T5815] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 396.201216][ T5815] DVB: Unable to find symbol cx22700_attach() [ 396.353362][ T5815] DVB: Unable to find symbol tda10046_attach() [ 396.362447][ T5815] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 396.384010][ T5815] usb 5-1: USB disconnect, device number 10 [ 396.688679][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2633'. [ 396.923124][T13498] loop3: detected capacity change from 0 to 512 [ 397.464155][ T5843] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 397.653099][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 397.682717][ T5843] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 397.706244][ T5843] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 397.729523][ T5843] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.779415][ T5843] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.821439][ T5843] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.845415][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.100706][ T5843] usb 4-1: GET_CAPABILITIES returned 0 [ 398.126136][ T5843] usbtmc 4-1:16.0: can't read capabilities [ 398.318008][ T5843] usb 4-1: USB disconnect, device number 24 [ 398.683746][T13527] loop4: detected capacity change from 0 to 32768 [ 398.730562][T13527] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 398.760678][T13527] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 398.895185][T13527] XFS (loop4): Ending clean mount [ 398.931365][T13527] XFS (loop4): Quotacheck needed: Please wait. [ 398.972356][T13555] loop3: detected capacity change from 0 to 1024 [ 399.000568][ T12] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 399.030805][ T12] XFS (loop4): Unmount and run xfs_repair [ 399.049331][ T12] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 399.058162][ T12] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 399.094555][ T12] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 399.105161][ T12] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 399.118806][ T12] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 399.135142][ T12] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 399.167701][ T12] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 399.183539][ T28] audit: type=1326 audit(1750791816.076:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13559 comm="syz.2.2662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f669f98e929 code=0x0 [ 399.187887][ T12] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 399.221519][ T12] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 399.231444][ T12] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74 [ 399.249512][T13527] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 399.354996][T12052] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 400.289301][T13565] loop3: detected capacity change from 0 to 40427 [ 400.578144][T13586] loop0: detected capacity change from 0 to 256 [ 400.617993][T13586] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 400.638812][T13586] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 400.701118][T13586] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 401.042755][T13591] netlink: 'syz.0.2674': attribute type 12 has an invalid length. [ 402.004300][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 402.201817][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 402.220086][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.244115][ T8] usb 4-1: config 0 descriptor?? [ 402.269081][ T8] cp210x 4-1:0.0: cp210x converter detected [ 402.386122][ T5843] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 402.424895][T13632] program syz.2.2694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.563226][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 402.576873][T13617] loop0: detected capacity change from 0 to 32768 [ 402.597991][ T5843] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.617508][ T5843] usb 5-1: config 0 has no interface number 0 [ 402.626834][ T5843] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.641581][ T5843] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.655405][ T5843] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 402.658055][ T8] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 402.667245][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.670186][ T5843] usb 5-1: config 0 descriptor?? [ 402.706916][T13617] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 402.891838][ T8] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 402.909061][ T8] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 402.932166][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 402.944154][ T8] usb 4-1: USB disconnect, device number 25 [ 402.964497][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 402.982663][T13617] XFS (loop0): Ending clean mount [ 402.992364][ T8] cp210x 4-1:0.0: device disconnected [ 403.022270][T13617] XFS (loop0): Quotacheck needed: Please wait. [ 403.066030][ T27] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 403.086733][ T27] XFS (loop0): Unmount and run xfs_repair [ 403.104229][ T27] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 403.120424][ T27] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 403.131226][ T27] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 403.148817][ T27] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 403.161531][ T27] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 403.183672][ T27] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 403.205063][ T27] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 403.226047][ T27] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 403.256928][ T27] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 403.268650][ T2934] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 403.315309][ T5843] uclogic 0003:28BD:0071.001A: pen parameters not found [ 403.335327][T13617] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 403.381464][ T5843] uclogic 0003:28BD:0071.001A: interface is invalid, ignoring [ 403.508053][ T5843] usb 5-1: USB disconnect, device number 11 [ 403.539774][T13617] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 403.566976][T13617] XFS (loop0): Unmount and run xfs_repair [ 403.591834][T13617] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 403.607524][T13617] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 403.653590][T13617] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 403.697000][T13617] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 403.741187][T13617] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 403.766137][T13617] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 403.815859][T13617] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 403.878075][T13617] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 403.933307][T13617] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 403.996617][T13617] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 404.073272][T13617] XFS (loop0): page discard on page ffffea00005dbe40, inode 0x2446, pos 2048. [ 404.125601][ T27] loop0: writeback error on inode 9286, offset 0, sector 18692 [ 404.242782][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 404.888430][T13662] loop4: detected capacity change from 0 to 2048 [ 404.997376][T13662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.033698][T13662] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.113633][ T28] audit: type=1800 audit(1750791822.438:155): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2704" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 405.118936][T13662] fs-verity: sha512 using implementation "sha512-avx2" [ 405.192279][T13662] fs-verity (loop4, inode 13): Error -22 reading file data [ 405.220779][T13662] fs-verity (loop4, inode 13): Error -22 building Merkle tree [ 405.272971][T13660] loop3: detected capacity change from 0 to 32768 [ 405.329210][T12052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.523586][ T5815] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 405.590140][T13675] loop4: detected capacity change from 0 to 128 [ 405.603721][T13675] EXT4-fs: Ignoring removed nobh option [ 405.624862][T13675] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 405.672156][T13675] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 405.733573][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.752176][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.765294][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.789283][ T5815] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.807145][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.835179][ T5815] usb 1-1: config 0 descriptor?? [ 405.884665][T12052] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.181378][T13684] loop2: detected capacity change from 0 to 512 [ 406.235319][T13684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.282522][T13684] ext4 filesystem being mounted at /652/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.378088][ T5815] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 406.417075][ T5815] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 406.483078][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.636212][ T5815] usb 1-1: USB disconnect, device number 29 [ 406.665846][ T55] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 406.841992][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 406.867767][ T55] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 406.888224][ T55] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 406.910055][ T55] usb 5-1: Product: syz [ 406.914297][T13686] loop3: detected capacity change from 0 to 32768 [ 406.921650][ T55] usb 5-1: Manufacturer: syz [ 406.943384][ T55] usb 5-1: SerialNumber: syz [ 406.952849][ T55] usb 5-1: config 0 descriptor?? [ 406.966182][ T55] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 407.303847][T13686] loop3: detected capacity change from 0 to 4096 [ 407.562768][ T55] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44 [ 407.756010][ T55] kernel write not supported for file /snd/seq (pid: 55 comm: kworker/1:2) [ 407.852736][ T5843] usb 5-1: USB disconnect, device number 12 [ 408.744581][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 408.758439][T13744] loop0: detected capacity change from 0 to 2048 [ 408.801667][T13744] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 408.824673][T13744] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 408.858373][T13744] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 408.905927][T13744] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.004758][T13751] loop2: detected capacity change from 0 to 256 [ 409.022399][T13751] FAT-fs (loop2): bogus number of FAT sectors [ 409.040809][T13751] FAT-fs (loop2): Can't find a valid FAT filesystem [ 409.275756][T13757] loop0: detected capacity change from 0 to 24 [ 409.304060][T13757] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 409.346631][T13757] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 409.627668][T13762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2746'. [ 410.248323][ T5087] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 410.657330][T13793] loop0: detected capacity change from 0 to 128 [ 410.680657][T13793] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 410.724565][T13793] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.785535][T13793] ext2 filesystem being mounted at /681/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.080967][T13807] loop4: detected capacity change from 0 to 512 [ 411.126978][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.158505][T13807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.175957][T13807] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.187188][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.330961][T12052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.959825][T13827] tap0: tun_chr_ioctl cmd 1074025681 [ 412.826985][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.636188][T13865] loop4: detected capacity change from 0 to 1024 [ 414.823411][T13885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2798'. [ 414.862859][T13869] loop0: detected capacity change from 0 to 32768 [ 415.810414][T13909] loop4: detected capacity change from 0 to 128 [ 415.843856][T13909] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 415.883468][T13911] loop2: detected capacity change from 0 to 1024 [ 415.903023][T13913] loop0: detected capacity change from 0 to 512 [ 415.913272][T13911] EXT4-fs: Ignoring removed nobh option [ 415.913301][T13911] EXT4-fs: Ignoring removed bh option [ 415.926951][T13911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 415.981141][T13913] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 416.006159][T13909] FAT-fs (loop4): FAT read failed (blocknr 128) [ 416.026596][T13911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.047884][T13913] EXT4-fs (loop0): 1 truncate cleaned up [ 416.060129][T13913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.251576][T13925] sctp: [Deprecated]: syz.3.2816 (pid 13925) Use of int in max_burst socket option deprecated. [ 416.251576][T13925] Use struct sctp_assoc_value instead [ 416.318122][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.472701][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.784428][T13939] loop2: detected capacity change from 0 to 4096 [ 416.833241][T13941] loop3: detected capacity change from 0 to 512 [ 416.840546][T13939] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 416.902395][T13941] Bluetooth: MGMT ver 1.22 [ 418.067807][T13965] misc userio: Begin command sent, but we're already running [ 418.214375][T13956] loop0: detected capacity change from 0 to 32768 [ 418.539937][T13961] loop3: detected capacity change from 0 to 32768 [ 419.012246][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'. [ 419.278718][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2839'. [ 419.602352][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 419.615985][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 419.817804][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 419.825663][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 419.854285][ T8] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 419.861305][T13993] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 419.874815][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.898095][ T8] usb 4-1: Product: syz [ 419.907944][ T8] usb 4-1: Manufacturer: syz [ 419.926980][ T8] usb 4-1: SerialNumber: syz [ 419.954408][ T8] usb 4-1: config 0 descriptor?? [ 419.965525][ T8] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 419.982105][ T8] usb 4-1: Detected FT232R [ 420.180000][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 420.332720][ T5764] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 420.422331][ T8] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 420.544297][ T5764] usb 1-1: Using ep0 maxpacket: 32 [ 420.552376][ T5764] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 420.568397][ T5764] usb 1-1: config 0 has no interface number 0 [ 420.600776][ T5764] usb 1-1: config 0 interface 219 has no altsetting 0 [ 420.610007][ T5764] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 420.636408][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.640897][ T27] usb 4-1: USB disconnect, device number 26 [ 420.654585][ T5764] usb 1-1: config 0 descriptor?? [ 420.660677][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 420.661377][ T27] ftdi_sio 4-1:0.0: device disconnected [ 420.796742][ T5843] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 420.943432][ T5764] usb 1-1: string descriptor 0 read error: -71 [ 420.961315][ T5764] usb 1-1: USB disconnect, device number 30 [ 420.964718][ T55] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 420.985672][ T5843] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 420.998924][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.010642][ T5843] usb 5-1: config 0 descriptor?? [ 421.024652][ T5843] cp210x 5-1:0.0: cp210x converter detected [ 421.145323][ T55] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 421.156208][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.168185][ T55] usb 3-1: config 0 descriptor?? [ 421.381210][ T55] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 421.390912][ T55] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 421.441146][T14016] loop4: detected capacity change from 0 to 256 [ 421.534533][ T5843] usb 5-1: cp210x converter now attached to ttyUSB0 [ 421.605697][ T55] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 421.623891][ T55] [drm] Initialized udl on minor 2 [ 421.745842][ C0] hrtimer: interrupt took 37873 ns [ 421.781127][ T8] usb 5-1: USB disconnect, device number 13 [ 421.799225][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 421.827622][ T8] cp210x 5-1:0.0: device disconnected [ 421.933460][ T55] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 421.959755][ T55] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 421.982433][ T27] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 422.001130][ T55] usb 3-1: USB disconnect, device number 25 [ 422.019953][ T27] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 422.872322][T14049] loop4: detected capacity change from 0 to 16 [ 422.915707][T14049] erofs: (device loop4): mounted with root inode @ nid 36. [ 422.928469][T14051] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 423.420326][T14071] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 423.581524][T14078] loop4: detected capacity change from 0 to 512 [ 423.604954][T14080] netlink: 'syz.3.2886': attribute type 1 has an invalid length. [ 423.619078][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2886'. [ 423.706624][T14078] EXT4-fs (loop4): 1 orphan inode deleted [ 423.724994][T14078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.745940][ T3464] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.762098][ T3464] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:11: Failed to release dquot type 1 [ 423.780258][T14078] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.830674][T14089] loop3: detected capacity change from 0 to 2048 [ 423.925634][T12052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.940824][ T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.966165][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 1 [ 424.627745][ T8] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 424.804718][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 424.813242][ T8] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 424.835354][ T8] usb 1-1: config 0 has no interface number 0 [ 424.854284][ T8] usb 1-1: config 0 interface 184 has no altsetting 0 [ 424.879012][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 424.898097][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.908446][ T5815] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 424.926311][ T8] usb 1-1: Product: syz [ 424.932361][ T8] usb 1-1: Manufacturer: syz [ 424.938906][ T8] usb 1-1: SerialNumber: syz [ 424.947599][ T8] usb 1-1: config 0 descriptor?? [ 424.960092][ T8] smsc75xx v1.0.0 [ 425.072586][ T5865] kernel write not supported for file /1658/attr/exec (pid: 5865 comm: kworker/0:6) [ 425.095976][ T5815] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 425.112551][ T5815] usb 3-1: config 0 has no interface number 0 [ 425.129073][ T5815] usb 3-1: config 0 interface 230 has no altsetting 0 [ 425.142365][ T5815] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 425.164704][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.184383][ T5815] usb 3-1: Product: syz [ 425.195235][ T5815] usb 3-1: Manufacturer: syz [ 425.209601][ T5815] usb 3-1: SerialNumber: syz [ 425.231297][ T5815] usb 3-1: config 0 descriptor?? [ 425.262487][ T5815] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 425.302275][ T5815] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 425.429926][T14104] loop4: detected capacity change from 0 to 40427 [ 425.443677][T14104] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 425.456520][T14104] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 425.470711][T14104] F2FS-fs (loop4): invalid crc value [ 425.483042][T14106] loop2: detected capacity change from 0 to 64 [ 425.506186][T14104] F2FS-fs (loop4): Found nat_bits in checkpoint [ 425.609276][T14104] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 425.621828][T14104] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 425.706225][ T28] audit: type=1800 audit(1750791844.526:156): pid=14104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2896" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 425.745071][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 425.771697][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 425.803665][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 425.857180][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 425.876999][ T5815] usb 3-1: USB disconnect, device number 26 [ 425.896257][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 425.923068][ T8] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 425.943261][ T8] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 425.971978][ T8] usb 1-1: USB disconnect, device number 31 [ 426.375894][T14124] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2905'. [ 426.424602][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.437499][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.741445][T14159] loop6: detected capacity change from 0 to 524287999 [ 427.840730][T14161] @: renamed from vlan0 (while UP) [ 428.183759][T14142] loop3: detected capacity change from 0 to 32768 [ 428.331557][T14172] loop4: detected capacity change from 0 to 16 [ 428.350299][T14172] erofs: (device loop4): mounted with root inode @ nid 36. [ 428.369546][T14170] loop2: detected capacity change from 0 to 256 [ 428.446418][T14170] FAT-fs (loop2): Directory bread(block 64) failed [ 428.461064][T14170] FAT-fs (loop2): Directory bread(block 65) failed [ 428.474317][T14170] FAT-fs (loop2): Directory bread(block 66) failed [ 428.488193][T14170] FAT-fs (loop2): Directory bread(block 67) failed [ 428.506159][T14170] FAT-fs (loop2): Directory bread(block 68) failed [ 428.531196][T14170] FAT-fs (loop2): Directory bread(block 69) failed [ 428.546394][T14170] FAT-fs (loop2): Directory bread(block 70) failed [ 428.561351][T14170] FAT-fs (loop2): Directory bread(block 71) failed [ 428.576707][T14170] FAT-fs (loop2): Directory bread(block 72) failed [ 428.609846][T14170] FAT-fs (loop2): Directory bread(block 73) failed [ 429.842159][T14178] loop0: detected capacity change from 0 to 32768 [ 429.885226][T14178] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2927 (14178) [ 429.979953][T14178] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 429.998156][T14178] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 430.034850][T14178] BTRFS info (device loop0): using free space tree [ 430.146157][T14178] BTRFS info (device loop0): enabling ssd optimizations [ 430.155327][T14184] loop2: detected capacity change from 0 to 40427 [ 430.174412][T14178] BTRFS info (device loop0): auto enabling async discard [ 430.181708][T14184] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 430.204237][T14184] F2FS-fs (loop2): invalid crc value [ 430.219781][T14184] F2FS-fs (loop2): Found nat_bits in checkpoint [ 430.302747][T14184] F2FS-fs (loop2): Start checkpoint disabled! [ 430.330507][T14184] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 430.342007][ T27] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 430.373156][ T5777] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 430.468506][T14184] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x161f/0x3c00 [ 430.586791][ T27] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 430.626066][ T27] usb 4-1: config 0 has no interface number 0 [ 430.660646][ T27] usb 4-1: config 0 interface 83 has no altsetting 0 [ 430.680373][ T27] usb 4-1: New USB device found, idVendor=3859, idProduct=4c65, bcdDevice=90.6f [ 430.752238][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.779445][ T27] usb 4-1: Product: syz [ 430.784558][ T27] usb 4-1: Manufacturer: syz [ 430.807506][ T27] usb 4-1: SerialNumber: syz [ 430.823614][ T27] usb 4-1: config 0 descriptor?? [ 430.857728][ T27] usb-storage 4-1:0.83: USB Mass Storage device detected [ 430.918763][ T12] kworker/u4:1: attempt to access beyond end of device [ 430.918763][ T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 430.940201][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 430.951826][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 431.067627][ T27] usb 4-1: USB disconnect, device number 27 [ 431.127965][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.292426][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.400363][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.474114][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.577797][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.844589][T14236] loop3: detected capacity change from 0 to 1024 [ 431.994849][T14238] loop4: detected capacity change from 0 to 4096 [ 432.390246][T14250] loop3: detected capacity change from 0 to 1024 [ 432.523417][ T28] audit: type=1326 audit(1750791851.832:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1191858e7 code=0x7ffc0000 [ 432.577104][ T28] audit: type=1326 audit(1750791851.843:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa11912ab19 code=0x7ffc0000 [ 432.628332][ T28] audit: type=1326 audit(1750791851.843:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1191858e7 code=0x7ffc0000 [ 432.719044][ T28] audit: type=1326 audit(1750791851.843:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa11912ab19 code=0x7ffc0000 [ 432.785307][ T28] audit: type=1326 audit(1750791851.843:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1191858e7 code=0x7ffc0000 [ 432.843213][ T28] audit: type=1326 audit(1750791851.843:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa11912ab19 code=0x7ffc0000 [ 432.876242][ T28] audit: type=1326 audit(1750791851.843:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1191858e7 code=0x7ffc0000 [ 432.906655][ T28] audit: type=1326 audit(1750791851.843:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa11912ab19 code=0x7ffc0000 [ 432.937041][ T28] audit: type=1326 audit(1750791851.843:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1191858e7 code=0x7ffc0000 [ 432.962145][ T28] audit: type=1326 audit(1750791851.843:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14256 comm="syz.4.