last executing test programs: 10.833356404s ago: executing program 0 (id=1217): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x9764, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42242, 0x14a) fallocate(r0, 0x10, 0x800, 0x8000) 10.708302137s ago: executing program 2 (id=1218): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r0 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) ioctl$COMEDI_UNLOCK(r2, 0x6406) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="3414", @ANYRES16=r3, @ANYBLOB="c392ffff89", @ANYRES32, @ANYBLOB="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"], 0x1434}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$qrtr(0x2a, 0x2, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000110000003c0001800600010002000000060004004e2200000c0007000000000000000000080009000000"], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x6dc, 0x0, &(0x7f0000000200)) 9.474564864s ago: executing program 2 (id=1220): socket(0xa, 0x3, 0x3a) r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) semget$private(0x0, 0xc, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) fallocate(r5, 0x60, 0x1000000002, 0x7fff) 8.067967124s ago: executing program 2 (id=1222): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7.581755775s ago: executing program 0 (id=1226): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 7.207732983s ago: executing program 1 (id=1228): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r0 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) ioctl$COMEDI_UNLOCK(r2, 0x6406) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="3414", @ANYRES16=r3, @ANYBLOB="c392ffff89", @ANYRES32, @ANYBLOB="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"], 0x1434}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$qrtr(0x2a, 0x2, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000110000003c0001800600010002000000060004004e2200000c00070000000000000000000800090000000000090006006e6f6e65000000000800080000000000aff33b60"], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x6dc, 0x0, &(0x7f0000000200)) 6.132678876s ago: executing program 1 (id=1230): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@nogrpid}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@acl}, {@nomblk_io_submit}]}, 0x1, 0xbc5, &(0x7f0000000700)="$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") ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) 6.121266776s ago: executing program 3 (id=1231): socket(0xa, 0x3, 0x3a) r0 = getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) semget$private(0x0, 0xc, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) fallocate(r5, 0x60, 0x1000000002, 0x7fff) 4.562610981s ago: executing program 3 (id=1232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x4000009b, 0x0, 0x800000004}]}) 4.161878629s ago: executing program 2 (id=1233): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004440)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1094c3, 0x0, 0x0, 0x0, &(0x7f0000000000)) 4.012021742s ago: executing program 1 (id=1234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000000)={[{@i_version}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 3.539977932s ago: executing program 0 (id=1235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000096, 0x0, 0x2}]}) 3.345045527s ago: executing program 0 (id=1236): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd', @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="cbf28062d8d7a108dbfda05a55cce9e0f3ba271190b9b669406d854002adf6c310ebed8d63b65831c656cfd830884918d91abfbfb977930e125fcf0f077233e2bae414e03d6b0e4871ded122007349e4b35d882255116554d061652df0a4b0ddca4d8ad41c1c8927cab6bfc778c02d78d6270a1f96ab0f297c03e9efeacbdefa70c9a67c3f199606", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x11, &(0x7f0000000480)={@random="0e63818f3c5c", @broadcast, @void, {@llc={0x4, {@llc={0x8e, 0xd0, "e7"}}}}}, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@in6={0xa, 0x4e25, 0x8001, @loopback, 0x5}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000008440000002000000f3ff00004e", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000050000003000000001800000180000000000000084000000000000005f00"], 0x50, 0x4855}, 0x20000811) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)=0x0) prlimit64(r4, 0x8, &(0x7f00000003c0)={0x8, 0x1}, &(0x7f0000000400)) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) 3.301162328s ago: executing program 1 (id=1237): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x1, 0x1002) 2.546986644s ago: executing program 1 (id=1238): syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r0 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) ioctl$COMEDI_UNLOCK(r2, 0x6406) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="3414", @ANYRES16=r3, @ANYBLOB="c392ffff89", @ANYRES32, @ANYBLOB="04001d8010001d800c00008005000a000100000050051d805800008005000b000000000005000b000000000006000500df0000000c0002000300000000000000050006000000000005000b0000000000050007000700000005000a000000000005000700e700000005000800a9000000100000800c00030003000000000000003803008005000a0000000000050006000100000005000b000000000004030d80780003801400030007000c0008000300ff0f03000000ce6d14000500c88f04000a000400490005000400010011000100043006010b160902182453034e000000060002002b210000050004000200000009000100012430161300000005000700010000001400030000000900000801000080641b0b00ff7f4c0002802b0002002317460b3509233f323b3b020045482802380138480a0f1822512540040b414d3c35400e2d2a2700140005000900cd0d0000060003000700080002000500040000000000200003801400050002000700030002008200010001000e000500070001000000c400028014000500240001000e000300000005000800e5050500070002000000140005000300040007000100090009000200050014000500ffff000000000500845eff0140000700050006000200000014000300919834fc0300070000080600c100000e05000400000000000500070002000000050007000100000048000200222307524b4e504e2017513a273b124b130e174226185006033c150638532c143036302f5018512c56280128333b0514491b3a4d422940381043542b1d0a49282105394e6c0000801400030006000100feff0b00090005000800040014000300030001000200040000100900f0ff0900050007000200000005000700020000002e0002004c50124b0c413d0e43501d2922100b384251014e53081737302d314d03384a3e312833144f562703401f00007c00038014000300ff017199f5ff01010001ca050104030005000400020000001c000100480b600303180105063016186c18480c1f1b03124824056c05000400010000002e000200070e42060a143017374f384b100e49004600332c29093928100c3e2f11060e2f40372b1c31122205342600000500040000000000700000801400030000000200090002000000050004000200420002005504372f3b1112554f05234d2c25273455494343504540140a4738394634003a50042b28013b400c452b2740374a2c03391a00402b2927334b372e55021e000014000300010001000700412c00f8ff0f05000a00060005003f00000005000b000000000005000c0002000000340100801c010d80c000028005000400000000000c00010060163024300b181211000100021b2f246c6c040b1860046c00000000420002005026564f394c0353004e030b370e122c00284023181457533b1a3c293626280121504936213405135411414d2427401b572e4c1021063600405124573a330000140003000400ff7f7f0002002d054c00400005001a000100041212360a6c03091832120b60246060366c16111205000005000600020000000500040000000000050004000000000005000700010000005400038007000100060912001400050001000b00400006000600070002000900050004000000000005000700010000000500040002000000050007000200000014000300463f070000400700000001804f0d0d0004000280060005006500000005000b0000000000040004003800008005000600000000000c000200950400000000000005000900010000000400040005000b00000000000c000300caad0000000000003400008005000a000100000005000b0000000000050008000200000005000a00010000000c000200db05000000000000040004000c00008005000700560000000c031d80080300800600050038000000050009000100000005000c00010000000c000200a66b0000000000000500060001000000c0020d80cc0003801400030000000800ff000500060004000900517447000200453245544c204c303936130802204b1849394d1211391823062d262f3448210809080f041b3a0b06330130092410490d1c0f394e502b37024147001e0753181d302a3300080001003030243614000500030005000100ff0f060001005c940e001700020010530f09050f53410251104746120d05181a480014000300270b400000028704f9ff4df60400080014000300440003000700148b07000101ffff090005000400020000000500040000000000700003801d00020051251943361a374e510c334332472904333f29080c4d4d30080000001b0001000448146001161236044818306c0418020648123601b027001400050007070400010005000000ff7f0500050005000600000000001400030005000300f8000500000000000900773d2000038005000600000000001400030000000600fcffffff2c02ff7f0101deeb0c00028005000400020000003400028014000500ff0fff0133780004000207000500030005000700010000001400030007000900ff030800b20005000001080068000380140005000900ff00030006006701010007000700140005008110030005000000e4bc02000700fcff140005000e000300060094000d000400ff07060005000400020000000500040000000000050006000100000005000600020000000500070002000000200002801400030003000700030000000400f300a500ff7f050007000200000098000380050006000100000005000700020000000500070001000000140003000f00090009000900ff0398c1f9ff0000050001000300000020000200184929161d400b42200f4b25090c322a10083c0309422f45384d494a05000600020000000600020038c100002e0002002a13182f213b172a363a0625280d0111191f36480c1f301700540935034311032c4c41015245524c050100000400040004000400050006000000000005000b0001000000e8011d80e40100800c000300899900000000000005000a000100000005000900000000008c000d80100000800900010003060217120000002400038005000700020000000500060002000000050006000100000005000600000000005400038014000500005a0000080006000600060007000e00140005000600080002000104ff010700ffff0000140003000900f5b900020600ff0702000700f3ff050007000100000009000200374e21344100000024010d8058000380050007000000000006000100183600001b0001000218600612360c36166c3002030c06040b2430180b48050005000700010000001f00020039412c510f37291756210e0b15225022242449361836381201481c00580003802f0002000d471f0b2504280948384545454a341d185024264845403d294849412d400b2b2654015020063b090d152a000500070000000000050006000200000014000500eb000600070000000900060004000000700002800d0001000c5005050160041b7b00000014000500090002008000040001800100fbff000005000600010000002d0002000a09124a443a311112000416064343474e203a41033b200c081127140f132a1c4908023040181250450000000500060002000000050004000000000005000900000000000c000300ff07000000000000c0091d800403008005000600010000000c000300090000000000000060020d800c0001800500070001000000a00000804a0002004341163414524d07291f46301412524c01123557005004292a1905281018221d022848181542442610481b031e0f2a0f470219510d4d08504d36222a47363e09100444020d1900002100010018246c160401050248170b0c09360c04480b483f000404020b093612120000000500060001000000050004000000000005000600010000000b0001000448121b0318070005000700020000002800028014000300040007000100010005000c0001000200050006000200000005000700010000006c00028005000400010000001400030006000900000000020300080002000a001f000100006c4812180c36240606021818361b180200600c304809327e020100210002003f31473c2c2615133326320857085305324d2b1f404f013d0840200c080000000500040002000000200001801b0002003e081d18454c210e181d183456034f312d330d2d351d2b00ac000080390002000c2d314d5053484f2a472209194917473d4309002b10442e3d3c0736041f4716192e093409122e3409444b181d50142140551735490000001400050008000500060003000300040004000e00500002000f4c11535108323d46323a39513842110857362137354f241629391d533b162e49280c0b40320c1f084b1b37192f49004f3401183100302ad70c091b1756321b4e0b1b3a3e1b121b4a352533050004000100000050000180050007000000000005000400010000003a0002002c341a2c3408402d37362f4305003c3b044f0a55164d480332334b52341904020c31432c2c3902124c541b39190c542124252811500900000c0002000100008000000000050009000100000060000d805c000280050004000000000005000700010000003f00020032024c1039404934181f51103825150e14353c1838535202310b282648480b3f2850515009072110311c4aad3c35504a34460f013a13402239185600050004000200000005000c000000000005000a0000000000050009000000000014000080050009000000000005000a000000000014000080050009000000000006000500770000005c01008030010d800c000080050004000200000070000280050004000100000005000700010000001400050081ff05000000f5ff0800000000804804050007000200000021000200064155000b041b161d12202a4646452321450914160a3b1502041009480000000800010016091b0314000500feff08000700030002000300040003003c0002800500070002000000140003004000b8000a00790c0b00c94904000100140005000800bb830300b60259e802000900010005000400030000005800008005000600010000001400050001000500020004000800fdff0100020005000600020000000500060000000000140003000900f8ff0800010001800400fbff000014000500ff01ff7f0b0003000800ebe7ff0363021c0000800500060002000000050007000000000005000700020000000c000300060000000000000005000b000100000005000900010000000c00030048e6000000000000fc01008005000b00010000000c000200010000000000000004000400050008003e00000005000b000000000005000700fc000000b0010d80380001801f00010030306c0302160b053948120369176c16051b010901061b60480409001400030008000a0007000001dd00efff94323a003c000080140003000b00fbff00088800f7ffea1a01000200240001002444362a026c1b014801480416187860031d811b161648063605301b3009091684000280220002003908125205403003403420242b5049080f31131027560a16161a13365718000005000400000000000400010045000200250355203a0421175629404611244429062e49365728390848441c4e3601032447002b41431239530d38100c065328313a223c1f0e42330131013838470c3b204500000005000600000000005c00028014000300060001008000400008000400eb0add00140005000300050003000400590000004000000014000300ff070700110000080c0009000300010005000400020000001400030078d8000202000d00080003000900810058000280140003000900f9000900000007000700000006001400030003000f000900000891614a0001018500070001000918300014000300090002000f004000050007000e0007000e000200152610354002062f002b0000050006000000000005000b00000000000500090001000000580000804c000d804800008005000400020000001d0002003a11472d4222493d53395111054432213c1122510d180a324d000000140003000010020002000a0003005b0008000400050007000000000005000b0001000000d002008094020d8074000180140005000400060004000100ff0000000a00008005000700020000002200010006180436361b09061b0436300412783602020106050b14011b161602246c00001a0001006c6c2402120c036c066c181800352403240502280b0c0000140003000600e3d408003102ff010500040006006000008005000700020000000500060001000000210001006c16180b01010436050030fa120303030b4802481b1b180c126c48044800000005000700010000000a00010060361216366c000014000300ff070900008001000300050007000600200002800500060001000000130001000c3612121b12000116060c30366c24003800018005000400020000000500060000000000050004000000000014000300ff0300000a000300050008000900050005000700020000000c000180050006000100000070000080050007000200000005000400020000001c00010009053601240409166c0530240b483006640016486102480b050006000100000005000700000000002d0002001837170844182c180d"], 0x1434}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$qrtr(0x2a, 0x2, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000110000003c0001800600010002000000060004004e2200000c00070000000000000000000800090000000000090006006e6f6e65000000000800080000000000aff33b60"], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x6dc, 0x0, &(0x7f0000000200)) 2.397672057s ago: executing program 3 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x411, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x5}, {}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x20000800) 1.919989668s ago: executing program 3 (id=1240): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000000040)=""/32, 0x20}) 1.276286142s ago: executing program 0 (id=1241): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000005c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x9}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 1.074889996s ago: executing program 1 (id=1242): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.062922926s ago: executing program 0 (id=1243): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a4060001"], 0x0) unshare(0x42000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 960.051289ms ago: executing program 2 (id=1244): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 854.068621ms ago: executing program 3 (id=1245): unshare(0x26020480) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000005c0)={0x2, 0x4e21, @multicast1}, 0x1c) 601.559406ms ago: executing program 3 (id=1246): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x5598, &(0x7f00000013c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0xa0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000440)={0x0, 0x8, 0x2}) 0s ago: executing program 2 (id=1247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r2, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) kernel console output (not intermixed with test programs): ck 11, async page read [ 310.440686][ T5769] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.458288][ T5769] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 310.477734][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'. [ 310.496154][ T5769] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.520697][ T5769] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 