last executing test programs: 3.315210834s ago: executing program 3 (id=1326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xd, "f42a97b96d025891dd3f75fdda"}}) 3.087465494s ago: executing program 3 (id=1329): mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x10000100) 2.868004144s ago: executing program 2 (id=1332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2.867448434s ago: executing program 3 (id=1334): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f00000000c0)=0x6) 2.666982512s ago: executing program 2 (id=1336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 2.517337599s ago: executing program 1 (id=1338): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0x7fff, 0x4) 2.517011439s ago: executing program 2 (id=1339): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_add_watch(0xffffffffffffffff, 0x0, 0x32a722fe618e2b7e) 2.27251691s ago: executing program 4 (id=1342): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 2.165014765s ago: executing program 1 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, r1, 0x1, 0x70bd2c, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x6}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8e00000000000000005dfed183"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x50}}, 0x40) 2.024541531s ago: executing program 1 (id=1346): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0) 1.903465366s ago: executing program 4 (id=1347): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}, @window={0x3, 0x8, 0x95ef}, @mss={0x2, 0x443c}, @sack_perm, @window={0x3, 0x4, 0xfffa}], 0x8) 1.799452691s ago: executing program 4 (id=1348): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.750728903s ago: executing program 0 (id=1349): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x1, 0x7fffffffffffffff, 0x4}, 0x0, 0x0, 0x0) 1.58758238s ago: executing program 4 (id=1350): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) 1.528003253s ago: executing program 4 (id=1351): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@inode32}, {@swalloc}, {@prjquota}]}, 0x1, 0x97e9, &(0x7f000001c700)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6e) write$binfmt_elf64(r0, 0x0, 0x5b0) 1.505669033s ago: executing program 2 (id=1352): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x280c413, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0xe51}}, {@noinit_itable}]}, 0x0, 0x576, &(0x7f0000000740)="$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") 1.223348656s ago: executing program 3 (id=1353): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x84, 0x77, 0x0, 0x0, @time={0x3fffffff, 0x428}, {0xfd}, {0x27}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x3}, @queue={0x80, {0x200, 0x5}}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0x10, 0x3}, {0x6, 0xc}}}, {0x6, 0x6, 0x9, 0xa9, @tick=0xab, {0x7f, 0x10}, {0x0, 0x1}, @ext={0x0, 0x0}}], 0x70) 1.175767938s ago: executing program 3 (id=1354): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 890.231801ms ago: executing program 2 (id=1355): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x2404c140) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 865.669592ms ago: executing program 3 (id=1356): socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 695.427969ms ago: executing program 2 (id=1357): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 695.031509ms ago: executing program 0 (id=1358): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001680)=[{{&(0x7f0000001700)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000004480)="0475076e56a475f6e228c3b9000000007871573a", 0x14}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010100, @remote}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001740)=[@ip_retopts={{0x10}}, @ip_retopts={{0x75}}], 0x20}}], 0x2, 0x48c0) 641.311252ms ago: executing program 0 (id=1359): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x80) 506.940428ms ago: executing program 0 (id=1360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0xf000000000000000, 0x100000, 0x6f7112dd, 0x0, 0x6}) 423.444881ms ago: executing program 1 (id=1361): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000080000002000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001000000040000e0150104"], 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) 327.268396ms ago: executing program 4 (id=1362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000080007006e617400140004800800014000000003080002"], 0xb8}}, 0x0) 245.221479ms ago: executing program 0 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 183.542192ms ago: executing program 1 (id=1364): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast1, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 88.190926ms ago: executing program 1 (id=1365): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x4018, 0x3, 0x268, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xffffffff, 'bond0\x00', 'wg1\x00', {}, {}, 0x6c, 0x2, 0x19}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x0, 0x2}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000001c0)={'\x00', 0x10001, 0x1, 0x1}) 0s ago: executing program 0 (id=1366): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): T5094] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota. [ 120.415006][ T5094] ntfs: (device loop2): load_system_files(): Failed to load $Quota. Will not be able to remount read-write. Run chkdsk. [ 120.743803][ T5108] capability: warning: `syz.4.287' uses deprecated v2 capabilities in a way that may be insecure [ 120.830252][ T5108] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 120.870997][ T5108] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 121.608851][ T5100] loop1: detected capacity change from 0 to 40427 [ 121.692164][ T5100] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 121.748020][ T5100] F2FS-fs (loop1): invalid crc value [ 121.781637][ T5100] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.784382][ T5104] loop3: detected capacity change from 0 to 32768 [ 121.935696][ T5104] XFS (loop3): Mounting V5 Filesystem [ 122.090043][ T5104] XFS (loop3): Ending clean mount [ 122.120645][ T5100] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.169554][ T5104] XFS (loop3): Quotacheck needed: Please wait. [ 122.329901][ T5104] XFS (loop3): Quotacheck: Done. [ 122.561496][ T4277] XFS (loop3): Unmounting Filesystem [ 122.664124][ T4267] syz-executor: attempt to access beyond end of device [ 122.664124][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.258711][ T4344] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.468355][ T4344] usb 5-1: Using ep0 maxpacket: 16 [ 123.491268][ T4344] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.538795][ T4344] usb 5-1: config 0 has no interface number 0 [ 123.568246][ T4344] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.638147][ T4344] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.668353][ T4344] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 123.719324][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.761387][ T4344] usb 5-1: config 0 descriptor?? [ 123.891363][ T5148] loop3: detected capacity change from 0 to 256 [ 123.953181][ T5148] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f78e84, utbl_chksum : 0xe619d30d) [ 124.124243][ T5136] loop2: detected capacity change from 0 to 32768 [ 124.279264][ T5136] XFS (loop2): Mounting V5 Filesystem [ 124.419250][ T4344] uclogic 0003:28BD:0071.0002: pen parameters not found [ 124.427013][ T4344] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 124.435254][ T5136] XFS (loop2): Ending clean mount [ 124.450317][ T5164] netlink: 48 bytes leftover after parsing attributes in process `syz.0.306'. [ 124.504909][ T5136] XFS (loop2): Quotacheck needed: Please wait. [ 124.615829][ T5136] XFS (loop2): Quotacheck: Done. [ 124.642457][ T4384] usb 5-1: USB disconnect, device number 6 [ 124.738554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.800877][ T4274] XFS (loop2): Unmounting Filesystem [ 125.251091][ T5177] bridge0: port 3(vlan2) entered blocking state [ 125.274753][ T5177] bridge0: port 3(vlan2) entered disabled state [ 126.396983][ T5198] loop4: detected capacity change from 0 to 8192 [ 126.467174][ T5198] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.562056][ T5188] loop3: detected capacity change from 0 to 32768 [ 126.575606][ T5198] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 126.635331][ T5198] REISERFS (device loop4): using ordered data mode [ 126.679634][ T5198] reiserfs: using flush barriers [ 126.748223][ T5198] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.838793][ T5198] REISERFS (device loop4): checking transaction log (loop4) [ 126.871103][ T5198] REISERFS (device loop4): Using r5 hash to sort names [ 126.888576][ T5198] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 126.895740][ T5188] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 127.308636][ T5188] (syz.3.315,5188,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 127.441066][ T5214] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 127.502857][ T5214] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 127.558294][ T5214] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 127.558294][ T5214] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 127.655389][ T5214] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 127.673051][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 127.691473][ T5218] loop2: detected capacity change from 0 to 4096 [ 127.723269][ T5214] CUSE: DEVNAME unspecified [ 127.729712][ T5218] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 127.772279][ T4384] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.813786][ T5207] loop0: detected capacity change from 0 to 32768 [ 127.969817][ T4384] usb 2-1: Using ep0 maxpacket: 32 [ 127.996983][ T4384] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 128.033105][ T4384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.037591][ T5207] XFS (loop0): Mounting V5 Filesystem [ 128.059158][ T4384] usb 2-1: config 0 descriptor?? [ 128.281429][ T4384] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 128.351457][ T4384] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.409718][ T4384] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 128.440938][ T4384] usb 2-1: media controller created [ 128.469075][ T5207] XFS (loop0): Ending clean mount [ 128.491280][ T5207] XFS (loop0): Quotacheck needed: Please wait. [ 128.539460][ T4384] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.661865][ T4384] az6027: usb out operation failed. (-71) [ 128.699600][ T4384] az6027: usb out operation failed. (-71) [ 128.722102][ T5207] XFS (loop0): Quotacheck: Done. [ 