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa11912ab19 code=0x7ffc0000 [ 432.968028][T14266] loop3: detected capacity change from 0 to 64 [ 433.445065][T14279] loop0: detected capacity change from 0 to 2048 [ 433.505267][T14279] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 433.573959][T14285] loop4: detected capacity change from 0 to 1024 [ 433.599455][T14287] loop2: detected capacity change from 0 to 128 [ 433.692609][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.718246][T14291] hfsplus: catalog searching failed [ 433.844157][ T2942] hfsplus: b-tree write err: -5, ino 3 [ 433.927592][T14292] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 433.956814][T14292] FAT-fs (loop2): Filesystem has been set read-only [ 434.197186][T14302] loop2: detected capacity change from 0 to 736 [ 434.344322][T14306] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2975'. [ 434.529054][T14290] loop3: detected capacity change from 0 to 32768 [ 435.377544][T14330] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2985'. [ 435.819931][T14347] loop3: detected capacity change from 0 to 128 [ 435.858181][T14340] loop4: detected capacity change from 0 to 4096 [ 435.905345][T14340] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 436.232189][T14360] loop3: detected capacity change from 0 to 512 [ 436.947925][T14386] loop0: detected capacity change from 0 to 16 [ 437.008030][T14386] erofs: (device loop0): mounted with root inode @ nid 36. [ 437.547562][ T55] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 437.656839][T14387] loop2: detected capacity change from 0 to 32768 [ 437.693353][T14387] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3012 (14387) [ 437.744974][ T55] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 437.758360][T14387] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 437.786532][ T55] usb 1-1: config 0 has no interface number 0 [ 437.808550][ T55] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 437.823626][T14387] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 437.850563][ T55] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 437.870941][T14387] BTRFS info (device loop2): max_inline at 0 [ 437.887626][T14391] loop4: detected capacity change from 0 to 32768 [ 437.898470][T14387] BTRFS info (device loop2): enabling disk space caching [ 437.906768][ T55] usb 1-1: config 0 interface 255 has no altsetting 0 [ 437.908271][T14391] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.3014 (14391) [ 437.920589][T14387] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 437.952837][ T55] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 437.981843][T14391] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 437.985156][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.003151][T14391] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 438.003196][T14391] BTRFS info (device loop4): setting nodatacow, compression disabled [ 438.003216][T14391] BTRFS info (device loop4): turning on flush-on-commit [ 438.003234][T14391] BTRFS info (device loop4): using free space tree [ 438.022738][T14387] BTRFS info (device loop2): turning off barriers [ 438.046463][ T55] usb 1-1: config 0 descriptor?? [ 438.065281][T14387] BTRFS info (device loop2): turning on flush-on-commit [ 438.074261][T14387] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 438.094683][ T55] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 438.105733][T14387] BTRFS info (device loop2): use zstd compression, level 3 [ 438.123296][T14387] BTRFS info (device loop2): force clearing of disk cache [ 438.128890][T14417] netem: unknown loss type 0 [ 438.140406][T14387] BTRFS info (device loop2): enabling ssd optimizations [ 438.141982][T14417] netem: change failed [ 438.160645][T14387] BTRFS info (device loop2): max_inline at 2048 [ 438.204197][T14387] BTRFS info (device loop2): disk space caching is enabled [ 438.231481][T14391] BTRFS info (device loop4): enabling ssd optimizations [ 438.241917][T14391] BTRFS info (device loop4): auto enabling async discard [ 438.289388][ T55] usb 1-1: USB disconnect, device number 32 [ 438.303142][ T5087] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 438.319589][ T5087] Bluetooth: hci1: Injecting HCI hardware error event [ 438.335611][ T5087] Bluetooth: hci1: hardware error 0x00 [ 438.416114][T12052] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 438.463930][T14387] BTRFS info (device loop2): auto enabling async discard [ 438.623470][T14387] BTRFS error (device loop2: state M): unrecognized mount option 'cpu.stat' [ 438.926570][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 439.832327][T14447] loop3: detected capacity change from 0 to 32768 [ 440.151468][T14449] loop0: detected capacity change from 0 to 32768 [ 440.185653][T14449] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.3027 (14449) [ 440.245106][T14449] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 440.280413][T14449] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 440.300896][T14449] BTRFS info (device loop0): using free space tree [ 440.309694][ T5087] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 440.502145][T14449] BTRFS info (device loop0): enabling ssd optimizations [ 440.554793][T14449] BTRFS info (device loop0): auto enabling async discard [ 440.740611][ T5777] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 440.745109][ T55] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 440.990797][T14487] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge0 [ 441.001840][ T55] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 441.041525][ T55] usb 3-1: config 0 has no interface number 0 [ 441.059746][ T55] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 441.091123][ T55] usb 3-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 441.135747][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.155543][ T55] usb 3-1: Product: syz [ 441.160081][ T55] usb 3-1: Manufacturer: syz [ 441.170519][ T55] usb 3-1: SerialNumber: syz [ 441.212110][ T55] usb 3-1: config 0 descriptor?? [ 441.221254][T14480] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 441.243354][ T55] ums-datafab 3-1:0.138: USB Mass Storage device detected [ 441.256563][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 441.256582][ T28] audit: type=1326 audit(1750791861.208:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c78e929 code=0x7ffc0000 [ 441.341101][ T55] scsi host1: usb-storage 3-1:0.138 [ 441.403486][ T28] audit: type=1326 audit(1750791861.262:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f162c78e929 code=0x7ffc0000 [ 441.496780][T14483] loop4: detected capacity change from 0 to 32768 [ 441.504618][ T28] audit: type=1326 audit(1750791861.262:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c78e929 code=0x7ffc0000 [ 441.559891][ T28] audit: type=1326 audit(1750791861.262:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c78e929 code=0x7ffc0000 [ 441.647572][ T28] audit: type=1326 audit(1750791861.262:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f162c78e929 code=0x7ffc0000 [ 441.681917][ T28] audit: type=1326 audit(1750791861.262:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c78e929 code=0x7ffc0000 [ 441.793814][ T28] audit: type=1326 audit(1750791861.262:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14488 comm="syz.3.