310.529851][ T5769] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.560691][ T8264] netlink: 67 bytes leftover after parsing attributes in process `syz.3.718'. [ 310.574205][ T8266] loop2: detected capacity change from 0 to 2048 [ 310.585278][ T5769] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 310.600750][ T5769] Buffer I/O error on dev loop3p1, logical block 15, async page read [ 310.670403][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 310.702502][ T8269] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.293677][ T8284] loop2: detected capacity change from 0 to 2048 [ 312.670892][ T8293] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.693007][ T8289] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 312.699841][ T8289] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 312.743375][ T8289] vhci_hcd vhci_hcd.0: Device attached [ 313.039231][ T8268] loop1: detected capacity change from 0 to 32768 [ 313.052346][ T8268] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 313.054908][ T5814] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 313.082715][ T8290] vhci_hcd: connection closed [ 313.083484][ T59] vhci_hcd: stop threads [ 313.174784][ T59] vhci_hcd: release socket [ 313.181110][ T59] vhci_hcd: disconnect device [ 313.389325][ T8299] netlink: 256 bytes leftover after parsing attributes in process `syz.2.727'. [ 314.398506][ T8300] loop3: detected capacity change from 0 to 4096 [ 314.734413][ T8307] loop0: detected capacity change from 0 to 4096 [ 314.742502][ T8307] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 314.865982][ T8307] ntfs: volume version 3.1. [ 315.186095][ T8304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 315.193596][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 315.275982][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 315.284325][ T8311] vhci_hcd: connection closed [ 315.311073][ T59] vhci_hcd: stop threads [ 315.362965][ T59] vhci_hcd: release socket [ 315.383653][ T59] vhci_hcd: disconnect device [ 316.344262][ T5769] blk_print_req_error: 46 callbacks suppressed [ 316.344274][ T5769] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.373651][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.424411][ T8317] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 316.431452][ T8317] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 316.460678][ T5769] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.464458][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.493871][ T5769] buffer_io_error: 35 callbacks suppressed [ 316.493894][ T5769] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 316.511300][ T8317] vhci_hcd vhci_hcd.0: Device attached [ 316.651386][ T8324] vhci_hcd: connection closed [ 316.670593][ T37] vhci_hcd: stop threads [ 316.677233][ T5765] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 316.790750][ T5780] usb 35-1: new high-speed USB device number 9 using vhci_hcd [ 316.805402][ T37] vhci_hcd: release socket [ 317.294682][ T5765] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.320667][ T37] vhci_hcd: disconnect device [ 317.350640][ T5765] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 317.359743][ T5765] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.415616][ T5765] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 317.443411][ T8335] loop2: detected capacity change from 0 to 2048 [ 317.453912][ T5765] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.496283][ T5765] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 317.581898][ T8335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.605128][ T5765] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 317.627539][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.634088][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.682299][ T5765] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 317.837382][ T8342] netlink: 256 bytes leftover after parsing attributes in process `syz.0.737'. [ 318.260874][ T5814] vhci_hcd: vhci_device speed not set [ 318.514819][ T8339] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 319.673176][ T5765] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.730677][ T5765] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 319.764349][ T5765] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.782234][ T5765] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 319.782643][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.799353][ T5765] Buffer I/O error on dev loop3p1, logical block 15, async page read [ 320.024873][ T8344] loop3: detected capacity change from 0 to 2048 [ 320.184821][ T8344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.215706][ T8348] loop0: detected capacity change from 0 to 1024 [ 321.700271][ T8351] loop1: detected capacity change from 0 to 4096 [ 321.812999][ T8351] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 321.884717][ T8356] loop2: detected capacity change from 0 to 64 [ 321.915746][ T8351] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 322.099070][ T5973] blk_print_req_error: 1 callbacks suppressed [ 322.099085][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.124049][ T6492] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 322.163079][ T8351] ntfs3: loop1: ino=1f, "file2" failed to open parent directory r=5 to update [ 322.171751][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.193936][ T6492] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.219658][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 322.225995][ T6492] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 322.264161][ T5973] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.282975][ T8360] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 322.310652][ T5973] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 322.330705][ T5973] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.370668][ T5973] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 322.384755][ T1138] ntfs3: loop1: ino=1f, failed to open parent directory r=5 to update [ 322.420261][ T5973] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.441249][ T5780] vhci_hcd: vhci_device speed not set [ 322.449458][ T5973] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 322.490822][ T5973] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.512569][ T5973] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 322.542620][ T5973] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.587369][ T5973] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 322.639238][ T5973] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 322.679028][ T5973] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 322.703258][ T5973] Buffer I/O error on dev loop3p1, logical block 15, async page read [ 322.790102][ T8369] netlink: 256 bytes leftover after parsing attributes in process `syz.2.749'. [ 323.685933][ T8371] loop1: detected capacity change from 0 to 1024 [ 323.756451][ T8376] loop2: detected capacity change from 0 to 2048 [ 323.786231][ T8378] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.819490][ T5765] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 324.813472][ T8376] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 324.959897][ T8376] Remounting filesystem read-only [ 324.991013][ T8376] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 325.134422][ T8376] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 325.294803][ T8376] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 325.325911][ T8376] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 325.366651][ T8376] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 325.400776][ T971] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 325.468508][ T8376] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 325.584252][ T8376] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 325.637063][ T971] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 325.681817][ T971] usb 1-1: config 0 has no interface number 0 [ 325.744070][ T28] audit: type=1800 audit(1783357724.127:14): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.753" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 325.776962][ T971] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 325.872309][ T971] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 325.882322][ T8376] syz.2.753 (8376) used greatest stack depth: 18352 bytes left [ 325.904315][ T971] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 325.961071][ T971] usb 1-1: Manufacturer: syz [ 325.967193][ T971] usb 1-1: SerialNumber: syz [ 326.061100][ T971] usb 1-1: config 0 descriptor?? [ 326.509794][ T971] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 326.560763][ T971] usb 1-1: USB disconnect, device number 4 [ 326.637846][ T8394] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 326.644653][ T8394] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.663901][ T8394] vhci_hcd vhci_hcd.0: Device attached [ 326.941483][ T8397] vhci_hcd: connection closed [ 326.965039][ T59] vhci_hcd: stop threads [ 326.990538][ T59] vhci_hcd: release socket [ 326.995226][ T59] vhci_hcd: disconnect device [ 327.273848][ T8405] netlink: 'syz.1.759': attribute type 13 has an invalid length. [ 327.320165][ T8405] IPVS: rr: FWM 3 0x00000003 - no destination available [ 327.486518][ T8401] loop2: detected capacity change from 0 to 32764 [ 327.607306][ T8401] syz.2.758: attempt to access beyond end of device [ 327.607306][ T8401] loop2: rw=4096, sector=32767, nr_sectors = 1 limit=32764 [ 327.650696][ T8401] XFS (loop2): last sector read failed [ 327.692952][ T5765] blk_print_req_error: 34 callbacks suppressed [ 327.692968][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.712390][ T5769] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.736984][ T5769] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 327.747984][ T5769] buffer_io_error: 26 callbacks suppressed [ 327.747998][ T5769] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 327.778548][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 327.824870][ T5765] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 327.838844][ T5765] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 327.855998][ T5765] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 327.903489][ T5765] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 327.947778][ T5765] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 327.996569][ T5765] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.024552][ T5765] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 328.055689][ T5765] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.084830][ T5765] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 328.121911][ T5765] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 328.148298][ T8428] loop3: detected capacity change from 0 to 16 [ 328.168535][ T5765] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 328.193798][ T8430] macsec0: entered promiscuous mode [ 328.199709][ T8430] macsec0: entered allmulticast mode [ 328.206119][ T8430] veth1_macvtap: entered allmulticast mode [ 328.220973][ T8428] erofs: (device loop3): mounted with root inode @ nid 36. [ 328.402869][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.486625][ T6492] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 328.590377][ T5765] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 328.666418][ T5765] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 328.680692][ T8438] loop0: detected capacity change from 0 to 1024 [ 331.195972][ T8442] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 331.202996][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 331.238885][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 331.266478][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 332.633458][ T8453] vhci_hcd: connection closed [ 332.633702][ T59] vhci_hcd: stop threads [ 332.671068][ T5780] usb 39-1: new high-speed USB device number 12 using vhci_hcd [ 332.679510][ T59] vhci_hcd: release socket [ 332.693889][ T59] vhci_hcd: disconnect device [ 332.699654][ T5780] usb 39-1: enqueue for inactive port 0 [ 332.773101][ T5765] blk_print_req_error: 43 callbacks suppressed [ 332.773116][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.774563][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 332.779424][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.801027][ T5780] vhci_hcd: vhci_device speed not set [ 332.859155][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.868063][ T5765] buffer_io_error: 33 callbacks suppressed [ 332.868081][ T5765] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 332.900397][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 332.921285][ T5973] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.946788][ T5973] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 332.968535][ T5973] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.999692][ T5973] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 333.020052][ T5973] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.061360][ T5973] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 333.081122][ T5973] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.120619][ T5973] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 333.150276][ T5973] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.190651][ T5973] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 333.220561][ T971] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 333.229624][ T5973] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 333.256684][ T5973] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 333.285999][ T5973] Buffer I/O error on dev loop3p1, logical block 15, async page read [ 333.384737][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 333.431396][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 333.441711][ T971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 333.481879][ T971] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 333.509346][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.784'. [ 333.519936][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.540846][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.784'. [ 333.566633][ T971] usb 3-1: config 0 descriptor?? [ 334.687578][ T971] uclogic 0003:5543:0042.0001: unknown main item tag 0x0 [ 334.695616][ T971] uclogic 0003:5543:0042.0001: unknown main item tag 0x2 [ 334.704593][ T971] uclogic 0003:5543:0042.0001: item fetching failed at offset 18/40 [ 334.714001][ T971] uclogic 0003:5543:0042.0001: parse failed [ 334.721335][ T971] uclogic: probe of 0003:5543:0042.0001 failed with error -22 [ 334.734731][ T971] usb 3-1: USB disconnect, device number 4 [ 335.007086][ T8485] lo: Caught tx_queue_len zero misconfig [ 335.642473][ T8494] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 335.664433][ T5839] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 335.711814][ T8487] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 335.719498][ T8487] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 335.729300][ T8487] vhci_hcd vhci_hcd.0: Device attached [ 335.745808][ T8500] vhci_hcd: connection closed [ 335.774154][ T37] vhci_hcd: stop threads [ 335.807295][ T37] vhci_hcd: release socket [ 335.814024][ T37] vhci_hcd: disconnect device [ 335.892443][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 335.904025][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.921577][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.941336][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 335.960909][ T5839] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.980755][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.012336][ T5839] usb 3-1: config 0 descriptor?? [ 336.385031][ T8513] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 336.391884][ T8513] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 336.424794][ T8513] vhci_hcd vhci_hcd.0: Device attached [ 336.595626][ T5839] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 336.672113][ T5839] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input6 [ 336.710640][ T5815] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 336.735268][ T8515] vhci_hcd: connection closed [ 336.739509][ T8517] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 336.785232][ T37] vhci_hcd: stop threads [ 336.822566][ T37] vhci_hcd: release socket [ 336.832372][ T37] vhci_hcd: disconnect device [ 337.195794][ T8531] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 337.203096][ T8531] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 337.332312][ T8531] vhci_hcd vhci_hcd.0: Device attached [ 338.081049][ T8532] vhci_hcd: connection closed [ 338.090089][ T5839] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 