128.726628][ T4384] stb0899_attach: Driver disabled by Kconfig [ 128.746913][ T4384] az6027: no front-end attached [ 128.746913][ T4384] [ 128.766061][ T5241] loop7: detected capacity change from 0 to 524255232 [ 128.778372][ T4384] az6027: usb out operation failed. (-71) [ 128.805095][ T4384] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.847960][ T4384] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 128.877507][ T4266] XFS (loop0): Unmounting Filesystem [ 128.921426][ T4384] dvb-usb: schedule remote query interval to 400 msecs. [ 128.957306][ T4384] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 129.003839][ T4384] usb 2-1: USB disconnect, device number 5 [ 129.105292][ T5248] loop3: detected capacity change from 0 to 1024 [ 129.210906][ T4384] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 129.399731][ T5248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.669150][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 129.967000][ T5266] Â: renamed from pim6reg1 [ 130.213208][ T5256] loop2: detected capacity change from 0 to 32768 [ 130.324413][ T5256] XFS (loop2): Mounting V5 Filesystem [ 130.450523][ T5281] loop0: detected capacity change from 0 to 512 [ 130.562755][ T5281] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 130.578123][ T5256] XFS (loop2): Ending clean mount [ 130.655216][ T5256] XFS (loop2): Quotacheck needed: Please wait. [ 130.692267][ T5291] loop3: detected capacity change from 0 to 64 [ 130.718386][ T5281] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 130.789080][ T5281] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.332: Failed to acquire dquot type 1 [ 130.855025][ T5291] hfs: request for non-existent node 1280 in B*Tree [ 130.898563][ T5256] XFS (loop2): Quotacheck: Done. [ 130.901451][ T5291] hfs: request for non-existent node 1280 in B*Tree [ 130.919133][ T5293] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 130.990318][ T5281] EXT4-fs (loop0): 1 truncate cleaned up [ 131.023940][ T5281] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.065957][ T5281] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.092162][ T4412] hfs: request for non-existent node 1280 in B*Tree [ 131.111785][ T4412] hfs: request for non-existent node 1280 in B*Tree [ 131.234794][ T5295] loop4: detected capacity change from 0 to 4096 [ 131.246364][ T5297] loop1: detected capacity change from 0 to 512 [ 131.254643][ T4274] XFS (loop2): Unmounting Filesystem [ 131.320965][ T5295] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 131.371152][ T5297] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 131.393630][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 131.434256][ T5297] EXT4-fs (loop1): invalid journal inode [ 131.477430][ T5297] EXT4-fs (loop1): can't get journal size [ 131.680171][ T5297] EXT4-fs (loop1): 1 truncate cleaned up [ 131.686279][ T5297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.022245][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 132.115460][ T5308] loop0: detected capacity change from 0 to 128 [ 132.246205][ T5308] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 132.344887][ T5308] hpfs: filesystem error: improperly stopped [ 132.395804][ T5308] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 132.436271][ T5308] hpfs: You really don't want any checks? You are crazy... [ 132.463567][ T5308] hpfs: hpfs_map_sector(): read error [ 132.489739][ T5308] hpfs: code page support is disabled [ 132.527352][ T5308] hpfs: hpfs_map_4sectors(): unaligned read [ 132.552301][ T5308] hpfs: hpfs_map_4sectors(): unaligned read [ 132.582507][ T5308] hpfs: filesystem error: unable to find root dir [ 132.852784][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 132.916908][ C1] sched: RT throttling activated [ 132.951843][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987399][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.057654][ T5306] loop3: detected capacity change from 0 to 131072 [ 133.081695][ T5306] F2FS-fs (loop3): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 133.090559][ T5306] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 133.102192][ T5306] F2FS-fs (loop3): invalid crc value [ 133.175290][ T5306] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.273991][ T5306] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 133.281510][ T5306] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 133.333252][ T5329] vcan0: tx address claim with dlc 0 [ 133.354042][ T5306] fscrypt (loop3, inode 8): Error -61 getting encryption context [ 134.035055][ T5349] loop3: detected capacity change from 0 to 1024 [ 134.720906][ T5335] loop2: detected capacity change from 0 to 32768 [ 135.383820][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 135.607482][ T5379] loop3: detected capacity change from 0 to 512 [ 135.660249][ T5379] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.714786][ T5379] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.723688][ T5379] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 135.739506][ T5379] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.756907][ T5379] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 135.767841][ T5379] EXT4-fs (loop3): 1 truncate cleaned up [ 135.775714][ T5379] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.876923][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 