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162c78e929 code=0x7ffc0000 [ 441.844321][ T8] usb 3-1: USB disconnect, device number 27 [ 441.860405][T14501] netlink: 'syz.3.3041': attribute type 25 has an invalid length. [ 441.877093][T14499] loop2: detected capacity change from 0 to 7 [ 441.887086][T14501] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 441.899208][T14499] Dev loop2: unable to read RDB block 7 [ 441.907383][T14499] loop2: unable to read partition table [ 441.916192][T14501] bridge0: port 1(bridge_slave_0) entered learning state [ 441.938038][T14499] loop2: partition table beyond EOD, truncated [ 441.965345][T14499] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 443.869894][T14539] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 443.895621][T14539] macsec2: entered allmulticast mode [ 443.914080][T14539] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 443.946417][T14539] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 443.972689][T14539] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 444.357576][T14548] netlink: 'syz.3.3062': attribute type 10 has an invalid length. [ 444.464160][ T5764] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 444.465171][T14548] dummy0: entered promiscuous mode [ 444.487683][T14548] dummy0: entered allmulticast mode [ 444.505120][T14548] team0: Port device dummy0 added [ 444.662457][ T5764] usb 5-1: Using ep0 maxpacket: 8 [ 444.680695][ T5764] usb 5-1: unable to get BOS descriptor or descriptor too short [ 444.743933][ T5764] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 444.774710][ T5764] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 444.804075][ T5764] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x8 has invalid wMaxPacketSize 0 [ 444.834922][ T5764] usb 5-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.861847][ T5764] usb 5-1: config 8 interface 0 has no altsetting 0 [ 444.879268][ T5764] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 444.898496][ T5764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.914720][ T5764] usb 5-1: Product: syz [ 444.925808][ T5764] usb 5-1: Manufacturer: syz [ 444.936532][ T5764] usb 5-1: SerialNumber: syz [ 445.052330][T14566] loop3: detected capacity change from 0 to 512 [ 445.092639][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 445.110172][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 445.203545][ T5764] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 445.228623][ T5764] usb 5-1: selecting invalid altsetting 0 [ 445.378559][ T5764] snd-usb-audio: probe of 5-1:8.0 failed with error -12 [ 445.402730][ T5764] usb 5-1: USB disconnect, device number 14 [ 446.023941][T14591] netdevsim netdevsim4: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 446.039448][T14591] netdevsim netdevsim4: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 446.234811][ T5764] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 446.421344][ T5764] usb 1-1: Using ep0 maxpacket: 8 [ 446.432344][ T5764] usb 1-1: unable to get BOS descriptor or descriptor too short [ 446.454864][ T5764] usb 1-1: config 9 has an invalid interface number: 4 but max is 0 [ 446.471222][ T5764] usb 1-1: config 9 has no interface number 0 [ 446.484154][ T5764] usb 1-1: config 9 interface 4 has no altsetting 0 [ 446.501632][ T5764] usb 1-1: New USB device found, idVendor=2cb7, idProduct=0104, bcdDevice=43.2f [ 446.512087][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.535615][ T5764] usb 1-1: Product: syz [ 446.542938][ T5764] usb 1-1: Manufacturer: syz [ 446.548306][ T5764] usb 1-1: SerialNumber: syz [ 446.734153][T14604] loop2: detected capacity change from 0 to 4096 [ 446.777680][T14604] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 446.791830][T14605] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 446.842274][T14604] NILFS (loop2): mounting fs with errors [ 447.350687][ T5764] usb 1-1: USB disconnect, device number 33 [ 447.426889][T14616] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3091'. [ 447.625404][T14624] loop3: detected capacity change from 0 to 256 [ 447.629049][T14620] loop4: detected capacity change from 0 to 512 [ 447.684926][T14620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 447.767567][T14620] EXT4-fs (loop4): 1 truncate cleaned up [ 447.784080][T14620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.997040][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.078891][T12052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.212714][T14618] loop2: detected capacity change from 0 to 32768 [ 448.907881][T14643] loop0: detected capacity change from 0 to 2048 [ 448.978228][T14643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.265100][T14652] sch_fq: defrate 6 ignored. [ 449.635222][T14664] misc userio: Begin command sent, but we're already running [ 449.828257][T12052] cgroup: fork rejected by pids controller in /syz4 [ 450.307472][T14658] loop2: detected capacity change from 0 to 32768 [ 450.374803][T14675] loop0: detected capacity change from 0 to 4096 [ 450.422468][T14658] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 450.692594][ T3464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.714360][T14658] XFS (loop2): Ending clean mount [ 450.727157][T14658] XFS (loop2): Quotacheck needed: Please wait. [ 450.941677][T14658] XFS (loop2): Quotacheck: Done. [ 450.944481][ T3464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.085911][ T3464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.285542][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 451.302731][ T3464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.493851][T14697] misc userio: Begin command sent, but we're already running [ 451.797608][T14701] loop3: detected capacity change from 0 to 512 [ 451.838714][T14701] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 452.242369][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 452.273915][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 452.320014][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.334583][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.358979][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 452.374090][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.558692][T14715] loop0: detected capacity change from 0 to 512 [ 452.567104][T14715] EXT4-fs: Ignoring removed i_version option [ 452.577225][T14715] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.584959][T14715] ext4: Unknown parameter 'seclabel' [ 453.193552][T14727] loop3: detected capacity change from 0 to 2048 [ 453.810990][T14708] chnl_net:caif_netlink_parms(): no params data found [ 454.340030][ T5785] Bluetooth: hci1: command tx timeout [ 454.382972][T14708] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.397465][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.409211][T14708] bridge_slave_0: entered allmulticast mode [ 454.423838][T14708] bridge_slave_0: entered promiscuous mode [ 454.521830][ T55] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 454.541949][T14708] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.560317][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.578821][ T5843] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 454.578948][T14708] bridge_slave_1: entered allmulticast mode [ 454.606603][T14708] bridge_slave_1: entered promiscuous mode [ 454.713166][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 454.720561][T14708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.740351][ T55] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.770958][T14708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.775596][ T55] usb 4-1: config 0 interface 0 has no altsetting 0 [ 454.790949][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 454.813105][ T5843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 454.826506][ T55] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 454.841684][ T5843] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 454.866732][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.881364][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.895913][ T3464] hsr_slave_0: left promiscuous mode [ 454.905425][ T5843] usb 1-1: config 0 descriptor?? [ 454.914874][ T3464] hsr_slave_1: left promiscuous mode [ 454.929970][ T55] usb 4-1: config 0 descriptor?? [ 454.940097][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.959976][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.974016][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.985966][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.998362][ T3464] bridge_slave_1: left allmulticast mode [ 455.005578][ T3464] bridge_slave_1: left promiscuous mode [ 455.013826][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.032886][ T3464] bridge_slave_0: left allmulticast mode [ 455.040903][ T3464] bridge_slave_0: left promiscuous mode [ 455.048531][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.155822][ T3464] veth1_macvtap: left promiscuous mode [ 455.173116][ T3464] veth0_macvtap: left promiscuous mode [ 455.180686][ T3464] veth1_vlan: left promiscuous