338.141470][ T1138] vhci_hcd: stop threads [ 338.146310][ T1138] vhci_hcd: release socket [ 338.163383][ T1138] vhci_hcd: disconnect device [ 338.180644][ T5839] usb 3-1: USB disconnect, device number 5 [ 338.238470][ T8543] loop2: detected capacity change from 0 to 16 [ 338.255672][ T8541] fido_id[8541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 338.268044][ T8543] erofs: (device loop2): mounted with root inode @ nid 36. [ 338.282393][ T788] vhci_hcd: vhci_device speed not set [ 338.555955][ T8549] loop0: detected capacity change from 0 to 128 [ 338.557071][ T8549] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.586081][ T8549] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 338.594925][ T8549] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 338.640834][ T28] audit: type=1800 audit(1783357737.067:15): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.800" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 338.689863][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 338.914181][ T8560] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 338.932762][ T8560] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 338.979837][ T8560] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 338.994116][ T5769] blk_print_req_error: 67 callbacks suppressed [ 338.994133][ T5769] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.996922][ T6492] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 339.030907][ T5769] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.041989][ T8560] comedi comedi1: 8255: I/O port conflict (0x800afa3,4) [ 339.067708][ T8560] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 339.080632][ T5769] buffer_io_error: 53 callbacks suppressed [ 339.080648][ T5769] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 339.097122][ T8560] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 339.107305][ T6492] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.118186][ T8560] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 339.147269][ T8560] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 339.157875][ T5769] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.165217][ T6492] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 339.185717][ T8560] comedi comedi1: 8255: I/O port conflict (0x9,4) [ 339.202040][ T5769] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 339.211994][ T8560] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 339.217092][ T5769] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.244254][ T8560] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 339.245805][ T5769] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 339.260690][ T8560] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 339.295246][ T8560] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 339.333722][ T8560] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 339.358590][ T5769] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.424556][ T8560] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 339.459857][ T5769] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 339.493697][ T8560] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 339.585395][ T5769] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.602020][ T8560] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 339.611149][ T8576] netlink: 'syz.3.809': attribute type 10 has an invalid length. [ 339.661947][ T8560] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 339.675907][ T5769] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 339.699318][ T8560] comedi comedi1: 8255: I/O port conflict (0x20001e5b,4) [ 339.730786][ T5769] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.815961][ T8576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.821557][ T5769] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 339.844995][ T8560] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 339.881112][ T8576] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 339.957831][ T8577] netlink: 'syz.3.809': attribute type 10 has an invalid length. [ 339.971410][ T5769] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.986472][ T8560] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 340.057088][ T5769] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 340.086280][ T8560] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 340.096043][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.809'. [ 340.140707][ T5769] Buffer I/O error on dev loop3p1, logical block 15, async page read [ 340.170693][ T8577] batadv0: entered promiscuous mode [ 340.176386][ T8577] batadv0: entered allmulticast mode [ 340.316483][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 340.331990][ T8577] bond0: (slave batadv0): Releasing backup interface [ 340.374688][ T8577] bridge0: port 3(batadv0) entered blocking state [ 340.401833][ T8577] bridge0: port 3(batadv0) entered disabled state [ 341.454774][ T8595] netlink: 256 bytes leftover after parsing attributes in process `syz.2.815'. [ 341.641288][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 341.651989][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 342.180849][ T5815] vhci_hcd: vhci_device speed not set [ 342.879451][ T8597] loop3: detected capacity change from 0 to 2048 [ 343.089697][ T8597] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 343.296564][ T8597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.810884][ T5973] blk_print_req_error: 56 callbacks suppressed [ 345.810902][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.827831][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 345.828177][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 345.839779][ T5973] buffer_io_error: 44 callbacks suppressed [ 345.839793][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 346.063609][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.131045][ T5973] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.162936][ T5973] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 346.224068][ T5973] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.248132][ T788] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 346.262069][ T5765] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 346.373060][ T5973] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 346.466547][ T5973] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.564442][ T5088] Bluetooth: hci0: Malformed LE Event: 0x0d [ 346.586566][ T5973] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 346.599611][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 346.609658][ T8625] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 346.616320][ T8625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 346.631703][ T788] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 346.639787][ T788] usb 3-1: can't read configurations, error -71 [ 346.640716][ T5973] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.686764][ T8625] vhci_hcd vhci_hcd.0: Device attached [ 346.693421][ T8629] vhci_hcd: connection closed [ 346.696111][ T5973] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 346.712930][ T4268] vhci_hcd: stop threads [ 346.732953][ T4268] vhci_hcd: release socket [ 346.738314][ T4268] vhci_hcd: disconnect device [ 346.760847][ T5973] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.833039][ T5973] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 346.860672][ T5973] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.890059][ T5973] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 346.900358][ T5973] Buffer I/O error on dev loop3p1, logical block 15, async page read [ 347.080963][ T971] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 347.260737][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 347.273851][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.287508][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.298641][ T971] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.309535][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.320760][ T5815] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 347.329008][ T971] usb 1-1: config 0 descriptor?? [ 347.347367][ T971] hub 1-1:0.0: USB hub found [ 347.531173][ T5815] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.550573][ T5815] usb 2-1: config 0 has no interface number 0 [ 347.569562][ T971] hub 1-1:0.0: 3 ports detected [ 347.576021][ T5815] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 347.604504][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 347.610949][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.643139][ T8647] loop3: detected capacity change from 0 to 2048 [ 347.653870][ T5815] usb 2-1: Product: syz [ 347.658102][ T5815] usb 2-1: Manufacturer: syz [ 347.678969][ T5815] usb 2-1: SerialNumber: syz [ 347.683750][ T8648] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.749483][ T8647] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 347.762552][ T5815] usb 2-1: config 0 descriptor?? [ 347.773723][ T5815] usb 2-1: selecting invalid altsetting 1 [ 347.779606][ T971] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 347.785283][ T8647] Remounting filesystem read-only [ 347.790960][ T971] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 347.809421][ T971] usbhid 1-1:0.0: can't add hid device: -71 [ 347.813267][ T5815] dvb_ttusb_budget: ttusb_init_controller: error [ 347.816197][ T8647] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 347.823608][ T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 347.832413][ T971] usbhid: probe of 1-1:0.0 failed with error -71 [ 347.862901][ T8647] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 347.865420][ T5815] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 347.874585][ T8647] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 347.894860][ T8647] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 347.909414][ T971] usb 1-1: USB disconnect, device number 5 [ 347.920910][ T8647] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 347.941192][ T8647] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 348.001195][ T8647] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 348.035209][ T28] audit: type=1800 audit(1783357746.457:16): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.831" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 348.042587][ T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.095537][ T5815] DVB: Unable to find symbol stv0299_attach() [ 348.120825][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.151907][ T788] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.170540][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.178944][ T788] usb 3-1: SerialNumber: syz [ 348.240777][ T5815] DVB: Unable to find symbol tda8083_attach() [ 348.248268][ T5815] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 348.286694][ T5815] usb 2-1: USB disconnect, device number 4 [ 348.500231][ T788] usb 3-1: 0:2 : does not exist [ 348.743582][ T788] usb 3-1: USB disconnect, device number 7 [ 349.434480][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.554416][ T8661] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 349.561351][ T8661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 349.676935][ T8661] vhci_hcd vhci_hcd.0: Device attached [ 349.867887][ T5088] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 349.875315][ T5780] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 349.960616][ T788] usb 33-1: new low-speed USB device number 9 using vhci_hcd [ 350.062239][ T5780] usb 1-1: config 0 has no interfaces? [ 350.067865][ T5780] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.087634][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.139471][ T5780] usb 1-1: config 0 descriptor?? [ 350.290628][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 350.541261][ T5815] usb 1-1: USB disconnect, device number 6 [ 350.584258][ T8662] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 350.719401][ T49] vhci_hcd: stop threads [ 350.757991][ T49] vhci_hcd: release socket [ 350.805769][ T49] vhci_hcd: disconnect device [ 351.296536][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 351.315352][ T23] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 351.334357][ T23] usb 4-1: config 0 has no interface number 0 [ 351.344573][ T23] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 351.361091][ T23] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 351.377205][ T23] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 351.390187][ T23] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 351.400311][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.414263][ T23] usb 4-1: Product: syz [ 351.418494][ T23] usb 4-1: Manufacturer: syz [ 351.423821][ T23] usb 4-1: SerialNumber: syz [ 351.441380][ T23] usb 4-1: config 0 descriptor?? [ 351.449131][ T8675] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 351.490666][ T5780] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 351.530591][ T5815] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 351.660811][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 351.672761][ T5780] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 351.699237][ T23] usb-storage 4-1:0.20: USB Mass Storage device detected [ 351.714860][ T5780] usb 2-1: config 0 interface 0 has no altsetting 0 [ 351.727216][ T5780] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 351.730650][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 351.744084][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.759195][ T23] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 351.771035][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.782047][ T5815] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.794385][ T5815] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.804246][ T5780] usb 2-1: config 0 descriptor?? [ 351.805478][ T5815] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.823956][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 351.831103][ T5815] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 351.842046][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.850573][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 351.858258][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.877145][ T5815] usb 1-1: config 0 descriptor?? [ 351.882576][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.893897][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.904129][ T23] scsi host1: usb-storage 4-1:0.20 [ 351.908151][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.932883][ T10] usb 3-1: config 0 descriptor?? [ 351.946406][ T10] hub 3-1:0.0: USB hub found [ 352.162851][ T23] usb 4-1: USB disconnect, device number 3 [ 352.166429][ T10] hub 3-1:0.0: 1 port detected [ 352.269050][ T5780] itetech 0003:048D:8595.0003: unknown main item tag 0x2 [ 352.278979][ T5780] itetech 0003:048D:8595.0003: unknown main item tag 0x6 [ 352.288197][ T5780] itetech 0003:048D:8595.0003: ignoring exceeding usage max [ 352.302380][ T5780] itetech 0003:048D:8595.0003: hidraw0: USB HID v0.81 Device [HID 048d:8595] on usb-dummy_hcd.1-1/input0 [ 352.333024][ T5815] corsair-cpro 0003:1B1C:0C10.0004: unknown main item tag 0x3 [ 352.355383][ T5815] corsair-cpro 0003:1B1C:0C10.0004: item fetching failed at offset 2/5 [ 352.365873][ T5815] corsair-cpro: probe of 0003:1B1C:0C10.0004 failed with error -22 [ 352.377187][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 352.390687][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 352.405707][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 352.413004][ T10] usbhid: probe of 3-1:0.0 failed with error -71 [ 352.453396][ T10] usb 3-1: USB disconnect, device number 8 [ 352.517281][ T23] usb 2-1: USB disconnect, device number 5 [ 352.587145][ T5815] usb 1-1: USB disconnect, device number 7 [ 352.771021][ T5973] blk_print_req_error: 55 callbacks suppressed [ 352.771039][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.776579][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.784826][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.802196][ T5765] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.818208][ T5973] buffer_io_error: 44 callbacks suppressed [ 352.818227][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 352.834206][ T5765] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 352.864938][ T5973] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.876068][ T5973] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 352.887962][ T5973] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.898844][ T5973] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 352.907662][ T5973] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.919958][ T5973] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 352.929137][ T5973] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.939379][ T5973] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 352.949185][ T5973] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.990682][ T5973] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 352.999635][ T5973] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.040596][ T5973] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 353.050100][ T5973] Buffer I/O error on dev loop3p1, logical block 15, async page read [ 353.101032][ T5815] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 353.300651][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 353.326181][ T5815] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 353.336430][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 353.345391][ T5815] usb 4-1: Product: syz [ 353.353889][ T5815] usb 4-1: Manufacturer: syz [ 353.358598][ T5815] usb 4-1: SerialNumber: syz [ 353.371652][ T5815] usb 4-1: config 0 descriptor?? [ 353.410640][ T5839] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 353.530963][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 353.611250][ T5839] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.623438][ T5839] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 353.634802][ T5839] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.644655][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.666620][ T8704] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 353.684071][ T5839] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 353.700690][ T5780] usb 4-1: USB disconnect, device number 4 [ 353.729430][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.775518][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.805098][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 353.850597][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.905399][ T10] usb 1-1: config 0 descriptor?? [ 353.931576][ T5839] usb 3-1: USB disconnect, device number 9 [ 354.355671][ T10] arvo 0003:1E7D:30D4.0005: unbalanced collection at end of report description [ 354.387526][ T10] arvo 0003:1E7D:30D4.0005: parse failed [ 354.401164][ T5769] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 354.415020][ T10] arvo: probe of 0003:1E7D:30D4.0005 failed with error -22 [ 355.021080][ T10] usb 1-1: USB disconnect, device number 8 [ 355.241543][ T788] vhci_hcd: vhci_device speed not set [ 355.743054][ T8726] loop0: detected capacity change from 0 to 2048 [ 355.754425][ T8726] UDF-fs: bad mount option "novrc" or missing value [ 355.809299][ T8726] ÿÿÿÿÿÿ000000000: renamed from lo (while UP) [ 355.836404][ T8708] loop1: detected capacity change from 0 to 131072 [ 355.847226][ T5816] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 355.856112][ T5780] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 355.880161][ T8708] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 355.912149][ T8708] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 355.933953][ T8708] F2FS-fs (loop1): invalid crc value [ 355.975642][ T8708] F2FS-fs (loop1): Found nat_bits in checkpoint [ 356.030724][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 356.049964][ T5816] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 356.063092][ T5780] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.073915][ T5780] usb 4-1: config 0 has no interface number 0 [ 356.091934][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 356.100786][ T5780] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 356.132601][ T5816] usb 3-1: Product: syz [ 356.147563][ T5816] usb 3-1: Manufacturer: syz [ 356.151261][ T5780] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 356.174308][ T8708] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 356.182734][ T5816] usb 3-1: SerialNumber: syz [ 356.196528][ T5816] usb 3-1: config 0 descriptor?? [ 356.203308][ T8708] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 356.204790][ T5780] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 356.216967][ T5816] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 356.258025][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.307099][ T5780] usb 4-1: config 0 descriptor?? [ 356.317194][ T8724] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 356.369302][ T5780] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 356.452402][ T5816] gspca_sn9c2028: read1 error -32 [ 356.671428][ T23] usb 4-1: USB disconnect, device number 5 [ 356.709297][ T5816] gspca_sn9c2028: read1 error -71 [ 356.717455][ T5816] sn9c2028: probe of 3-1:0.0 failed with error -71 [ 356.746108][ T5816] usb 3-1: USB disconnect, device number 10 [ 357.690885][ T788] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 357.790609][ T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 357.882617][ T788] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.899057][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.936491][ T788] usb 4-1: config 0 descriptor?? [ 357.967378][ T788] cp210x 4-1:0.0: cp210x converter detected [ 358.000737][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 358.010783][ T8737] loop1: detected capacity change from 0 to 40427 [ 358.015992][ T23] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 358.050638][ T23] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 358.072076][ T23] usb 3-1: Product: syz [ 358.075310][ T8737] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 358.076511][ T23] usb 3-1: Manufacturer: syz [ 358.091824][ T8737] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 358.113415][ T23] usb 3-1: SerialNumber: syz [ 358.125425][ T8737] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 358.142079][ T23] usb 3-1: config 0 descriptor?? [ 358.186364][ T8737] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 358.215490][ T8737] F2FS-fs (loop1): invalid crc value [ 358.268253][ T8737] F2FS-fs (loop1): Found nat_bits in checkpoint [ 358.420720][ T8737] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 358.428875][ T8737] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 358.505257][ T5816] usb 3-1: USB disconnect, device number 11 [ 358.612924][ T788] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 358.639848][ T788] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 358.681611][ T788] usb 4-1: cp210x converter now attached to ttyUSB0 [ 358.742476][ T788] usb 4-1: USB disconnect, device number 6 [ 358.806051][ T788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 358.821378][ T788] cp210x 4-1:0.0: device disconnected [ 359.708720][ T5816] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 359.867530][ T5769] blk_print_req_error: 45 callbacks suppressed [ 359.867564][ T5769] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 359.898211][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 359.953077][ T5780] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 359.967831][ T5973] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.988060][ T5769] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.024810][ T5973] buffer_io_error: 35 callbacks suppressed [ 360.024945][ T5973] Buffer I/O error on dev loop3p1, logical block 8, async page read [ 360.053757][ T5769] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 360.120990][ T5973] I/O error, dev loop3, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.188119][ T5973] Buffer I/O error on dev loop3p1, logical block 9, async page read [ 360.213348][ T5973] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.249612][ T5973] Buffer I/O error on dev loop3p1, logical block 10, async page read [ 360.276070][ T5973] I/O error, dev loop3, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.297517][ T5973] Buffer I/O error on dev loop3p1, logical block 11, async page read [ 360.308407][ T5780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.319642][ T5973] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.334480][ T5780] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.346829][ T5973] Buffer I/O error on dev loop3p1, logical block 12, async page read [ 360.365604][ T5973] I/O error, dev loop3, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.376777][ T5780] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.405866][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.414479][ T5780] usb 2-1: SerialNumber: syz [ 360.425137][ T5973] Buffer I/O error on dev loop3p1, logical block 13, async page read [ 360.502662][ T5816] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 360.520587][ T5973] I/O error, dev loop3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.530228][ T5973] Buffer I/O error on dev loop3p1, logical block 14, async page read [ 360.585968][ T5816] usb 4-1: config 0 has no interface number 0 [ 360.600602][ T5816] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.628148][ T5973] Buffer I/O error on dev loop3p1, logical block 15, async page read [ 360.640571][ T5816] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.661178][ T5816] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 360.672106][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.682215][ T5780] usb 2-1: 0:2 : does not exist [ 360.726142][ T5780] usb 2-1: USB disconnect, device number 6 [ 360.735288][ T5816] usb 4-1: config 0 descriptor?? [ 360.894528][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 360.914713][ T8759] IPVS: rr: FWM 3 0x00000003 - no destination available [ 361.192638][ T5816] uclogic 0003:5543:0522.0006: unknown main item tag 0x0 [ 361.205285][ T5816] uclogic 0003:5543:0522.0006: unknown main item tag 0x0 [ 361.236511][ T5816] uclogic 0003:5543:0522.0006: unknown main item tag 0x0 [ 361.244630][ T5816] uclogic 0003:5543:0522.0006: unknown main item tag 0x0 [ 361.253196][ T5816] uclogic 0003:5543:0522.0006: unknown main item tag 0x0 [ 361.288656][ T5816] uclogic 0003:5543:0522.0006: No inputs registered, leaving [ 361.340952][ T5816] uclogic 0003:5543:0522.0006: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input17 [ 361.393880][ T788] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 361.440225][ T5780] usb 4-1: USB disconnect, device number 7 [ 361.515712][ T8762] fido_id[8762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 361.604247][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.633934][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.661747][ T788] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 361.690552][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.711644][ T788] usb 3-1: config 0 descriptor?? [ 362.039311][ T8767] loop1: detected capacity change from 0 to 32768 [ 362.086031][ T8769] tunl0: Caught tx_queue_len zero misconfig [ 362.098262][ T8767] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 362.125679][ T5765] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 362.189542][ T788] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 362.298439][ T8734] Set syz1 is full, maxelem 65536 reached [ 362.369803][ T8774] capability: warning: `syz.1.875' uses deprecated v2 capabilities in a way that may be insecure [ 362.380690][ T788] cp2112 0003:10C4:EA90.0007: error requesting version [ 362.411962][ T788] cp2112: probe of 0003:10C4:EA90.0007 failed with error -71 [ 362.434290][ T788] usb 3-1: USB disconnect, device number 12 [ 362.445949][ T5769] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 362.550354][ T8776] loop3: detected capacity change from 0 to 8 [ 362.571854][ T8776] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 362.607337][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 362.737900][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 362.765212][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 362.856190][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 362.880848][ T5816] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 362.898699][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 362.977430][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 363.021061][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 363.062112][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 363.083445][ T5816] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 363.098404][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 363.139385][ T5816] usb 1-1: Product: syz [ 363.145656][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 363.161006][ T5816] usb 1-1: Manufacturer: syz [ 363.176128][ T5816] usb 1-1: SerialNumber: syz [ 363.195065][ T5816] usb 1-1: config 0 descriptor?? [ 363.224208][ T8792] loop1: detected capacity change from 0 to 4096 [ 363.250611][ T8792] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.266976][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 363.306472][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 363.329586][ T8792] EXT4-fs (loop1): Test dummy encryption mode enabled [ 363.371628][ T8792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.390632][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 363.583049][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 363.615430][ T5780] usb 1-1: USB disconnect, device number 9 [ 363.625637][ T27] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 363.673560][ T27] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 363.713612][ T27] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.761084][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 363.780824][ T27] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 363.796843][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.823312][ T8792] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 363.827767][ T27] usb 3-1: config 0 descriptor?? [ 363.843804][ T8789] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 363.937155][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.130824][ T5839] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 364.286813][ T27] asus 0003:048D:CE50.0008: ignoring exceeding usage max [ 364.305510][ T27] asus 0003:048D:CE50.0008: unknown main item tag 0xe [ 364.315638][ T27] asus 0003:048D:CE50.0008: unknown main item tag 0x2 [ 364.320912][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 364.327689][ T27] asus 0003:048D:CE50.0008: hidraw0: USB HID v0.0c Device [HID 048d:ce50] on usb-dummy_hcd.2-1/input0 [ 364.354349][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 364.367124][ T5839] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 364.377816][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.394579][ T5839] usb 4-1: config 0 descriptor?? [ 364.507697][ T27] usb 3-1: USB disconnect, device number 13 [ 364.513797][ T5780] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 364.571270][ T5816] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 364.700624][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 364.710293][ T5780] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 364.720416][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.730046][ T5780] usb 2-1: Product: syz [ 364.734987][ T5780] usb 2-1: Manufacturer: syz [ 364.741431][ T5780] usb 2-1: SerialNumber: syz [ 364.772687][ T5816] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 364.781413][ T5816] usb 1-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 364.796212][ T5816] usb 1-1: config 160 has no interface number 0 [ 364.804622][ T5816] usb 1-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.824461][ T5816] usb 1-1: config 160 interface 200 has no altsetting 0 [ 364.836648][ T5839] logitech 0003:046D:C20E.0009: rdesc size test failed for formula gp [ 364.850657][ T5816] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 364.860011][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.868275][ T5839] logitech 0003:046D:C20E.0009: unknown main item tag 0x2 [ 364.876104][ T5839] logitech 0003:046D:C20E.0009: unknown main item tag 0x6 [ 364.883589][ T5816] usb 1-1: Product: syz [ 364.887964][ T5816] usb 1-1: Manufacturer: syz [ 364.892859][ T5839] logitech 0003:046D:C20E.0009: ignoring exceeding usage max [ 364.901155][ T5816] usb 1-1: SerialNumber: syz [ 364.917130][ T5839] logitech 0003:046D:C20E.0009: hidraw0: USB HID v0.bd Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0 [ 364.978647][ T5780] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 364.995793][ T5780] usb 2-1: unit 3 not found! [ 365.049786][ T5780] usb 2-1: USB disconnect, device number 7 [ 365.117121][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.891'. [ 365.195173][ T23] usb 4-1: USB disconnect, device number 8 [ 365.216372][ T5816] usb 1-1: USB disconnect, device number 10 [ 366.855109][ T8828] sit1: entered promiscuous mode [ 366.860445][ T8828] sit1: entered allmulticast mode [ 366.906103][ T8828] team0: Device sit1 is of different type [ 366.954637][ T8825] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 366.963910][ T8825] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 366.975582][ T8825] vhci_hcd vhci_hcd.0: Device attached [ 366.991495][ T8836] vhci_hcd: connection closed [ 367.023505][ T49] vhci_hcd: stop threads [ 367.052155][ T49] vhci_hcd: release socket [ 367.057613][ T49] vhci_hcd: disconnect device [ 367.268487][ T8822] loop0: detected capacity change from 0 to 32768 [ 367.336903][ T8822] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 367.343449][ T8848] loop1: detected capacity change from 0 to 512 [ 367.354259][ T8848] EXT4-fs: inline encryption not supported [ 367.370870][ T8848] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 367.403779][ T8848] EXT4-fs (loop1): orphan cleanup on readonly fs [ 367.420687][ T8848] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.899: inode #15: comm syz.1.899: iget: illegal inode # [ 367.448993][ T8848] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.899: couldn't read orphan inode 15 (err -117) [ 367.523811][ T8848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 367.621900][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.701032][ T5839] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 367.719598][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 367.754627][ T8822] XFS (loop0): Ending clean mount [ 367.796851][ T8822] XFS (loop0): Quotacheck needed: Please wait. [ 367.872525][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 367.874224][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 367.932676][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 367.941931][ T8822] XFS (loop0): Quotacheck: Done. [ 367.948806][ T5839] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.970549][ T5839] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 367.985511][ T5839] usb 3-1: config 0 interface 0 has no altsetting 0 [ 367.992531][ T5839] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 368.007206][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.018838][ T5839] usb 3-1: config 0 descriptor?? [ 368.036188][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 368.171395][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 368.179834][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 368.297669][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 368.472355][ T5839] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x0 [ 368.491628][ T5839] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x0 [ 368.499196][ T5839] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x0 [ 368.540793][ T5839] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x0 [ 368.564717][ T5839] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x0 [ 368.580641][ T5839] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x0 [ 368.588034][ T5839] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x0 [ 368.638906][ T5839] koneplus 0003:1E7D:2E22.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 368.678131][ T8869] loop0: detected capacity change from 0 to 64 [ 368.683271][ T5839] usb 3-1: USB disconnect, device number 14 [ 368.690648][ T23] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 368.807480][ T8870] fido_id[8870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 368.903562][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.917254][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 368.927644][ T23] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 368.938584][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.959111][ T23] usb 2-1: config 0 descriptor?? [ 368.975351][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 368.986910][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 369.007819][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 369.022994][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 369.936410][ T23] usb 2-1: media controller created [ 369.944938][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.979038][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 369.987407][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 369.998424][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 370.022951][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 370.030441][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 370.042036][ T23] usb 2-1: USB disconnect, device number 8 [ 370.156435][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 370.176592][ T8879] sit1: entered promiscuous mode [ 370.195053][ T8879] sit1: entered allmulticast mode [ 370.218186][ T8879] team0: Device sit1 is of different type [ 370.450265][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 370.584398][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 370.631710][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 371.271498][ T8877] loop2: detected capacity change from 0 to 32768 [ 371.282016][ T8877] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 371.334247][ T8885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 371.340995][ T8885] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 371.349494][ T8885] vhci_hcd vhci_hcd.0: Device attached [ 371.390347][ T5973] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 371.396577][ T8893] vhci_hcd: connection closed [ 371.437349][ T11] vhci_hcd: stop threads [ 371.493341][ T11] vhci_hcd: release socket [ 371.499028][ T11] vhci_hcd: disconnect device [ 371.547355][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 371.560812][ T5839] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 371.773840][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.823136][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.844062][ T5839] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 371.881047][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.902108][ T5839] usb 2-1: config 0 descriptor?? [ 372.254153][ T8909] loop0: detected capacity change from 0 to 256 [ 372.325037][ T5839] arvo 0003:1E7D:30D4.000B: unbalanced collection at end of report description [ 372.357526][ T8909] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 372.387632][ T5839] arvo 0003:1E7D:30D4.000B: parse failed [ 372.416157][ T5839] arvo: probe of 0003:1E7D:30D4.000B failed with error -22 [ 372.534369][ T28] audit: type=1800 audit(1783357770.957:17): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.920" name="file1" dev="loop0" ino=1048603 res=0 errno=0 [ 372.625213][ T5839] usb 2-1: USB disconnect, device number 9 [ 372.819051][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 372.845386][ T8902] loop2: detected capacity change from 0 to 32768 [ 372.867970][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 372.919308][ T8902] JBD2: Ignoring recovery information on journal [ 372.942294][ T8902] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 372.955976][ T8902] JBD2: bad block at offset 32 [ 373.004993][ T8902] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 373.015561][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 373.070653][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 373.143588][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 373.186850][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 373.266076][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 373.313683][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.341902][ T10] usb 1-1: config 0 has no interface number 0 [ 373.372533][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 373.390892][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 373.442604][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.473500][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 373.477838][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 373.481861][ T10] usb 1-1: Product: syz [ 373.527732][ T10] usb 1-1: Manufacturer: syz [ 373.548800][ T10] usb 1-1: SerialNumber: syz [ 373.574224][ T10] usb 1-1: config 0 descriptor?? [ 373.616076][ T10] usb 1-1: selecting invalid altsetting 1 [ 373.640827][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 373.659562][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 374.105729][ T10] DVB: Unable to find symbol stv0299_attach() [ 374.771108][ T10] DVB: Unable to find symbol tda8083_attach() [ 374.778149][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 374.860103][ T10] usb 1-1: USB disconnect, device number 11 [ 375.065828][ T8919] loop1: detected capacity change from 0 to 32768 [ 375.102427][ T8919] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 375.645524][ T8941] netlink: 'syz.2.931': attribute type 13 has an invalid length. [ 375.658677][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 375.666670][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.931'. [ 375.841589][ T8941] IPVS: rr: FWM 3 0x00000003 - no destination available [ 376.088107][ T8949] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 376.095204][ T8949] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.162976][ T8949] vhci_hcd vhci_hcd.0: Device attached [ 376.229516][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 376.249022][ T8942] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 376.256188][ T8942] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 376.269511][ T8942] vhci_hcd vhci_hcd.0: Device attached [ 376.277985][ T8956] vhci_hcd: connection closed [ 376.279486][ T11] vhci_hcd: stop threads [ 376.336572][ T8950] vhci_hcd: connection closed [ 376.349074][ T11] vhci_hcd: release socket [ 376.380454][ T11] vhci_hcd: disconnect device [ 376.394841][ T11] vhci_hcd: stop threads [ 376.404955][ T11] vhci_hcd: release socket [ 376.410014][ T11] vhci_hcd: disconnect device [ 376.598908][ T8964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.934'. [ 377.004706][ T8965] loop2: detected capacity change from 0 to 32768 [ 377.050889][ T8965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.933 (8965) [ 377.251036][ T8965] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.270095][ T8965] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 377.403714][ T8965] BTRFS info (device loop2): using free space tree [ 377.689159][ T8974] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 377.695820][ T8974] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.703946][ T8974] vhci_hcd vhci_hcd.0: Device attached [ 377.766422][ T8995] vhci_hcd: connection closed [ 377.767457][ T11] vhci_hcd: stop threads [ 377.829046][ T11] vhci_hcd: release socket [ 377.881158][ T11] vhci_hcd: disconnect device [ 378.041508][ T8965] BTRFS info (device loop2): enabling ssd optimizations [ 378.112399][ T8965] BTRFS info (device loop2): auto enabling async discard [ 378.145921][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 378.255641][ T8977] loop1: detected capacity change from 0 to 8192 [ 378.804920][ T8977] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 378.820880][ T8977] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 378.909040][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 378.939681][ T8977] REISERFS (device loop1): using ordered data mode [ 378.947017][ T8977] reiserfs: using flush barriers [ 378.957393][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 378.967221][ T5776] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.995200][ T8977] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 379.063352][ T8977] REISERFS (device loop1): checking transaction log (loop1) [ 379.071972][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.079168][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.120300][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 379.176837][ T8977] REISERFS (device loop1): Using r5 hash to sort names [ 379.198596][ T8977] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 379.217986][ T8977] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 379.251090][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 379.345673][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 379.413934][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 379.478432][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 379.486667][ T23] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 379.500649][ T23] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 379.529190][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 379.550596][ T23] usb 1-1: config 220 has no interface number 2 [ 379.579962][ T23] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 379.664636][ T23] usb 1-1: config 220 interface 0 has no altsetting 0 [ 379.672172][ T23] usb 1-1: config 220 interface 76 has no altsetting 0 [ 379.679453][ T23] usb 1-1: config 220 interface 1 has no altsetting 0 [ 379.706786][ T23] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 379.719956][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.746720][ T23] usb 1-1: Product: syz [ 379.752778][ T23] usb 1-1: Manufacturer: syz [ 379.757605][ T23] usb 1-1: SerialNumber: syz [ 379.763996][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 379.781921][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 379.971468][ T9024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 379.978147][ T9024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 379.986424][ T9024] vhci_hcd vhci_hcd.0: Device attached [ 380.032126][ T23] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 380.038613][ T23] usb 1-1: No valid video chain found. [ 380.055149][ T23] usb 1-1: selecting invalid altsetting 0 [ 380.070097][ T9032] vhci_hcd: connection closed [ 380.076908][ T3508] vhci_hcd: stop threads [ 380.097153][ T3508] vhci_hcd: release socket [ 380.103462][ T3508] vhci_hcd: disconnect device [ 380.117461][ T23] usb 1-1: selecting invalid altsetting 0 [ 380.124114][ T23] usbtest: probe of 1-1:220.1 failed with error -22 [ 380.142021][ T971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 380.153190][ T23] usb 1-1: USB disconnect, device number 12 [ 380.330691][ T5839] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 380.340668][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 380.351845][ T971] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 380.359931][ T971] usb 4-1: config 0 has no interface number 0 [ 380.368523][ T971] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 380.382875][ T971] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 380.394764][ T971] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 380.404259][ T971] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 380.413431][ T971] usb 4-1: Product: syz [ 380.417732][ T971] usb 4-1: SerialNumber: syz [ 380.424406][ T971] usb 4-1: config 0 descriptor?? [ 380.434479][ T971] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 380.443329][ T971] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 380.515919][ T5839] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.533886][ T5839] usb 3-1: config 0 has no interface number 0 [ 380.545464][ T5839] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 380.562940][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.573281][ T5839] usb 3-1: Product: syz [ 380.577949][ T5839] usb 3-1: Manufacturer: syz [ 380.582991][ T5839] usb 3-1: SerialNumber: syz [ 380.591066][ T5839] usb 3-1: config 0 descriptor?? [ 380.605658][ T5839] usb 3-1: selecting invalid altsetting 1 [ 380.612442][ T5839] dvb_ttusb_budget: ttusb_init_controller: error [ 380.645660][ T5839] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 380.727650][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.739965][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.749436][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.756892][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.764568][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.771969][ T971] usb 4-1: USB disconnect, device number 9 [ 380.772070][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.785392][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 380.819108][ T971] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 380.874507][ T5839] DVB: Unable to find symbol stv0299_attach() [ 380.974507][ T5839] DVB: Unable to find symbol tda8083_attach() [ 380.983667][ T5839] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 380.998400][ T5839] usb 3-1: USB disconnect, device number 15 [ 381.028735][ T5765] udevd[5765]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory [ 382.096175][ T9036] loop0: detected capacity change from 0 to 32768 [ 382.158642][ T9036] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.951 (9036) [ 382.216872][ T9053] netlink: 68 bytes leftover after parsing attributes in process `syz.3.956'. [ 382.244945][ T9036] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 382.281703][ T9036] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 382.367535][ T9036] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 382.417663][ T9036] BTRFS info (device loop0): use zstd compression, level 3 [ 382.470671][ T9036] BTRFS info (device loop0): use no compression [ 382.477435][ T9036] BTRFS info (device loop0): using free space tree [ 383.144748][ T9082] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 383.152343][ T9082] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 383.164898][ T9036] BTRFS info (device loop0): enabling ssd optimizations [ 383.175034][ T9082] vhci_hcd vhci_hcd.0: Device attached [ 383.181162][ T9036] BTRFS info (device loop0): auto enabling async discard [ 383.214279][ T9085] vhci_hcd: connection closed [ 383.215183][ T1143] vhci_hcd: stop threads [ 383.250596][ T1143] vhci_hcd: release socket [ 383.255611][ T1143] vhci_hcd: disconnect device [ 383.266353][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 383.361226][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 383.379710][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 383.394335][ T971] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 383.458903][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 383.467775][ T5775] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 383.614278][ T971] usb 3-1: config 0 interface 0 has no altsetting 0 [ 383.650625][ T971] usb 3-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 383.660257][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.670915][ T5973] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (5973) [ 383.691782][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 383.734877][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 383.746868][ T971] usb 3-1: config 0 descriptor?? [ 383.832918][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 384.311563][ T9098] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 384.319109][ T9098] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 384.330018][ T9098] vhci_hcd vhci_hcd.0: Device attached [ 384.488499][ T9103] vhci_hcd: connection closed [ 384.497638][ T11] vhci_hcd: stop threads [ 384.562376][ T971] ortek 0003:05A4:2000.000C: unknown main item tag 0x2 [ 384.566962][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 384.570167][ T971] ortek 0003:05A4:2000.000C: unknown main item tag 0x6 [ 384.588364][ T11] vhci_hcd: release socket [ 384.612793][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 384.620628][ T11] vhci_hcd: disconnect device [ 384.625754][ T971] ortek 0003:05A4:2000.000C: ignoring exceeding usage max [ 384.639563][ T788] usb 39-1: new high-speed USB device number 15 using vhci_hcd [ 384.664354][ T971] ortek 0003:05A4:2000.000C: hidraw0: USB HID v0.81 Device [HID 05a4:2000] on usb-dummy_hcd.2-1/input0 [ 384.671405][ T788] usb 39-1: enqueue for inactive port 0 [ 384.780975][ T788] vhci_hcd: vhci_device speed not set [ 384.856934][ T971] usb 3-1: USB disconnect, device number 16 [ 384.881973][ T9107] fido_id[9107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 385.145389][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 385.155863][ T9097] loop0: detected capacity change from 0 to 32768 [ 385.302304][ T9097] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 386.244608][ T9126] loop1: detected capacity change from 0 to 128 [ 386.295831][ T9126] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.322625][ T9126] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 386.403988][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 386.554614][ T788] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 386.580778][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 386.609841][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.829676][ T9138] netlink: 256 bytes leftover after parsing attributes in process `syz.0.977'. [ 386.909248][ T788] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.932348][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 387.200815][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 387.297409][ T23] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 387.424910][ T23] usb 4-1: config 4 has no interface number 0 [ 387.628630][ T788] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.635748][ T788] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 387.638333][ T23] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 387.646009][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.668209][ T788] usb 3-1: config 0 descriptor?? [ 387.757743][ T23] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 387.778374][ T23] usb 4-1: config 4 interface 51 has no altsetting 0 [ 387.820157][ T23] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 387.856805][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.880678][ T23] usb 4-1: Product: syz [ 387.895939][ T23] usb 4-1: Manufacturer: syz [ 387.906089][ T23] usb 4-1: SerialNumber: syz [ 387.928726][ T9134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 387.962878][ T9134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 388.126946][ T788] logitech 0003:046D:C287.000D: unknown main item tag 0x0 [ 388.143902][ T788] logitech 0003:046D:C287.000D: unknown main item tag 0x0 [ 388.157899][ T788] logitech 0003:046D:C287.000D: unknown main item tag 0x0 [ 388.174998][ T788] logitech 0003:046D:C287.000D: unknown main item tag 0x0 [ 388.203723][ T788] logitech 0003:046D:C287.000D: unknown main item tag 0x0 [ 388.216089][ T23] cdc_eem: probe of 4-1:4.51 failed with error -71 [ 388.223149][ T788] logitech 0003:046D:C287.000D: unknown main item tag 0x0 [ 388.245322][ T788] logitech 0003:046D:C287.000D: unknown main item tag 0x0 [ 388.248876][ T23] usb 4-1: USB disconnect, device number 10 [ 388.295219][ T788] logitech 0003:046D:C287.000D: hidraw0: USB HID v0.0a Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 388.360620][ T788] logitech 0003:046D:C287.000D: no inputs found [ 388.394218][ T788] usb 3-1: USB disconnect, device number 17 [ 388.519040][ T9154] fido_id[9154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 388.604675][ T9145] loop0: detected capacity change from 0 to 32768 [ 388.624585][ T9145] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.980 (9145) [ 388.677041][ T9145] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 388.693623][ T9145] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 388.709396][ T9145] BTRFS info (device loop0): using free space tree [ 388.786481][ T9145] BTRFS info (device loop0): enabling ssd optimizations [ 388.811067][ T9145] BTRFS info (device loop0): auto enabling async discard [ 388.918946][ T9178] loop1: detected capacity change from 0 to 256 [ 389.013636][ T9178] FAT-fs (loop1): Directory bread(block 64) failed [ 389.039811][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 389.070705][ T9178] FAT-fs (loop1): Directory bread(block 65) failed [ 389.077587][ T9178] FAT-fs (loop1): Directory bread(block 66) failed [ 389.145717][ T9178] FAT-fs (loop1): Directory bread(block 67) failed [ 389.207429][ T9182] netlink: 256 bytes leftover after parsing attributes in process `syz.3.987'. [ 389.286726][ T9178] FAT-fs (loop1): Directory bread(block 68) failed [ 389.335522][ T9178] FAT-fs (loop1): Directory bread(block 69) failed [ 389.451441][ T9178] FAT-fs (loop1): Directory bread(block 70) failed [ 389.458681][ T9178] FAT-fs (loop1): Directory bread(block 71) failed [ 389.495642][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 389.523695][ T9178] FAT-fs (loop1): Directory bread(block 72) failed [ 389.558904][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p1 [ 389.571329][ T9178] FAT-fs (loop1): Directory bread(block 73) failed [ 389.589336][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 389.946861][ T5973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (5973) [ 390.123965][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 390.309297][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 390.359175][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 390.516297][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 390.640816][ T23] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 390.658152][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 390.710697][ T9208] loop0: detected capacity change from 0 to 4096 [ 390.734147][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 390.792537][ T9211] loop1: detected capacity change from 0 to 16 [ 390.810257][ T9211] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 390.818987][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 390.863457][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.894456][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 390.931818][ T23] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 390.990880][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.054495][ T23] usb 3-1: config 0 descriptor?? [ 391.088360][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 391.100893][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 391.142755][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 391.209048][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 391.226576][ T23] usb 3-1: media controller created [ 391.246331][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.323082][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 391.344652][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 391.402515][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 391.443548][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 391.469682][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 391.521631][ T23] usb 3-1: USB disconnect, device number 18 [ 391.581938][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 392.439483][ T9229] Illegal XDP return value 1526997922 on prog (id 21) dev N/A, expect packet loss! [ 392.536397][ T9225] loop1: detected capacity change from 0 to 32768 [ 392.607678][ T9225] JBD2: Ignoring recovery information on journal [ 392.669067][ T9232] loop2: detected capacity change from 0 to 4096 [ 392.766395][ T9233] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.807399][ T9225] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 393.208784][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 393.267307][ T9238] netlink: 'syz.2.1009': attribute type 13 has an invalid length. [ 393.292532][ T9238] netlink: 'syz.2.1009': attribute type 27 has an invalid length. [ 393.323129][ T9238] IPVS: rr: FWM 3 0x00000003 - no destination available [ 393.984803][ T9246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 393.991891][ T9246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 394.001558][ T9246] vhci_hcd vhci_hcd.0: Device attached [ 394.057161][ T9248] vhci_hcd: connection closed [ 394.057593][ T59] vhci_hcd: stop threads [ 394.248450][ T59] vhci_hcd: release socket [ 394.300056][ T59] vhci_hcd: disconnect device [ 394.351083][ T788] usb 39-1: new high-speed USB device number 16 using vhci_hcd [ 394.409277][ T9255] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 394.416422][ T9255] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 394.467737][ T788] usb 39-1: enqueue for inactive port 0 [ 394.581586][ T9255] vhci_hcd vhci_hcd.0: Device attached [ 394.706258][ T9257] vhci_hcd: connection closed [ 394.709193][ T59] vhci_hcd: stop threads [ 394.741196][ T788] vhci_hcd: vhci_device speed not set [ 394.768972][ T59] vhci_hcd: release socket [ 394.787234][ T59] vhci_hcd: disconnect device [ 394.900192][ T9263] loop2: detected capacity change from 0 to 256 [ 394.928689][ T9263] exfat: Deprecated parameter 'utf8' [ 394.974460][ T9263] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 395.009291][ T9241] loop0: detected capacity change from 0 to 32768 [ 395.081156][ T9241] JBD2: Ignoring recovery information on journal [ 395.174481][ T9241] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 395.185951][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 395.477815][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 395.481913][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 395.750118][ T9272] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 395.757035][ T9272] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 395.835409][ T28] audit: type=1800 audit(1783357794.217:18): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1011" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 395.952538][ T9272] vhci_hcd vhci_hcd.0: Device attached [ 396.250004][ T9273] vhci_hcd: connection closed [ 396.251485][ T59] vhci_hcd: stop threads [ 396.308068][ T59] vhci_hcd: release socket [ 396.324124][ T59] vhci_hcd: disconnect device [ 396.352302][ T9284] loop1: detected capacity change from 0 to 16 [ 396.407968][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 396.434914][ T9284] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 396.613096][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 396.736600][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 396.773915][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 396.936972][ T9292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 398.053616][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 398.192189][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 398.236550][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 398.250092][ T9301] loop2: detected capacity change from 0 to 164 [ 398.255088][ T9299] loop0: detected capacity change from 0 to 512 [ 398.327887][ T9301] Unsupported NM flag settings (240) [ 398.328952][ T9299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 398.410733][ T9299] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1022: bad orphan inode 15 [ 398.444694][ T9299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.465345][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 398.475489][ T5776] Unsupported NM flag settings (240) [ 398.486489][ T5776] Unsupported NM flag settings (240) [ 398.492610][ T5776] Unsupported NM flag settings (240) [ 398.498499][ T9299] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.1022: reserved inode found cleared - inode=18 [ 398.506214][ T9288] loop1: detected capacity change from 0 to 32768 [ 398.534248][ T5776] Unsupported NM flag settings (240) [ 398.540118][ T5776] Unsupported NM flag settings (240) [ 398.561347][ T5776] Unsupported NM flag settings (240) [ 398.732679][ T9308] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1027'. [ 398.803924][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.544111][ T9313] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 399.551488][ T9313] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 399.724010][ T9313] vhci_hcd vhci_hcd.0: Device attached [ 399.726528][ T9314] vhci_hcd: connection closed [ 399.759531][ T1143] vhci_hcd: stop threads [ 399.785443][ T1143] vhci_hcd: release socket [ 399.790106][ T1143] vhci_hcd: disconnect device [ 400.938238][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 401.058614][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 401.125997][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 401.257153][ T9325] loop0: detected capacity change from 0 to 32768 [ 401.316897][ T9325] JBD2: Ignoring recovery information on journal [ 401.337686][ T9325] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 401.376363][ T9325] JBD2: bad block at offset 32 [ 401.417154][ T9325] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 401.545222][ T9325] (syz.0.1030,9325,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 401.590323][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 401.731000][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 401.751224][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 401.755906][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 402.027081][ T9336] loop1: detected capacity change from 0 to 32768 [ 402.096686][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 402.142027][ T9336] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 402.206453][ T9348] loop0: detected capacity change from 0 to 64 [ 402.268600][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 402.286390][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 402.435737][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 402.622562][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 404.115678][ T9358] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 404.124153][ T9358] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 404.135905][ T9358] vhci_hcd vhci_hcd.0: Device attached [ 404.148541][ T9373] vhci_hcd: connection closed [ 404.148893][ T11] vhci_hcd: stop threads [ 404.288219][ T11] vhci_hcd: release socket [ 404.300248][ T9377] sd 0:0:1:0: device reset [ 404.416581][ T9375] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1045'. [ 404.432704][ T11] vhci_hcd: disconnect