last executing test programs: 1m46.386222894s ago: executing program 0 (id=142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x9, 0xc2, 0xffff, 0x0, 0x0, {[@window={0x3, 0x3, 0xe}, @timestamp={0x8, 0xa, 0x25, 0x1}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 1m46.269177926s ago: executing program 0 (id=144): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m46.084340198s ago: executing program 0 (id=145): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) readv(r1, &(0x7f0000000540)=[{&(0x7f0000000240)=""/123, 0x7b}], 0x1) 1m45.909044491s ago: executing program 0 (id=146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./bus\x00') 1m45.450595478s ago: executing program 0 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m43.838781472s ago: executing program 0 (id=160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x0, 0x5, 0x5}) 1m43.124681683s ago: executing program 32 (id=160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x0, 0x5, 0x5}) 4.357027235s ago: executing program 1 (id=779): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x10, 0x6, 0x10001) 3.246602321s ago: executing program 4 (id=788): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0xce20, 0x0, @empty}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000200)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f000000, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07e0500a2ab3d58ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 3.060263795s ago: executing program 3 (id=789): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0}) 2.868202357s ago: executing program 4 (id=792): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0xdc3, 0x2000) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 2.614884561s ago: executing program 3 (id=794): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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") setresgid(0xee00, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) 2.568611492s ago: executing program 1 (id=795): unshare(0x20040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) 2.296609296s ago: executing program 3 (id=796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001840)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f00)={0x34, r3, 0x14bbd824fbba8d63, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c004) 2.139845568s ago: executing program 5 (id=797): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r0, 0x80079a0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) sendfile(r1, r0, 0x0, 0xfffc) 1.99862959s ago: executing program 5 (id=798): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@canfd={{}, 0xfb, 0x1, 0x0, 0x0, "9e1050ecb1edca6a70e745f26c9e33a58584842d15e6db3d077146605345ac5f04837fcc6bbd44274bba9a5ed38d5d3a58fbb5680f38c0a19ec746ed1a1dcc6d"}, 0x48}, 0x2, 0x0, 0x0, 0x20000894}, 0x0) 1.849928232s ago: executing program 5 (id=799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f0000003d80)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT, @ANYRES64=r1, @ANYRES64=r1, @ANYRESHEX, @ANYRESHEX=r1, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16=r1, @ANYRES16, @ANYRESHEX, @ANYRES16], 0x5, 0x1521, &(0x7f00000008c0)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000500)) 1.706441895s ago: executing program 3 (id=800): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f00000003c0)={[{@uid}, {@nostrict}, {@umask={'umask', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@noadinicb}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@gid}]}, 0x1, 0xc32, &(0x7f0000009100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)='~', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.610675586s ago: executing program 1 (id=801): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x8a, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0x6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xff) 1.610084426s ago: executing program 2 (id=802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.416912229s ago: executing program 2 (id=803): openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1.31675351s ago: executing program 5 (id=804): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x221c0c0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') 1.274544651s ago: executing program 1 (id=805): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 1.257546221s ago: executing program 3 (id=806): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.103037044s ago: executing program 2 (id=807): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 943.094766ms ago: executing program 3 (id=808): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 942.321886ms ago: executing program 4 (id=809): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 784.646638ms ago: executing program 2 (id=810): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0xff, 0x0, 0x1, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 727.717849ms ago: executing program 5 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) chdir(&(0x7f0000000380)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x41c902, 0x0, 0x1}, 0x18) 618.662061ms ago: executing program 1 (id=812): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 618.116091ms ago: executing program 4 (id=813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 515.595392ms ago: executing program 2 (id=814): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x15a4}, 0x1c) 334.849335ms ago: executing program 4 (id=815): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x149380, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x7bd, 0xfffffffc, 0x0, 0xf, "ff000000050000000000000026086800001500"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r1, 0x540a, 0x0) 234.702777ms ago: executing program 2 (id=816): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0x1e084000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r1}) 234.228397ms ago: executing program 1 (id=817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r1) 140.401428ms ago: executing program 4 (id=818): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641112", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 0s ago: executing program 5 (id=819): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000080)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@check_relaxed}, {@cruft}, {@overriderock}, {@map_acorn}, {@check_strict}, {@map_off}, {@mode={'mode', 0x3d, 0x7}}, {@dmode={'dmode', 0x3d, 0x9}}, {@unhide}, {@showassoc}]}, 0x4, 0xa02, &(0x7f0000000e40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): SBDEVFS_URB_ZERO_PACKET. [ 89.760010][ T4426] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.802687][ T4426] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.827665][ T4437] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.852164][ T4426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.872111][ T4426] usb 1-1: Product: syz [ 89.880942][ T4432] fido_id[4432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.903384][ T4426] usb 1-1: Manufacturer: syz [ 89.908224][ T4426] usb 1-1: SerialNumber: syz [ 90.141423][ T4450] 9pnet: p9_errstr2errno: server reported unknown error @í [ 90.156216][ T4426] usb 1-1: 0:2 : does not exist [ 90.180893][ T4426] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 90.291665][ T4426] usb 1-1: USB disconnect, device number 2 [ 90.536407][ T4454] loop3: detected capacity change from 0 to 4096 [ 90.558464][ T4454] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 90.571341][ T4460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33'. [ 90.588169][ T4350] udevd[4350]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.615666][ T4460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33'. [ 90.656794][ T4463] loop1: detected capacity change from 0 to 512 [ 90.675349][ T4461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33'. [ 90.701825][ T4461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.33'. [ 90.711634][ C1] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 90.732247][ T4461] Zero length message leads to an empty skb [ 90.818636][ T4463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.852354][ T4463] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.980023][ T4463] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.34: corrupted inode contents [ 91.056961][ T4463] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.34: mark_inode_dirty error [ 91.096525][ T4419] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 91.126745][ T4463] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #2: comm syz.1.34: corrupted inode contents [ 91.142085][ T4419] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 91.152772][ T4419] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 91.166579][ T4463] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.34: mark_inode_dirty error [ 91.196977][ T4419] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 91.257706][ T4419] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 91.322471][ T4419] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 91.379102][ T4419] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 91.406456][ T4479] loop4: detected capacity change from 0 to 256 [ 91.435612][ T4419] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x1 [ 91.552214][ T4471] loop3: detected capacity change from 0 to 65536 [ 91.564444][ T4419] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 91.643282][ T4471] XFS (loop3): Mounting V5 Filesystem [ 91.646663][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 91.757774][ T4471] XFS (loop3): Ending clean mount [ 92.014404][ T4263] XFS (loop3): Unmounting Filesystem [ 92.206795][ T4494] fido_id[4494]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 92.860637][ T4512] binder_alloc: binder_alloc_mmap_handler: 4511 200000fff000-200001000000 already mapped failed -16 [ 92.970283][ T4518] input: syz0 as /devices/virtual/input/input5 [ 93.267886][ T4528] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 93.373370][ T4532] Bluetooth: MGMT ver 1.22 [ 93.470719][ T4536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 93.597454][ T4542] loop0: detected capacity change from 0 to 16 [ 93.636837][ T4541] loop3: detected capacity change from 0 to 1024 [ 93.660816][ T4541] EXT4-fs: Ignoring removed orlov option [ 93.676155][ T4542] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142735) [ 93.797406][ T4541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.858802][ T4553] 9pnet_fd: Insufficient options for proto=fd [ 94.455391][ T4418] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.532150][ T4570] input: syz1 as /devices/virtual/input/input6 [ 94.539187][ T4570] input: failed to attach handler leds to device input6, error: -6 [ 94.539411][ T4263] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 94.589578][ T4419] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.629145][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 94.671229][ T4418] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 94.703325][ T4418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.737984][ T4418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.771684][ T4418] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 94.786303][ T4419] usb 1-1: Using ep0 maxpacket: 8 [ 94.794247][ T4419] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 94.805962][ T4575] loop8: detected capacity change from 0 to 7 [ 94.825925][ T4419] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 94.836664][ T4575] Dev loop8: unable to read RDB block 7 [ 94.842538][ T4575] loop8: unable to read partition table [ 94.843460][ T4419] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 94.859655][ T4418] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 94.873325][ T4418] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 94.878123][ T4575] loop8: partition table beyond EOD, [ 94.889288][ T4418] usb 3-1: Manufacturer: syz [ 94.892575][ T4575] truncated [ 94.895411][ T4419] usb 1-1: Product: syz [ 94.915851][ T4418] usb 3-1: config 0 descriptor?? [ 94.925688][ T4419] usb 1-1: Manufacturer: syz [ 94.941411][ T4419] usb 1-1: SerialNumber: syz [ 94.949559][ T4575] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 94.949559][ T4575] ) failed (rc=-5) [ 94.964597][ T4419] usb 1-1: config 0 descriptor?? [ 94.982754][ T4419] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 95.346952][ T4418] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 95.367183][ T4418] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 95.393651][ T27] audit: type=1326 audit(1750727729.645:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.3.77" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6a958e929 code=0x0 [ 95.435881][ T4418] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 95.483074][ T4574] loop4: detected capacity change from 0 to 32768 [ 95.527036][ T4574] XFS (loop4): Mounting V5 Filesystem [ 95.648409][ T4574] XFS (loop4): Ending clean mount [ 95.720549][ T7] usb 3-1: USB disconnect, device number 2 [ 95.793333][ T4419] gspca_zc3xx: reg_w_i err -71 [ 95.819189][ T4251] XFS (loop4): Unmounting Filesystem [ 96.249123][ T7] kernel read not supported for file /36/attr/exec (pid: 7 comm: kworker/0:0) [ 96.426062][ T4419] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 96.437103][ T4419] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 96.462813][ T4419] usb 1-1: USB disconnect, device number 3 [ 96.977071][ T4616] loop3: detected capacity change from 0 to 32768 [ 97.029720][ T4616] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.106802][ T4616] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 97.126198][ T4616] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 97.136814][ T4616] OCFS2: File system is now read-only. [ 97.142928][ T4616] (syz.3.88,4616,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 97.143450][ T4419] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.150457][ T4616] (syz.3.88,4616,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 97.166355][ T4616] (syz.3.88,4616,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 97.174052][ T4616] (syz.3.88,4616,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 97.182440][ T4616] (syz.3.88,4616,0):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 97.190865][ T4616] (syz.3.88,4616,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 97.256150][ T4625] loop4: detected capacity change from 0 to 16 [ 97.320411][ T4625] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xe62de0bb, 0xc6d5fae7 expected [ 97.340600][ T4446] udevd[4446]: incorrect erofs checksum on /dev/loop4 [ 97.360350][ T4263] ocfs2: Unmounting device (7,3) on (node local) [ 97.391135][ T4625] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 97.393523][ T4419] usb 2-1: Using ep0 maxpacket: 8 [ 97.417375][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.436007][ T4350] udevd[4350]: incorrect erofs checksum on /dev/loop4 [ 97.473518][ T4625] CIFS mount error: No usable UNC path provided in device string! [ 97.473518][ T4625] [ 97.495910][ T4419] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.512782][ T4630] tipc: Started in network