mode [ 455.192905][ T3464] veth0_vlan: left promiscuous mode [ 455.329988][ T5843] corsair-psu 0003:1B1C:1C09.001C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 455.349582][T14769] loop2: detected capacity change from 0 to 32768 [ 455.371083][ T55] uclogic 0003:5543:0042.001D: unbalanced delimiter at end of report description [ 455.385885][ T55] uclogic 0003:5543:0042.001D: parse failed [ 455.399266][ T55] uclogic: probe of 0003:5543:0042.001D failed with error -22 [ 455.486699][T14769] ialloc: diAlloc returned -28! [ 455.593703][ T5764] usb 4-1: USB disconnect, device number 28 [ 455.703799][ T5843] corsair-psu 0003:1B1C:1C09.001C: unable to initialize device (-71) [ 455.768494][ T5843] corsair-psu: probe of 0003:1B1C:1C09.001C failed with error -71 [ 455.784003][ T5843] usb 1-1: USB disconnect, device number 34 [ 456.289927][ T5785] Bluetooth: hci1: command tx timeout [ 456.330804][T14771] loop3: detected capacity change from 0 to 8 [ 457.333484][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 457.566129][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 457.772496][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.892515][T14788] loop0: detected capacity change from 0 to 40427 [ 457.905139][T14788] F2FS-fs (loop0): invalid crc value [ 457.923541][T14788] F2FS-fs (loop0): Found nat_bits in checkpoint [ 457.972268][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.987410][ T28] audit: type=1326 audit(1750791879.156:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f98e929 code=0x7ffc0000 [ 458.019549][ T28] audit: type=1326 audit(1750791879.156:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f98e929 code=0x7ffc0000 [ 458.062895][ T28] audit: type=1326 audit(1750791879.156:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f669f98e929 code=0x7ffc0000 [ 458.074621][T14788] F2FS-fs (loop0): Start checkpoint disabled! [ 458.121216][T14788] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 458.163299][ T28] audit: type=1326 audit(1750791879.156:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f98e929 code=0x7ffc0000 [ 458.218923][ T5785] Bluetooth: hci1: command tx timeout [ 458.221329][ T28] audit: type=1326 audit(1750791879.156:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f98e929 code=0x7ffc0000 [ 458.295702][ T28] audit: type=1326 audit(1750791879.156:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f669f98e929 code=0x7ffc0000 [ 458.343224][ T28] audit: type=1326 audit(1750791879.156:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f98e929 code=0x7ffc0000 [ 458.398167][ T28] audit: type=1326 audit(1750791879.156:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14800 comm="syz.2.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669f98e929 code=0x7ffc0000 [ 458.747563][T12104] kworker/u4:2: attempt to access beyond end of device [ 458.747563][T12104] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 458.779287][T12104] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 458.787932][T12104] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 459.186477][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.245070][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.281443][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.341920][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.370714][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.417063][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.446224][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.531210][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.569251][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.600421][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.624873][T14812] loop0: detected capacity change from 0 to 8192 [ 459.647497][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.652829][T14812] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 459.678486][T14812] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 459.695797][T14812] REISERFS (device loop0): using ordered data mode [ 459.702545][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.709654][T14812] reiserfs: using flush barriers [ 459.721245][T14812] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 459.745471][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.745879][T14812] REISERFS (device loop0): checking transaction log (loop0) [ 459.799053][T14812] REISERFS (device loop0): Using r5 hash to sort names [ 459.808233][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.809675][T14812] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 459.895732][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.931329][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.102707][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.121631][ T3464] bond0 (unregistering): Released all slaves [ 460.143279][ T5785] Bluetooth: hci1: command tx timeout [ 460.293064][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.474986][T14708] team0: Port device team_slave_0 added [ 460.557396][T14708] team0: Port device team_slave_1 added [ 460.783490][T14708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.794734][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.828160][T14708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.903755][T14708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.925700][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.964248][T14708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.554124][T14708] hsr_slave_0: entered promiscuous mode [ 461.571945][T14708] hsr_slave_1: entered promiscuous mode [ 461.775516][T14832] loop0: detected capacity change from 0 to 64 [ 462.088239][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'. [ 462.722165][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.941286][T14708] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 462.968376][T14708] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 463.005501][T14708] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.039104][T14708] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 463.285227][T14872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.328920][T14872] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 463.477218][T14708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.540912][T14708] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.579444][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.588315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.633419][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.640765][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.686261][T14880] netlink: 'syz.2.3201': attribute type 11 has an invalid length. [ 463.703614][T14880] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3201'. [ 464.228499][T14901] sg_read: process 1857 (syz.3.3209) changed security contexts after opening file descriptor, this is not allowed. [ 464.440793][T14708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.023476][T14924] netlink: 'syz.3.3218': attribute type 1 has an invalid length. [ 465.050070][T14924] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3218'. [ 465.337188][T14708] veth0_vlan: entered promiscuous mode [ 465.388071][T14708] veth1_vlan: entered promiscuous mode [ 465.409520][T14906] loop0: detected capacity change from 0 to 32768 [ 465.519996][T14931] loop3: detected capacity change from 0 to 512 [ 465.538618][T14708] veth0_macvtap: entered promiscuous mode [ 465.563212][T14708] veth1_macvtap: entered promiscuous mode [ 465.603530][ T5777] read_mapping_page failed! [ 465.634376][ T5777] ERROR: (device loop0): txCommit: [ 465.634376][ T5777] [ 465.646728][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.678577][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.690426][ T5777] read_mapping_page failed! [ 465.697816][ T5777] ERROR: (device loop0): txCommit: [ 465.697816][ T5777] [ 465.722755][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.739493][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.770124][T14708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.787764][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.816314][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.866333][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.908814][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.930091][T14708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.951935][T14708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.004719][T14708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.086657][T14708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.111984][T14708] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.145888][T14708] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.158363][T14708] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.260819][T14927] loop2: detected capacity change from 0 to 32768 [ 466.284538][T14927] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 466.401492][T14927] XFS (loop2): Ending clean mount [ 466.645028][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.676678][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.713726][ T5786] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 466.872274][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.896971][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.931294][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.053632][T14950] loop3: detected capacity change from 0 to 128 [ 467.095708][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.180639][T14952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3120'. [ 467.236208][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.331693][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.403570][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.026395][T14971] loop2: detected capacity change from 0 to 256 [ 468.059313][T14971] exfat: Deprecated parameter 'namecase' [ 468.128031][T14971] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 468.145691][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.583136][ T5087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.609361][ T5087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.624360][ T5087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.642493][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.664420][ T5087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 468.676180][ T5087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.772501][T14976] netlink: 'syz.2.3237': attribute type 1 has an invalid length. [ 468.783928][T14976] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3237'. [ 469.601276][T14973] chnl_net:caif_netlink_parms(): no params data found [ 469.838211][ T5843] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 469.922033][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.956042][T14973] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.978548][T14973] bridge_slave_0: entered allmulticast mode [ 470.011204][T14973] bridge_slave_0: entered promiscuous mode [ 470.044541][T14973] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.063201][ T5843] usb 5-1: config 0 has an invalid interface number: 138 but max is 0 [ 470.085417][T14973] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.104718][ T5843] usb 5-1: config 0 has no interface number 0 [ 470.114723][T14973] bridge_slave_1: entered allmulticast mode [ 470.139907][ T5843] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 470.165295][T14973] bridge_slave_1: entered promiscuous mode [ 470.187022][ T5843] usb 5-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 470.225957][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.254306][ T5843] usb 5-1: Product: syz [ 470.275239][ T5843] usb 5-1: Manufacturer: syz [ 470.285053][ T5843] usb 5-1: SerialNumber: syz [ 470.311435][ T5843] usb 5-1: config 0 descriptor?? [ 470.330594][T14994] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 470.344131][ T5843] ums-datafab 5-1:0.138: USB Mass Storage device detected [ 470.362380][T14973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link Stopping sshd: [ 470.401440][T14973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.413843][ T5843] scsi host1: usb-storage 5-1:0.138 [ 470.498201][T14973] team0: Port device team_slave_0 added [ 470.510577][T14973] team0: Port device team_slave_1 added [ 470.659410][ T5785] Bluetooth: hci0: command tx timeout [ 470.674748][T14973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.695727][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.726637][ C0] vkms_vblank_simulate: vblank timer overrun stopped /usr/sbin/sshd (pid 5535) [ 470.778366][T14973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active OK [ 470.810769][T14973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.822134][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.857507][T14973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.887461][T14944] usb 5-1: USB disconnect, device number 15 Stopping crond: [ 471.110837][T14973] hsr_slave_0: entered promiscuous mode [ 471.130859][T14973] hsr_slave_1: entered promiscuous mode [ 471.148586][T14973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.169436][T14973] Cannot create hsr debugfs directory [ 471.237860][T15004] loop3: detected capacity change from 0 to 32768 stopped /usr/sbin/crond (pid 5518) OK [ 471.289935][T15004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3245 (15004) [ 471.325385][T15004] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.342770][T15004] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 471.355556][T15004] BTRFS info (device loop3): max_inline at 0 [ 471.365347][T15004] BTRFS info (device loop3): enabling disk space caching [ 471.373857][T15004] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 471.412761][T15004] BTRFS info (device loop3): turning off barriers [ 471.420914][T15004] BTRFS info (device loop3): turning on flush-on-commit [ 471.458909][T15004] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 471.530392][T15004] BTRFS info (device loop3): use zstd compression, level 3 [ 471.553161][T15004] BTRFS info (device loop3): force clearing of disk cache [ 471.568122][T15004] BTRFS info (device loop3): enabling ssd optimizations [ 471.590572][T15004] BTRFS info (device loop3): max_inline at 2048 [ 471.597965][T15004] BTRFS info (device loop3): disk space caching is enabled [ 471.643289][T15017] netlink: 'syz.4.3247': attribute type 1 has an invalid length. [ 471.684048][T15017] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3247'. Stopping dhcpcd... [ 471.830216][T15004] BTRFS info (device loop3): auto enabling async discard stopped /sbin/dhcpcd (pid 5436) [ 472.081272][T15004] BTRFS error (device loop3: state M): unrecognized mount option 'cpu.stat' [ 472.103492][T14973] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 472.122677][T15004] BTRFS info (device loop3: state M): left=0, need=98304, flags=5 [ 472.147934][T14973] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 472.183259][T14973] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 472.191892][T15004] BTRFS info (device loop3: state M): space_info SYSTEM has 0 free, is not full [ 472.203650][T15004] BTRFS info (device loop3: state M): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 472.220540][T15004] BTRFS info (device loop3: state M): global_block_rsv: size 1048576 reserved 1044480 [ 472.231643][T15004] BTRFS info (device loop3: state M): trans_block_rsv: size 0 reserved 0 [ 472.242665][T15004] BTRFS info (device loop3: state M): chunk_block_rsv: size 0 reserved 0 [ 472.252448][T15004] BTRFS info (device loop3: state M): delayed_block_rsv: size 0 reserved 0 [ 472.263419][T15004] BTRFS info (device loop3: state M): delayed_refs_rsv: size 0 reserved 0 [ 472.291904][T15004] BTRFS error (device loop3: state M): allocation failed flags 4, wanted 4096 tree-log 0, relocation: 0 [ 472.312949][T14973] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 472.313961][T15004] BTRFS info (device loop3: state M): space_info DATA+METADATA has -1048576 free, is full [ 472.333407][T15004] BTRFS info (device loop3: state M): space_info total=3276800, used=53248, pinned=0, reserved=0, may_use=1048576, readonly=3223552 zone_unusable=0 [ 472.350900][T15004] BTRFS info (device loop3: state M): global_block_rsv: size 1048576 reserved 1044480 [ 472.365682][T15004] BTRFS info (device loop3: state M): trans_block_rsv: size 0 reserved 0 [ 472.378911][T15004] BTRFS info (device loop3: state M): chunk_block_rsv: size 0 reserved 0 Stopping network[ 472.389524][T15004] BTRFS info (device loop3: state M): delayed_block_rsv: size 0 reserved 0 : [ 472.402017][T15004] BTRFS info (device loop3: state M): delayed_refs_rsv: size 0 reserved 0 [ 472.438183][T15004] BTRFS info (device loop3: state M): block group 5242880 has 1638400 bytes, 53248 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1585152 bytes available) [readonly] [ 472.462573][T15004] BTRFS info (device loop3: state M): block group has cluster?: no [ 472.472100][T15004] BTRFS info (device loop3: state M): 0 free space entries at or bigger than 4096 bytes [ 472.484020][T15004] BTRFS info (device loop3: state M): block group 6881280 has 1638400 bytes, 0 used 0 pinned 0 