last executing test programs: 1m54.643329442s ago: executing program 3 (id=251): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xdaf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @dev={0xac, 0x14, 0x14, 0x41}}}}], 0x20}}], 0x1, 0x4880) 1m54.518240126s ago: executing program 3 (id=252): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000f80)={0x1c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="422c04000000d4"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m51.418228855s ago: executing program 3 (id=266): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r0 = open(&(0x7f0000000540)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000300)='./file0\x00', 0x2) 1m51.334338607s ago: executing program 3 (id=267): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") syz_clone(0x2000, &(0x7f00000001c0)="68da", 0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m48.373725812s ago: executing program 3 (id=275): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000100)='>', 0x1) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 1m47.539198953s ago: executing program 3 (id=281): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m46.728048214s ago: executing program 32 (id=281): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.155832958s ago: executing program 4 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="b3915f8983bae828d57feab88cd891d5025016d22e12d69a920c7d5be9513c8cb20b7f9892e378b90e5984cd01c1aa4e985f368565579292541d7c4e6228a4e5ef0b776beee32aad57adbc5f014591db91dc98e513f8d1805376bf96cd665801fa4ddcecdc387ffad73170", 0x6b}, {&(0x7f0000000280)="d7ceb216ffcf81acb081ead37ed4564d55baac51f5ff070075aa9352e9f50006b980490200000006bea8d629b6156c648fbeb4a0f045ea7a609141a07633382093ab7e90d4b093c7cfcf012be609324851a923cf9a499eb754b9821f670ab28e9b4367e8a313bf256f578be50a1d", 0x6e}], 0x2, 0x0, 0x0, 0x4000890}, 0x2) recvmmsg$unix(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/8, 0x8}, {&(0x7f00000004c0)=""/207, 0xcf}], 0x2}}], 0x1, 0x2000, 0x0) 3.021022261s ago: executing program 4 (id=937): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x3, 0x3}, 0x10) unshare(0x28040480) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) 2.906146594s ago: executing program 2 (id=938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) close_range(r0, 0xffffffffffffffff, 0x0) 2.712957399s ago: executing program 4 (id=939): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\x80\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\xaf\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda`\xcd>\xef\xed\xe0\xfc\x8fm\xa1.\xd1\xb2I\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x004\xb0q\x85\x18\xf4\x89P8\xd3\x9e\x14\x80G>\x1a8\xb5\xa6D\xda\xa2g\xb8\xe6\xbd\t\xff_Y\xaft\xadR\xe1z\xfd\x95\x1f^\xd3E\xe64\x85\xf1\xeb\xa1\x84\x04\x14\r\xb8*\x18\xfb\xc6\x8b\xeb]6\xf7\xbc\x05x\x1c\xe9C\xa0\x9e\xed\xbd\x9d\x1ar\xa00\xe5\x8a\x9ce\x10\xa6\xfc1\xb7\xc1Q\xf1\xa9@\xc5\x1e\xff\xb1\x8d\xdf\x12\x1e\xfb\xde\x8b\x17\x1a)\'?R\xd4\x8f\xd9\x8e\\z\xf3o\x01>\xaa\x17^Mg]|\xf8mw\xbd)S\x16\xa6\x8c\xea\x8d0;4\xab\x0e$\x15h4\xe1\x9e\xc5O0\xb2\x11\xc5B\xee\x9f\xe0\xc7\x8a\x91\xadeo\xcc\x8a\xc6\xcc\v\xb4\xdf\xc4\x00\xaf\x94\t?`\xdbg\x8c0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 1.507218361s ago: executing program 2 (id=950): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000000280)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rmdir(&(0x7f00000001c0)='./file0\x00') 1.124631851s ago: executing program 4 (id=951): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.123420081s ago: executing program 0 (id=959): socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 964.384564ms ago: executing program 0 (id=952): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 919.729246ms ago: executing program 2 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="2e1221b23bb601c476d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c06000085087509000000000800", 0x14}, {&(0x7f0000000400)="be5802a8515d2d2a5b685944e632663bee4aa26db1", 0x15}], 0x3) 822.111038ms ago: executing program 1 (id=954): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\x80\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\xaf\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda`\xcd>\xef\xed\xe0\xfc\x8fm\xa1.\xd1\xb2I\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x004\xb0q\x85\x18\xf4\x89P8\xd3\x9e\x14\x80G>\x1a8\xb5\xa6D\xda\xa2g\xb8\xe6\xbd\t\xff_Y\xaft\xadR\xe1z\xfd\x95\x1f^\xd3E\xe64\x85\xf1\xeb\xa1\x84\x04\x14\r\xb8*\x18\xfb\xc6\x8b\xeb]6\xf7\xbc\x05x\x1c\xe9C\xa0\x9e\xed\xbd\x9d\x1ar\xa00\xe5\x8a\x9ce\x10\xa6\xfc1\xb7\xc1Q\xf1\xa9@\xc5\x1e\xff\xb1\x8d\xdf\x12\x1e\xfb\xde\x8b\x17\x1a)\'?R\xd4\x8f\xd9\x8e\\z\xf3o\x01>\xaa\x17^Mg]|\xf8mw\xbd)S\x16\xa6\x8c\xea\x8d0;4\xab\x0e$\x15h4\xe1\x9e\xc5O0\xb2\x11\xc5B\xee\x9f\xe0\xc7\x8a\x91\xadeo\xcc\x8a\xc6\xcc\v\xb4\xdf\xc4\x00\xaf\x94\t?`\xdbg\x8c0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004380)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008814}, 0x2) 664.776992ms ago: executing program 1 (id=956): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 510.174316ms ago: executing program 0 (id=957): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x10, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x6, 0xf989, "c86d"}, @timestamp={0x8, 0xa, 0x0, 0x5}]}}}}}}}, 0x0) 473.884897ms ago: executing program 1 (id=958): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x1, r2, 0x33, r1}, 0x10) 429.461508ms ago: executing program 0 (id=960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x0, 0x8000000034a30b42, 0xd, 0x1000, 0x55ba, 0x1002, 0xff, 0x400005, 0x100000006, 0x0, 0x8, 0x3fd, 0x6, 0x400000000000401, 0x2], 0x25002, 0x217156}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 298.101712ms ago: executing program 2 (id=961): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 0s ago: executing program 33 (id=961): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) kernel console output (not intermixed with test programs): 6][ T5948] FAT-fs (loop2): Directory bread(block 70) failed [ 99.753854][ T5948] FAT-fs (loop2): Directory bread(block 71) failed [ 99.775620][ T5948] FAT-fs (loop2): Directory bread(block 72) failed [ 99.798411][ T5948] FAT-fs (loop2): Directory bread(block 73) failed [ 100.085333][ T5948] syz.2.41: attempt to access beyond end of device [ 100.085333][ T5948] loop2: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 100.343915][ T5962] loop0: detected capacity change from 0 to 4096 [ 100.646882][ T5962] EXT4-fs (loop0): Test dummy encryption mode enabled [ 100.699894][ T5962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.222338][ T5962] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 101.514063][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.593591][ T5989] loop2: detected capacity change from 0 to 1024 [ 101.631847][ T5989] EXT4-fs: Ignoring removed i_version option [ 101.666042][ T5989] EXT4-fs: Ignoring removed bh option [ 101.696608][ T5989] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 101.805524][ T5989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.964137][ T5989] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 102.055429][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.761597][ T6030] loop0: detected capacity change from 0 to 2048 [ 102.796701][ T6030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.825969][ T6026] loop3: detected capacity change from 0 to 8192 [ 102.832837][ T6030] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.855832][ T6026] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.972822][ T6030] fs-verity: sha512 using implementation "sha512-avx2" [ 103.489317][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.375861][ T6074] loop3: detected capacity change from 0 to 32768 [ 104.452409][ T6074] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 104.554963][ T6074] XFS (loop3): Ending clean mount [ 104.853069][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 104.961314][ T6087] loop2: detected capacity change from 0 to 40427 [ 104.991209][ T6087] F2FS-fs (loop2): invalid crc value [ 105.023246][ T6087] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.195256][ T6087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.361450][ T6087] syz.2.69: attempt to access beyond end of device [ 105.361450][ T6087] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.429503][ T5774] syz-executor: attempt to access beyond end of device [ 105.429503][ T5774] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 105.445964][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 105.456389][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 105.537351][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.736946][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 105.746498][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 105.757353][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.771401][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.781742][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.799019][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.814916][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.843344][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.098648][ T27] usb 2-1: usb_control_msg returned -32 [ 106.116049][ T27] usbtmc 2-1:16.0: can't read capabilities [ 106.417830][ T6118] loop2: detected capacity change from 0 to 128 [ 106.451158][ T6118] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 106.475718][ T6118] hpfs: filesystem error: improperly stopped [ 106.487192][ T6118] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 106.505278][ T6118] hpfs: You really don't want any checks? You are crazy... [ 106.536928][ T6118] hpfs: Code page index out of array [ 106.542305][ T6118] hpfs: code page support is disabled [ 106.587061][ T6118] hpfs: hpfs_map_4sectors(): unaligned read [ 106.623256][ T6118] hpfs: hpfs_map_4sectors(): unaligned read [ 106.643588][ T6118] hpfs: filesystem error: unable to find root dir [ 106.939665][ T6127] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 107.078900][ T172] usb 2-1: USB disconnect, device number 4 [ 107.663297][ T6145] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 107.693905][ T6134] loop3: detected capacity change from 0 to 32768 [ 107.758046][ T6134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.82 (6134) [ 107.857228][ T6134] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.868553][ T6134] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 107.898120][ T6134] BTRFS info (device loop3): setting nodatasum [ 107.911306][ T6134] BTRFS info (device loop3): force zlib compression, level 3 [ 107.928912][ T6134] BTRFS info (device loop3): turning on sync discard [ 107.939588][ T6134] BTRFS info (device loop3): turning on flush-on-commit [ 107.946732][ T6134] BTRFS info (device loop3): max_inline at 0 [ 107.953619][ T6134] BTRFS info (device loop3): turning off discard [ 107.960399][ T6134] BTRFS info (device loop3): using free space tree [ 108.067175][ T5818] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.209450][ T6134] BTRFS info (device loop3): enabling ssd optimizations [ 108.306942][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 108.325047][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.361905][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.398057][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.427880][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.462915][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.482388][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.686083][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.731223][ T5818] usb 2-1: GET_CAPABILITIES returned 0 [ 108.743064][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 109.036171][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.045371][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.054561][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.097177][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.106567][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.115731][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.124840][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.135251][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.144414][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.153547][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.162649][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.172929][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.182092][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.191241][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.223786][ T5762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.247129][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.256409][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.299693][ T5762] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.333043][ T788] usb 2-1: USB disconnect, device number 5 [ 109.966058][ T6195] loop0: detected capacity change from 0 to 128 [ 110.001363][ T6195] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.030279][ T6195] hpfs: filesystem error: improperly stopped [ 110.050532][ T6195] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.067224][ T6197] input: syz0 as /devices/virtual/input/input5 [ 110.081070][ T6195] hpfs: You really don't want any checks? You are crazy... [ 110.126940][ T6195] hpfs: Code page index out of array [ 110.157593][ T6195] hpfs: code page support is disabled [ 110.174426][ T6195] hpfs: hpfs_map_4sectors(): unaligned read [ 110.195898][ T6195] hpfs: hpfs_map_4sectors(): unaligned read [ 110.205067][ T6195] hpfs: filesystem error: unable to find root dir [ 110.233801][ T6195] hpfs: hpfs_map_4sectors(): unaligned read [ 110.503420][ T6201] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 110.641334][ T6216] Bluetooth: MGMT ver 1.22 [ 111.241831][ T6231] loop1: detected capacity change from 0 to 512 [ 111.293297][ T6231] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.112: iget: bad i_size value: 38620345925642 [ 111.360248][ T6231] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.112: couldn't read orphan inode 15 (err -117) [ 111.398690][ T6231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.568651][ T6240] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.112: bg 0: block 5: invalid block bitmap [ 111.617449][ T6240] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 352 with error 28 [ 111.676920][ T6240] EXT4-fs (loop1): This should not happen!! Data will be lost [ 111.676920][ T6240] [ 111.686697][ T6240] EXT4-fs (loop1): Total free blocks count 0 [ 111.728143][ T6240] EXT4-fs (loop1): Free/Dirty block details [ 111.734204][ T6240] EXT4-fs (loop1): free_blocks=0 [ 111.762759][ T6240] EXT4-fs (loop1): dirty_blocks=356 [ 111.768847][ T6240] EXT4-fs (loop1): Block reservation details [ 111.777375][ T6240] EXT4-fs (loop1): i_reserved_data_blocks=356 [ 111.814921][ T48] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 352 with max blocks 4 with error 28 [ 111.888174][ T6244] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 111.917555][ T6244] netlink: 'syz.2.117': attribute type 2 has an invalid length. [ 111.937149][ T6244] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 111.946098][ T6244] netlink: 'syz.2.117': attribute type 2 has an invalid length. [ 111.947485][ T6246] loop0: detected capacity change from 0 to 256 [ 112.190832][ T6252] loop2: detected capacity change from 0 to 256 [ 112.660729][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 112.962198][ T6281] input: syz0 as /devices/virtual/input/input6 [ 113.636432][ T6295] gadgetfs: bound to dummy_udc driver [ 113.780795][ T6298] loop2: detected capacity change from 0 to 2048 [ 113.839041][ T6298] loop2: p1 p4 [ 113.839041][ T6298] p1: [ 113.846575][ T6298] loop2: partition table partially beyond EOD, truncated [ 113.886134][ T6298] loop2: p4 start 184549376 is beyond EOD, truncated [ 113.935531][ T5139] loop2: p1 p4 [ 113.935531][ T5139] p1: [ 113.945526][ T5139] loop2: partition table partially beyond EOD, truncated [ 113.960673][ T5139] loop2: p4 start 184549376 is beyond EOD, truncated [ 114.291428][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 114.303046][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 114.363403][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 114.365417][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 115.275896][ T6328] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 115.468491][ T6330] loop1: detected capacity change from 0 to 4096 [ 115.500043][ T6330] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 115.618427][ T6330] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 116.227050][ T6332] loop0: detected capacity change from 0 to 32768 [ 116.261350][ T6332] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.150 (6332) [ 116.332629][ T6332] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 116.379383][ T6332] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.406973][ T6332] BTRFS info (device loop0): using free space tree [ 116.527037][ T6332] BTRFS info (device loop0): enabling ssd optimizations [ 116.534550][ T6332] BTRFS info (device loop0): auto enabling async discard [ 116.650422][ T6334] loop2: detected capacity change from 0 to 32768 [ 116.830775][ T6334] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.851060][ T5775] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 117.331819][ T6334] syz.2.151 (6334) used greatest stack depth: 19032 bytes left [ 117.567521][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 117.860746][ T6356] loop1: detected capacity change from 0 to 32768 [ 117.871505][ T6367] loop3: detected capacity change from 0 to 1024 [ 117.922294][ T6356] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 117.963931][ T6356] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.009009][ T6367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.207558][ T6356] XFS (loop1): Ending clean mount [ 118.259146][ T6356] XFS (loop1): Quotacheck needed: Please wait. [ 118.376522][ T6356] XFS (loop1): Quotacheck: Done. [ 118.451351][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.580258][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.602317][ T6392] syz.3.163 uses obsolete (PF_INET,SOCK_PACKET) [ 118.687152][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.890941][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 118.919419][ T27] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 118.937135][ T27] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 118.965759][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 118.986887][ T27] usb 3-1: config 1 has no interface number 0 [ 119.005428][ T27] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.020050][ T6400] raw_sendmsg: syz.1.164 forgot to set AF_INET. Fix it! [ 119.036290][ T27] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 119.066898][ T27] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 119.084741][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.169708][ T27] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 119.241303][ T6406] loop0: detected capacity change from 0 to 256 [ 119.271012][ T6406] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.370802][ T27] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 119.639100][ T6413] Zero length message leads to an empty skb [ 119.880063][ T5823] usb 3-1: USB disconnect, device number 2 [ 119.895241][ T5823] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 120.068221][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.073322][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 120.084821][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 120.210426][ T6425] input: syz1 as /devices/virtual/input/input7 [ 120.280299][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 120.292468][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 120.306516][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.178'. [ 120.317342][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.344638][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.366936][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.399273][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.443441][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.465913][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.572518][ T6431] loop2: detected capacity change from 0 to 512 [ 120.669116][ T6431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.729137][ T27] usb 1-1: usb_control_msg returned -32 [ 120.738787][ T27] usbtmc 1-1:16.0: can't read capabilities [ 120.966358][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.023591][ T6442] loop3: detected capacity change from 0 to 4096 [ 121.066344][ T6442] EXT4-fs: inline encryption not supported [ 121.088311][ T6445] input: syz1 as /devices/virtual/input/input8 [ 121.104053][ T6442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.144207][ T6442] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.183662][ T6442] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 121.202639][ T6442] System zones: 0-5 [ 121.223927][ T6442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.443767][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.454550][ T6454] loop1: detected capacity change from 0 to 2048 [ 121.519461][ T6454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.547230][ T6456] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 121.621478][ T6454] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.692814][ T6454] fs-verity: sha256 using implementation "sha256-avx2" [ 121.745036][ T788] usb 1-1: USB disconnect, device number 2 [ 121.812088][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.927227][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.075219][ T6474] loop5: detected capacity change from 0 to 7 [ 122.091919][ T6474] Dev loop5: unable to read RDB block 7 [ 122.097928][ T6474] loop5: unable to read partition table [ 122.103864][ T6474] loop5: partition table beyond EOD, truncated [ 122.110525][ T6474] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 122.124633][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 122.136444][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.149713][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.159949][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.172524][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.188390][ T27] usb 4-1: config 0 descriptor?? [ 122.197958][ T27] hub 4-1:0.0: USB hub found [ 122.202830][ T6475] loop5: detected capacity change from 7 to 0 [ 122.453150][ T27] hub 4-1:0.0: 1 port detected [ 123.042843][ T6496] loop2: detected capacity change from 0 to 1024 [ 123.498773][ T27] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 123.514339][ T27] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 123.532930][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 123.539245][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 123.589682][ T27] usb 4-1: USB disconnect, device number 3 [ 123.914340][ T27] kernel read not supported for file /input/event1 (pid: 27 comm: kworker/1:1) [ 125.152904][ T6540] loop5: detected capacity change from 0 to 7 [ 125.175833][ T6540] Dev loop5: unable to read RDB block 7 [ 125.197834][ T6540] loop5: unable to read partition table [ 125.208278][ T6540] loop5: partition table beyond EOD, truncated [ 125.227643][ T6540] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 125.299412][ T6543] loop5: detected capacity change from 7 to 0 [ 126.102248][ T6570] loop3: detected capacity change from 0 to 256 [ 126.139260][ T6570] exfat: Deprecated parameter 'namecase' [ 126.145038][ T6570] exfat: Deprecated parameter 'namecase' [ 126.205613][ T6570] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 126.285807][ T6574] loop1: detected capacity change from 0 to 256 [ 127.586898][ T172] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.776909][ T172] usb 4-1: Using ep0 maxpacket: 8 [ 127.788167][ T172] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 127.796681][ T172] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.808660][ T172] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.819038][ T172] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.829486][ T172] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.842818][ T172] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.852355][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.073493][ T172] usb 4-1: usb_control_msg returned -32 [ 128.090308][ T172] usbtmc 4-1:16.0: can't read capabilities [ 128.535623][ T6622] fuse: Bad value for 'fd' [ 128.547964][ T6622] cgroup2: Unknown parameter '/dev/fuse' [ 128.822961][ T6627] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 129.026120][ T5818] usb 4-1: USB disconnect, device number 4 [ 129.597020][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.605351][ T6607] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.409625][ T6607] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.423814][ T6607] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.434882][ T6607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.441334][ T6607] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.448696][ T6607] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.455705][ T6607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.462009][ T6607] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.470935][ T6607] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.482667][ T6607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.489250][ T6607] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.496245][ T6607] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.787624][ T5818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 130.996967][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 131.005309][ T5818] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 131.014082][ T5818] usb 4-1: config 0 has no interface number 0 [ 131.023557][ T5818] usb 4-1: config 0 interface 184 has no altsetting 0 [ 131.035961][ T5818] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 131.053001][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.064783][ T5818] usb 4-1: Product: syz [ 131.070578][ T5818] usb 4-1: Manufacturer: syz [ 131.075367][ T5818] usb 4-1: SerialNumber: syz [ 131.093131][ T5818] usb 4-1: config 0 descriptor?? [ 131.116052][ T5818] smsc75xx v1.0.0 [ 131.477094][ T172] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.666824][ T172] usb 1-1: Using ep0 maxpacket: 32 [ 131.675706][ T172] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 131.685751][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.696808][ T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.709614][ T172] usb 1-1: config 0 descriptor?? [ 131.718703][ T172] gspca_main: sq930x-2.14.0 probing 041e:403c [ 131.734805][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 131.758144][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 132.183423][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 132.195959][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 132.217417][ T5818] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 132.228532][ T5818] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 132.242426][ T5818] usb 4-1: USB disconnect, device number 5 [ 132.282029][ T6658] net_ratelimit: 44 callbacks suppressed [ 132.282045][ T6658] Set syz1 is full, maxelem 6117 reached [ 132.487143][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.493436][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.556942][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.006844][ T172] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 133.012830][ T172] sq930x: probe of 1-1:0.0 failed with error -71 [ 133.029453][ T172] usb 1-1: USB disconnect, device number 3 [ 133.201383][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.208548][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.239785][ T6680] loop2: detected capacity change from 0 to 2048 [ 133.249851][ T6680] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 133.265475][ T6680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.723988][ T6675] loop3: detected capacity change from 0 to 40427 [ 133.741119][ T6675] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 133.757538][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.788164][ T6675] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.833218][ T6675] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.070449][ T6675] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.087651][ T6675] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.287349][ T5818] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.477197][ T5818] usb 1-1: Using ep0 maxpacket: 8 [ 134.494122][ T5818] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 134.503086][ T5818] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.519177][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.531616][ T5818] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.545563][ T5818] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.559380][ T5818] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.567360][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.571085][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.574707][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.636993][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.814915][ T6709] loop1: detected capacity change from 0 to 32768 [ 134.819029][ T5818] usb 1-1: usb_control_msg returned -32 [ 134.827437][ T5818] usbtmc 1-1:16.0: can't read capabilities [ 134.876967][ T6709] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.273 (6709) [ 134.902936][ T6709] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 134.913462][ T6709] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 134.941122][ T6709] BTRFS info (device loop1): using free space tree [ 134.957274][ T5773] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 134.965283][ T5773] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 134.976186][ T5773] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 134.984590][ T5773] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 134.993957][ T5773] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 135.001967][ T5773] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 135.011429][ T5773] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 135.086972][ T6709] BTRFS info (device loop1): enabling ssd optimizations [ 135.094028][ T6709] BTRFS info (device loop1): auto enabling async discard [ 135.251837][ T5772] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 135.542767][ T6728] usbtmc 1-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 135.777257][ T172] usb 1-1: USB disconnect, device number 4 [ 136.094552][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.259861][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.449410][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.570958][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.647302][ T5787] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.705351][ T6739] warning: `syz.0.279' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.720950][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.934293][ T6735] loop1: detected capacity change from 0 to 40427 [ 136.966093][ T6735] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 136.995864][ T6735] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 137.033473][ T6735] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 137.100165][ T6735] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.177042][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.317476][ T6735] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 137.337640][ T6735] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.409979][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.441845][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 137.492844][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 137.504124][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.522334][ T9] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 137.593648][ T9] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 137.826455][ T6744] f2fs_ckpt-7:1: attempt to access beyond end of device [ 137.826455][ T6744] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.877184][ T6744] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 137.927288][ T6743] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 137.957047][ T6743] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 137.987187][ T6743] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 138.059089][ T6743] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 138.102025][ T6743] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32) [ 138.270830][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.286396][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.311482][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.331743][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.347600][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.357101][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.268751][ T42] hsr_slave_0: left promiscuous mode [ 139.303325][ T42] hsr_slave_1: left promiscuous mode [ 139.310204][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.332236][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.380846][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.404185][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.429335][ T42] bridge_slave_1: left allmulticast mode [ 139.443767][ T42] bridge_slave_1: left promiscuous mode [ 139.467802][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.523593][ T42] bridge_slave_0: left allmulticast mode [ 139.529778][ T42] bridge_slave_0: left promiscuous mode [ 139.536086][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.634325][ T42] veth1_macvtap: left promiscuous mode [ 139.646467][ T42] veth0_macvtap: left promiscuous mode [ 139.654694][ T42] veth1_vlan: left promiscuous mode [ 139.665744][ T42] veth0_vlan: left promiscuous mode [ 139.884255][ T5762] usb 1-1: USB disconnect, device number 5 [ 139.915112][ T5762] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 139.924462][ T5762] spcp8x5 1-1:1.0: device disconnected [ 140.483731][ T5787] Bluetooth: hci1: command tx timeout [ 141.397967][ T6811] loop2: detected capacity change from 0 to 32768 [ 141.418854][ T6811] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.296 (6811) [ 141.492179][ T6811] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 141.523266][ T6811] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 141.555855][ T6811] BTRFS info (device loop2): using free space tree [ 141.582388][ T42] team0 (unregistering): Port device team_slave_1 removed [ 141.641282][ T42] team0 (unregistering): Port device team_slave_0 removed [ 141.701717][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.742780][ T6811] BTRFS info (device loop2): enabling ssd optimizations [ 141.762250][ T6811] BTRFS info (device loop2): auto enabling async discard [ 141.797600][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.955497][ T5774] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 142.448163][ T42] bond0 (unregistering): Released all slaves [ 142.557803][ T5787] Bluetooth: hci1: command tx timeout [ 142.599081][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.707813][ T6764] chnl_net:caif_netlink_parms(): no params data found [ 142.807268][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 142.824143][ T788] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.863384][ T788] usb 3-1: config 0 has no interface number 0 [ 142.884914][ T788] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.940131][ T788] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.974586][ T788] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 143.044650][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.063062][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.086413][ T788] usb 3-1: config 0 descriptor?? [ 143.107425][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.164604][ T6764] bridge_slave_0: entered allmulticast mode [ 143.193085][ T6764] bridge_slave_0: entered promiscuous mode [ 143.203051][ T6764] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.210777][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.218489][ T6764] bridge_slave_1: entered allmulticast mode [ 143.231696][ T6764] bridge_slave_1: entered promiscuous mode [ 143.312454][ T6764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.341574][ T6764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.399703][ T788] usbhid 3-1:0.1: can't add hid device: -71 [ 143.405778][ T788] usbhid: probe of 3-1:0.1 failed with error -71 [ 143.433388][ T788] usb 3-1: USB disconnect, device number 3 [ 143.483508][ T6764] team0: Port device team_slave_0 added [ 143.508603][ T6764] team0: Port device team_slave_1 added [ 143.595251][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.602607][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.633955][ T6764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.669710][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.687082][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.737192][ T6764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.852870][ T6764] hsr_slave_0: entered promiscuous mode [ 143.874430][ T6764] hsr_slave_1: entered promiscuous mode [ 144.151850][ T6764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.171725][ T6764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.189553][ T6764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.213071][ T6764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.365243][ T6764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.404789][ T6764] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.426545][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.433853][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.482896][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.490176][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.639278][ T5787] Bluetooth: hci1: command tx timeout [ 144.841057][ T6764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.254971][ T6764] veth0_vlan: entered promiscuous mode [ 145.274844][ T6764] veth1_vlan: entered promiscuous mode [ 145.341268][ T6764] veth0_macvtap: entered promiscuous mode [ 145.365645][ T6764] veth1_macvtap: entered promiscuous mode [ 145.400612][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.411364][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.422698][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.434211][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.444257][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.454813][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.466300][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.490094][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.501138][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.511062][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.522879][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.533481][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.546803][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.559587][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.573186][ T6764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.582406][ T6764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.591976][ T6764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.601028][ T6764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.701544][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.713322][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.754659][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.781377][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.248043][ T5762] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 146.286895][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 146.447375][ T5762] usb 5-1: Using ep0 maxpacket: 8 [ 146.455234][ T5762] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.470300][ T5762] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.481141][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 146.488326][ T5762] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.509576][ T5762] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.528356][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.545278][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.555059][ T5762] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.565230][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.573510][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.584502][ T9] usb 3-1: config 0 descriptor?? [ 146.717782][ T5787] Bluetooth: hci1: command tx timeout [ 146.827021][ T5762] usb 5-1: GET_CAPABILITIES returned 0 [ 146.828004][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.832577][ T5762] usbtmc 5-1:16.0: can't read capabilities [ 146.861289][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.882939][ T5787] Bluetooth: hci3: adv larger than maximum supported [ 146.883033][ T5787] Bluetooth: hci3: Malformed LE Event: 0x0d [ 146.921938][ T5762] usb 3-1: USB disconnect, device number 4 [ 147.046566][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.055760][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.066951][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.076133][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.085291][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.099812][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.108988][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.118121][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.135069][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.144246][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.153394][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.168792][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.177968][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.187102][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.202898][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.212074][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 147.241123][ T5762] usb 5-1: USB disconnect, device number 2 [ 147.915727][ T6960] loop1: detected capacity change from 0 to 512 [ 