136.392401][ T4384] Process accounting resumed [ 136.515291][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 136.668245][ T5406] loop4: detected capacity change from 0 to 512 [ 136.705339][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 136.726038][ T5406] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 136.742397][ T14] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 136.757780][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.766557][ T14] usb 1-1: Product: syz [ 136.771214][ T14] usb 1-1: Manufacturer: syz [ 136.776535][ T5406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.793812][ T14] usb 1-1: SerialNumber: syz [ 136.803582][ T14] usb 1-1: config 0 descriptor?? [ 136.841016][ T14] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 136.877304][ T5406] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.043709][ T14] radio-usb-si4713: probe of 1-1:0.0 failed with error -71 [ 137.047887][ T5406] EXT4-fs (loop4): shut down requested (1) [ 137.120342][ T14] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 137.147137][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 137.162843][ T14] usb 1-1: USB disconnect, device number 2 [ 137.698096][ T5438] loop2: detected capacity change from 0 to 16 [ 137.771094][ T5438] erofs: (device loop2): mounted with root inode @ nid 36. [ 138.663477][ T5469] loop3: detected capacity change from 0 to 128 [ 138.680796][ T5472] raw_sendmsg: syz.0.427 forgot to set AF_INET. Fix it! [ 138.711754][ T5469] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.880354][ T5469] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.353755][ T33] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.761839][ T5473] loop2: detected capacity change from 0 to 131072 [ 139.782927][ T5473] F2FS-fs (loop2): invalid crc value [ 139.854661][ T5473] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.906176][ T5473] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 139.947534][ T5496] netlink: 92 bytes leftover after parsing attributes in process `syz.4.437'. [ 139.957029][ T5473] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 139.992006][ T5496] netem: unknown loss type 0 [ 140.022472][ T5496] netem: change failed [ 141.034563][ T5493] loop1: detected capacity change from 0 to 32768 [ 141.086974][ T5489] loop0: detected capacity change from 0 to 32768 [ 141.211751][ T5493] XFS (loop1): Mounting V5 Filesystem [ 141.430769][ T5493] XFS (loop1): Ending clean mount [ 141.455696][ T5498] loop4: detected capacity change from 0 to 32768 [ 141.459911][ T5493] XFS (loop1): Quotacheck needed: Please wait. [ 141.754971][ T5493] XFS (loop1): Quotacheck: Done. [ 142.500384][ T5534] loop4: detected capacity change from 0 to 4096 [ 142.531607][ T4267] XFS (loop1): Unmounting Filesystem [ 142.544952][ T5534] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 142.906989][ T5546] loop3: detected capacity change from 0 to 512 [ 142.996168][ T5546] EXT4-fs (loop3): orphan cleanup on readonly fs [ 143.090092][ T5546] EXT4-fs error (device loop3): ext4_quota_enable:7017: comm syz.3.457: inode #218103808: comm syz.3.457: iget: illegal inode # [ 143.176532][ T26] audit: type=1800 audit(1764039582.541:12): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.450" name="file1" dev="loop4" ino=24 res=0 errno=0 [ 143.202698][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.226265][ T5546] EXT4-fs error (device loop3): ext4_quota_enable:7020: comm syz.3.457: Bad quota inode: 218103808, type: 2 [ 143.287489][ T5546] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 143.362102][ T5546] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 143.411823][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.485570][ T4268] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 143.542604][ T5556] program syz.0.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.566678][ T4268] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 143.592958][ T5546] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 143.610413][ T4268] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 143.713239][ T5546] EXT4-fs error (device loop3): ext4_quota_enable:7017: comm syz.3.457: inode #218103808: comm syz.3.457: iget: illegal inode # [ 143.776449][ T5546] EXT4-fs error (device loop3): ext4_quota_enable:7020: comm syz.3.457: Bad quota inode: 218103808, type: 2 [ 143.833926][ T5546] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 143.946233][ T5559] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 144.027173][ T5559] EXT4-fs error (device loop3): ext4_quota_enable:7017: comm syz.3.457: inode #218103808: comm syz.3.457: iget: illegal inode # [ 144.138774][ T5559] EXT4-fs error (device loop3): ext4_quota_enable:7020: comm syz.3.457: Bad quota inode: 218103808, type: 2 [ 144.201217][ T5559] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 144.535842][ T5582] loop1: detected capacity change from 0 to 512 [ 144.649262][ T5582] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.468: invalid block [ 144.737858][ T5582] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 144.769643][ T5582] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.468: attempt to clear invalid blocks 983261 len 1 [ 144.873458][ T5582] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.468: invalid indirect mapped block 2683928664 (level 