reserved 0 delalloc 0 super 0 zone_unusable (1638400 bytes available) [readonly] [ 472.524834][T15004] BTRFS critical (device loop3: state M): entry offset 6881280, bytes 1638400, bitmap no [ 472.559917][T15004] BTRFS info (device loop3: state M): block group has cluster?: no [ 472.568195][T15004] BTRFS info (device loop3: state M): 0 free space entries at or bigger than 4096 bytes [ 472.596555][ T5785] Bluetooth: hci0: command tx timeout [ 472.644944][T15004] BTRFS info (device loop3: state M): 3223552 bytes available across all block groups [ 472.706756][T15004] BTRFS warning (device loop3: state M): Skipping commit of aborted transaction. [ 472.747200][T15004] ------------[ cut here ]------------ [ 472.754081][T15004] BTRFS: Transaction aborted (error -28) [ 472.755435][T14973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.782593][T15004] WARNING: CPU: 0 PID: 15004 at fs/btrfs/transaction.c:2004 btrfs_commit_transaction+0x2ebf/0x3760 [ 472.796895][T15004] Modules linked in: [ 472.801464][T15004] CPU: 0 PID: 15004 Comm: syz.3.3245 Not tainted 6.6.94-syzkaller #0 [ 472.812583][T15004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.826464][T15004] RIP: 0010:btrfs_commit_transaction+0x2ebf/0x3760 [ 472.838907][T15004] Code: e8 d6 d3 0d fe be 01 00 00 00 4c 89 ef e8 b9 a5 a7 00 e9 5a d7 ff ff e8 bf d3 0d fe 48 c7 c7 20 fe ec 8a 89 de e8 b1 38 d8 fd <0f> 0b e9 65 f9 ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 6f d2 [ 472.865529][T15004] RSP: 0018:ffffc900033677c0 EFLAGS: 00010246 [ 472.877676][T15004] RAX: 9572a03b14670b00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 472.886253][T14973] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.888008][T15004] RDX: ffffc9000d18b000 RSI: 000000000007585e RDI: 000000000007585f [ 472.908350][T15004] RBP: ffffc90003367ae8 R08: ffffffff90d8569f R09: 1ffffffff21b0ad3 [ 472.917477][T15004] R10: dffffc0000000000 R11: fffffbfff21b0ad4 R12: ffff88805fa01540 [ 472.929881][T15004] R13: ffff88805fa01560 R14: 0000000000000000 R15: dffffc0000000000 [ 472.940014][T15004] FS: 00007f162d67c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 472.953257][T15004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.961932][T15004] CR2: 0000001b3231bff8 CR3: 000000006355d000 CR4: 00000000003526f0 [ 472.970701][T15004] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.979913][T15004] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 472.989823][T15004] Call Trace: [ 472.996737][T15004] [ 473.000130][T15004] ? btrfs_commit_transaction+0x177/0x3760 [ 473.007179][T15004] ? btrfs_commit_transaction_async+0x460/0x460 [ 473.014489][T15004] ? do_raw_spin_unlock+0x121/0x230 [ 473.020440][T15004] ? _raw_spin_unlock+0x28/0x40 [ 473.026375][T15004] ? btrfs_record_root_in_trans+0x91/0x180 [ 473.034951][T15004] ? start_transaction+0x43e/0x11d0 [ 473.042392][T15004] btrfs_set_free_space_cache_v1_active+0x71/0x1c0 [ 473.045171][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.052513][T15004] ? bpf_lsm_sb_remount+0x9/0x10 [ 473.060932][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.066223][T15004] btrfs_remount+0x6cc/0x1470 [ 473.082063][T15004] ? __static_call_return0+0x9/0x10 [ 473.087468][T15004] ? btrfs_kill_super+0x50/0x50 [ 473.093316][T15004] ? dentry_lru_isolate+0x2f0/0x2f0 [ 473.098904][T15004] ? hook_sb_remount+0x1b/0xc0 [ 473.104899][T15004] ? bpf_lsm_sb_remount+0x9/0x10 [ 473.110691][T15004] reconfigure_super+0x21e/0x880 [ 473.115725][T15004] path_mount+0xd19/0xfe0 [ 473.120781][T15004] __se_sys_mount+0x2da/0x3c0 [ 473.127882][T15004] ? __x64_sys_mount+0xc0/0xc0 [ 473.134440][T15004] ? lockdep_hardirqs_on+0x98/0x150 [ 473.140368][T15004] ? __x64_sys_mount+0x20/0xc0 [ 473.146031][T15004] do_syscall_64+0x55/0xb0 [ 473.151282][T15004] ? clear_bhb_loop+0x40/0x90 [ 473.158637][T15004] ? clear_bhb_loop+0x40/0x90 [ 473.165210][T15004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.171210][T15004] RIP: 0033:0x7f162c7900ca [ 473.177965][T15004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.203894][T15004] RSP: 002b:00007f162d67be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 473.212840][T15004] RAX: ffffffffffffffda RBX: 00007f162d67bef0 RCX: 00007f162c7900ca [ 473.222335][T15004] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 473.232092][T15004] RBP: 0000200000000180 R08: 00007f162d67bef0 R09: 00000000001260a9 [ 473.243127][T15004] R10: 00000000001260a9 R11: 0000000000000246 R12: 0000200000000100 [ 473.253161][T15004] R13: 00007f162d67beb0 R14: 0000000000000000 R15: 00002000000001c0 [ 473.263481][T15004] [ 473.266664][T15004] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 473.275103][T15004] CPU: 0 PID: 15004 Comm: syz.3.3245 Not tainted 6.6.94-syzkaller #0 [ 473.283232][T15004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.293774][T15004] Call Trace: [ 473.297129][T15004] [ 473.300112][T15004] dump_stack_lvl+0x16c/0x230 [ 473.304908][T15004] ? show_regs_print_info+0x20/0x20 [ 473.310394][T15004] ? load_image+0x3b0/0x3b0 [ 473.315790][T15004] panic+0x2c0/0x710 [ 473.319835][T15004] ? bpf_jit_dump+0xd0/0xd0 [ 473.324874][T15004] __warn+0x2e0/0x470 [ 473.329813][T15004] ? btrfs_commit_transaction+0x2ebf/0x3760 [ 473.336687][T15004] ? btrfs_commit_transaction+0x2ebf/0x3760 [ 473.344585][T15004] report_bug+0x2be/0x4f0 [ 473.350510][T15004] ? btrfs_commit_transaction+0x2ebf/0x3760 [ 473.357769][T15004] ? btrfs_commit_transaction+0x2ebf/0x3760 [ 473.366900][T15004] ? btrfs_commit_transaction+0x2ec1/0x3760 [ 473.374450][T15004] handle_bug+0xcf/0x120 [ 473.380701][T15004] exc_invalid_op+0x1a/0x50 [ 473.387062][T15004] asm_exc_invalid_op+0x1a/0x20 [ 473.392350][T15004] RIP: 0010:btrfs_commit_transaction+0x2ebf/0x3760 [ 473.399197][T15004] Code: e8 d6 d3 0d fe be 01 00 00 00 4c 89 ef e8 b9 a5 a7 00 e9 5a d7 ff ff e8 bf d3 0d fe 48 c7 c7 20 fe ec 8a 89 de e8 b1 38 d8 fd <0f> 0b e9 65 f9 ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 6f d2 [ 473.421334][T15004] RSP: 0018:ffffc900033677c0 EFLAGS: 00010246 [ 473.427845][T15004] RAX: 9572a03b14670b00 RBX: 00000000ffffffe4 RCX: 0000000000080000 [ 473.438574][T15004] RDX: ffffc9000d18b000 RSI: 000000000007585e RDI: 000000000007585f [ 473.448286][T15004] RBP: ffffc90003367ae8 R08: ffffffff90d8569f R09: 1ffffffff21b0ad3 [ 473.460399][T15004] R10: dffffc0000000000 R11: fffffbfff21b0ad4 R12: ffff88805fa01540 [ 473.469162][T15004] R13: ffff88805fa01560 R14: 0000000000000000 R15: dffffc0000000000 [ 473.478416][T15004] ? btrfs_commit_transaction+0x177/0x3760 [ 473.485281][T15004] ? btrfs_commit_transaction_async+0x460/0x460 [ 473.491975][T15004] ? do_raw_spin_unlock+0x121/0x230 [ 473.498979][T15004] ? _raw_spin_unlock+0x28/0x40 [ 473.504456][T15004] ? btrfs_record_root_in_trans+0x91/0x180 [ 473.512306][T15004] ? start_transaction+0x43e/0x11d0 [ 473.520298][T15004] btrfs_set_free_space_cache_v1_active+0x71/0x1c0 [ 473.528867][T15004] ? bpf_lsm_sb_remount+0x9/0x10 [ 473.533092][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.533224][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.555591][T15004] btrfs_remount+0x6cc/0x1470 [ 473.562586][T15004] ? __static_call_return0+0x9/0x10 [ 473.569110][T15004] ? btrfs_kill_super+0x50/0x50 [ 473.574986][T15004] ? dentry_lru_isolate+0x2f0/0x2f0 [ 473.582090][T15004] ? hook_sb_remount+0x1b/0xc0 [ 473.587135][T15004] ? bpf_lsm_sb_remount+0x9/0x10 [ 473.594541][T15004] reconfigure_super+0x21e/0x880 [ 473.600214][T15004] path_mount+0xd19/0xfe0 [ 473.605289][T15004] __se_sys_mount+0x2da/0x3c0 [ 473.610500][T15004] ? __x64_sys_mount+0xc0/0xc0 [ 473.618036][T15004] ? lockdep_hardirqs_on+0x98/0x150 [ 473.624617][T15004] ? __x64_sys_mount+0x20/0xc0 [ 473.631043][T15004] do_syscall_64+0x55/0xb0 [ 473.639668][T15004] ? clear_bhb_loop+0x40/0x90 [ 473.645868][T15004] ? clear_bhb_loop+0x40/0x90 [ 473.650721][T15004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.657602][T15004] RIP: 0033:0x7f162c7900ca [ 473.662618][T15004] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.688512][T15004] RSP: 002b:00007f162d67be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 473.700044][T15004] RAX: ffffffffffffffda RBX: 00007f162d67bef0 RCX: 00007f162c7900ca [ 473.708821][T15004] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 473.718559][T15004] RBP: 0000200000000180 R08: 00007f162d67bef0 R09: 00000000001260a9 [ 473.726646][T15004] R10: 00000000001260a9 R11: 0000000000000246 R12: 0000200000000100 [ 473.735173][T15004] R13: 00007f162d67beb0 R14: 0000000000000000 R15: 00002000000001c0 [ 473.745433][T15004] [ 473.751537][T15004] Kernel Offset: disabled [ 473.756324][T15004] Rebooting in 86400 seconds..