147.949842][ T6960] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.005633][ T6960] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.031395][ T6960] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.304: bad orphan inode 131083 [ 148.105475][ T6960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.186836][ T5762] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.312789][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.390286][ T5762] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.403345][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.414071][ T5762] usb 1-1: Product: syz [ 148.418828][ T5762] usb 1-1: Manufacturer: syz [ 148.423603][ T5762] usb 1-1: SerialNumber: syz [ 148.684519][ T5762] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 148.747907][ T5762] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 148.837234][ T5818] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.037058][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 149.063610][ T5818] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 149.076978][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.111150][ T5818] usb 2-1: config 0 descriptor?? [ 149.130023][ T5818] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 149.395887][ T5762] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -71 [ 149.437600][ T5762] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 149.468336][ T5762] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 149.492739][ T5762] lan78xx: probe of 1-1:1.0 failed with error -71 [ 149.535800][ T5762] usb 1-1: USB disconnect, device number 6 [ 150.114539][ T6995] tmpfs: Too small a size for current use [ 150.378909][ T5818] gspca_nw80x: reg_w err -71 [ 150.383662][ T5818] nw80x: probe of 2-1:0.0 failed with error -71 [ 150.408434][ T5818] usb 2-1: USB disconnect, device number 6 [ 150.518185][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.733600][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 150.758570][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.775819][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.790769][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.801797][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.818429][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.827973][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.909419][ T7009] loop2: detected capacity change from 0 to 128 [ 150.929096][ T7009] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 150.950932][ T7009] hpfs: filesystem error: improperly stopped [ 150.971560][ T7009] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 151.002824][ T7009] hpfs: You really don't want any checks? You are crazy... [ 151.028274][ T7009] hpfs: Code page index out of array [ 151.035651][ T7009] hpfs: code page support is disabled [ 151.063465][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 151.071279][ T9] usbtmc 1-1:16.0: can't read capabilities [ 151.073714][ T7012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.323'. [ 151.077471][ T7009] hpfs: hpfs_map_4sectors(): unaligned read [ 151.098015][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.323'. [ 151.110369][ T7009] hpfs: hpfs_map_4sectors(): unaligned read [ 151.116456][ T7009] hpfs: filesystem error: unable to find root dir [ 151.290950][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.300155][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.309250][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.318342][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.337888][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.347138][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.356278][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.370670][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.379919][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.389077][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.402297][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.411456][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.420588][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.429729][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.440763][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 151.449918][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 151.469971][ T5816] usb 1-1: USB disconnect, device number 7 [ 151.747677][ T7027] process 'syz.1.329' launched './file0' with NULL argv: empty string added [ 151.966909][ T5823] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.208772][ T5823] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.226801][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.257990][ T5823] usb 3-1: config 0 descriptor?? [ 152.274915][ T5823] cp210x 3-1:0.0: cp210x converter detected [ 152.426512][ T7029] loop1: detected capacity change from 0 to 40427 [ 152.454184][ T7029] F2FS-fs (loop1): invalid crc value [ 152.500140][ T7029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 152.687109][ T7029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.704469][ T7025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.731782][ T7025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.750822][ T5823] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 152.759744][ T7049] loop4: detected capacity change from 0 to 2048 [ 152.814451][ T5823] usb 3-1: cp210x converter now attached to ttyUSB0 [ 152.837363][ T7049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.870308][ T5772] syz-executor: attempt to access beyond end of device [ 152.870308][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.910219][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 152.941900][ T28] audit: type=1800 audit(1785764262.441:3): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.336" name="file3" dev="loop4" ino=18 res=0 errno=0 [ 153.010103][ T5823] usb 3-1: USB disconnect, device number 5 [ 153.031273][ T5823] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.078892][ T5823] cp210x 3-1:0.0: device disconnected [ 153.094277][ T6764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.260941][ T7057] loop0: detected capacity change from 0 to 2048 [ 153.304728][ T7057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.468492][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.672261][ T7066] netlink: 52 bytes leftover after parsing attributes in process `syz.0.341'. [ 153.729859][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.738435][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.769700][ T7071] netlink: 52 bytes leftover after parsing attributes in process `syz.0.341'. [ 153.860112][ T7075] input: syz0 as /devices/virtual/input/input9 [ 154.831465][ T7078] loop0: detected capacity change from 0 to 32768 [ 154.871204][ T7078] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.344 (7078) [ 154.922084][ T7078] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.952989][ T7078] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 154.975749][ T7078] BTRFS info (device loop0): setting nodatacow, compression disabled [ 154.997001][ T7078] BTRFS info (device loop0): setting datasum, datacow enabled [ 155.019288][ T7078] BTRFS info (device loop0): force clearing of disk cache [ 155.034993][ T7078] BTRFS info (device loop0): enabling ssd optimizations [ 155.055193][ T7106] loop2: detected capacity change from 0 to 8192 [ 155.061916][ T7078] BTRFS info (device loop0): using spread ssd allocation scheme [ 155.073350][ T7078] BTRFS info (device loop0): turning on sync discard [ 155.081162][ T7078] BTRFS info (device loop0): turning on flush-on-commit [ 155.088644][ T7078] BTRFS info (device loop0): not using ssd optimizations [ 155.096532][ T7078] BTRFS info (device loop0): not using spread ssd allocation scheme [ 155.105158][ T7078] BTRFS info (device loop0): using free space tree [ 155.130211][ T7106] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.320944][ T7078] BTRFS info (device loop0): rebuilding free space tree [ 155.617070][ T28] audit: type=1800 audit(1785764265.111:4): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.344" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 156.299825][ T5775] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.897084][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 156.904760][ T5762] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.109452][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.122048][ T9] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.136851][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.147337][ T9] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.157834][ T5762] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 157.167085][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 157.173858][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 157.183304][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.192928][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.205335][ T5762] usb 1-1: config 0 descriptor?? [ 157.216053][ T7171] loop1: detected capacity change from 0 to 2048 [ 157.244101][ T9] usb 3-1: config 0 descriptor?? [ 157.281928][ T7171] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.292986][ T7171] NILFS (loop1): mounting unchecked fs [ 157.351203][ T7160] udevd[7160]: incorrect nilfs2 checksum on /dev/loop1 [ 157.419718][ T7171] NILFS (loop1): recovery complete [ 157.440468][ T7176] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.643158][ T5762] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 157.684809][ T9] mcp2221 0003:04D8:00DD.0004: unbalanced delimiter at end of report description [ 157.703847][ T5762] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 157.723762][ T9] mcp2221 0003:04D8:00DD.0004: can't parse reports [ 157.736524][ T5762] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0003/input/input10 [ 157.756907][ T9] mcp2221: probe of 0003:04D8:00DD.0004 failed with error -22 [ 157.826279][ T5762] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 157.874870][ T9] usb 3-1: USB disconnect, device number 6 [ 157.895312][ T5762] usb 1-1: USB disconnect, device number 8 [ 158.029670][ T7185] fido_id[7185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 159.022001][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805d7ffc00: rx timeout, send abort [ 159.033321][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d7ffc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 159.100794][ T7209] netlink: 51 bytes leftover after parsing attributes in process `syz.0.388'. [ 159.427959][ T7196] loop4: detected capacity change from 0 to 32768 [ 159.492572][ T7196] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.382 (7196) [ 159.776746][ C0] sched: RT throttling activated [ 159.798092][ T7196] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 159.910251][ T7196] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 159.976163][ T7196] BTRFS info (device loop4): using free space tree [ 160.022828][ T7206] loop2: detected capacity change from 0 to 131072 [ 160.034047][ T7206] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 160.040917][ T7206] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 160.060827][ T7206] F2FS-fs (loop2): invalid crc value [ 160.110834][ T7206] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.173869][ T7206] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 160.181139][ T7206] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 160.346996][ T7196] BTRFS info (device loop4): enabling ssd optimizations [ 160.382798][ T7196] BTRFS info (device loop4): auto enabling async discard [ 160.636535][ T6764] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 160.657093][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.849626][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 160.857826][ T5790] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop4 scanned by udevd (5790) [ 160.886847][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.147334][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 162.397554][ T7285] loop4: detected capacity change from 0 to 512 [ 162.512928][ T7285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.583508][ T7285] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.727688][ T7285] capability: warning: `syz.4.402' uses deprecated v2 capabilities in a way that may be insecure [ 162.923225][ T6764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.481880][ T7317] bridge0: port 3(dummy0) entered blocking state [ 163.517173][ T7317] bridge0: port 3(dummy0) entered disabled state [ 163.525050][ T7317] dummy0: entered allmulticast mode [ 163.555728][ T7317] dummy0: entered promiscuous mode [ 163.570961][ T7317] bridge0: port 3(dummy0) entered blocking state [ 163.578000][ T7317] bridge0: port 3(dummy0) entered forwarding state [ 163.592112][ T7319] dummy0: left allmulticast mode [ 163.602526][ T7319] dummy0: left promiscuous mode [ 163.612017][ T7319] bridge0: port 3(dummy0) entered disabled state [ 164.055257][ T7336] input: syz1 as /devices/virtual/input/input11 [ 164.177350][ T5823] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 164.244067][ T7341] loop4: detected capacity change from 0 to 64 [ 164.325570][ T7341] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 164.394688][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.423526][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.464582][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.505437][ T5823] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.526894][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.543479][ T5823] usb 2-1: config 0 descriptor?? [ 164.728019][ T7353] syzkaller1: entered promiscuous mode [ 164.733839][ T7353] syzkaller1: entered allmulticast mode [ 164.988245][ T5823] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 165.014799][ T5823] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 165.079594][ T5823] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 165.319883][ T5823] usb 2-1: USB disconnect, device number 7 [ 165.345366][ T7365] fido_id[7365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 166.216445][ T7372] loop2: detected capacity change from 0 to 32768 [ 166.330398][ T7372] [ 166.330398][ T7372] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.330398][ T7372] [ 166.444902][ T28] audit: type=1800 audit(1785764275.941:5): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 166.705207][ T7372] ERROR: (device loop2): xtSearch: stack overrun! [ 166.705207][ T7372] [ 166.740693][ T6904] usb 1-1: USB disconnect, device number 9 [ 166.817669][ T7372] ERROR: (device loop2): xtSearch: stack overrun! [ 166.817669][ T7372] [ 166.860405][ T7372] xtLookup: xtSearch returned -5 [ 166.908786][ T7372] ERROR: (device loop2): xtTruncate: stack overrun! [ 166.908786][ T7372] [ 167.152270][ T2911] [ 167.152270][ T2911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.152270][ T2911] [ 167.178634][ T2911] [ 167.178634][ T2911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.178634][ T2911] [ 167.233875][ T2911] [ 167.233875][ T2911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.233875][ T2911] [ 167.271187][ T2911] [ 167.271187][ T2911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.271187][ T2911] [ 167.304990][ T2911] JFS: metapage_get_blocks failed [ 167.317527][ T2911] [ 167.317527][ T2911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.317527][ T2911] [ 167.349669][ T5774] [ 167.349669][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.349669][ T5774] [ 167.369840][ T5774] [ 167.369840][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.369840][ T5774] [ 168.466006][ T7429] loop2: detected capacity change from 0 to 128 [ 168.514465][ T7429] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 168.543560][ T7429] hpfs: filesystem error: improperly stopped [ 168.564946][ T7429] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 168.588881][ T7429] hpfs: You really don't want any checks? You are crazy... [ 168.623388][ T7429] hpfs: hpfs_map_sector(): read error [ 168.648091][ T7429] hpfs: code page support is disabled [ 168.665187][ T7429] hpfs: hpfs_map_4sectors(): unaligned read [ 168.683815][ T7429] hpfs: hpfs_map_4sectors(): unaligned read [ 168.700358][ T7429] hpfs: filesystem error: unable to find root dir [ 168.758694][ T7429] hpfs: hpfs_map_4sectors(): unaligned read [ 168.812602][ T7429] hpfs: hpfs_map_sector(): read error [ 168.863687][ T7429] hpfs: hpfs_map_4sectors(): unaligned read [ 168.896974][ T7429] hpfs: hpfs_map_sector(): read error [ 170.358623][ T7448] loop2: detected capacity change from 0 to 131072 [ 170.370497][ T7448] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 170.380027][ T7448] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 170.390655][ T7448] F2FS-fs (loop2): invalid crc value [ 170.411361][ T7448] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.480747][ T7448] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 170.488281][ T7448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 170.627755][ T7448] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 170.644415][ T7448] F2FS-fs (loop2): checksum invalid, nid = 8, ino_of_node = 8, 2596626b vs. 43efc4 [ 172.777662][ T28] audit: type=1800 audit(1785764282.271:6): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.459" name="host_addr" dev="configfs" ino=13142 res=0 errno=0 [ 172.978206][ T7530] loop2: detected capacity change from 0 to 1024 [ 173.027119][ T5816] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 173.044138][ T7530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.175034][ T28] audit: type=1800 audit(1785764282.671:7): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.462" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 173.242014][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.265123][ T5816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.316088][ T5816] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.335785][ T5816] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.346938][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.358595][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.377801][ T5816] usb 5-1: config 0 descriptor?? [ 173.472421][ T7538] loop1: detected capacity change from 0 to 8192 [ 173.486882][ T7540] loop0: detected capacity change from 0 to 2048 [ 173.548092][ T7540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 173.707973][ T7540] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.465: bg 0: block 240: padding at end of block bitmap is not set [ 173.798465][ T5816] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 173.807405][ T7540] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 173.838120][ T5816] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 173.881525][ T7540] EXT4-fs (loop0): This should not happen!! Data will be lost [ 173.881525][ T7540] [ 173.927643][ T7540] EXT4-fs (loop0): Total free blocks count 0 [ 173.933719][ T7540] EXT4-fs (loop0): Free/Dirty block details [ 173.970082][ T7540] EXT4-fs (loop0): free_blocks=0 [ 173.975208][ T7540] EXT4-fs (loop0): dirty_blocks=112 [ 174.003621][ T7540] EXT4-fs (loop0): Block reservation details [ 174.025298][ T7540] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 174.113404][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 174.700107][ T7560] ipip0: entered promiscuous mode [ 174.710585][ T7560] ipip0: entered allmulticast mode [ 175.057824][ T7570] loop2: detected capacity change from 0 to 256 [ 175.295487][ T7572] use of bytesused == 0 is deprecated and will be removed in the future, [ 175.306047][ T7572] use the actual size instead. [ 175.910264][ T27] usb 5-1: USB disconnect, device number 3 [ 176.006253][ T7595] loop0: detected capacity change from 0 to 256 [ 176.028100][ T7595] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.082509][ T7595] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.256235][ T7598] loop4: detected capacity change from 0 to 2048 [ 176.341888][ T7598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.377005][ T7598] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.620572][ T6764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.055427][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 177.102291][ T7611] ifb0: entered promiscuous mode [ 177.121610][ T7611] macvlan0: entered allmulticast mode [ 177.131518][ T7611] ifb0: entered allmulticast mode [ 177.228364][ T7613] kernel kvm profiling enabled (shift: 4) [ 177.651941][ T7605] loop0: detected capacity change from 0 to 40427 [ 177.675633][ T7605] F2FS-fs (loop0): invalid crc value [ 177.691378][ T7605] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.882283][ T7605] F2FS-fs (loop0): Start checkpoint disabled! [ 177.940252][ T7605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 178.225365][ T7605] syz.0.488: attempt to access beyond end of device [ 178.225365][ T7605] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.639690][ T6064] kworker/u4:13: attempt to access beyond end of device [ 178.639690][ T6064] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 178.696969][ T6064] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 178.717058][ T6064] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 178.889690][ T7648] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 178.920965][ T7648] overlayfs: failed to set xattr on upper [ 178.927087][ T7648] overlayfs: ...falling back to redirect_dir=nofollow. [ 178.934336][ T7648] overlayfs: ...falling back to index=off. [ 178.943985][ T7648] overlayfs: ...falling back to uuid=null. [ 178.957168][ T7648] overlayfs: ...falling back to xino=off. [ 178.963030][ T7648] overlayfs: conflicting lowerdir path [ 180.043436][ T7672] loop1: detected capacity change from 0 to 256 [ 180.100374][ T7672] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 180.135785][ T7675] sctp: [Deprecated]: syz.2.510 (pid 7675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.135785][ T7675] Use struct sctp_sack_info instead [ 180.320871][ T7660] loop4: detected capacity change from 0 to 40427 [ 180.339602][ T7660] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 180.367222][ T7660] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.418651][ T7660] F2FS-fs (loop4): invalid crc value [ 180.464150][ T7660] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.635973][ T7660] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.656146][ T7660] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.835389][ T6059] tipc: Subscription rejected, illegal request [ 181.773155][ T55] device offline error, dev sda, sector 753974 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 181.786850][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 94246) [ 181.799229][ T55] Buffer I/O error on device sda1, logical block 94208 [ 181.806929][ T55] device offline error, dev sda, sector 762158 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 181.817553][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 95269) [ 181.830409][ T55] Buffer I/O error on device sda1, logical block 95231 [ 181.837501][ T55] device offline error, dev sda, sector 766086 op 0x1:(WRITE) flags 0x0 phys_seg 11 prio class 2 [ 181.848186][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2033 starting block 95760) [ 181.859993][ T55] Buffer I/O error on device sda1, logical block 95722 [ 181.867065][ T55] Buffer I/O error on device sda1, logical block 95723 [ 181.874870][ T55] Buffer I/O error on device sda1, logical block 95724 [ 181.881884][ T55] Buffer I/O error on device sda1, logical block 95725 [ 181.893936][ T55] Buffer I/O error on device sda1, logical block 95726 [ 181.900946][ T55] Buffer I/O error on device sda1, logical block 95727 [ 181.908002][ T55] Buffer I/O error on device sda1, logical block 95728 [ 181.914908][ T55] Buffer I/O error on device sda1, logical block 95729 [ 181.924127][ T55] device offline error, dev sda, sector 770374 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 181.934995][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 96296) [ 181.946945][ T55] device offline error, dev sda, sector 770406 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 181.957499][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 96300) [ 181.969313][ T55] device offline error, dev sda, sector 770430 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 181.980743][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 96303) [ 181.992399][ T55] device offline error, dev sda, sector 770462 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 182.002941][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 96307) [ 182.014577][ T55] device offline error, dev sda, sector 770502 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 182.025245][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 96312) [ 182.036995][ T55] device offline error, dev sda, sector 770518 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 182.047541][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 96314) [ 182.059335][ T55] device offline error, dev sda, sector 770574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 182.069893][ T55] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 96321) [ 182.141194][ T7710] Buffer I/O error on dev sda1, logical block 1, lost async page write [ 182.152551][ T7710] Buffer I/O error on dev sda1, logical block 131, lost async page write [ 182.159430][ T5101] Aborting journal on device sda1-8. [ 182.184676][ T1096] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 182.200193][ T5101] JBD2: I/O error when updating journal superblock for sda1-8. [ 182.218256][ T7713] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.0.525: Detected aborted journal [ 182.271374][ T55] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 182.286909][ T7713] EXT4-fs (sda1): I/O error while writing superblock [ 182.310433][ T7713] EXT4-fs (sda1): Remounting filesystem read-only [ 182.693927][ T7724] futex_wake_op: syz.0.527 tries to shift op by 144; fix this program [ 183.259212][ T7710] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 184.136415][ T7741] loop0: detected capacity change from 0 to 2048 [ 184.244831][ T7741] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 184.252644][ T7741] UDF-fs: Scanning with blocksize 512 failed [ 184.340619][ T7741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.723455][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.723455][ T6064] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 184.741340][ T6064] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 184.756589][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.756589][ T6064] loop0: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 184.786844][ T5816] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.794856][ T6064] Buffer I/O error on dev loop0, logical block 1024, lost async page write [ 184.815521][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.815521][ T6064] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 184.834300][ T6064] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 184.845649][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.845649][ T6064] loop0: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 184.878534][ T6064] Buffer I/O error on dev loop0, logical block 1025, lost async page write [ 184.894530][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.894530][ T6064] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 184.909281][ T6064] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 184.918425][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.918425][ T6064] loop0: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 184.932615][ T6064] Buffer I/O error on dev loop0, logical block 1026, lost async page write [ 184.942547][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.942547][ T6064] loop0: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 184.962836][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.962836][ T6064] loop0: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 184.984649][ T6064] kworker/u4:13: attempt to access beyond end of device [ 184.984649][ T6064] loop0: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 185.007045][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 185.027240][ T6064] kworker/u4:13: attempt to access beyond end of device [ 185.027240][ T6064] loop0: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 185.036837][ T5816] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 185.073425][ T5816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.093564][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.105129][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.116822][ T5816] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.138313][ T5816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.149069][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.355660][ T6904] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 185.405893][ T6904] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.442793][ T5816] usb 3-1: usb_control_msg returned -32 [ 185.456855][ T5816] usbtmc 3-1:16.0: can't read capabilities [ 185.501995][ T7769] udevd[7769]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 185.688356][ T7773] team0: entered promiscuous mode [ 185.693988][ T7773] team_slave_0: entered promiscuous mode [ 185.708621][ T7773] team_slave_1: entered promiscuous mode [ 185.721014][ T7773] batadv_slave_0: entered promiscuous mode [ 185.728814][ T7772] batadv_slave_0: left promiscuous mode [ 185.735340][ T7772] team0: left promiscuous mode [ 185.744477][ T7772] team_slave_0: left promiscuous mode [ 185.753620][ T7772] team_slave_1: left promiscuous mode [ 185.959267][ T7781] loop0: detected capacity change from 0 to 256 [ 186.075382][ T7784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.289084][ T7785] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 186.486349][ T7797] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 186.497218][ T5818] usb 3-1: USB disconnect, device number 7 [ 186.584895][ T7797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.601547][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 186.632869][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'. [ 186.642197][ T7803] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 186.652367][ T7803] bond1: option mode: unable to set because the bond device is up [ 187.182607][ T7816] loop2: detected capacity change from 0 to 64 [ 187.395074][ T7802] loop1: detected capacity change from 0 to 40427 [ 187.423006][ T7802] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 187.462184][ T7802] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 187.478443][ T7819] loop4: detected capacity change from 0 to 4096 [ 187.540909][ T7802] F2FS-fs (loop1): invalid crc value [ 187.577503][ T7824] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.607434][ T7802] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.807706][ T7802] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 187.833746][ T7829] netlink: 56 bytes leftover after parsing attributes in process `syz.2.563'. [ 187.843385][ T7802] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.112019][ T7812] loop0: detected capacity change from 0 to 32768 [ 188.143041][ T12] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 188.206516][ T7812] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 188.219170][ T12] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 188.401268][ T7812] XFS (loop0): Ending clean mount [ 188.513784][ T7848] loop4: detected capacity change from 0 to 512 [ 188.563998][ T7848] EXT4-fs (loop4): Test dummy encryption mode enabled [ 188.597023][ T7848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.646893][ T7848] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.568: bad orphan inode 131083 [ 188.670606][ T7848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.694847][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 188.962960][ T6764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.145569][ T7859] Invalid argument reading file caps for ./file0 [ 190.005974][ T7861] loop0: detected capacity change from 0 to 32768 [ 190.030991][ T7861] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.571 (7861) [ 190.115364][ T7861] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 190.129266][ T7861] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 190.139135][ T7861] BTRFS info (device loop0): using free space tree [ 190.238221][ T7861] BTRFS info (device loop0): enabling ssd optimizations [ 190.245272][ T7861] BTRFS info (device loop0): auto enabling async discard [ 190.379932][ T7909] udevd[7909]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 190.717754][ T7925] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 190.854546][ T5775] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 190.898315][ T7925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.832542][ T7950] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.069403][ T7954] loop2: detected capacity change from 0 to 4096 [ 192.086858][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 192.192627][ T7954] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 192.277084][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 192.328902][ T27] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.356842][ T27] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.367122][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.378327][ T27] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 192.399832][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.439001][ T27] usb 5-1: Product: syz [ 192.443266][ T27] usb 5-1: Manufacturer: syz [ 192.481498][ T27] usb 5-1: SerialNumber: syz [ 192.515084][ T27] usb 5-1: config 0 descriptor?? [ 192.589485][ T7959] loop0: detected capacity change from 0 to 1024 [ 192.814984][ T7963] netlink: 27 bytes leftover after parsing attributes in process `syz.2.604'. [ 192.961200][ T27] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 193.368244][ T27] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 193.642544][ T27] usb 5-1: USB disconnect, device number 4 [ 193.873786][ T7973] loop0: detected capacity change from 0 to 32768 [ 194.648590][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.656792][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.747738][ T7986] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 195.137659][ T7998] netlink: 33 bytes leftover after parsing attributes in process `syz.0.619'. [ 195.197492][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 195.616935][ T5816] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 195.716394][ T8015] loop1: detected capacity change from 0 to 4096 [ 195.738847][ T8015] EXT4-fs: inline encryption not supported [ 195.809074][ T8015] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.824267][ T5816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 195.839902][ T8015] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 195.863727][ T5816] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 195.883841][ T8015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.912955][ T5816] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.977921][ T5816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 196.017318][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 196.060514][ T5816] usb 5-1: Product: syz [ 196.064774][ T5816] usb 5-1: Manufacturer: syz [ 196.085679][ T5816] usb 5-1: SerialNumber: syz [ 196.334521][ T8031] loop2: detected capacity change from 0 to 128 [ 196.341798][ T5816] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 196.453808][ T8031] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 196.532593][ T27] usb 5-1: USB disconnect, device number 5 [ 196.541522][ T27] usblp0: removed [ 196.546530][ T8031] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.711007][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.746504][ T5774] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.046611][ T8029] loop0: detected capacity change from 0 to 32768 [ 197.097716][ T8029] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 197.142539][ T8029] JBD2: Ignoring recovery information on journal [ 197.268922][ T8040] loop1: detected capacity change from 0 to 8 [ 197.396999][ T8029] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 197.596922][ T28] audit: type=1800 audit(1785764307.091:8): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.631" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 197.843451][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 198.292698][ T8059] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 198.319848][ T8059] overlayfs: failed to set xattr on upper [ 198.335902][ T8059] overlayfs: ...falling back to redirect_dir=nofollow. [ 198.346151][ T8059] overlayfs: ...falling back to index=off. [ 198.363581][ T8059] overlayfs: ...falling back to uuid=null. [ 198.364002][ T8061] loop1: detected capacity change from 0 to 1024 [ 198.404199][ T8044] loop2: detected capacity change from 0 to 40427 [ 198.422567][ T8044] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 198.431493][ T8044] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 198.454201][ T8044] F2FS-fs (loop2): invalid crc value [ 198.461029][ T8061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.473551][ T8061] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.544889][ T8044] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.655004][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.699218][ T9] IPVS: starting estimator thread 0... [ 198.837747][ T8072] IPVS: using max 18 ests per chain, 43200 per kthread [ 198.860154][ T8044] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 198.882379][ T8044] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 199.240567][ T8081] loop1: detected capacity change from 0 to 512 [ 199.277078][ T8081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.329712][ T8081] EXT4-fs (loop1): 1 truncate cleaned up [ 199.337078][ T8081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.400378][ T8084] input: syz0 as /devices/virtual/input/input13 [ 199.915648][ T8097] loop0: detected capacity change from 0 to 256 [ 199.943233][ T8097] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.975475][ T8097] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 200.022499][ T8097] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 200.057867][ T8097] exFAT-fs (loop0): failed to load alloc-bitmap [ 200.064287][ T8097] exFAT-fs (loop0): failed to recognize exfat type [ 201.125514][ T8103] loop0: detected capacity change from 0 to 32768 [ 201.203337][ T8103] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 201.281970][ T8103] XFS (loop0): Ending clean mount [ 201.356679][ T8107] loop4: detected capacity change from 0 to 32768 [ 201.457103][ T8107] JBD2: Ignoring recovery information on journal [ 201.583712][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.608382][ T8107] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 201.667681][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 202.001960][ T6764] ocfs2: Unmounting device (7,4) on (node local) [ 202.071637][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 202.078806][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 202.113993][ T27] libceph: connect (1)[c::]:6789 error -101 [ 202.120297][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 202.341228][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 202.351444][ T8133] loop1: detected capacity change from 0 to 32768 [ 202.357381][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 202.394503][ T8133] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.404683][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 202.420723][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 202.601501][ T8133] XFS (loop1): Ending clean mount [ 202.628175][ T8133] XFS (loop1): Quotacheck needed: Please wait. [ 202.717456][ T8133] XFS (loop1): Quotacheck: Done. [ 202.808521][ T8135] ceph: No mds server is up or the cluster is laggy [ 202.848365][ T8138] ceph: No mds server is up or the cluster is laggy [ 202.878086][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 202.884175][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 202.957562][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 202.963683][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 203.082056][ T5772] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.518681][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 203.589827][ T8167] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.606785][ T8167] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.615291][ T8167] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.623897][ T8167] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.926607][ T28] audit: type=1326 audit(1785764313.421:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 203.981012][ T28] audit: type=1326 audit(1785764313.461:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.036945][ T28] audit: type=1326 audit(1785764313.491:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.117122][ T28] audit: type=1326 audit(1785764313.501:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.175346][ T28] audit: type=1326 audit(1785764313.501:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.231595][ T28] audit: type=1326 audit(1785764313.501:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.279056][ T28] audit: type=1326 audit(1785764313.501:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.324832][ T28] audit: type=1326 audit(1785764313.511:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.386880][ T28] audit: type=1326 audit(1785764313.511:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.482416][ T28] audit: type=1326 audit(1785764313.521:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.2.676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdeb59e019 code=0x7ffc0000 [ 204.639722][ T8187] loop2: detected capacity change from 0 to 2048 [ 204.667719][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 204.705507][ T8187] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.920143][ T8171] loop4: detected capacity change from 0 to 40427 [ 204.930392][ T8189] bond0: (slave bond_slave_1): Releasing backup interface [ 204.948084][ T8171] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 204.965232][ T8171] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 205.018815][ T8171] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 205.054517][ T8171] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.172983][ T8198] loop2: detected capacity change from 0 to 4096 [ 205.233825][ T8171] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 205.247055][ T8171] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 205.267974][ T8203] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.022186][ T8222] loop1: detected capacity change from 0 to 512 [ 206.106295][ T8222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.364386][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.559253][ T8240] KVM: debugfs: duplicate directory 8240-4 [ 206.584303][ T8242] loop1: detected capacity change from 0 to 16 [ 206.618169][ T8242] erofs: (device loop1): mounted with root inode @ nid 36. [ 206.673227][ T8218] loop2: detected capacity change from 0 to 32768 [ 206.736060][ T8218] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 206.863332][ T8218] XFS (loop2): Ending clean mount [ 207.063716][ T8256] loop0: detected capacity change from 0 to 128 [ 207.109352][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 207.696920][ T5841] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 207.856156][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 207.913112][ T5841] usb 2-1: not running at top speed; connect to a high speed hub [ 207.927127][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 207.958660][ T5841] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 207.986839][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.045133][ T5841] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 208.103273][ T5841] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 208.310663][ T27] usb 2-1: USB disconnect, device number 8 [ 208.332857][ T5823] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 208.347842][ T27] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 208.370557][ T27] garmin_gps 2-1:1.0: device disconnected [ 208.485250][ T8274] loop2: detected capacity change from 0 to 32768 [ 208.550057][ T5823] usb 1-1: config 0 interface 0 has no altsetting 0 [ 208.572292][ T5823] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 208.586880][ T8274] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 208.596036][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.602249][ T8288] loop4: detected capacity change from 0 to 4096 [ 208.643781][ T5823] usb 1-1: config 0 descriptor?? [ 208.736357][ T8274] XFS (loop2): Ending clean mount [ 208.955878][ T8288] Process accounting resumed [ 208.978427][ T8300] udevd[8300]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/radio48': Input/output error [ 209.079919][ T8288] ntfs3: loop4: ino=5, "/" ntfs3_write_inode failed, -22. [ 209.182450][ T5774] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.695154][ T5823] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 209.740596][ T8309] loop1: detected capacity change from 0 to 4096 [ 209.865223][ T8309] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 209.909317][ T5841] usb 1-1: USB disconnect, device number 11 [ 210.429712][ T8310] loop4: detected capacity change from 0 to 32768 [ 210.527837][ T8310] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 210.737912][ T8332] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 210.745771][ T8332] netlink: 'syz.1.727': attribute type 2 has an invalid length. [ 210.765059][ T8332] netlink: 244 bytes leftover after parsing attributes in process `syz.1.727'. [ 210.813485][ T8310] XFS (loop4): Ending clean mount [ 210.980357][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.728'. [ 211.117621][ T6764] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 211.353896][ T8316] loop2: detected capacity change from 0 to 32768 [ 211.591676][ T8316] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 211.727299][ T8329] loop0: detected capacity change from 0 to 32768 [ 211.784363][ T8329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.726 (8329) [ 211.832700][ T8345] loop4: detected capacity change from 0 to 512 [ 211.859877][ T8329] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.886004][ T8345] ext4: Unknown parameter 'bsdgroups2' [ 211.897874][ T8329] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 211.924317][ T8329] BTRFS info (device loop0): enabling auto defrag [ 211.961463][ T8329] BTRFS info (device loop0): force clearing of disk cache [ 212.007542][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 212.018549][ T8329] BTRFS info (device loop0): turning on sync discard [ 212.025323][ T8329] BTRFS info (device loop0): enabling disk space caching [ 212.037282][ T8329] BTRFS info (device loop0): setting nodatacow, compression disabled [ 212.045458][ T8329] BTRFS info (device loop0): disk space caching is enabled [ 212.090459][ T8348] udevd[8348]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 212.252861][ T8329] BTRFS info (device loop0): enabling ssd optimizations [ 212.279144][ T8329] BTRFS info (device loop0): rebuilding free space tree [ 212.334446][ T8329] BTRFS info (device loop0): disabling free space tree [ 212.344551][ T8329] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.399691][ T8329] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.413535][ T8370] udevd[8370]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 212.677944][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.688126][ T8373] udevd[8373]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error [ 218.303755][ T8394] loop0: detected capacity change from 0 to 128 [ 219.087970][ T8420] loop2: detected capacity change from 0 to 16 [ 219.120645][ T8420] erofs: (device loop2): mounted with root inode @ nid 36. [ 219.186842][ T5762] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 219.376911][ T5762] usb 5-1: Using ep0 maxpacket: 16 [ 219.392983][ T5762] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 219.403096][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.412656][ T5762] usb 5-1: Product: syz [ 219.417746][ T5762] usb 5-1: Manufacturer: syz [ 219.422561][ T5762] usb 5-1: SerialNumber: syz [ 219.433204][ T5762] usb 5-1: config 0 descriptor?? [ 219.438744][ T8427] loop2: detected capacity change from 0 to 512 [ 219.460139][ T5762] gspca_main: spca508-2.14.0 probing 041e:4018 [ 219.490001][ T8427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.537564][ T8427] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.660849][ T5762] gspca_spca508: reg_read err -32 [ 219.667723][ T5762] gspca_spca508: reg_read err -32 [ 219.675910][ T5762] gspca_spca508: reg_read err -32 [ 219.684732][ T5762] gspca_spca508: reg_read err -32 [ 219.759220][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.903429][ T5762] gspca_spca508: reg write: error -71 [ 219.927848][ T5762] spca508: probe of 5-1:0.0 failed with error -71 [ 219.947686][ T5762] usb 5-1: USB disconnect, device number 6 [ 220.000106][ T8440] loop0: detected capacity change from 0 to 256 [ 220.076522][ T8440] FAT-fs (loop0): Directory bread(block 64) failed [ 220.086117][ T8440] FAT-fs (loop0): Directory bread(block 65) failed [ 220.096449][ T8440] FAT-fs (loop0): Directory bread(block 66) failed [ 220.104691][ T8440] FAT-fs (loop0): Directory bread(block 67) failed [ 220.125867][ T8440] FAT-fs (loop0): Directory bread(block 68) failed [ 220.135764][ T8440] FAT-fs (loop0): Directory bread(block 69) failed [ 220.165574][ T8440] FAT-fs (loop0): Directory bread(block 70) failed [ 220.187529][ T8440] FAT-fs (loop0): Directory bread(block 71) failed [ 220.206960][ T8440] FAT-fs (loop0): Directory bread(block 72) failed [ 220.213580][ T8440] FAT-fs (loop0): Directory bread(block 73) failed [ 220.554218][ T8450] loop0: detected capacity change from 0 to 128 [ 220.638962][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'. [ 220.668789][ T8454] netlink: 108 bytes leftover after parsing attributes in process `syz.4.765'. [ 220.896463][ T8463] loop0: detected capacity change from 0 to 512 [ 220.905282][ T8463] EXT4-fs (loop0): Test dummy encryption mode enabled [ 220.957178][ T8463] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.768: inode has both inline data and extents flags [ 220.977124][ T8463] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.768: couldn't read orphan inode 15 (err -117) [ 221.022238][ T8463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.221582][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.722201][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 221.764791][ T8483] veth0_macvtap: left promiscuous mode [ 222.395366][ T8498] loop0: detected capacity change from 0 to 2048 [ 222.462641][ T8498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.640877][ T8508] loop2: detected capacity change from 0 to 1024 [ 222.649435][ T8508] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.672915][ T8509] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 222.720990][ T8508] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002] [ 222.731910][ T8508] System zones: 0-1, 3-12 [ 222.741924][ T8508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.760735][ T8509] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 74 with error 28 [ 222.827004][ T8509] EXT4-fs (loop0): This should not happen!! Data will be lost [ 222.827004][ T8509] [ 222.856953][ T8509] EXT4-fs (loop0): Total free blocks count 0 [ 222.877444][ T8509] EXT4-fs (loop0): Free/Dirty block details [ 222.913923][ T8509] EXT4-fs (loop0): free_blocks=4096 [ 222.941910][ T8509] EXT4-fs (loop0): dirty_blocks=96 [ 222.976104][ T8509] EXT4-fs (loop0): Block reservation details [ 223.013837][ T8509] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 223.036364][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.051556][ T8509] EXT4-fs error (device loop0) in ext4_setattr:5683: error 28 [ 223.186643][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 223.675619][ T8535] binder: 8534:8535 ioctl c0306201 2000000003c0 returned -14 [ 223.857159][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.971192][ T8544] Write-error on swap-device (8:0:278206) Aug 3 13:38:53 syzkaller kern.alert kernel: [ 223.971192][ T8544] Write-error on swap-device (8:0:278206) [ 224.060579][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.083511][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 224.124394][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.151553][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.172786][ T9] usb 1-1: Product: syz [ 224.179896][ T9] usb 1-1: Manufacturer: syz [ 224.187073][ T5823] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 224.206170][ T9] usb 1-1: SerialNumber: syz [ 224.226987][ T9] cdc_mbim 1-1:1.0: skipping garbage [ 224.397076][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 224.433979][ T8533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.441357][ T5823] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 224.458480][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.479429][ T5823] usb 2-1: Product: syz [ 224.483686][ T5823] usb 2-1: Manufacturer: syz [ 224.493272][ T5823] usb 2-1: SerialNumber: syz [ 224.510162][ T5823] usb 2-1: config 0 descriptor?? [ 224.768265][ T5823] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 009 [ 224.807127][ T8557] loop2: detected capacity change from 0 to 1024 [ 225.082146][ T8533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 225.112764][ T9] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 225.128978][ T9] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 225.314007][ T9] cdc_mbim 1-1:1.0: setting tx_max = 32 [ 225.329921][ T9] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 225.402384][ T8565] i2c i2c-1: failure sending STOP [ 225.404847][ T5762] usb 2-1: USB disconnect, device number 9 [ 225.425530][ T9] wwan wwan0: port wwan0mbim0 attached [ 225.473159][ T9] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 9a:0c:72:b6:df:da [ 225.531410][ T9] usb 1-1: USB disconnect, device number 12 [ 225.550512][ T9] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 225.712757][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 225.734693][ T8576] loop2: detected capacity change from 0 to 512 [ 225.766371][ T8576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.820070][ T8576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.846018][ T8576] ext4 filesystem being mounted at /199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.882038][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 225.882055][ T28] audit: type=1800 audit(1785764335.381:37): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.813" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 226.033948][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.156262][ T8587] mmap: syz.4.817 (8587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.752409][ T8605] loop2: detected capacity change from 0 to 8 [ 226.810078][ T8605] SQUASHFS error: Failed to read block 0x1000629: -5 [ 226.851006][ T8605] SQUASHFS error: Unable to read metadata cache entry [1000629] [ 226.880795][ T8605] SQUASHFS error: Unable to read directory block [1000629:1fff] [ 227.117071][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 227.270800][ T8619] 9pnet: p9_errstr2errno: server reported unknown error õ1 [ 227.322594][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.333189][ T9] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 227.353451][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.404365][ T9] as10x_usb: device has been detected [ 227.418000][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 227.508151][ T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 227.578812][ T9] usb 2-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -5 [ 227.616681][ T9] usb 2-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -5 [ 227.626565][ T9] usb 2-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -5 [ 227.648812][ T9] usb 2-1: loading /lib/firmware/as102_data1_st.hex failed with error -5 [ 227.668906][ T9] usb 2-1: Direct firmware load for as102_data1_st.hex failed with error -5 [ 227.691135][ T9] usb 2-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 228.626960][ T5818] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 228.716952][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 228.840499][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.852115][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 228.862150][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.878393][ T5818] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 228.887777][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.895840][ T5818] usb 1-1: Product: syz [ 228.901343][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 228.907684][ T5818] usb 1-1: Manufacturer: syz [ 228.912610][ T5818] usb 1-1: SerialNumber: syz [ 228.918694][ T27] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 228.927281][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.939815][ T5818] usb 1-1: config 0 descriptor?? [ 228.947319][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.974804][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.990597][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.005405][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.021863][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.256525][ T27] usb 5-1: usb_control_msg returned -32 [ 229.288866][ T27] usbtmc 5-1:16.0: can't read capabilities [ 229.460412][ T5762] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 229.646890][ T5762] usb 3-1: Using ep0 maxpacket: 8 [ 229.654644][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 229.665875][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.675809][ T5762] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.685644][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 229.695794][ T5762] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 229.705940][ T5762] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 229.715138][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.729014][ T5762] usb 3-1: config 0 descriptor?? [ 229.761084][ T27] usb 1-1: USB disconnect, device number 13 [ 229.802585][ T5787] Bluetooth: hci4: urb ffff888026412d00 submission failed (90) [ 229.993544][ T6904] usb 3-1: USB disconnect, device number 8 [ 230.767393][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'. [ 231.222972][ T8685] vfio-pci: probe of 0000:00:00.0 failed with error -22 [ 231.468952][ T8693] loop0: detected capacity change from 0 to 512 [ 231.487218][ T8693] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.511663][ T5816] usb 5-1: USB disconnect, device number 7 [ 231.543242][ T8693] EXT4-fs (loop0): 1 truncate cleaned up [ 231.550463][ T8693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.664017][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.735620][ T8701] Write-error on swap-device (8:0:277014) Aug 3 13:39:01 syzkaller kern.alert kernel: [ 231.735620][ T8701] Write-error on swap-device (8:0:277014) [ 231.993855][ T8707] loop0: detected capacity change from 0 to 2048 [ 232.022826][ T8707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.438812][ T28] audit: type=1326 audit(1785764341.941:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.2.875" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdeb59e019 code=0x0 [ 232.713949][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 232.849208][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 233.069856][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.093349][ T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 233.122339][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.143247][ T27] usb 1-1: config 0 descriptor?? [ 233.367323][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 233.386912][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 233.416544][ T27] usb 1-1: USB disconnect, device number 14 [ 233.834874][ T8746] loop4: detected capacity change from 0 to 32768 [ 233.893163][ T8746] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 233.956829][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 233.998923][ T8746] XFS (loop4): Ending clean mount [ 234.053021][ T8746] XFS (loop4): Quotacheck needed: Please wait. [ 234.084271][ T8753] loop2: detected capacity change from 0 to 32768 [ 234.130113][ T8746] XFS (loop4): Quotacheck: Done. [ 234.158037][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 234.179662][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.204992][ T27] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 234.216531][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.246318][ T27] usb 1-1: config 0 descriptor?? [ 234.267053][ T27] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 234.299486][ T27] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 234.346395][ T6764] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 234.585712][ T8776] loop1: detected capacity change from 0 to 512 [ 234.605933][ T8776] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 234.664508][ T6904] usb 1-1: USB disconnect, device number 15 [ 234.691361][ T6904] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 234.718178][ T8776] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.893: bg 0: block 104: invalid block bitmap [ 234.754981][ T8776] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 234.769280][ T8776] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.893: invalid indirect mapped block 1 (level 1) [ 234.786921][ T8776] EXT4-fs (loop1): 1 truncate cleaned up [ 234.796393][ T8776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.820557][ T8776] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 234.889245][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.779682][ T8795] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 235.948568][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 235.997575][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 236.281372][ T8811] loop4: detected capacity change from 0 to 1024 [ 236.362981][ T8811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.426036][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.908'. [ 236.442340][ T8793] loop1: detected capacity change from 0 to 40427 [ 236.505302][ T8793] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 236.538268][ T8793] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 236.584418][ T8793] F2FS-fs (loop1): invalid crc value [ 236.609464][ T6764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.815556][ T8793] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 236.828456][ T8793] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 236.914314][ T8793] bio_check_eod: 12 callbacks suppressed [ 236.914336][ T8793] syz.1.900: attempt to access beyond end of device [ 236.914336][ T8793] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 237.013495][ T5772] syz-executor: attempt to access beyond end of device [ 237.013495][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.071667][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 237.267308][ T8818] loop2: detected capacity change from 0 to 32768 [ 237.355209][ T8818] JBD2: Ignoring recovery information on journal [ 237.555307][ T8818] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 237.700326][ T8836] input: syz1 as /devices/virtual/input/input14 [ 237.859734][ T28] audit: type=1804 audit(1785764347.351:39): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.909" name="/newroot/228/bus/file1" dev="loop2" ino=17059 res=1 errno=0 [ 238.062278][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 238.576866][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 238.772435][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 238.813478][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.844172][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.885663][ T27] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.930195][ T27] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 238.965633][ T27] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 239.017011][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 239.035897][ T27] usb 1-1: config 1 interface 1 has no altsetting 0 [ 239.091077][ T27] usb 1-1: string descriptor 0 read error: -22 [ 239.109430][ T27] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 239.146990][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.268820][ T8846] loop1: detected capacity change from 0 to 131072 [ 239.291330][ T8846] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 239.298257][ T8846] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 239.308511][ T8846] F2FS-fs (loop1): invalid crc value [ 239.337643][ T8846] F2FS-fs (loop1): Found nat_bits in checkpoint [ 239.400495][ T8846] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 239.407757][ T8846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 239.474146][ T28] audit: type=1800 audit(1785764348.971:40): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.917" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 239.615875][ T8869] loop2: detected capacity change from 0 to 4096 [ 239.797257][ T8869] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 239.945413][ T28] audit: type=1800 audit(1785764349.441:41): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.925" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 240.286856][ T27] usb 1-1: USB disconnect, device number 16 [ 240.992406][ T8889] loop0: detected capacity change from 0 to 512 [ 241.024216][ T8889] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.082577][ T8889] EXT4-fs (loop0): 1 truncate cleaned up [ 241.119012][ T8889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.344093][ T8897] EXT4-fs (loop0): shut down requested (2) Aug 3 13:39:10 syzkaller kern.alert kernel: [ 241.344093][ T8897] EXT4-fs (loop0): shut down requested (2) [ 241.540092][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.312855][ T8926] loop0: detected capacity change from 0 to 8192 [ 242.430502][ T28] audit: type=1326 audit(1785764351.931:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.0.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb64559e019 code=0x0 [ 242.454620][ T8918] loop4: detected capacity change from 0 to 32768 [ 242.494860][ T8918] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.633201][ T8918] XFS (loop4): Ending clean mount [ 242.838528][ T8941] loop2: detected capacity change from 0 to 2048 [ 242.867772][ T8941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.108409][ T6764] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.320698][ T5774] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 243.349651][ T5774] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 244.889776][ T2911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.111557][ T2911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.208733][ T2911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.311478][ T2911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.445198][ T2911] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.477297][ T2911] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.532965][ T2911] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.569823][ T2911] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.631515][ T2911] hsr_slave_0: left promiscuous mode [ 246.640654][ T2911] hsr_slave_1: left promiscuous mode [ 246.650410][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.659276][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.667352][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.674806][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.683028][ T2911] bridge_slave_1: left allmulticast mode [ 246.689246][ T2911] bridge_slave_1: left promiscuous mode [ 246.694990][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.704275][ T2911] bridge_slave_0: left allmulticast mode [ 246.710652][ T2911] bridge_slave_0: left promiscuous mode [ 246.716586][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.761290][ T2911] veth1_macvtap: left promiscuous mode [ 246.767103][ T2911] veth0_macvtap: left promiscuous mode [ 246.774888][ T2911] veth1_vlan: left promiscuous mode [ 246.780601][ T2911] veth0_vlan: left promiscuous mode [ 247.589592][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 247.650174][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 247.726971][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.792372][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.275129][ T2911] bond0 (unregistering): Released all slaves [ 248.782313][ T2911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.874804][ T2911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.987963][ T2911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.054466][ T2911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.142731][ T2911] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.169658][ T2911] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.202211][ T2911] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.224361][ T2911] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.140708][ T2911] hsr_slave_0: left promiscuous mode [ 250.146868][ T2911] hsr_slave_1: left promiscuous mode [ 250.152886][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.160516][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.169869][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.178145][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.186085][ T2911] bridge_slave_1: left allmulticast mode [ 250.193451][ T2911] bridge_slave_1: left promiscuous mode [ 250.199563][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.208798][ T2911] bridge_slave_0: left allmulticast mode [ 250.214504][ T2911] bridge_slave_0: left promiscuous mode [ 250.221427][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.255912][ T2911] veth1_macvtap: left promiscuous mode [ 250.261915][ T2911] veth1_vlan: left promiscuous mode [ 250.268847][ T2911] veth0_vlan: left promiscuous mode [ 250.563911][ T2911] bond1 (unregistering): Released all slaves [ 251.199374][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 251.260771][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 251.333751][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.829252][ T2911] bond0 (unregistering): Released all slaves [ 252.211025][ T2911] IPVS: stop unused estimator thread 0...