0) [ 144.893075][ T5582] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.468: Invalid inode table block 0 in block_group 0 [ 144.913296][ T5582] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 144.924494][ T5582] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 144.991190][ T5582] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.468: Invalid inode table block 0 in block_group 0 [ 145.033940][ T5582] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 145.057682][ T5582] EXT4-fs error (device loop1): ext4_truncate:4318: inode #13: comm syz.1.468: mark_inode_dirty error [ 145.071071][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 145.122026][ T5582] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 145.142909][ T5582] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.468: Invalid inode table block 0 in block_group 0 [ 145.187081][ T5582] EXT4-fs (loop1): 1 truncate cleaned up [ 145.208175][ T5582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.236158][ T5603] program syz.4.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.310315][ T5582] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.468: Invalid inode table block 0 in block_group 0 [ 145.468837][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 145.836102][ T5614] loop3: detected capacity change from 0 to 8192 [ 145.917329][ T5614] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 145.941180][ T5614] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 146.022093][ T5614] REISERFS (device loop3): using ordered data mode [ 146.047002][ T5614] reiserfs: using flush barriers [ 146.087596][ T5614] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.124765][ T5622] loop4: detected capacity change from 0 to 256 [ 146.195188][ T5627] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 146.195188][ T5627] The task syz.0.487 (5627) triggered the difference, watch for misbehavior. [ 146.215009][ T5614] REISERFS (device loop3): checking transaction log (loop3) [ 146.524744][ T5614] REISERFS (device loop3): Using tea hash to sort names [ 146.554554][ T5614] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 147.157768][ T5637] netlink: 48 bytes leftover after parsing attributes in process `syz.2.493'. [ 147.516099][ T5629] loop1: detected capacity change from 0 to 40427 [ 147.576424][ T5629] F2FS-fs (loop1): invalid crc value [ 147.638017][ T5629] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.950397][ T5629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.248057][ T5629] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 148.902850][ T5052] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.147345][ T5052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.190054][ T5052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.225128][ T5052] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 149.265705][ T5052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.304113][ T5052] usb 4-1: config 0 descriptor?? [ 149.749787][ T5052] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 149.953811][ T5052] usb 4-1: USB disconnect, device number 6 [ 150.633607][ T5673] use of bytesused == 0 is deprecated and will be removed in the future, [ 150.674943][ T5673] use the actual size instead. [ 150.706117][ T5677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.714238][ T5677] IPv6: NLM_F_CREATE should be set when creating new route [ 150.721899][ T5677] IPv6: NLM_F_CREATE should be set when creating new route [ 150.729242][ T5677] IPv6: NLM_F_CREATE should be set when creating new route [ 151.196679][ T5685] loop1: detected capacity change from 0 to 4096 [ 151.348871][ T5695] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.484300][ T5685] syz.1.513 (5685) used greatest stack depth: 19360 bytes left [ 151.497334][ T5701] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 151.519249][ T5697] loop3: detected capacity change from 0 to 2048 [ 151.549501][ T5697] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.675239][ T5697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.840794][ T5697] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.519: bg 0: block 234: padding at end of block bitmap is not set [ 151.925839][ T5697] EXT4-fs (loop3): Remounting filesystem read-only [ 152.112881][ T5715] loop4: detected capacity change from 0 to 512 [ 152.128944][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 152.137891][ T5052] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.337434][ T5052] usb 2-1: Using ep0 maxpacket: 32 [ 152.344634][ T5052] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 152.354193][ T5052] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 152.366309][ T5052] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 152.379367][ T5052] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 152.380671][ T5715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.392773][ T5052] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.396559][ T5052] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 152.423277][ T5052] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 152.432279][ T5052] usb 2-1: Product: syz [ 152.436530][ T5052] usb 2-1: Manufacturer: syz [ 152.441383][ T5052] usb 2-1: SerialNumber: syz [ 152.448732][ T5052] usb 2-1: config 0 descriptor?? [ 152.469798][ T5052] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 