mode [ 97.513610][ T4625] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 97.532095][ T4630] tipc: Node identity 2000007, cluster identity 4711 [ 97.533415][ T4419] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.556456][ T4630] tipc: Node number set to 33554439 [ 97.569875][ T4419] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.621317][ T4419] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.653336][ T4419] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.672943][ T4419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.750266][ T4633] capability: warning: `syz.2.94' uses deprecated v2 capabilities in a way that may be insecure [ 97.787735][ T4634] "syz.3.93" (4634) uses obsolete ecb(arc4) skcipher [ 97.918655][ T4419] usb 2-1: GET_CAPABILITIES returned 0 [ 97.933418][ T4419] usbtmc 2-1:16.0: can't read capabilities [ 98.050765][ T4638] loop0: detected capacity change from 0 to 4096 [ 98.074921][ T4642] loop4: detected capacity change from 0 to 1024 [ 98.194266][ T4642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.228924][ T4344] usb 2-1: USB disconnect, device number 2 [ 98.450224][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 99.094961][ T4666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 99.275809][ T4669] loop1: detected capacity change from 0 to 64 [ 99.295170][ T4424] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.383676][ T4670] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 99.503269][ T4424] usb 3-1: Using ep0 maxpacket: 32 [ 99.512386][ T4424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.535471][ T4424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.573794][ T4424] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 99.582987][ T4424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.619787][ T4424] usb 3-1: config 0 descriptor?? [ 99.659201][ T4679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 99.672413][ T4679] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 99.941419][ T4351] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.023425][ T4418] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.078000][ T4424] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 100.153305][ T4351] usb 5-1: Using ep0 maxpacket: 16 [ 100.160483][ T4351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.203361][ T4351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.223339][ T4418] usb 2-1: Using ep0 maxpacket: 8 [ 100.228734][ T4351] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 100.239741][ T4418] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 100.259213][ T4418] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.270971][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.276754][ T4698] loop0: detected capacity change from 0 to 256 [ 100.328151][ T4418] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.345593][ T4351] usb 5-1: config 0 descriptor?? [ 100.385808][ T4418] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.413423][ T4418] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.460416][ T4418] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.485643][ T4418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.508768][ T4424] usb 3-1: USB disconnect, device number 3 [ 100.722119][ T4418] usb 2-1: usb_control_msg returned -32 [ 100.731266][ T4418] usbtmc 2-1:16.0: can't read capabilities [ 100.781597][ T4351] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 100.863445][ T4351] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found [ 100.871404][ T4351] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found [ 100.922073][ T4700] loop3: detected capacity change from 0 to 32768 [ 100.938218][ T4700] XFS: noikeep mount option is deprecated. [ 101.009836][ T7] usb 5-1: USB disconnect, device number 2 [ 101.042990][ T4700] XFS (loop3): Mounting V5 Filesystem [ 101.260220][ T4700] XFS (loop3): Ending clean mount [ 101.276168][ T4700] XFS (loop3): Quotacheck needed: Please wait. [ 101.316253][ T4351] usb 2-1: USB disconnect, device number 3 [ 101.364205][ T4700] XFS (loop3): Quotacheck: Done. [ 101.373923][ T4723] loop0: detected capacity change from 0 to 4096 [ 101.414177][ T4723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.636551][ T4263] XFS (loop3): Unmounting Filesystem [ 101.801707][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 102.205810][ T4735] loop1: detected capacity change from 0 to 4096 [ 102.429790][ T4727] loop2: detected capacity change from 0 to 32768 [ 102.536920][ T4727] XFS (loop2): Mounting V5 Filesystem [ 102.706731][ T4727] XFS (loop2): Ending clean mount [ 102.778934][ T4727] XFS (loop2): Quotacheck needed: Please wait. [ 102.882355][ T4727] XFS (loop2): Quotacheck: Done. [ 103.223567][ T4344] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.272954][ T4264] XFS (loop2): Unmounting Filesystem [ 103.461691][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.487818][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.520467][ T4344] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 103.542391][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.567677][ T4344] usb 5-1: config 0 descriptor?? [ 103.758848][ T4752] loop3: detected capacity change from 0 to 40427 [ 103.790535][ T4752] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 103.810209][ T4771] loop0: detected capacity change from 0 to 1024 [ 103.852050][ T4752] F2FS-fs (loop3): invalid crc value [ 103.882761][ T4771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.900930][ T4752] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.991923][ T4344] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 104.009846][ T4344] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 104.066308][ T4344] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 104.093363][ T4344] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 104.110554][ T4344] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 104.122107][ T4752] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.139685][ T4777] loop2: detected capacity change from 0 to 4096 [ 104.152159][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.167082][ T4344] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 104.178430][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.190422][ T4344] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 104.223546][ T4344] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 104.224309][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.290475][ T4781] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.322376][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.349857][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.388462][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.455609][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.507581][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.509620][ T4344] usb 5-1: USB disconnect, device number 3 [ 104.578814][ T4263] syz-executor: attempt to access beyond end of device [ 104.578814][ T4263] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.612405][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.643658][ T4252] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 104.721521][ T4785] fido_id[4785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 105.482106][ T4798] loop4: detected capacity change from 0 to 8192 [ 105.537424][ T4798] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.565926][ T4798] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 105.577208][ T4425] EXT4-fs (loop0): unmounting filesystem. [ 105.588961][ T4798] REISERFS (device loop4): using ordered data mode [ 105.596928][ T4798] reiserfs: using flush barriers [ 105.605735][ T4798] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.622900][ T4798] REISERFS (device loop4): checking transaction log (loop4) [ 105.671645][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.827166][ T4798] REISERFS (device loop4): Using tea hash to sort names [ 105.866142][ T4798] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 105.905561][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.975538][ T4810] loop3: detected capacity change from 0 to 2048 [ 106.085956][ T4810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.141346][ T4798] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿÿ18446744073709551615ÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿ" [ 106.205231][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.226019][ T27] audit: type=1800 audit(1750727740.475:3): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 106.438539][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.801334][ T4818] loop3: detected capacity change from 0 to 764 [ 106.934494][ T4818] rock: directory entry would overflow storage [ 106.976154][ T4818] rock: sig=0x4654, size=5, remaining=4 [ 107.314457][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.534021][ T7] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 107.562829][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.573852][ T4260] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.584508][ T4260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.592465][ T4260] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.601610][ T4260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.609810][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.622902][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.631697][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.641091][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.652214][ T4260] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.660026][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.666858][ T4260] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.696934][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.716153][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.727653][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.742076][ T4834] loop3: detected capacity change from 0 to 2048 [ 107.749833][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.759303][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.770825][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.778824][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.789707][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.801056][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.810977][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.820705][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.832049][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.851673][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.868462][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.889446][ T4834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.932764][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.964170][ T7] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.018516][ T7] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.070198][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.120467][ T7] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 108.153489][ T7] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 108.169813][ T7] usb 2-1: Product: syz [ 108.181491][ T7] usb 2-1: Manufacturer: syz [ 108.197258][ T7] usb 2-1: SerialNumber: syz [ 108.208398][ T7] usb 2-1: config 0 descriptor?? [ 108.356190][ T7] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 108.403523][ T4847] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 108.503535][ T4344] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.578674][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 108.579611][ T4424] usb 2-1: USB disconnect, device number 4 [ 108.616896][ T4424] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 108.713270][ T4344] usb 5-1: Using ep0 maxpacket: 16 [ 108.723741][ T4344] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 108.773450][ T4344] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 108.790852][ T4344] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 108.800905][ T4344] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 108.815201][ T4344] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 108.827616][ T4344] usb 5-1: config 0 has no interface number 0 [ 108.834160][ T4344] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 108.851255][ T4344] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 108.864619][ T4344] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.895102][ T4344] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 108.938504][ T4344] usb 5-1: config 0 interface 125 has no altsetting 0 [ 108.958494][ T4344] usb 5-1: config 0 interface 125 has no altsetting 2 [ 108.997793][ T4344] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 109.014404][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.030603][ T4344] usb 5-1: Product: syz [ 109.048011][ T4344] usb 5-1: Manufacturer: syz [ 109.055540][ T4344] usb 5-1: SerialNumber: syz [ 109.081994][ T4344] usb 5-1: config 0 descriptor?? [ 109.116662][ T4344] usb 5-1: selecting invalid altsetting 2 [ 109.250499][ T4831] chnl_net:caif_netlink_parms(): no params data found [ 109.560786][ T4877] loop2: detected capacity change from 0 to 512 [ 109.589149][ T4877] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.604132][ T4877] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.671063][ T4877] EXT4-fs (loop2): 1 truncate cleaned up [ 109.703378][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 109.743026][ T4877] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.768125][ T75] device hsr_slave_0 left promiscuous mode [ 109.792980][ T75] device hsr_slave_1 left promiscuous mode [ 109.841313][ T4884] loop1: detected capacity change from 0 to 256 [ 109.859796][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.879142][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.911952][ T4884] exfat: Deprecated parameter 'utf8' [ 109.932135][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.946370][ T4344] parport0: fix this legacy no-device port driver! [ 109.963698][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.984276][ T75] device bridge_slave_1 left promiscuous mode [ 109.992910][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.005807][ T4884] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 110.038809][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 110.052582][ T75] device bridge_slave_0 left promiscuous mode [ 110.071398][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.198896][ T7] usb 5-1: USB disconnect, device number 4 [ 110.248909][ T75] device veth1_macvtap left promiscuous mode [ 110.280945][ T75] device veth0_macvtap left promiscuous mode [ 110.287397][ T75] device veth1_vlan left promiscuous mode [ 110.327924][ T75] device veth0_vlan left promiscuous mode [ 110.827934][ T7] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 110.909445][ T4300] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 111.016735][ T7] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 111.026098][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.043952][ T7] usb 4-1: config 0 descriptor?? [ 111.054813][ T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 