device [ 404.490855][ T27] usb 33-1: new high-speed USB device number 11 using vhci_hcd [ 404.560050][ T27] usb 33-1: enqueue for inactive port 0 [ 404.653124][ T27] vhci_hcd: vhci_device speed not set [ 405.569025][ T9384] fuse: Bad value for 'group_id' [ 406.335317][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 406.339047][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 406.478301][ T9389] netlink: 'syz.1.1053': attribute type 4 has an invalid length. [ 406.512074][ T9391] loop0: detected capacity change from 0 to 512 [ 406.519900][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 406.536511][ T9391] EXT4-fs: Ignoring removed bh option [ 406.595424][ T9391] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 406.706821][ T9391] EXT4-fs (loop0): 1 truncate cleaned up [ 406.739517][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 406.761844][ T9391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.786908][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 406.886731][ T9391] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1050: bg 0: block 465: padding at end of block bitmap is not set [ 406.888342][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 406.990795][ T9391] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 407.046686][ T9391] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1050: invalid indirect mapped block 234881024 (level 0) [ 407.119552][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 407.136842][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 407.179468][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 407.238919][ T9408] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1060'. [ 407.266301][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 407.294496][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.180784][ T9413] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 408.187694][ T9413] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 408.232905][ T9413] vhci_hcd vhci_hcd.0: Device attached [ 408.268214][ T9423] vhci_hcd: connection closed [ 408.268447][ T11] vhci_hcd: stop threads [ 408.362568][ T11] vhci_hcd: release socket [ 408.370564][ T11] vhci_hcd: disconnect device [ 408.430877][ T27] vhci_hcd: vhci_device speed not set [ 408.747290][ T9440] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1070'. [ 408.924342][ T9446] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 409.484475][ T9463] syz_tun: entered promiscuous mode [ 409.526769][ T9466] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1081'. [ 409.581171][ T9463] syz_tun: left promiscuous mode [ 411.086299][ T27] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 411.217397][ T5780] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 411.298371][ T27] usb 2-1: config 127 has an invalid interface number: 192 but max is 0 [ 411.316156][ T27] usb 2-1: config 127 has no interface number 0 [ 411.347799][ T27] usb 2-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06 [ 411.374020][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 411.381679][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.396226][ T27] usb 2-1: Product: syz [ 411.405488][ T27] usb 2-1: Manufacturer: syz [ 411.410146][ T27] usb 2-1: SerialNumber: syz [ 411.426218][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.450436][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 411.485534][ T5780] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 411.585862][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.657435][ T5780] usb 1-1: config 0 descriptor?? [ 411.711973][ T27] gspca_main: pac7311-2.14.0 probing 093a:2600 [ 411.734473][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 412.116456][ T27] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 412.279196][ T27] pac7311: probe of 2-1:127.192 failed with error -71 [ 412.349228][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 412.380231][ T5780] logitech 0003:046D:C293.000E: global environment stack underflow [ 412.399353][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 412.425360][ T27] usb 2-1: USB disconnect, device number 10 [ 412.440891][ T5780] logitech 0003:046D:C293.000E: item 0 2 1 11 parsing failed [ 412.509397][ T5780] logitech 0003:046D:C293.000E: parse failed [ 412.524815][ T5780] logitech: probe of 0003:046D:C293.000E failed with error -22 [ 412.596180][ T5780] usb 1-1: USB disconnect, device number 13 [ 412.611000][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 412.735320][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 412.769553][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 413.116575][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 413.989648][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 414.087504][ T9524] loop1: detected capacity change from 0 to 256 [ 415.412343][ T9532] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1108'. [ 415.530256][ T9511] loop2: detected capacity change from 0 to 32768 [ 415.567196][ T9511] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 415.740195][ T8817] blk_print_req_error: 23 callbacks suppressed [ 415.740246][ T8817] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 416.335613][ T9543] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 416.342186][ T9543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 416.394097][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 416.413729][ T9523] loop0: detected capacity change from 0 to 32768 [ 416.430535][ T9543] vhci_hcd vhci_hcd.0: Device attached [ 416.457219][ T9523] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1103 (9523) [ 416.516837][ T9548] vhci_hcd: connection closed [ 416.517111][ T49] vhci_hcd: stop threads [ 416.565883][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 416.574092][ T49] vhci_hcd: release socket [ 416.596796][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 416.606679][ T49] vhci_hcd: disconnect device [ 416.630890][ T5839] vhci_hcd: vhci_device speed not set [ 416.680796][ T9523] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 416.702250][ T9523] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 416.716787][ T9523] BTRFS info (device loop0): setting nodatasum [ 416.730671][ T9523] BTRFS info (device loop0): force zlib compression, level 3 [ 416.748738][ T9523] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 416.779995][ T9523] BTRFS info (device loop0): use lzo compression, level 0 [ 416.810177][ T9523] BTRFS info (device loop0): turning on flush-on-commit [ 416.839421][ T9523] BTRFS info (device loop0): enabling auto defrag [ 416.867464][ T9523] BTRFS info (device loop0): max_inline at 4096 [ 416.877431][ T9523] BTRFS info (device loop0): using free space tree [ 416.887377][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 416.890911][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 416.911542][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 416.926926][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 416.938721][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 416.954884][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 416.967468][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 416.982481][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 416.996387][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 417.017508][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 417.029032][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 417.043221][ T9523] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 417.057163][ T9523] BTRFS error (device loop0): open_ctree failed: -12 [ 417.155726][ T9573] loop1: detected capacity change from 0 to 256 [ 417.219170][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 417.307363][ T9578] bridge0: entered promiscuous mode [ 417.360821][ T9578] macvlan2: entered allmulticast mode [ 417.371946][ T9578] bridge0: entered allmulticast mode [ 417.372288][ T5973] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 417.388757][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 417.429793][ T9578] bridge0: port 3(macvlan2) entered blocking state [ 417.458737][ T9578] bridge0: port 3(macvlan2) entered disabled state [ 417.499212][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 417.518556][ T788] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 417.535048][ T9578] bridge0: left allmulticast mode [ 417.540632][ T9578] bridge0: left promiscuous mode [ 417.752484][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 417.766436][ T788] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 417.785664][ T788] usb 4-1: config 0 has no interface number 0 [ 417.798229][ T9582] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1119'. [ 417.830541][ T788] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 417.847449][ T788] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 417.862512][ T788] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 417.872232][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.885280][ T788] usb 4-1: Product: syz [ 417.889513][ T788] usb 4-1: Manufacturer: syz [ 417.908921][ T788] usb 4-1: SerialNumber: syz [ 417.946500][ T788] usb 4-1: config 0 descriptor?? [ 418.027612][ T9585] syz.0.1121 (9585) used obsolete PPPIOCDETACH ioctl [ 418.229951][ T9580] loop1: detected capacity change from 0 to 32768 [ 418.264756][ T9580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1120 (9580) [ 418.310262][ T9580] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 418.348546][ T9580] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 418.368151][ T9580] BTRFS info (device loop1): using free space tree [ 418.409712][ T9591] loop2: detected capacity change from 0 to 4096 [ 418.416741][ T788] radio-si470x 4-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 418.425051][ T788] radio-si470x 4-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 418.441481][ T9591] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.487199][ T9591] EXT4-fs (loop2): Test dummy encryption mode enabled [ 418.558573][ T9591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.619026][ T788] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 418.719826][ T788] radio-si470x 4-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 418.820858][ T9580] BTRFS info (device loop1): enabling ssd optimizations [ 418.828765][ T9580] BTRFS info (device loop1): auto enabling async discard [ 418.838154][ T788] radio-si470x: probe of 4-1:0.35 failed with error -5 [ 418.954006][ T788] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 419.053361][ T788] usb 4-1: USB disconnect, device number 11 [ 419.160160][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.357458][ T9616] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 419.364666][ T9616] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 419.442702][ T9616] vhci_hcd vhci_hcd.0: Device attached [ 419.468926][ T9623] vhci_hcd: connection closed [ 419.469171][ T4268] vhci_hcd: stop threads [ 419.511682][ T4268] vhci_hcd: release socket [ 419.539638][ T4268] vhci_hcd: disconnect device [ 419.554552][ T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 419.568587][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 419.603270][ T9627] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1129'. [ 419.748439][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 419.765762][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 419.791151][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p1 [ 419.840174][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 419.954082][ T9634] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 420.430639][ T5816] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 420.740702][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 421.227471][ T5816] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 421.231147][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 421.240586][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.270749][ T5816] usb 2-1: Product: syz [ 421.275374][ T5816] usb 2-1: Manufacturer: syz [ 421.280121][ T5816] usb 2-1: SerialNumber: syz [ 421.293579][ T5816] usb 2-1: config 0 descriptor?? [ 421.332590][ T5816] gspca_main: se401-2.14.0 probing 047d:5003 [ 421.435689][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 421.480618][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 421.510035][ T9655] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1139'. [ 421.610342][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 421.688825][ T9659] trusted_key: encrypted_key: insufficient parameters specified [ 421.788629][ T5816] gspca_se401: Bayer format not supported! [ 422.138351][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 422.164903][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 422.213799][ T5839] usb 2-1: USB disconnect, device number 11 [ 422.234933][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 422.398348][ T9671] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 422.405397][ T9671] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 422.425615][ T9671] vhci_hcd vhci_hcd.0: Device attached [ 422.656273][ T9672] vhci_hcd: connection closed [ 422.657339][ T37] vhci_hcd: stop threads [ 422.684595][ T37] vhci_hcd: release socket [ 422.696799][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 422.710939][ T5816] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 422.847241][ T37] vhci_hcd: disconnect device [ 422.859037][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 422.862119][ T9677] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 422.878401][ T9677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 422.898040][ T9677] vhci_hcd vhci_hcd.0: Device attached [ 422.981457][ T5816] usb 37-1: enqueue for inactive port 0 [ 423.057466][ T9678] vhci_hcd: connection closed [ 423.060723][ T37] vhci_hcd: stop threads [ 423.087319][ T37] vhci_hcd: release socket [ 423.123054][ T37] vhci_hcd: disconnect device [ 423.138539][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 423.160678][ T10] vhci_hcd: vhci_device speed not set [ 423.166706][ T5816] vhci_hcd: vhci_device speed not set [ 424.608057][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 424.877971][ T9692] loop2: detected capacity change from 0 to 1024 [ 425.115318][ T9694] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1151'. [ 425.337022][ T9688] loop1: detected capacity change from 0 to 32768 [ 425.364052][ T9688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1147 (9688) [ 425.435970][ T9688] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 425.454622][ T9688] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 425.481059][ T9688] BTRFS info (device loop1): using free space tree [ 425.656492][ T9713] loop0: detected capacity change from 0 to 256 [ 425.698613][ T9688] BTRFS info (device loop1): enabling ssd optimizations [ 425.730801][ T9688] BTRFS info (device loop1): auto enabling async discard [ 425.939155][ T5777] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 426.437642][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 426.760055][ T9726] loop0: detected capacity change from 0 to 32768 [ 426.813541][ T28] audit: type=1800 audit(1783357825.237:19): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1159" name="file3" dev="loop0" ino=7 res=0 errno=0 [ 426.820336][ T9726] ERROR: (device loop0): diAllocAG: numfree > numinos [ 426.820336][ T9726] [ 426.895164][ T9726] ERROR: (device loop0): remounting filesystem as read-only [ 426.899621][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 426.913517][ T9726] ialloc: diAlloc returned -5! [ 427.000254][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 427.087871][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 427.115715][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 427.296062][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 427.423884][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 427.436750][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 427.461172][ T9697] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 427.475262][ T9745] netlink: 'syz.1.1166': attribute type 13 has an invalid length. [ 427.655043][ T9749] loop0: detected capacity change from 0 to 128 [ 427.671883][ T9749] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 427.704756][ T9749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.939773][ T9753] loop1: detected capacity change from 0 to 128 [ 427.982142][ T9753] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 428.079296][ T9753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.253338][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 428.956548][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 429.031911][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p1 [ 429.506237][ T9773] netlink: 'syz.3.1176': attribute type 13 has an invalid length. [ 429.985829][ T9764] loop0: detected capacity change from 0 to 40427 [ 430.036409][ T9764] F2FS-fs (loop0): invalid crc value [ 430.058299][ T9764] F2FS-fs (loop0): Found nat_bits in checkpoint [ 430.412208][ T9764] F2FS-fs (loop0): Start checkpoint disabled! [ 430.837922][ T9764] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 431.198103][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1186'. [ 431.328511][ T9807] netlink: 'syz.1.1188': attribute type 13 has an invalid length. [ 431.477955][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 431.533745][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 431.581704][ T1143] kworker/u4:7: attempt to access beyond end of device [ 431.581704][ T1143] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 431.604157][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 431.635125][ T1143] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 431.654586][ T1143] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 431.830259][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 431.855959][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 431.930116][ T9819] loop1: detected capacity change from 0 to 1764 [ 432.081858][ T9821] loop2: detected capacity change from 0 to 256 [ 432.120787][ T9821] exfat: Deprecated parameter 'utf8' [ 432.173424][ T9821] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 432.187443][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3 [ 432.384484][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 432.395276][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p1 [ 433.038730][ T9830] fuse: Unknown parameter 'grou00000000000000000000' [ 433.909521][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3 [ 434.144849][ T5769] udevd[5769]: incorrect cramfs checksum on /dev/loop3p2 [ 434.366358][ T9841] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.377001][ T9841] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.385918][ T9841] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 434.395118][ T9841] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 435.853957][ T9861] process 'syz.2.1208' launched './file2' with NULL argv: empty string added [ 436.697674][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 436.782330][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 436.829896][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 436.995135][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 437.000718][ T9873] kvm: kvm [9872]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x4000000c) [ 437.009590][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 437.081094][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 437.691408][ T9887] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 437.699230][ T9887] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 437.708844][ T9887] vhci_hcd vhci_hcd.0: Device attached [ 437.727541][ T9891] vhci_hcd: connection closed [ 437.727780][ T4268] vhci_hcd: stop threads [ 437.749655][ T4268] vhci_hcd: release socket [ 437.759119][ T4268] vhci_hcd: disconnect device [ 437.782241][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 437.785492][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 438.982948][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 439.146155][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 439.852473][ T9916] fuse: Unknown parameter 'grou00000000000000000000' [ 440.508314][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.515125][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.757111][ T9900] loop0: detected capacity change from 0 to 32768 [ 440.835739][ T9900] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 440.919459][ T9900] XFS (loop0): Ending clean mount [ 441.076113][ T5775] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 442.442358][ T9952] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 442.454913][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 442.647422][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 442.659215][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 442.697192][ T9955] loop1: detected capacity change from 0 to 4096 [ 442.728692][ T9955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.729687][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 443.356321][ T9960] fuse: Unknown parameter 'group_i00000000000000000000' [ 444.165888][ T9955] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 444.211694][ T9955] System zones: 0-5 [ 444.223256][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 444.243023][ T9955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.247508][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 444.638397][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.841919][ T9977] loop1: detected capacity change from 0 to 512 [ 444.849335][ T9977] EXT4-fs: Ignoring removed i_version option [ 444.912893][ T9977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 444.969959][ T9977] EXT4-fs (loop1): 1 truncate cleaned up [ 445.041903][ T9977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.366561][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.425778][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 445.970240][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 445.973661][T10000] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 445.985099][T10000] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 445.994735][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 446.007912][T10000] vhci_hcd vhci_hcd.0: Device attached [ 446.295374][T10002] vhci_hcd: connection closed [ 446.310686][ T27] usb 33-1: new high-speed USB device number 13 using vhci_hcd [ 446.329378][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 446.339406][ T4268] vhci_hcd: stop threads [ 446.347199][ T4268] vhci_hcd: release socket [ 446.357420][ T4268] vhci_hcd: disconnect device [ 446.424791][ T9969] loop2: detected capacity change from 0 to 40427 [ 446.468972][ T9969] F2FS-fs (loop2): invalid crc value [ 446.632031][ T9969] F2FS-fs (loop2): Found nat_bits in checkpoint [ 447.410804][ T9969] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 447.503836][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 447.859281][T10031] loop1: detected capacity change from 0 to 512 [ 447.868816][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 448.030742][ T971] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 448.071740][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 448.077061][T10031] EXT4-fs (loop1): 1 orphan inode deleted [ 448.086344][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 448.098547][ T1143] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 448.144926][ T1143] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 448.162090][T10031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.174353][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3 [ 448.258878][ T971] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 448.284425][ T971] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 448.299301][T10031] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.329510][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 448.330642][ T971] usb 1-1: config 220 interface 0 has no altsetting 0 [ 448.359065][ T8817] udevd[8817]: incorrect cramfs checksum on /dev/loop3p2 [ 448.392969][ T971] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 448.420343][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.454142][ T971] usb 1-1: Product: syz [ 448.459457][ T971] usb 1-1: Manufacturer: syz [ 448.500696][ T971] usb 1-1: SerialNumber: syz [ 448.668703][T10031] [ 448.671357][T10031] ====================================================== [ 448.678571][T10031] WARNING: possible circular locking dependency detected [ 448.686233][T10031] syzkaller #0 Not tainted [ 448.690752][T10031] ------------------------------------------------------ [ 448.698069][T10031] syz.1.1242/10031 is trying to acquire lock: [ 448.704294][T10031] ffff8880535180c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_xattr_get+0x10a/0x6a0 [ 448.714942][T10031] [ 448.714942][T10031] but task is already holding lock: [ 448.723720][T10031] ffff88807adc0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x313/0x1060 [ 448.735170][T10031] [ 448.735170][T10031] which lock already depends on the new lock. [ 448.735170][T10031] [ 448.745858][T10031] [ 448.745858][T10031] the existing dependency chain (in reverse order) is: [ 448.754864][T10031] [ 448.754864][T10031] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 448.763458][T10031] percpu_down_read+0x44/0x1a0 [ 448.769260][T10031] ext4_writepages+0x1a4/0x350 [ 448.774571][T10031] do_writepages+0x351/0x590 [ 448.779809][T10031] __writeback_single_inode+0x14e/0xee0 [ 448.785989][T10031] writeback_single_inode+0x21f/0x760 [ 448.793019][T10031] write_inode_now+0x183/0x210 [ 448.798757][T10031] iput+0x58f/0x900 [ 448.803104][T10031] ext4_xattr_block_set+0x248b/0x2fe0 [ 448.809710][T10031] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 448.817624][T10031] __ext4_expand_extra_isize+0x306/0x400 [ 448.824557][T10031] __ext4_mark_inode_dirty+0x458/0x6d0 [ 448.831027][T10031] ext4_evict_inode+0x7dd/0xe70 [ 448.836845][T10031] evict+0x4b7/0x8a0 [ 448.841547][T10031] ext4_orphan_cleanup+0xc33/0x1470 [ 448.847543][T10031] ext4_fill_super+0x5fb5/0x6870 [ 448.853172][T10031] get_tree_bdev+0x3e5/0x520 [ 448.858321][T10031] vfs_get_tree+0x8c/0x280 [ 448.863338][T10031] do_new_mount+0x24a/0xa40 [ 448.869593][T10031] __se_sys_mount+0x2e7/0x3d0 [ 448.875685][T10031] do_syscall_64+0x55/0xb0 [ 448.882069][T10031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.888662][T10031] [ 448.888662][T10031] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 448.896680][T10031] __lock_acquire+0x37ef/0x7d80 [ 448.902675][T10031] lock_acquire+0x19e/0x420 [ 448.908187][T10031] down_read+0x46/0x2e0 [ 448.913758][T10031] ext4_xattr_get+0x10a/0x6a0 [ 448.920069][T10031] ext4_get_acl+0x84/0x6e0 [ 448.925017][T10031] __get_acl+0x273/0x400 [ 448.929805][T10031] posix_acl_create+0x131/0x440 [ 448.935523][T10031] ext4_init_acl+0xbb/0x330 [ 448.940637][T10031] __ext4_new_inode+0x2f68/0x3ad0 [ 448.946185][T10031] ext4_ext_migrate+0x6ca/0x1060 [ 448.952035][T10031] ext4_ioctl+0x1ede/0x3b70 [ 448.958382][T10031] __se_sys_ioctl+0xfd/0x170 [ 448.964651][T10031] do_syscall_64+0x55/0xb0 [ 448.970439][T10031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.978630][T10031] [ 448.978630][T10031] other info that might help us debug this: [ 448.978630][T10031] [ 448.989318][T10031] Possible unsafe locking scenario: [ 448.989318][T10031] [ 448.997308][T10031] CPU0 CPU1 [ 449.002927][T10031] ---- ---- [ 449.008390][T10031] lock(&sbi->s_writepages_rwsem); [ 449.014583][T10031] lock(&ei->xattr_sem); [ 449.021535][T10031] lock(&sbi->s_writepages_rwsem); [ 449.029509][T10031] rlock(&ei->xattr_sem); [ 449.034205][T10031] [ 449.034205][T10031] *** DEADLOCK *** [ 449.034205][T10031] [ 449.043261][T10031] 3 locks held by syz.1.1242/10031: [ 449.048897][T10031] #0: ffff8880502f4418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 [ 449.059204][T10031] #1: ffff888053518410 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: ext4_ioctl+0x1ed6/0x3b70 [ 449.070195][T10031] #2: ffff88807adc0c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x313/0x1060 [ 449.081454][T10031] [ 449.081454][T10031] stack backtrace: [ 449.087441][T10031] CPU: 1 PID: 10031 Comm: syz.1.1242 Not tainted syzkaller #0 [ 449.095516][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.105951][T10031] Call Trace: [ 449.109494][T10031] [ 449.112679][T10031] dump_stack_lvl+0x18c/0x250 [ 449.117469][T10031] ? load_image+0x420/0x420 [ 449.122137][T10031] ? show_regs_print_info+0x20/0x20 [ 449.127536][T10031] ? print_circular_bug+0x12b/0x1a0 [ 449.132908][T10031] check_noncircular+0x2fc/0x400 [ 449.138135][T10031] ? look_up_lock_class+0x75/0x140 [ 449.143427][T10031] ? print_deadlock_bug+0x5d0/0x5d0 [ 449.149198][T10031] ? lockdep_lock+0xf5/0x230 [ 449.153990][T10031] ? _find_first_zero_bit+0xd6/0x100 [ 449.159624][T10031] __lock_acquire+0x37ef/0x7d80 [ 449.164503][T10031] ? __kmem_cache_free+0xba/0x1f0 [ 449.170160][T10031] ? verify_lock_unused+0x140/0x140 [ 449.175556][T10031] ? verify_lock_unused+0x140/0x140 [ 449.181389][T10031] ? mark_lock+0x94/0x320 [ 449.186203][T10031] lock_acquire+0x19e/0x420 [ 449.190875][T10031] ? ext4_xattr_get+0x10a/0x6a0 [ 449.196392][T10031] ? __might_sleep+0xe0/0xe0 [ 449.201266][T10031] ? read_lock_is_recursive+0x20/0x20 [ 449.206663][T10031] ? get_cached_acl+0xe5/0x540 [ 449.211874][T10031] ? __lock_acquire+0x7d80/0x7d80 [ 449.217964][T10031] down_read+0x46/0x2e0 [ 449.222935][T10031] ? ext4_xattr_get+0x10a/0x6a0 [ 449.227993][T10031] ext4_xattr_get+0x10a/0x6a0 [ 449.233141][T10031] ? get_cached_acl+0x4fb/0x540 [ 449.238165][T10031] ext4_get_acl+0x84/0x6e0 [ 449.242673][T10031] ? ext4_orphan_file_empty+0x250/0x250 [ 449.248335][T10031] __get_acl+0x273/0x400 [ 449.252877][T10031] ? get_inode_acl+0x30/0x30 [ 449.257663][T10031] ? dquot_alloc_inode+0x15e/0xa40 [ 449.263261][T10031] ? __lock_acquire+0x7d80/0x7d80 [ 449.268460][T10031] posix_acl_create+0x131/0x440 [ 449.273680][T10031] ext4_init_acl+0xbb/0x330 [ 449.278395][T10031] ? __ext4_set_acl+0x6e0/0x6e0 [ 449.283448][T10031] ? insert_inode_locked+0x389/0x3e0 [ 449.288937][T10031] ? ext4_has_metadata_csum+0x132/0x1d0 [ 449.294676][T10031] __ext4_new_inode+0x2f68/0x3ad0 [ 449.300061][T10031] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 449.306589][T10031] ? lockdep_hardirqs_on+0x98/0x150 [ 449.312233][T10031] ? from_kgid+0x153/0x6a0 [ 449.316861][T10031] ? make_kgid+0x650/0x650 [ 449.321467][T10031] ext4_ext_migrate+0x6ca/0x1060 [ 449.326597][T10031] ? rcu_read_lock_any_held+0xb4/0x140 [ 449.332331][T10031] ? mb_regenerate_buddy+0x510/0x510 [ 449.338254][T10031] ? down_read_killable+0x340/0x340 [ 449.343557][T10031] ? mnt_want_write_file+0x178/0x200 [ 449.349308][T10031] ext4_ioctl+0x1ede/0x3b70 [ 449.354030][T10031] ? ext4_fileattr_set+0x16e0/0x16e0 [ 449.359415][T10031] ? mark_lock+0x94/0x320 [ 449.363933][T10031] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 449.370237][T10031] ? do_vfs_ioctl+0x156c/0x1cc0 [ 449.375470][T10031] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 449.381478][T10031] ? tomoyo_path_number_perm+0x217/0x5e0 [ 449.387167][T10031] ? __lock_acquire+0x7d80/0x7d80 [ 449.392434][T10031] ? slab_free_freelist_hook+0x130/0x1a0 [ 449.398152][T10031] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 449.403973][T10031] ? __kmem_cache_free+0xba/0x1f0 [ 449.409183][T10031] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 449.415019][T10031] ? tomoyo_path_number_perm+0x217/0x5e0 [ 449.420942][T10031] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 449.426884][T10031] ? __fget_files+0x28/0x460 [ 449.431884][T10031] ? bpf_lsm_file_ioctl+0x9/0x10 [ 449.437120][T10031] ? security_file_ioctl+0x80/0xa0 [ 449.442775][T10031] ? ext4_fileattr_set+0x16e0/0x16e0 [ 449.448058][T10031] __se_sys_ioctl+0xfd/0x170 [ 449.454092][T10031] do_syscall_64+0x55/0xb0 [ 449.459765][T10031] ? clear_bhb_loop+0x40/0x90 [ 449.465693][T10031] ? clear_bhb_loop+0x40/0x90 [ 449.471284][T10031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.477674][T10031] RIP: 0033:0x7f9bcb59de59 [ 449.482611][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.503027][T10031] RSP: 002b:00007f9bcc4ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.512423][T10031] RAX: ffffffffffffffda RBX: 00007f9bcb825fa0 RCX: 00007f9bcb59de59 [ 449.521212][T10031] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 449.530432][T10031] RBP: 00007f9bcb633e6f R08: 0000000000000000 R09: 0000000000000000 [ 449.538668][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.548075][T10031] R13: 00007f9bcb826038 R14: 00007f9bcb825fa0 R15: 00007ffcaf21c7b8 [ 449.556366][T10031] [ 449.591107][ T3508] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 449.624153][ T3508] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:11: Failed to release dquot type 1 [ 449.783953][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.878561][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3 [ 449.957973][ T5973] udevd[5973]: incorrect cramfs checksum on /dev/loop3p1 [ 449.970454][ T5765] udevd[5765]: incorrect cramfs checksum on /dev/loop3p2 [ 450.061955][ T971] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 450.069177][ T971] usb 1-1: No valid video chain found. [ 450.098279][ T971] usb 1-1: USB disconnect, device number 14 [ 451.460991][ T27] vhci_hcd: vhci_device speed not set