111.115232][ T4300] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 111.123759][ T4300] usb 3-1: config 0 has no interface number 0 [ 111.128557][ T75] team0 (unregistering): Port device team_slave_1 removed [ 111.130012][ T4300] usb 3-1: config 0 interface 41 has no altsetting 0 [ 111.153106][ T4300] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 111.163057][ T4300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.171605][ T4300] usb 3-1: Product: syz [ 111.176437][ T4300] usb 3-1: Manufacturer: syz [ 111.181309][ T4300] usb 3-1: SerialNumber: syz [ 111.198779][ T4300] usb 3-1: config 0 descriptor?? [ 111.223726][ T75] team0 (unregistering): Port device team_slave_0 removed [ 111.256724][ T7] gp8psk: usb in 128 operation failed. [ 111.285656][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.365016][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.468364][ T7] gp8psk: usb in 146 operation failed. [ 111.474423][ T7] gp8psk: failed to get FW version [ 111.489779][ T7] gp8psk: FPGA Version = 4 [ 111.696832][ T7] gp8psk: usb in 138 operation failed. [ 111.702481][ T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 111.724550][ T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 111.744837][ T7] usb 4-1: USB disconnect, device number 2 [ 111.784379][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 112.079775][ T75] bond0 (unregistering): Released all slaves [ 112.091058][ T4300] CoreChips: probe of 3-1:0.41 failed with error -71 [ 112.117730][ T4300] usb 3-1: USB disconnect, device number 4 [ 112.297652][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 112.361569][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.393347][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.440406][ T4831] device bridge_slave_0 entered promiscuous mode [ 112.492991][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.539188][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.580498][ T4831] device bridge_slave_1 entered promiscuous mode [ 112.613523][ T4916] loop4: detected capacity change from 0 to 256 [ 112.747195][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.796311][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.984508][ T4831] team0: Port device team_slave_0 added [ 113.013554][ T4831] team0: Port device team_slave_1 added [ 113.073621][ T4300] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.148936][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.201549][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.258342][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.273387][ T4300] usb 4-1: Using ep0 maxpacket: 8 [ 113.289630][ T4300] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 113.296965][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.338952][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.340488][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.367612][ T4300] usb 4-1: Product: syz [ 113.413285][ T4300] usb 4-1: Manufacturer: syz [ 113.417971][ T4300] usb 4-1: SerialNumber: syz [ 113.428532][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.454080][ T4300] usb 4-1: config 0 descriptor?? [ 113.488504][ T4300] gspca_main: se401-2.14.0 probing 047d:5003 [ 113.628665][ T4831] device hsr_slave_0 entered promiscuous mode [ 113.658679][ T4831] device hsr_slave_1 entered promiscuous mode [ 113.835753][ T4917] loop1: detected capacity change from 0 to 32768 [ 113.863277][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 113.870767][ T4300] gspca_se401: Bayer format not supported! [ 113.969181][ T4917] XFS (loop1): Mounting V5 Filesystem [ 114.054593][ T4917] XFS (loop1): Ending clean mount [ 114.100291][ T4917] XFS (loop1): Quotacheck needed: Please wait. [ 114.121911][ T4344] usb 4-1: USB disconnect, device number 3 [ 114.184289][ T4917] XFS (loop1): Quotacheck: Done. [ 114.247882][ T4831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.290239][ T4831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.322380][ T4831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.385936][ T4831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.707381][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.780349][ T4257] XFS (loop1): Unmounting Filesystem [ 114.784555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.795388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.840768][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.863408][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.872283][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.894590][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.902956][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.956260][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.972117][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.983745][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.010183][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.017430][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.042586][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.086875][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.102577][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.142926][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.183288][ T4351] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 115.226341][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.262522][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.279958][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.314414][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.332906][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.359512][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.368709][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.383344][ T4351] usb 3-1: Using ep0 maxpacket: 32 [ 115.390575][ T4351] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 115.404525][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.440701][ T4351] usb 3-1: config 0 has no interface number 0 [ 115.450265][ T4954] loop4: detected capacity change from 0 to 40427 [ 115.478004][ T4954] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 115.491797][ T4351] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 115.537245][ T4954] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 115.555596][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.580260][ T4351] usb 3-1: Product: syz [ 115.590957][ T4954] F2FS-fs (loop4): invalid crc value [ 115.602275][ T4351] usb 3-1: Manufacturer: syz [ 115.611315][ T4978] loop3: detected capacity change from 0 to 1024 [ 115.620964][ T4351] usb 3-1: SerialNumber: syz [ 115.641431][ T4954] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.711664][ T4351] usb 3-1: config 0 descriptor?? [ 115.887007][ T4954] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 115.931388][ T4954] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 115.943407][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 116.176978][ T4978] EXT4-fs (loop3): Test dummy encryption mode enabled [ 116.188905][ T4963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.240702][ T4963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.299172][ T4351] usb 3-1: USB disconnect, device number 5 [ 116.319216][ T4978] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.407589][ T4882] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 116.469543][ T4882] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 116.523897][ T4446] udevd[4446]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.641856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.675069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.687825][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.005103][ T4978] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 117.218480][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 117.841357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.862466][ T5042] loop2: detected capacity change from 0 to 2048 [ 117.870344][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.923039][ T5042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.962857][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.980061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.005736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.020834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.039853][ T4831] device veth0_vlan entered promiscuous mode [ 118.097927][ T4831] device veth1_vlan entered promiscuous mode [ 118.189993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.210859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.231572][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.269083][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.329613][ T4831] device veth0_macvtap entered promiscuous mode [ 118.360091][ T4831] device veth1_macvtap entered promiscuous mode [ 118.404486][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.429895][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.443443][ T4344] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.481995][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.511099][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.554717][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.580405][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.605389][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.642154][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.655311][ T4344] usb 2-1: Using ep0 maxpacket: 16 [ 118.662391][ T4344] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.685218][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.695656][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.705388][ T4344] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 118.715811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.724331][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.734761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.742963][ T4344] usb 2-1: Product: syz [ 118.747945][ T4344] usb 2-1: Manufacturer: syz [ 118.752593][ T4344] usb 2-1: SerialNumber: syz [ 118.758587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.772746][ T4344] usb 2-1: config 0 descriptor?? [ 118.788819][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.807237][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.817875][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.831650][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.833245][ T4351] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 118.842376][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.907265][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.929959][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.940867][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.958886][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.973212][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.984515][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.040791][ T4831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.053655][ T4831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.059638][ T4351] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 119.072631][ T4831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.082900][ T4351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.085364][ T4831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.110736][ T4351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57895, setting to 64 [ 119.134881][ T4351] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.165458][ T4344] usb 2-1: USB disconnect, device number 5 [ 119.195248][ T4351] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=37.89 [ 119.203471][ T5072] loop3: detected capacity change from 0 to 64 [ 119.245635][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.266038][ T4351] usb 5-1: Product: syz [ 119.270290][ T4351] usb 5-1: Manufacturer: syz [ 119.296887][ T4351] usb 5-1: SerialNumber: syz [ 119.330034][ T4351] usb 5-1: config 0 descriptor?? [ 119.366507][ T5055] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.398851][ T4351] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 119.446321][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.476498][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.511452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.552340][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.586693][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.631122][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.204674][ T4351] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 120.258455][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.265479][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.283584][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.291024][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.320512][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.341396][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.382283][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.422850][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.432918][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.435866][ T5094] loop5: detected capacity change from 0 to 1024 [ 120.453535][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.490546][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.498519][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.525744][ T7] usb 5-1: USB disconnect, device number 5 [ 120.533438][ C1] gspca_pac7302 5-1:0.0: URB error -71, resubmitting [ 120.540193][ C1] gspca_main: Resubmit URB failed with error -19 [ 120.595253][ T5094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.611787][ T5099] loop3: detected capacity change from 0 to 512 [ 120.640089][ T5099] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.713867][ T5099] EXT4-fs (loop3): 1 truncate cleaned up [ 120.721360][ T5083] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 120.753760][ T5099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.956497][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 121.260983][ T5113] loop3: detected capacity change from 0 to 1024 [ 121.337531][ T5118] loop4: detected capacity change from 0 to 2048 [ 121.460245][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 121.510407][ T5118] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.568626][ T5118] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 121.787951][ T5113] hfsplus: xattr searching failed [ 121.806243][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 121.844179][ T5107] loop1: detected capacity change from 0 to 32768 [ 121.856558][ T5113] hfsplus: xattr searching failed [ 121.891800][ T5107] XFS: noikeep mount option is deprecated. [ 121.901053][ T5113] hfsplus: request for non-existent node 62977 in B*Tree [ 121.950009][ T5113] hfsplus: request for non-existent node 62977 in B*Tree [ 122.050349][ T46] hfsplus: b-tree write err: -5, ino 3 [ 122.060706][ T5107] XFS (loop1): Mounting V5 Filesystem [ 122.369119][ T5107] XFS (loop1): Ending clean mount [ 122.382712][ T5107] XFS (loop1): Quotacheck needed: Please wait. [ 122.520925][ T5107] XFS (loop1): Quotacheck: Done. [ 122.795433][ T4257] XFS (loop1): Unmounting Filesystem [ 123.893296][ T4344] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.114232][ T4344] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.130998][ T4344] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.151523][ T4344] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.179386][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.199432][ T5204] loop1: detected capacity change from 0 to 512 [ 124.209486][ T4344] usb 6-1: SerialNumber: syz [ 124.229929][ T5204] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.340591][ T5204] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 124.409044][ T5204] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.269: invalid indirect mapped block 2683928664 (level 1) [ 124.471619][ T4344] usb 6-1: 0:2 : does not exist [ 124.568283][ T4344] usb 6-1: USB disconnect, device number 2 [ 124.603485][ T5204] EXT4-fs (loop1): Remounting filesystem read-only [ 124.642539][ T5204] EXT4-fs (loop1): 1 truncate cleaned up [ 124.733052][ T5204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.045847][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 125.113169][ C1] sched: RT throttling activated [ 125.163301][ T4300] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.365279][ T4300] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.397563][ T4300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.459432][ T4300] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.530464][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.599349][ T4300] usb 4-1: SerialNumber: syz [ 125.864876][ T4300] usb 4-1: 0:2 : does not exist [ 125.965616][ T4300] usb 4-1: USB disconnect, device number 4 [ 126.217791][ T5202] loop2: detected capacity change from 0 to 262144 [ 126.234749][ T4351] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.245709][ T5202] F2FS-fs (loop2): invalid crc value [ 126.332499][ T5202] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.382034][ T5202] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.423401][ T4351] usb 5-1: Using ep0 maxpacket: 32 [ 126.431038][ T4351] usb 5-1: config 0 has no interfaces? [ 126.481619][ T4351] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 126.503315][ T4351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.559088][ T4351] usb 5-1: Product: syz [ 126.589057][ T4351] usb 5-1: Manufacturer: syz [ 126.598789][ T4351] usb 5-1: SerialNumber: syz [ 126.615456][ T4351] usb 5-1: config 0 descriptor?? [ 126.689417][ T5237] vivid-000: disconnect [ 126.720321][ T5237] vivid-000: reconnect [ 126.864330][ T4344] usb 5-1: USB disconnect, device number 6 [ 126.980899][ T5241] loop1: detected capacity change from 0 to 256 [ 127.079836][ T5241] FAT-fs (loop1): Directory bread(block 64) failed [ 127.110702][ T5241] FAT-fs (loop1): Directory bread(block 65) failed [ 127.132430][ T5241] FAT-fs (loop1): Directory bread(block 66) failed [ 127.167436][ T5241] FAT-fs (loop1): Directory bread(block 67) failed [ 127.197892][ T5241] FAT-fs (loop1): Directory bread(block 68) failed [ 127.230849][ T5241] FAT-fs (loop1): Directory bread(block 69) failed [ 127.253479][ T5241] FAT-fs (loop1): Directory bread(block 70) failed [ 127.275774][ T5241] FAT-fs (loop1): Directory bread(block 71) failed [ 127.288903][ T5226] loop5: detected capacity change from 0 to 40427 [ 127.309836][ T5241] FAT-fs (loop1): Directory bread(block 72) failed [ 127.336269][ T5226] F2FS-fs (loop5): invalid crc value [ 127.360419][ T5241] FAT-fs (loop1): Directory bread(block 73) failed [ 127.421104][ T5226] F2FS-fs (loop5): Found nat_bits in checkpoint [ 127.716792][ T5226] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 128.005579][ T5263] loop0: detected capacity change from 0 to 7 [ 128.020512][ T4497] Dev loop0: unable to read RDB block 7 [ 128.029719][ T4497] loop0: AHDI p3 p4 [ 128.045270][ T4497] loop0: partition table partially beyond EOD, truncated [ 128.077710][ T4497] loop0: p3 start 16777216 is beyond EOD, truncated [ 128.157122][ T5263] Dev loop0: unable to read RDB block 7 [ 128.162799][ T5263] loop0: AHDI p3 p4 [ 128.204515][ T5263] loop0: partition table partially beyond EOD, truncated [ 128.252632][ T5263] loop0: p3 start 16777216 is beyond EOD, truncated [ 128.337688][ T4831] syz-executor: attempt to access beyond end of device [ 128.337688][ T4831] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.712582][ T5304] loop3: detected capacity change from 0 to 64 [ 129.765398][ T4418] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.963320][ T4418] usb 5-1: Using ep0 maxpacket: 32 [ 129.971386][ T4418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.012732][ T4418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.061501][ T4418] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 130.097560][ T4418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.146765][ T4418] usb 5-1: config 0 descriptor?? [ 130.598479][ T4418] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 130.663318][ T4351] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 130.853385][ T4351] usb 6-1: Using ep0 maxpacket: 32 [ 130.860813][ T4351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.890809][ T4300] usb 5-1: USB disconnect, device number 7 [ 130.897421][ T4351] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.918375][ T4351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.941507][ T4351] usb 6-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 130.984799][ T4351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.021502][ T4351] usb 6-1: config 0 descriptor?? [ 131.161299][ T5318] loop2: detected capacity change from 0 to 40427 [ 131.191576][ T5318] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 131.244742][ T5318] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 131.275974][ T5318] F2FS-fs (loop2): invalid crc value [ 131.332217][ T5318] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.444477][ T4351] wacom 0003:056A:00D0.0008: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 131.513095][ T4351] wacom 0003:056A:00D0.0008: hidraw0: USB HID v0.00 Device [HID 056a:00d0] on usb-dummy_hcd.5-1/input0 [ 131.557152][ T4351] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00D0.0008/input/input8 [ 131.570499][ T5318] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 131.590072][ T5318] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.746122][ T4351] usb 6-1: USB disconnect, device number 3 [ 131.871436][ T27] audit: type=1326 audit(1750727766.125:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a958e929 code=0x7ffc0000 [ 132.005042][ T27] audit: type=1326 audit(1750727766.165:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a958e929 code=0x7ffc0000 [ 132.059892][ T5359] fido_id[5359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 132.091385][ T27] audit: type=1326 audit(1750727766.165:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fc6a958e929 code=0x7ffc0000 [ 132.183613][ T27] audit: type=1326 audit(1750727766.165:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a958e929 code=0x7ffc0000 [ 132.233281][ T27] audit: type=1326 audit(1750727766.165:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.3.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a958e929 code=0x7ffc0000 [ 132.270343][ T11] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 132.290119][ T4344] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.300551][ T11] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 132.443499][ T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 132.454204][ T52] block nbd1: Attempted send on invalid socket [ 132.460856][ T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 132.473251][ T5349] EXT4-fs (nbd1): unable to read superblock [ 132.493222][ T4344] usb 5-1: Using ep0 maxpacket: 16 [ 132.500230][ T4344] usb 5-1: config 0 interface 0 has no altsetting 0 [ 132.507153][ T4344] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 132.516397][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.526335][ T4344] usb 5-1: config 0 descriptor?? [ 132.676408][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.707069][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 132.749049][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 132.780041][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 132.828132][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 132.853276][ T7] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 132.881777][ T7] usb 4-1: Manufacturer: syz [ 132.898583][ T7] usb 4-1: config 0 descriptor?? [ 132.908910][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.915989][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.280908][ T4344] usb 5-1: USB disconnect, device number 8 [ 133.437672][ T5374] loop1: detected capacity change from 0 to 65536 [ 133.513302][ T7] rc_core: IR keymap rc-hauppauge not found [ 133.519410][ T7] Registered IR keymap rc-empty [ 133.566879][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 133.574233][ T5370] loop5: detected capacity change from 0 to 32768 [ 133.598776][ T5374] XFS (loop1): Mounting V5 Filesystem [ 133.633682][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 133.648966][ T5389] loop8: detected capacity change from 0 to 8 [ 133.661526][ T5370] XFS (loop5): Mounting V5 Filesystem [ 133.689656][ T5389] Dev loop8: unable to read RDB block 8 [ 133.692341][ T5374] XFS (loop1): Ending clean mount [ 133.697772][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 133.711310][ T5374] XFS (loop1): Unmounting Filesystem [ 133.715738][ T5389] loop8: unable to read partition table [ 133.772790][ T5389] loop8: partition table beyond EOD, truncated [ 133.793367][ T5389] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 133.809163][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 133.839341][ T5370] XFS (loop5): Ending clean mount [ 133.846847][ T5370] XFS (loop5): Quotacheck needed: Please wait. [ 133.945876][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.044010][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.096571][ T5370] XFS (loop5): Quotacheck: Done. [ 134.123329][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.153714][ T27] audit: type=1800 audit(1750727768.415:9): pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.317" name="bus" dev="loop5" ino=9290 res=0 errno=0 [ 134.157960][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.211623][ T5404] loop2: detected capacity change from 0 to 16 [ 134.261192][ T5404] erofs: (device loop2): mounted with root inode @ nid 36. [ 134.273460][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.333459][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.367472][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.399633][ T4831] XFS (loop5): Unmounting Filesystem [ 134.413640][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.472668][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.533976][ T7] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 134.572043][ T7] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 134.606245][ T7] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 134.635586][ T7] usb 4-1: USB disconnect, device number 5 [ 135.059047][ T5418] loop3: detected capacity change from 0 to 256 [ 135.126941][ T5418] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 135.473291][ T4426] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.635393][ T5412] loop1: detected capacity change from 0 to 32768 [ 135.667307][ T4426] usb 4-1: Using ep0 maxpacket: 8 [ 135.698010][ T4426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.712366][ T5414] loop4: detected capacity change from 0 to 32768 [ 135.734633][ T4426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.745298][ T4426] usb 4-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 135.754656][ T4426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.778056][ T4426] usb 4-1: config 0 descriptor?? [ 135.834480][ T5412] XFS (loop1): Mounting V5 Filesystem [ 135.880434][ T5414] XFS (loop4): Mounting V5 Filesystem [ 135.986549][ T5412] XFS (loop1): Ending clean mount [ 136.068016][ T5414] XFS (loop4): Ending clean mount [ 136.096464][ T5414] XFS (loop4): Quotacheck needed: Please wait. [ 136.172797][ T5414] XFS (loop4): Quotacheck: Done. [ 136.192032][ T4426] logitech-hidpp-device 0003:046D:C343.000A: item fetching failed at offset 5/7 [ 136.220889][ T4426] logitech-hidpp-device 0003:046D:C343.000A: hidpp_probe:parse failed [ 136.235137][ T5412] syz.1.326 (5412) used greatest stack depth: 20352 bytes left [ 136.256203][ T4426] logitech-hidpp-device: probe of 0003:046D:C343.000A failed with error -22 [ 136.400377][ T4257] XFS (loop1): Unmounting Filesystem [ 136.423062][ T4300] usb 4-1: USB disconnect, device number 6 [ 136.467252][ T4251] XFS (loop4): Unmounting Filesystem [ 137.510858][ T5446] loop5: detected capacity change from 0 to 131072 [ 137.521947][ T5446] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 137.528844][ T5446] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 137.540336][ T5446] F2FS-fs (loop5): invalid crc value [ 137.595997][ T5446] F2FS-fs (loop5): Found nat_bits in checkpoint [ 137.654116][ T5446] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 137.661229][ T5446] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 138.787951][ T5480] loop3: detected capacity change from 0 to 2048 [ 138.873358][ T4351] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 138.914200][ T5480] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.053278][ T4351] usb 5-1: Using ep0 maxpacket: 8 [ 139.060849][ T4351] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 139.083292][ T4351] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.093110][ T4351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.148872][ T4351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.193342][ T4351] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.241214][ T4351] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.242933][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 139.263321][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.502334][ T4351] usb 5-1: usb_control_msg returned -32 [ 139.511147][ T5495] loop1: detected capacity change from 0 to 64 [ 139.522863][ T4351] usbtmc 5-1:16.0: can't read capabilities [ 139.687512][ T5495] hfs: hfs: Invalid key length: 94 [ 139.908878][ T5498] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 140.181760][ T5502] loop1: detected capacity change from 0 to 256 [ 140.192807][ T5491] loop5: detected capacity change from 0 to 32768 [ 140.282065][ T5502] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 140.303434][ T5491] XFS (loop5): Mounting V5 Filesystem [ 140.380224][ T5491] XFS (loop5): Ending clean mount [ 140.403811][ T5491] XFS (loop5): Quotacheck needed: Please wait. [ 140.462043][ T5502] exFAT-fs (loop1): error, invalid size(size(0) > aligned(9223372036854777344) [ 140.462043][ T5502] [ 140.487378][ T5502] exFAT-fs (loop1): Filesystem has been set read-only [ 140.497831][ T5491] XFS (loop5): Quotacheck: Done. [ 140.692693][ T5497] loop3: detected capacity change from 0 to 40427 [ 140.727814][ T5497] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 140.768461][ T4831] XFS (loop5): Unmounting Filesystem [ 140.775790][ T5497] F2FS-fs (loop3): invalid crc value [ 140.803028][ T5497] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.935072][ T5497] F2FS-fs (loop3): Start checkpoint disabled! [ 140.995362][ T5497] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 141.063350][ T4351] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.244030][ T75] kworker/u4:4: attempt to access beyond end of device [ 141.244030][ T75] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 141.253350][ T4351] usb 2-1: Using ep0 maxpacket: 16 [ 141.277693][ T4351] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.319085][ T4351] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.349705][ T4351] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.373414][ T4351] usb 2-1: config 1 interface 0 has no altsetting 0 [ 141.410845][ T4351] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 141.450959][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.467668][ T4351] usb 2-1: Product: syz [ 141.472503][ T4351] usb 2-1: Manufacturer: syz [ 141.480436][ T4351] usb 2-1: SerialNumber: syz [ 141.655517][ T7] usb 5-1: USB disconnect, device number 9 [ 141.719064][ T4351] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 141.760987][ T4351] usb 2-1: USB disconnect, device number 6 [ 141.817927][ T4351] usblp0: removed [ 142.038021][ T5529] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 142.512514][ T5538] xt_CT: No such helper "snmp" [ 142.960800][ T5561] loop5: detected capacity change from 0 to 64 [ 143.149238][ T5565] loop1: detected capacity change from 0 to 2048 [ 143.196304][ T5565] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 143.256566][ T5565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.341467][ T5565] input: syz0 as /devices/virtual/input/input12 [ 143.562280][ T5572] loop3: detected capacity change from 0 to 512 [ 143.673615][ T5572] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 143.682739][ T5572] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 143.810746][ T5572] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 143.903500][ T5572] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 143.911681][ T5572] System zones: 0-2, 18-18, 34-35 [ 143.994650][ T5572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 144.377843][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 144.728556][ T4426] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.757254][ T5606] loop1: detected capacity change from 0 to 1024 [ 144.845687][ T5606] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 144.921611][ T5606] System zones: 1-12 [ 144.925992][ T4426] usb 6-1: Using ep0 maxpacket: 8 [ 144.951492][ T4426] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 144.968569][ T5606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.996621][ T4426] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.011669][ T5616] loop2: detected capacity change from 0 to 64 [ 145.044037][ T4426] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.101033][ T4426] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.119345][ T5616] minix_free_block (loop2:2): bit already cleared [ 145.167236][ T5616] minix_free_block (loop2:3): bit already cleared [ 145.173427][ T4426] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.191441][ T5618] loop4: detected capacity change from 0 to 256 [ 145.193284][ T5616] minix_free_block (loop2:4): bit already cleared [ 145.238735][ T4426] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.265965][ T4426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.296910][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 145.518271][ T4426] usb 6-1: usb_control_msg returned -32 [ 145.524611][ T4426] usbtmc 6-1:16.0: can't read capabilities [ 145.952869][ T5634] loop2: detected capacity change from 0 to 1024 [ 146.011043][ T5633] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 146.113959][ T4426] usb 6-1: USB disconnect, device number 4 [ 146.567359][ T5622] loop1: detected capacity change from 0 to 32768 [ 146.611014][ T5622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.384 (5622) [ 146.699415][ T5622] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.752892][ T5622] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 146.794701][ T5622] BTRFS info (device loop1): setting nodatacow, compression disabled [ 146.819546][ T5622] BTRFS info (device loop1): max_inline at 0 [ 146.829342][ T5652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 146.843881][ T5655] loop5: detected capacity change from 0 to 128 [ 146.859380][ T5622] BTRFS info (device loop1): enabling disk space caching [ 146.967429][ T5655] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 146.990268][ T5622] BTRFS info (device loop1): turning off barriers [ 147.007228][ T5655] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.037916][ T5622] BTRFS info (device loop1): turning on flush-on-commit [ 147.068335][ T5622] BTRFS info (device loop1): doing ref verification [ 147.088594][ T5622] BTRFS info (device loop1): force clearing of disk cache [ 147.095379][ T5664] loop3: detected capacity change from 0 to 1024 [ 147.113414][ T5622] BTRFS info (device loop1): enabling ssd optimizations [ 147.163417][ T5622] BTRFS info (device loop1): max_inline at 4096 [ 147.170101][ T5622] BTRFS info (device loop1): disk space caching is enabled [ 147.287632][ T5669] loop4: detected capacity change from 0 to 256 [ 147.326453][ T4831] EXT4-fs (loop5): unmounting filesystem. [ 147.335159][ T5675] loop2: detected capacity change from 0 to 64 [ 147.394390][ T5669] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.497500][ T5669] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 147.605684][ T5669] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 147.744028][ T5622] BTRFS info (device loop1): rebuilding free space tree [ 147.948842][ T5622] BTRFS info (device loop1): disabling free space tree [ 147.963470][ T5622] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.010764][ T5622] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.449359][ T5707] loop2: detected capacity change from 0 to 512 [ 148.512905][ T5707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.550633][ T5710] loop3: detected capacity change from 0 to 16 [ 148.593125][ T5707] EXT4-fs (loop2): 1 truncate cleaned up [ 148.611399][ T5710] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.637965][ T5707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.719805][ T5710] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 148.767069][ T5710] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 148.873252][ T5710] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 148.925986][ T5710] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 148.931092][ T4257] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.977909][ T5710] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 149.013388][ T5710] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 149.021998][ T27] audit: type=1800 audit(1750727783.275:10): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.405" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 149.047666][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 149.575169][ T5730] loop2: detected capacity change from 0 to 2048 [ 149.664348][ T5730] loop2: p1 < > p3 [ 149.692108][ T5730] loop2: p3 size 134217728 extends beyond EOD, truncated [ 149.816667][ T5703] loop5: detected capacity change from 0 to 32768 [ 149.969303][ T5705] loop4: detected capacity change from 0 to 32768 [ 150.063379][ T4418] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 150.065577][ T5736] loop1: detected capacity change from 0 to 8192 [ 150.088175][ T5736] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.102456][ T5736] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 150.111828][ T5736] REISERFS (device loop1): using ordered data mode [ 150.118477][ T5736] reiserfs: using flush barriers [ 150.127293][ T5736] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.142332][ T5703] XFS (loop5): Mounting V5 Filesystem [ 150.156740][ T5705] XFS (loop4): Mounting V5 Filesystem [ 150.163952][ T5736] REISERFS (device loop1): checking transaction log (loop1) [ 150.220952][ T5736] REISERFS (device loop1): Using r5 hash to sort names [ 150.233774][ T5736] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 150.255205][ T4418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 46, changing to 9 [ 150.316733][ T4418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50702, setting to 1024 [ 150.348837][ T4418] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.378906][ T4418] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.396305][ T5761] loop3: detected capacity change from 0 to 2048 [ 150.427627][ T4418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.439983][ T5761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.477149][ T4418] usb 3-1: config 0 descriptor?? [ 150.513402][ T5730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.554008][ T5703] XFS (loop5): Ending clean mount [ 150.592172][ T5705] XFS (loop4): Ending clean mount [ 150.727477][ T5703] XFS (loop5): Quotacheck needed: Please wait. [ 150.826896][ T5703] XFS (loop5): Quotacheck: Done. [ 150.955061][ T4418] plantronics 0003:047F:FFFF.000B: unbalanced collection at end of report description [ 150.982457][ T27] audit: type=1804 audit(1750727785.235:11): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.402" name="/newroot/35/file0/bus" dev="loop5" ino=9290 res=1 errno=0 [ 151.004070][ T4418] plantronics 0003:047F:FFFF.000B: parse failed [ 151.004140][ T4418] plantronics: probe of 0003:047F:FFFF.000B failed with error -22 [ 151.088879][ T4251] XFS (loop4): Unmounting Filesystem [ 151.169446][ T4300] usb 3-1: USB disconnect, device number 6 [ 151.250961][ T4831] XFS (loop5): Unmounting Filesystem [ 151.626872][ T5779] loop4: detected capacity change from 0 to 1024 [ 151.670786][ T5779] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 151.685833][ T5779] System zones: 1-12 [ 151.716277][ T5779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.021734][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 152.159581][ T5794] loop1: detected capacity change from 0 to 256 [ 152.200766][ T5794] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.225908][ T5794] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 152.251192][ T5794] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 152.527279][ T5802] loop4: detected capacity change from 0 to 1024 [ 152.688604][ T5787] loop3: detected capacity change from 0 to 32768 [ 152.785013][ T5787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.417 (5787) [ 152.867037][ T5787] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.908071][ T5787] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 152.949874][ T5787] BTRFS info (device loop3): setting nodatacow, compression disabled [ 152.975332][ T5787] BTRFS info (device loop3): max_inline at 0 [ 152.981418][ T5787] BTRFS info (device loop3): enabling disk space caching [ 153.013435][ T5787] BTRFS info (device loop3): turning off barriers [ 153.019949][ T5787] BTRFS info (device loop3): turning on flush-on-commit [ 153.063696][ T5787] BTRFS info (device loop3): doing ref verification [ 153.070420][ T5787] BTRFS info (device loop3): force clearing of disk cache [ 153.103627][ T5787] BTRFS info (device loop3): enabling ssd optimizations [ 153.110707][ T5787] BTRFS info (device loop3): max_inline at 4096 [ 153.143671][ T5787] BTRFS info (device loop3): disk space caching is enabled [ 153.371743][ T5787] BTRFS info (device loop3): rebuilding free space tree [ 153.410330][ T5787] BTRFS info (device loop3): disabling free space tree [ 153.458240][ T5787] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.473422][ T5787] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.773343][ T4300] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 153.827814][ T5842] loop4: detected capacity change from 0 to 256 [ 153.878315][ T4263] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.927674][ T5842] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 153.973366][ T4300] usb 6-1: Using ep0 maxpacket: 16 [ 153.990745][ T4300] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.044089][ T4300] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.107145][ T5842] exFAT-fs (loop4): error, invalid size(size(0) > aligned(9223372036854777344) [ 154.107145][ T5842] [ 154.109506][ T4300] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.163397][ T5842] exFAT-fs (loop4): Filesystem has been set read-only [ 154.188230][ T4300] usb 6-1: config 1 interface 0 has no altsetting 0 [ 154.215877][ T4300] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.253052][ T4300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.266709][ T4300] usb 6-1: Product: syz [ 154.281887][ T4300] usb 6-1: Manufacturer: syz [ 154.292342][ T4300] usb 6-1: SerialNumber: syz [ 154.542526][ T4300] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 154.618903][ T4300] usb 6-1: USB disconnect, device number 5 [ 154.666215][ T4300] usblp0: removed [ 154.949374][ T5865] loop1: detected capacity change from 0 to 2048 [ 155.065599][ T5865] loop1: p1 < > p3 [ 155.081080][ T5865] loop1: p3 size 134217728 extends beyond EOD, truncated [ 155.409479][ T5852] loop2: detected capacity change from 0 to 32768 [ 155.433350][ T5854] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.446443][ T5852] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.437 (5852) [ 155.493628][ T5852] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.523278][ T5852] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 155.562538][ T5852] BTRFS info (device loop2): setting nodatacow, compression disabled [ 155.582783][ T5852] BTRFS info (device loop2): max_inline at 0 [ 155.602992][ T5852] BTRFS info (device loop2): enabling disk space caching [ 155.623680][ T5852] BTRFS info (device loop2): turning off barriers [ 155.630200][ T5852] BTRFS info (device loop2): turning on flush-on-commit [ 155.639365][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 46, changing to 9 [ 155.660619][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50702, setting to 1024 [ 155.673439][ T5726] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 155.684204][ T5852] BTRFS info (device loop2): doing ref verification [ 155.690877][ T5852] BTRFS info (device loop2): force clearing of disk cache [ 155.703364][ T5854] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.743276][ T5852] BTRFS info (device loop2): enabling ssd optimizations [ 155.750471][ T5854] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.763292][ T5852] BTRFS info (device loop2): max_inline at 4096 [ 155.769614][ T5852] BTRFS info (device loop2): disk space caching is enabled [ 155.787154][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.816573][ T5854] usb 2-1: config 0 descriptor?? [ 155.832435][ T5865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.842765][ T5859] loop3: detected capacity change from 0 to 32768 [ 155.877628][ T5726] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.908402][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 155.952348][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.000776][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 156.057993][ T5859] XFS (loop3): Mounting V5 Filesystem [ 156.066710][ T5726] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.088552][ T5852] BTRFS info (device loop2): rebuilding free space tree [ 156.158930][ T5726] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.193823][ T5852] BTRFS info (device loop2): disabling free space tree [ 156.249809][ T5726] usb 6-1: Manufacturer: syz [ 156.267064][ T5854] plantronics 0003:047F:FFFF.000C: unbalanced collection at end of report description [ 156.273301][ T5852] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.288202][ T5854] plantronics 0003:047F:FFFF.000C: parse failed [ 156.300340][ T5726] usb 6-1: config 0 descriptor?? [ 156.303304][ T5854] plantronics: probe of 0003:047F:FFFF.000C failed with error -22 [ 156.333292][ T5852] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.349229][ T5859] XFS (loop3): Ending clean mount [ 156.372380][ T5859] XFS (loop3): Quotacheck needed: Please wait. [ 156.454683][ T5859] XFS (loop3): Quotacheck: Done. [ 156.497094][ T5854] usb 2-1: USB disconnect, device number 7 [ 156.590168][ T27] audit: type=1804 audit(1750727790.845:12): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.427" name="/newroot/103/file0/bus" dev="loop3" ino=9290 res=1 errno=0 [ 156.814819][ T4264] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.884649][ T5726] rc_core: IR keymap rc-hauppauge not found [ 156.892874][ T5726] Registered IR keymap rc-empty [ 156.917913][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 156.983375][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.018456][ T5726] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 157.053539][ T5726] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 157.091183][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.143530][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.152574][ T4263] XFS (loop3): Unmounting Filesystem [ 157.190624][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.239950][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.291621][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.333423][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.373687][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.443497][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.483311][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.513586][ T5726] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 157.555049][ T5726] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 157.574421][ T5726] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 157.634154][ T5726] usb 6-1: USB disconnect, device number 6 [ 158.037211][ T5927] loop2: detected capacity change from 0 to 1024 [ 158.763624][ T5941] loop2: detected capacity change from 0 to 256 [ 158.835383][ T5941] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 158.916940][ T5941] exFAT-fs (loop2): error, invalid size(size(0) > aligned(9223372036854777344) [ 158.916940][ T5941] [ 158.940455][ T5941] exFAT-fs (loop2): Filesystem has been set read-only [ 159.912503][ T5947] loop3: detected capacity change from 0 to 32768 [ 160.010245][ T5947] XFS (loop3): Mounting V5 Filesystem [ 160.089952][ T5947] XFS (loop3): Ending clean mount [ 160.115194][ T5947] XFS (loop3): Quotacheck needed: Please wait. [ 160.123392][ T5850] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.178668][ T5947] XFS (loop3): Quotacheck: Done. [ 160.291688][ T5977] program syz.5.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.313409][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 160.321439][ T5850] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 160.363108][ T5850] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 160.393312][ T5850] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.436937][ T5850] usb 3-1: config 1 interface 0 has no altsetting 0 [ 160.462486][ T4263] XFS (loop3): Unmounting Filesystem [ 160.477863][ T5850] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 160.487598][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.496801][ T5850] usb 3-1: Product: syz [ 160.501096][ T5850] usb 3-1: Manufacturer: syz [ 160.506599][ T5850] usb 3-1: SerialNumber: syz [ 160.732837][ T5850] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 160.751745][ T5850] usb 3-1: USB disconnect, device number 7 [ 160.762103][ T5850] usblp0: removed [ 162.063226][ T5990] loop4: detected capacity change from 0 to 512 [ 162.220468][ T5990] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 162.240454][ T5990] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.257659][ T5995] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 162.312321][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 162.334453][ T5990] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #4: comm syz.4.450: corrupted inode contents [ 162.387180][ T5990] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #4: comm syz.4.450: mark_inode_dirty error [ 162.446783][ T5990] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #4: comm syz.4.450: corrupted inode contents [ 162.553829][ T5990] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.450: mark_inode_dirty error [ 162.612158][ T5990] Quota error (device loop4): write_blk: dquota write failed [ 162.639127][ T5990] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 162.669500][ T5996] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #4: comm syz.4.450: corrupted inode contents [ 162.684209][ T5990] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.450: Failed to acquire dquot type 1 [ 162.697832][ T5996] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #4: comm syz.4.450: mark_inode_dirty error [ 162.730436][ T5996] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #4: comm syz.4.450: corrupted inode contents [ 162.747340][ T5996] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.450: mark_inode_dirty error [ 162.767328][ T5996] Quota error (device loop4): write_blk: dquota write failed [ 162.777130][ T5996] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 162.786960][ T5983] loop1: detected capacity change from 0 to 32768 [ 162.797680][ T5996] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 162.825446][ T6008] loop2: detected capacity change from 0 to 1024 [ 162.850859][ T5996] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.450: Failed to acquire dquot type 1 [ 162.861490][ T6008] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 162.868666][ T6008] hfsplus: xattr searching failed [ 162.880653][ T6008] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 162.892700][ T5983] XFS (loop1): Mounting V5 Filesystem [ 162.981911][ T5983] XFS (loop1): Ending clean mount [ 163.005244][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 163.023055][ T5983] XFS (loop1): Quotacheck needed: Please wait. [ 163.184576][ T5983] XFS (loop1): Quotacheck: Done. [ 163.410244][ T4257] XFS (loop1): Unmounting Filesystem [ 163.514056][ T6027] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.303585][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 164.597501][ T6024] loop5: detected capacity change from 0 to 65536 [ 164.704365][ T6024] XFS (loop5): Mounting V5 Filesystem [ 164.756123][ T6053] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 164.792086][ T6024] XFS (loop5): Ending clean mount [ 164.809237][ T6024] XFS (loop5): Quotacheck needed: Please wait. [ 164.902860][ T6056] loop2: detected capacity change from 0 to 512 [ 164.923899][ T6024] XFS (loop5): Quotacheck: Done. [ 164.956596][ T6056] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 164.998344][ T6056] UDF-fs: Scanning with blocksize 512 failed [ 165.036772][ T6056] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 165.067277][ T6056] UDF-fs: Scanning with blocksize 1024 failed [ 165.101847][ T6056] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found [ 165.137933][ T6056] UDF-fs: Scanning with blocksize 2048 failed [ 165.144251][ T4831] XFS (loop5): Unmounting Filesystem [ 165.168902][ T6060] loop3: detected capacity change from 0 to 128 [ 165.182022][ T6056] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 165.214664][ T6060] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.253197][ T6056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.358166][ T6060] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.487054][ T6060] process 'syz.3.473' launched './file0' with NULL argv: empty string added [ 165.668702][ T4279] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.063854][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.474'. [ 166.170573][ T6062] loop4: detected capacity change from 0 to 32768 [ 166.226924][ T6062] XFS (loop4): Mounting V5 Filesystem [ 166.301509][ T6062] XFS (loop4): Ending clean mount [ 166.322554][ T6062] XFS (loop4): Quotacheck needed: Please wait. [ 166.388926][ T6062] XFS (loop4): Quotacheck: Done. [ 166.485865][ T4251] XFS (loop4): Unmounting Filesystem [ 166.881931][ T6086] netlink: 'syz.3.482': attribute type 13 has an invalid length. [ 166.913469][ T6086] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.482'. [ 167.219896][ T6094] loop5: detected capacity change from 0 to 256 [ 167.239396][ T6093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.485'. [ 167.321954][ T6094] FAT-fs (loop5): Directory bread(block 64) failed [ 167.351748][ T6094] FAT-fs (loop5): Directory bread(block 65) failed [ 167.382325][ T6094] FAT-fs (loop5): Directory bread(block 66) failed [ 167.412576][ T6094] FAT-fs (loop5): Directory bread(block 67) failed [ 167.455932][ T6094] FAT-fs (loop5): Directory bread(block 68) failed [ 167.462553][ T6094] FAT-fs (loop5): Directory bread(block 69) failed [ 167.502047][ T6094] FAT-fs (loop5): Directory bread(block 70) failed [ 167.522271][ T6094] FAT-fs (loop5): Directory bread(block 71) failed [ 167.541649][ T6094] FAT-fs (loop5): Directory bread(block 72) failed [ 167.558576][ T6094] FAT-fs (loop5): Directory bread(block 73) failed [ 169.043773][ T6132] tipc: Started in network mode [ 169.068148][ T6132] tipc: Node identity ac1414aa, cluster identity 4711 [ 169.080167][ T6132] tipc: Enabled bearer , priority 10 [ 169.581281][ T5726] kernel read not supported for file /dsp1 (pid: 5726 comm: kworker/0:13) [ 169.900419][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.505'. [ 170.200816][ T5726] tipc: Node number set to 2886997162 [ 170.257273][ T6155] loop3: detected capacity change from 0 to 4096 [ 170.974824][ T6162] loop2: detected capacity change from 0 to 2048 [ 171.183462][ T6163] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.315944][ T6157] loop4: detected capacity change from 0 to 32768 [ 171.384943][ T6157] XFS: noikeep mount option is deprecated. [ 171.502104][ T6157] XFS (loop4): Mounting V5 Filesystem [ 171.691099][ T6157] XFS (loop4): Ending clean mount [ 171.716449][ T6157] XFS (loop4): Quotacheck needed: Please wait. [ 171.923094][ T6157] XFS (loop4): Quotacheck: Done. [ 172.485057][ T4251] XFS (loop4): Unmounting Filesystem [ 172.754954][ T6160] loop3: detected capacity change from 0 to 262144 [ 172.795699][ T6160] F2FS-fs (loop3): invalid crc value [ 172.825242][ T6160] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.892055][ T6160] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 173.281946][ T6173] loop2: detected capacity change from 0 to 40427 [ 173.329278][ T6173] F2FS-fs (loop2): invalid crc value [ 173.368119][ T6173] F2FS-fs (loop2): Found nat_bits in checkpoint [ 173.537256][ T6173] F2FS-fs (loop2): Start checkpoint disabled! [ 173.603712][ T6173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 174.018061][ T9] kworker/u4:0: attempt to access beyond end of device [ 174.018061][ T9] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 174.101112][ T9] kworker/u4:0: attempt to access beyond end of device [ 174.101112][ T9] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 174.661474][ T6210] loop4: detected capacity change from 0 to 512 [ 174.707655][ T6210] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.799976][ T6210] EXT4-fs (loop4): 1 truncate cleaned up [ 174.808707][ T6210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.933664][ T6210] EXT4-fs error (device loop4): ext4_read_inline_dir:1593: inode #12: block 7: comm syz.4.522: path /91/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 175.038375][ T6210] EXT4-fs (loop4): Remounting filesystem read-only [ 175.154186][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 175.960725][ T6215] loop3: detected capacity change from 0 to 40427 [ 176.005514][ T4351] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.081360][ T6215] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.126273][ T6221] loop1: detected capacity change from 0 to 40427 [ 176.161723][ T6221] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 176.189382][ T6221] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 176.213243][ T4351] usb 5-1: Using ep0 maxpacket: 8 [ 176.221662][ T4351] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 176.272349][ T4351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 176.291148][ T6221] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.298160][ T6215] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 176.315417][ T4351] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.355832][ T4351] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.418472][ T4351] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.462093][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.489509][ T6221] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 176.510081][ T6221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.544098][ T4263] syz-executor: attempt to access beyond end of device [ 176.544098][ T4263] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.662867][ T27] audit: type=1800 audit(1750727810.915:13): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.525" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 176.707429][ T27] audit: type=1804 audit(1750727810.915:14): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.525" name="/newroot/97/file2/file1" dev="loop1" ino=10 res=1 errno=0 [ 176.742354][ T4351] usb 5-1: GET_CAPABILITIES returned 0 [ 176.750447][ T4351] usbtmc 5-1:16.0: can't read capabilities [ 176.823641][ T27] audit: type=1800 audit(1750727810.915:15): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.525" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 176.858102][ T4257] syz-executor: attempt to access beyond end of device [ 176.858102][ T4257] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.948657][ T4298] usb 5-1: USB disconnect, device number 10 [ 178.131625][ T6258] loop1: detected capacity change from 0 to 512 [ 178.162306][ T6258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.173246][ T4298] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.266239][ T6258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 178.321502][ T6258] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.395191][ T4298] usb 4-1: config 0 has no interfaces? [ 178.400816][ T4298] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 178.420417][ T4298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.451158][ T4298] usb 4-1: config 0 descriptor?? [ 178.468169][ T27] audit: type=1800 audit(1750727812.725:16): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.538" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 178.626993][ T6267] netlink: 'syz.2.540': attribute type 25 has an invalid length. [ 178.635131][ T6267] netlink: 'syz.2.540': attribute type 7 has an invalid length. [ 178.667194][ T4298] usb 4-1: USB disconnect, device number 7 [ 178.706314][ T6272] loop4: detected capacity change from 0 to 128 [ 178.720933][ T6272] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 178.744361][ T6272] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.893811][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 180.088983][ T6309] loop2: detected capacity change from 0 to 2048 [ 180.183838][ T6308] loop5: detected capacity change from 0 to 8192 [ 180.305531][ T6282] loop4: detected capacity change from 0 to 40427 [ 180.339832][ T6282] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 180.361650][ T6282] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.501678][ T6282] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.529809][ T6318] input: syz0 as /devices/virtual/input/input15 [ 180.583560][ T6318] input: failed to attach handler leds to device input15, error: -6 [ 180.725229][ T6282] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.773060][ T6282] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.877969][ T27] audit: type=1800 audit(1750727815.135:17): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.544" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 180.952432][ T6324] loop1: detected capacity change from 0 to 256 [ 180.969336][ T27] audit: type=1804 audit(1750727815.135:18): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.544" name="/newroot/99/file2/file1" dev="loop4" ino=10 res=1 errno=0 [ 181.039278][ T6324] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.074280][ T4251] syz-executor: attempt to access beyond end of device [ 181.074280][ T4251] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.083228][ T27] audit: type=1800 audit(1750727815.135:19): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.544" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 181.130481][ T6324] FAT-fs (loop1): Filesystem has been set read-only [ 181.225614][ T6324] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.275690][ T6327] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.851979][ T6344] loop2: detected capacity change from 0 to 1024 [ 181.874813][ T6344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.931372][ T6344] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.986349][ T6344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.009465][ T6344] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.048536][ T4298] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.095143][ T6344] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2748: inode #2: comm syz.2.570: corrupted in-inode xattr [ 182.146076][ T6351] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #2: comm syz.2.570: corrupted in-inode xattr [ 182.245205][ T4298] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.277074][ T4298] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.323219][ T4298] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.357736][ T4298] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.363634][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 182.385750][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.414557][ T4298] usb 4-1: Product: syz [ 182.418837][ T4298] usb 4-1: Manufacturer: syz [ 182.443474][ T4298] usb 4-1: SerialNumber: syz [ 183.108291][ T6355] loop1: detected capacity change from 0 to 32768 [ 183.294518][ T6372] device syzkaller1 entered promiscuous mode [ 183.435124][ T6355] find_entry called with index = 0 [ 183.440779][ T6355] find_entry called with index = 0 [ 183.482672][ T4298] cdc_ncm 4-1:1.0: bind() failure [ 183.525699][ T4298] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 183.543824][ T4298] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 183.571356][ T4298] usbtest: probe of 4-1:1.1 failed with error -71 [ 183.587952][ T4298] usb 4-1: USB disconnect, device number 8 [ 183.865673][ T6384] loop4: detected capacity change from 0 to 64 [ 183.919404][ T6384] syz.4.586: attempt to access beyond end of device [ 183.919404][ T6384] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 183.963556][ T6384] Buffer I/O error on dev loop4, logical block 512, async page read [ 183.975419][ T6384] syz.4.586: attempt to access beyond end of device [ 183.975419][ T6384] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 184.018839][ T6384] Buffer I/O error on dev loop4, logical block 56576, async page read [ 184.250155][ T6390] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.292772][ T6390] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 184.363234][ T6390] bridge_slave_0: default FDB implementation only supports local addresses [ 184.805310][ T6388] loop2: detected capacity change from 0 to 32768 [ 184.868870][ T6388] XFS (loop2): Mounting V5 Filesystem [ 184.897257][ T6407] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 185.087729][ T6388] XFS (loop2): Ending clean mount [ 185.103907][ T6388] XFS (loop2): Quotacheck needed: Please wait. [ 185.224410][ T6388] XFS (loop2): Quotacheck: Done. [ 185.317742][ T4304] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 185.364792][ T4304] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.440324][ T4264] XFS (loop2): Unmounting Filesystem [ 186.531245][ T6450] loop3: detected capacity change from 0 to 1024 [ 186.619889][ T6450] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.832738][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 187.191712][ T6469] loop5: detected capacity change from 0 to 256 [ 187.261262][ T27] audit: type=1800 audit(1750727821.515:20): pid=6469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.613" name="file2" dev="loop5" ino=1048622 res=0 errno=0 [ 187.839939][ T6490] loop2: detected capacity change from 0 to 8 [ 188.014854][ T6490] SQUASHFS error: zstd decompression error: 10 [ 188.033050][ T6490] SQUASHFS error: zstd decompression failed, data probably corrupt [ 188.064686][ T6490] SQUASHFS error: Failed to read block 0x62b: -5 [ 188.092409][ T6499] SQUASHFS error: Unable to read metadata cache entry [629] [ 188.100890][ T6499] SQUASHFS error: Unable to read directory block [629:ff26] [ 188.108720][ T6490] SQUASHFS error: Unable to read metadata cache entry [629] [ 188.158533][ T6490] SQUASHFS error: Unable to read directory block [629:ff26] [ 188.361378][ T6505] loop3: detected capacity change from 0 to 512 [ 188.434209][ T6505] EXT4-fs (loop3): 1 truncate cleaned up [ 188.477535][ T6505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.586453][ T6514] loop2: detected capacity change from 0 to 1024 [ 188.677975][ T6514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 188.740154][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 188.917525][ T6525] loop1: detected capacity change from 0 to 512 [ 189.013606][ T6525] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.230714][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 189.394969][ T6536] loop1: detected capacity change from 0 to 24 [ 189.467160][ T6536] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 189.568779][ T6536] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 189.673782][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 189.845342][ T6549] loop2: detected capacity change from 0 to 16 [ 189.918622][ T6549] erofs: (device loop2): mounted with root inode @ nid 36. [ 190.075544][ T6554] loop3: detected capacity change from 0 to 2048 [ 190.149345][ T6554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.165716][ T6554] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.200056][ T6553] loop1: detected capacity change from 0 to 8192 [ 190.231207][ T6554] fs-verity: sha512 using implementation "sha512-avx2" [ 190.258252][ T6553] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.352250][ T6553] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 190.395140][ T6553] REISERFS (device loop1): using ordered data mode [ 190.431659][ T6553] reiserfs: using flush barriers [ 190.461630][ T6553] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.482592][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 190.544645][ T6553] REISERFS (device loop1): checking transaction log (loop1) [ 190.877879][ T6553] REISERFS (device loop1): Using tea hash to sort names [ 190.919747][ T6553] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 191.300199][ T6577] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 192.552170][ T6605] loop1: detected capacity change from 0 to 64 [ 192.565864][ T6603] loop3: detected capacity change from 0 to 256 [ 193.594248][ T6618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.677'. [ 193.653215][ T5853] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 193.846368][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.876795][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.937415][ T5853] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 193.989006][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.027622][ T6598] loop5: detected capacity change from 0 to 262144 [ 194.043921][ T5853] usb 5-1: config 0 descriptor?? [ 194.052534][ T6598] F2FS-fs (loop5): invalid crc value [ 194.072918][ T6598] F2FS-fs (loop5): Found nat_bits in checkpoint [ 194.114632][ T6598] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 194.132992][ T27] audit: type=1800 audit(1750727828.385:21): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.668" name="file2" dev="loop5" ino=8 res=0 errno=0 [ 194.347505][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.355755][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.698742][ T5853] usb 5-1: string descriptor 0 read error: -22 [ 194.906865][ T6641] input: syz1 as /devices/virtual/input/input17 [ 194.914241][ T5853] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000E/input/input18 [ 195.118321][ T5853] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000E/input/input19 [ 195.118633][ T6648] loop5: detected capacity change from 0 to 8 [ 195.162750][ T5853] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000E/input/input20 [ 195.223387][ T6648] SQUASHFS error: Failed to read block 0x62: -5 [ 195.234000][ T5853] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000E/input/input21 [ 195.275005][ T6648] squashfs image failed sanity check [ 195.301740][ T5853] uclogic 0003:256C:006D.000E: input,hiddev0,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 195.390653][ T5853] usb 5-1: USB disconnect, device number 11 [ 195.524389][ T6653] loop2: detected capacity change from 0 to 2048 [ 195.551923][ T27] audit: type=1326 audit(1750727829.805:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6654 comm="syz.3.691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6a958e929 code=0x0 [ 195.603693][ T6653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.614263][ T6659] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 195.688726][ T6653] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.829647][ T6653] EXT4-fs (loop2): shut down requested (2) [ 195.929930][ T6660] fido_id[6660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 196.034187][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 197.378018][ T6682] loop1: detected capacity change from 0 to 32768 [ 197.393470][ T6696] delete_channel: no stack [ 197.508338][ T6682] XFS (loop1): Mounting V5 Filesystem [ 197.610834][ T6682] XFS (loop1): Ending clean mount [ 197.635320][ T6682] XFS (loop1): Quotacheck needed: Please wait. [ 197.743307][ T6682] XFS (loop1): Quotacheck: Done. [ 197.797246][ T4351] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.862639][ T4257] XFS (loop1): Unmounting Filesystem [ 197.993382][ T4351] usb 4-1: Using ep0 maxpacket: 32 [ 198.026542][ T4351] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 198.050755][ T4351] usb 4-1: config 0 has no interface number 0 [ 198.078760][ T4351] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 198.098354][ T4351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.135680][ T4351] usb 4-1: Product: syz [ 198.145801][ T4351] usb 4-1: Manufacturer: syz [ 198.150840][ T4351] usb 4-1: SerialNumber: syz [ 198.165235][ T4351] usb 4-1: config 0 descriptor?? [ 198.204515][ T4351] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 198.376339][ T6715] loop5: detected capacity change from 0 to 256 [ 198.393678][ T4351] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 198.415597][ T6715] exfat: Deprecated parameter 'namecase' [ 198.447969][ T4351] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 198.501114][ T6715] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 198.827779][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 198.836033][ T4351] usb 4-1: USB disconnect, device number 9 [ 198.840879][ T6721] binder: 6720:6721 ioctl c0306201 2000000003c0 returned -22 [ 198.849287][ T4351] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 198.864453][ T4351] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 198.893744][ T6723] loop5: detected capacity change from 0 to 128 [ 198.906594][ T4351] quatech2 4-1:0.51: device disconnected [ 198.919060][ T6723] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.001102][ T6723] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.125739][ T46] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.311703][ T6733] loop5: detected capacity change from 0 to 512 [ 199.400318][ T6733] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.715: inode #1: comm syz.5.715: iget: illegal inode # [ 199.469771][ T6733] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.715: error while reading EA inode 1 err=-117 [ 199.560115][ T6733] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.715: inode #1: comm syz.5.715: iget: illegal inode # [ 199.661273][ T6733] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.715: error while reading EA inode 1 err=-117 [ 199.724108][ T6733] EXT4-fs (loop5): 1 orphan inode deleted [ 199.730236][ T6733] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 199.806636][ C1] sd 0:0:1:0: [sda] tag#6710 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 199.817184][ C1] sd 0:0:1:0: [sda] tag#6710 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 199.949359][ T4831] EXT4-fs (loop5): unmounting filesystem. [ 200.365918][ T6757] loop3: detected capacity change from 0 to 1024 [ 200.483526][ T6757] hfsplus: xattr searching failed [ 200.488859][ T27] audit: type=1800 audit(1750727834.745:23): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.726" name="file2" dev="loop3" ino=2 res=0 errno=0 [ 200.521215][ T6764] hfsplus: bad catalog folder thread [ 200.929052][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 201.315610][ T6759] loop1: detected capacity change from 0 to 32768 [ 201.358557][ T6759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.727 (6759) [ 201.419506][ T6759] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.463474][ T6759] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 201.472270][ T6759] BTRFS info (device loop1): using free space tree [ 201.543259][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 201.549358][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 201.833399][ T6759] BTRFS info (device loop1): enabling ssd optimizations [ 201.907051][ T6817] netlink: 172 bytes leftover after parsing attributes in process `syz.3.744'. [ 201.931417][ T6816] loop2: detected capacity change from 0 to 4096 [ 201.955182][ T6816] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 202.000208][ T6821] loop5: detected capacity change from 0 to 256 [ 202.314148][ T27] audit: type=1800 audit(1750727836.575:24): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.746" name="bus" dev="loop2" ino=24 res=0 errno=0 [ 202.337649][ T4257] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 202.450061][ T6828] loop5: detected capacity change from 0 to 512 [ 202.799497][ T6828] EXT4-fs (loop5): 1 orphan inode deleted [ 202.843226][ T6828] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 202.902769][ T6828] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.026431][ T27] audit: type=1800 audit(1750727837.285:25): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.751" name="bus" dev="loop5" ino=16 res=0 errno=0 [ 203.046567][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.150556][ T4264] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 203.213683][ T4264] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 203.223075][ T4831] EXT4-fs (loop5): unmounting filesystem. [ 203.263256][ T4264] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 203.642451][ T6854] loop3: detected capacity change from 0 to 128 [ 203.661950][ T6856] device bond_slave_1 entered promiscuous mode [ 203.672963][ T6854] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 203.675842][ T6856] device bond_slave_1 left promiscuous mode [ 203.800928][ T6854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.860536][ T6854] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 204.613470][ T6876] loop1: detected capacity change from 0 to 2048 [ 204.639786][ T6876] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 204.682550][ T6876] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 204.706897][ T6876] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 204.727018][ T6880] loop3: detected capacity change from 0 to 4096 [ 204.738798][ T6876] UDF-fs: Scanning with blocksize 512 failed [ 204.750484][ T6876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.808037][ T6880] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 204.869185][ T6880] ntfs3: loop3: Failed to load $Extend. [ 205.384436][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 205.598100][ T6903] loop2: detected capacity change from 0 to 2048 [ 205.704427][ T6903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 205.995671][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 206.058339][ T6894] loop1: detected capacity change from 0 to 32768 [ 206.114388][ T6894] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.779 (6894) [ 206.190377][ T6894] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 206.231173][ T6894] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 206.268145][ T6894] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 206.335650][ T6894] BTRFS info (device loop1): use zstd compression, level 3 [ 206.358659][ T6894] BTRFS info (device loop1): using free space tree [ 206.641885][ T6894] BTRFS info (device loop1): enabling ssd optimizations [ 207.072994][ T4257] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 207.080325][ T6956] loop3: detected capacity change from 0 to 2048 [ 207.175296][ T6956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 207.213420][ T5726] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 207.462885][ T5726] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 207.477601][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.487326][ T5726] usb 5-1: Product: syz [ 207.491594][ T5726] usb 5-1: Manufacturer: syz [ 207.496815][ T5726] usb 5-1: SerialNumber: syz [ 207.521639][ T5726] usb 5-1: config 0 descriptor?? [ 207.554398][ T4263] EXT4-fs (loop3): unmounting filesystem. [ 207.761427][ T5726] usb 5-1: USB disconnect, device number 12 [ 207.990978][ T6971] loop5: detected capacity change from 0 to 256 [ 208.060961][ T6973] loop3: detected capacity change from 0 to 2048 [ 208.101343][ T6973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.367918][ T6983] loop5: detected capacity change from 0 to 512 [ 208.386514][ T6982] loop1: detected capacity change from 0 to 1024 [ 208.418835][ T6982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 208.510521][ T6983] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 208.543477][ T6983] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.592402][ T6982] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.671148][ T6982] EXT4-fs (loop1): shut down requested (0) [ 208.886798][ T7000] netlink: 104 bytes leftover after parsing attributes in process `syz.2.810'. [ 208.948900][ T4831] Quota error (device loop5): do_check_range: Getting dqdh_next_free 327680 out of range 0-7 [ 208.967079][ T4257] EXT4-fs (loop1): unmounting filesystem. [ 209.001479][ T4831] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 209.017499][ T4831] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz-executor: Failed to acquire dquot type 1 [ 209.526963][ T4831] EXT4-fs (loop5): unmounting filesystem. [ 209.623357][ C0] ------------[ cut here ]------------ [ 209.629433][ C0] refcount_t: addition on 0; use-after-free. [ 209.635966][ C0] WARNING: CPU: 0 PID: 4300 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 209.645461][ C0] Modules linked in: [ 209.649411][ C0] CPU: 0 PID: 4300 Comm: kworker/0:6 Not tainted 6.1.141-syzkaller #0 [ 209.657681][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.667844][ C0] Workqueue: rcu_gp process_srcu [ 209.672879][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 209.679055][ C0] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 209.698768][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 209.704933][ C0] RAX: 65a313a0ee46ca00 RBX: 0000000000000002 RCX: ffff88807f7f1dc0 [ 209.712990][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 209.721062][ C0] RBP: ffffc90000007990 R08: dffffc0000000000 R09: fffff52000000e95 [ 209.729150][ C0] R10: fffff52000000e95 R11: 1ffff92000000e94 R12: ffff88805a65b880 [ 209.737235][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888054b2a848 [ 209.745305][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 209.754331][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.760991][ C0] CR2: 00007fac5b6e8710 CR3: 000000007c890000 CR4: 00000000003506f0 [ 209.769073][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.777137][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.785224][ C0] Call Trace: [ 209.788541][ C0] [ 209.791461][ C0] tipc_crypto_xmit+0x17a9/0x2300 [ 209.796607][ C0] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 209.801867][ C0] tipc_bearer_xmit_skb+0x242/0x3f0 [ 209.807187][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 209.812536][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 209.817952][ C0] tipc_disc_timeout+0x568/0x6b0 [ 209.822977][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 209.828288][ C0] call_timer_fn+0x1a0/0x670 [ 209.832923][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 209.838237][ C0] ? call_timer_fn+0xc1/0x670 [ 209.842988][ C0] ? __run_timers+0x7c0/0x7c0 [ 209.847767][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 209.853013][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 209.858314][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 209.863597][ C0] __run_timers+0x525/0x7c0 [ 209.868160][ C0] ? detach_timer+0x350/0x350 [ 209.872929][ C0] ? lock_chain_count+0x20/0x20 [ 209.877894][ C0] run_timer_softirq+0x63/0xf0 [ 209.882720][ C0] handle_softirqs+0x2a1/0x920 [ 209.887608][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 209.892549][ C0] ? do_softirq+0x200/0x200 [ 209.897166][ C0] __irq_exit_rcu+0x12f/0x220 [ 209.901900][ C0] ? irq_exit_rcu+0x20/0x20 [ 209.906532][ C0] irq_exit_rcu+0x5/0x20 [ 209.910825][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 209.916560][ C0] [ 209.919526][ C0] [ 209.922524][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 209.928602][ C0] RIP: 0010:lock_acquire+0x20f/0x490 [ 209.933970][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 209.953693][ C0] RSP: 0018:ffffc90004247b20 EFLAGS: 00000206 [ 209.959848][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 65a313a0ee46ca00 [ 209.967903][ C0] RDX: 0000000000000000 RSI: ffffffff8a6c1160 RDI: ffffffff8abf1360 [ 209.975964][ C0] RBP: ffffc90004247c28 R08: dffffc0000000000 R09: fffffbfff211704c [ 209.984015][ C0] R10: fffffbfff211704c R11: 1ffffffff211704b R12: 0000000000000000 [ 209.992053][ C0] R13: 1ffff92000848f70 R14: 0000000000000246 R15: dffffc0000000000 [ 210.000114][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 210.006290][ C0] ? read_lock_is_recursive+0x10/0x10 [ 210.011717][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 210.017687][ C0] ? _raw_spin_unlock+0x40/0x40 [ 210.022623][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 210.027901][ C0] ? process_one_work+0x7a1/0x1160 [ 210.033055][ C0] process_one_work+0x7d9/0x1160 [ 210.038060][ C0] ? process_one_work+0x7a1/0x1160 [ 210.043276][ C0] ? worker_detach_from_pool+0x240/0x240 [ 210.048957][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 210.054066][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 210.059519][ C0] ? kthread_data+0x4b/0xc0 [ 210.064102][ C0] worker_thread+0xaa2/0x1250 [ 210.068867][ C0] kthread+0x29d/0x330 [ 210.073019][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 210.078117][ C0] ? kthread_blkcg+0xd0/0xd0 [ 210.082757][ C0] ret_from_fork+0x1f/0x30 [ 210.087271][ C0] [ 210.090365][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.097670][ C0] CPU: 0 PID: 4300 Comm: kworker/0:6 Not tainted 6.1.141-syzkaller #0 [ 210.105851][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.115921][ C0] Workqueue: rcu_gp process_srcu [ 210.120879][ C0] Call Trace: [ 210.124174][ C0] [ 210.127026][ C0] dump_stack_lvl+0x168/0x22e [ 210.131722][ C0] ? memcpy+0x3c/0x60 [ 210.135714][ C0] ? show_regs_print_info+0x12/0x12 [ 210.140927][ C0] ? load_image+0x3b0/0x3b0 [ 210.145451][ C0] panic+0x2c9/0x710 [ 210.149357][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 210.153876][ C0] ? ret_from_fork+0x1f/0x30 [ 210.158489][ C0] __warn+0x2f8/0x4f0 [ 210.162477][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 210.167956][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 210.173429][ C0] report_bug+0x2ba/0x4f0 [ 210.177776][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 210.183256][ C0] handle_bug+0x3a/0x70 [ 210.187430][ C0] exc_invalid_op+0x16/0x40 [ 210.191958][ C0] asm_exc_invalid_op+0x16/0x20 [ 210.196821][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 210.202910][ C0] Code: 09 01 48 c7 c7 a0 d2 be 8a e8 ad 30 45 fd 0f 0b eb e0 e8 f4 1d 79 fd c6 05 fa 72 e2 09 01 48 c7 c7 e0 d1 be 8a e8 91 30 45 fd <0f> 0b eb c4 e8 d8 1d 79 fd c6 05 df 72 e2 09 01 48 c7 c7 40 d2 be [ 210.222546][ C0] RSP: 0018:ffffc90000007828 EFLAGS: 00010246 [ 210.228625][ C0] RAX: 65a313a0ee46ca00 RBX: 0000000000000002 RCX: ffff88807f7f1dc0 [ 210.236608][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 210.244601][ C0] RBP: ffffc90000007990 R08: dffffc0000000000 R09: fffff52000000e95 [ 210.252614][ C0] R10: fffff52000000e95 R11: 1ffff92000000e94 R12: ffff88805a65b880 [ 210.260609][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff888054b2a848 [ 210.268611][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 210.274094][ C0] tipc_crypto_xmit+0x17a9/0x2300 [ 210.279164][ C0] ? tipc_crypto_do_cmd+0xde0/0xde0 [ 210.284388][ C0] tipc_bearer_xmit_skb+0x242/0x3f0 [ 210.289621][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 210.294940][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 210.300258][ C0] tipc_disc_timeout+0x568/0x6b0 [ 210.305236][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 210.310469][ C0] call_timer_fn+0x1a0/0x670 [ 210.315077][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 210.320301][ C0] ? call_timer_fn+0xc1/0x670 [ 210.324992][ C0] ? __run_timers+0x7c0/0x7c0 [ 210.329686][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 210.334904][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 210.340116][ C0] ? tipc_disc_init_msg+0x570/0x570 [ 210.345332][ C0] __run_timers+0x525/0x7c0 [ 210.349854][ C0] ? detach_timer+0x350/0x350 [ 210.354545][ C0] ? lock_chain_count+0x20/0x20 [ 210.359417][ C0] run_timer_softirq+0x63/0xf0 [ 210.364201][ C0] handle_softirqs+0x2a1/0x920 [ 210.368991][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 210.373864][ C0] ? do_softirq+0x200/0x200 [ 210.378400][ C0] __irq_exit_rcu+0x12f/0x220 [ 210.383184][ C0] ? irq_exit_rcu+0x20/0x20 [ 210.387714][ C0] irq_exit_rcu+0x5/0x20 [ 210.391974][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 210.397628][ C0] [ 210.400564][ C0] [ 210.403504][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 210.409499][ C0] RIP: 0010:lock_acquire+0x20f/0x490 [ 210.414799][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 210.434430][ C0] RSP: 0018:ffffc90004247b20 EFLAGS: 00000206 [ 210.440520][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 65a313a0ee46ca00 [ 210.448510][ C0] RDX: 0000000000000000 RSI: ffffffff8a6c1160 RDI: ffffffff8abf1360 [ 210.456497][ C0] RBP: ffffc90004247c28 R08: dffffc0000000000 R09: fffffbfff211704c [ 210.464499][ C0] R10: fffffbfff211704c R11: 1ffffffff211704b R12: 0000000000000000 [ 210.472490][ C0] R13: 1ffff92000848f70 R14: 0000000000000246 R15: dffffc0000000000 [ 210.480497][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 210.486504][ C0] ? read_lock_is_recursive+0x10/0x10 [ 210.491902][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 210.497975][ C0] ? _raw_spin_unlock+0x40/0x40 [ 210.502864][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 210.508100][ C0] ? process_one_work+0x7a1/0x1160 [ 210.513237][ C0] process_one_work+0x7d9/0x1160 [ 210.518189][ C0] ? process_one_work+0x7a1/0x1160 [ 210.523326][ C0] ? worker_detach_from_pool+0x240/0x240 [ 210.528998][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 210.534059][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 210.539460][ C0] ? kthread_data+0x4b/0xc0 [ 210.543987][ C0] worker_thread+0xaa2/0x1250 [ 210.548698][ C0] kthread+0x29d/0x330 [ 210.552780][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 210.557814][ C0] ? kthread_blkcg+0xd0/0xd0 [ 210.562475][ C0] ret_from_fork+0x1f/0x30 [ 210.566918][ C0] [ 210.570255][ C0] Kernel Offset: disabled [ 210.574680][ C0] Rebooting in 86400 seconds..