152.487186][ T5052] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 152.502076][ T5715] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.512873][ T4384] hid-generic 0005:15C2:3010.0004: item fetching failed at offset 0/1 [ 152.585390][ T5715] EXT4-fs error (device loop4): ext4_get_inode_usage:852: inode #12: comm syz.4.525: corrupted xattr block 6 [ 152.597897][ T4384] hid-generic: probe of 0005:15C2:3010.0004 failed with error -22 [ 152.674459][ T5724] tipc: Started in network mode [ 152.687460][ T5724] tipc: Node identity ff, cluster identity 4711 [ 152.704877][ T5724] tipc: Enabling of bearer rejected, failed to enable media [ 152.750790][ T5726] loop3: detected capacity change from 0 to 128 [ 152.768785][ T4384] usb 2-1: USB disconnect, device number 6 [ 152.819854][ T4384] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 152.844355][ T5726] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.867217][ T5732] sch_fq: defrate 0 ignored. [ 152.883753][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 152.959924][ T5726] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.122658][ T5726] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 153.198124][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 153.254495][ T5744] loop3: detected capacity change from 0 to 128 [ 153.278152][ T5744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.294895][ T5744] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.319015][ T5744] fscrypt (loop3, inode 12): Unsupported encryption flags (0x29) [ 153.404535][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 153.456738][ T4384] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.489644][ T5749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.537'. [ 153.581701][ T5753] netlink: 212 bytes leftover after parsing attributes in process `syz.1.539'. [ 153.636634][ T4384] usb 5-1: Using ep0 maxpacket: 8 [ 153.643686][ T4384] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.673401][ T4384] usb 5-1: config 179 has no interface number 0 [ 153.680359][ T4384] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.713878][ T4384] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.732238][ T4384] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.743872][ T4384] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 153.760743][ T4384] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.776102][ T4384] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 153.793198][ T4384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.826296][ T5742] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.927905][ T5761] device ip6gretap0 entered promiscuous mode [ 153.944432][ T5761] device ip6gretap0 left promiscuous mode [ 153.950947][ T5052] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.154835][ T4344] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 154.173885][ T5052] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 154.214888][ T5052] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.260102][ T5052] usb 2-1: config 0 descriptor?? [ 154.286147][ T5052] cp210x 2-1:0.0: cp210x converter detected [ 154.364762][ T4756] usb 5-1: USB disconnect, device number 7 [ 154.364784][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 154.379371][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.387794][ T4756] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 154.593194][ T5776] program syz.2.550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.639389][ T5047] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.682620][ T5052] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 154.701983][ T5052] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 154.717027][ T5052] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 154.737543][ T5052] usb 2-1: cp210x converter now attached to ttyUSB0 [ 154.760253][ T5052] usb 2-1: USB disconnect, device number 7 [ 154.779385][ T5052] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 154.808184][ T5052] cp210x 2-1:0.0: device disconnected [ 154.848753][ T5047] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.866074][ T5047] usb 4-1: config 0 has no interface number 0 [ 154.890111][ T5047] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 154.926192][ T5047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.935513][ T5047] usb 4-1: Product: syz [ 154.956111][ T5047] usb 4-1: Manufacturer: syz [ 154.974763][ T5047] usb 4-1: SerialNumber: syz [ 154.982954][ T5047] usb 4-1: config 0 descriptor?? [ 155.207717][ T5047] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 155.227481][ T5047] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.251371][ T5047] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 155.268876][ T5047] usb 4-1: media controller created [ 155.311331][ T5047] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.747368][ T5782] loop4: detected capacity change from 0 to 32768 [ 155.890563][ T5782] XFS (loop4): Mounting V5 Filesystem [ 155.989904][ T5782] XFS (loop4): Ending clean mount [ 156.088368][ T26] audit: type=1800 audit(1764039595.467:13): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.552" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 156.245038][ T4268] XFS (loop4): Unmounting Filesystem [ 156.467108][ T5047] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 156.553196][ T5806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.561'. [ 156.583026][ T5047] usb 4-1: USB disconnect, device number 7 [ 156.902467][ T5800] loop1: detected capacity change from 0 to 32768 [ 157.036340][ T5800] XFS (loop1): Mounting V5 Filesystem [ 157.171840][ T5817] sp0: Synchronizing with TNC [ 157.190156][ T5800] XFS (loop1): Ending clean mount [ 157.216539][ T5800] XFS (loop1): Quotacheck needed: Please wait. [ 157.349968][ T5800] XFS (loop1): Quotacheck: Done. [ 157.585401][ T4267] XFS (loop1): Unmounting Filesystem [ 157.800716][ T5810] loop2: detected capacity change from 0 to 32768 [ 157.831219][ T5810] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.563 (5810) [ 157.845281][ T4384] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.897700][ T5841] [U] ^G„ [ 157.902233][ T5840] [U] ^G [ 157.912403][ T5810] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 157.932951][ T5810] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 157.957974][ T5810] BTRFS info (device loop2): using free space tree [ 158.034454][ T4384] usb 5-1: Using ep0 maxpacket: 8 [ 158.058693][ T4384] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 158.094563][ T4384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.113259][ T4384] usb 5-1: Product: syz [ 158.128545][ T4384] usb 5-1: Manufacturer: syz [ 158.139849][ T4384] usb 5-1: SerialNumber: syz [ 158.165811][ T4384] usb 5-1: config 0 descriptor?? [ 158.182379][ T4384] gspca_main: se401-2.14.0 probing 047d:5003 [ 158.244831][ T5810] BTRFS info (device loop2): enabling ssd optimizations [ 158.383485][ T4274] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.581358][ T4384] gspca_se401: Frame size: 115x0 bayer [ 158.588131][ T4384] gspca_se401: Frame size: 0x0 1/16th janggu [ 158.608487][ T4384] gspca_se401: Frame size: 0x0 1/16th janggu [ 158.834488][ T4384] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 159.022078][ T5882] loop2: detected capacity change from 0 to 512 [ 159.029959][ T4384] usb 5-1: USB disconnect, device number 8 [ 159.078015][ T5882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.211592][ T5882] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 159.322061][ T5882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.403913][ T5882] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.601001][ T5896] loop4: detected capacity change from 0 to 2048 [ 159.644638][ T5896] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 159.705406][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 159.749424][ T5901] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.804204][ T5247] udevd[5247]: incorrect nilfs2 checksum on /dev/loop4 [ 159.830640][ T26] audit: type=1800 audit(1764039599.209:14): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.586" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 160.088849][ T5909] netlink: 'syz.0.589': attribute type 12 has an invalid length. [ 161.239434][ T5910] loop1: detected capacity change from 0 to 40427 [ 161.259706][ T5918] loop2: detected capacity change from 0 to 32768 [ 161.293235][ T5910] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 161.345360][ T5910] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 161.358556][ T5918] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 161.419075][ T5910] F2FS-fs (loop1): invalid crc value [ 161.441529][ T5910] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.513766][ T5910] F2FS-fs (loop1): Start checkpoint disabled! [ 161.570155][ T4274] (syz-executor,4274,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 161.595634][ T5910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 161.608814][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 161.828310][ T5910] F2FS-fs (loop1) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xf8c/0x1980 [ 162.079337][ T5928] loop4: detected capacity change from 0 to 40427 [ 162.158223][ T5928] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 162.245941][ T5928] F2FS-fs (loop4): invalid crc value [ 162.329564][ T5928] F2FS-fs (loop4): Found nat_bits in checkpoint [ 162.587173][ T5928] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.819481][ T4268] syz-executor: attempt to access beyond end of device [ 162.819481][ T4268] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.029360][ T5964] loop3: detected capacity change from 0 to 512 [ 163.089232][ T5964] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.258115][ T5964] EXT4-fs (loop3): 1 truncate cleaned up [ 163.319285][ T5964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.388566][ T5964] EXT4-fs (loop3): shut down requested (1) [ 163.456735][ T5974] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.466719][ T5974] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.475739][ T5974] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.485264][ T5974] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.551282][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 163.679907][ T4344] kernel write not supported for file /vcsa1 (pid: 4344 comm: kworker/0:4) [ 163.893678][ T5988] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 163.913068][ T5988] syzkaller0: linktype set to 804 [ 164.411231][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.626489][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 164.634947][ T5878] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.655578][ T5878] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.663006][ T5878] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 164.701122][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.707417][ T6007] loop2: detected capacity change from 0 to 1024 [ 164.713579][ T6005] loop4: detected capacity change from 0 to 136 [ 164.735714][ T6007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.743222][ T5878] usb 1-1: config 0 descriptor?? [ 164.766036][ T6007] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.799774][ T4508] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.853335][ T6007] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 164.873700][ T6007] System zones: 0-1, 3-36 [ 164.921200][ T6007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.171643][ T5878] cougar 0003:060B:500A.0005: usage count exceeds max: fixing up report descriptor [ 165.231480][ T5878] cougar 0003:060B:500A.0005: unexpected long global item [ 165.259806][ T5878] cougar 0003:060B:500A.0005: parse failed [ 165.279594][ T5878] cougar: probe of 0003:060B:500A.0005 failed with error -22 [ 165.317449][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 165.444429][ T5878] usb 1-1: USB disconnect, device number 3 [ 165.772700][ T6030] capability: warning: `syz.2.639' uses 32-bit capabilities (legacy support in use) [ 165.785891][ T6031] loop1: detected capacity change from 0 to 128 [ 165.812171][ T6031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.821801][ T6030] program syz.2.639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.840551][ T6031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.884912][ T6031] EXT4-fs (loop1): Test dummy encryption mode enabled [ 165.963097][ T6031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.010487][ T6031] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.517737][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.648'. [ 166.603825][ T6040] loop2: detected capacity change from 0 to 8192 [ 166.643457][ T6040] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.681813][ T6040] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 166.700128][ T6040] REISERFS (device loop2): using ordered data mode [ 166.707421][ T6040] reiserfs: using flush barriers [ 166.729763][ T6040] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.755170][ T6058] loop4: detected capacity change from 0 to 512 [ 166.762585][ T6040] REISERFS (device loop2): checking transaction log (loop2) [ 166.770228][ T14] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 166.809194][ T6058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.831945][ T6040] REISERFS (device loop2): Using r5 hash to sort names [ 166.844243][ T6040] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 166.855521][ T6031] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 166.921630][ T6061] tap0: tun_chr_ioctl cmd 2147767520 [ 166.939705][ T6058] EXT4-fs (loop4): 1 truncate cleaned up [ 166.952191][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.967517][ T6058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.982725][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.023171][ T14] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.066187][ T6058] fscrypt (loop4, inode 18): Reserved bits set in encryption policy [ 167.074868][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.097660][ T6031] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4 [ 167.105528][ T14] usb 4-1: config 0 descriptor?? [ 167.115006][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 167.136298][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 167.160419][ T6031] overlayfs: upper fs does not support tmpfile. [ 167.194136][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.203885][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 167.213802][ T14] usb 4-1: media controller created [ 167.226153][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.229657][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 167.248558][ T6031] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 167.287205][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 167.362074][ T6031] overlayfs: failed to resolve './file1/file0': -2 [ 167.396047][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 167.448326][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 167.465231][ T6069] program syz.2.651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.490356][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 167.517984][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.558924][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 167.671539][ T1169] dvb-usb: bulk message failed: -22 (1/0) [ 167.677812][ T1169] dvb-usb: error while querying for an remote control event. [ 167.881611][ T1169] dvb-usb: bulk message failed: -22 (1/0) [ 167.887446][ T1169] dvb-usb: error while querying for an remote control event. [ 167.897004][ T1169] usb 4-1: USB disconnect, device number 8 [ 167.947658][ T1169] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 168.257535][ T6098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 168.299779][ T4756] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.533602][ T4756] usb 5-1: Using ep0 maxpacket: 32 [ 168.554616][ T4756] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 168.580525][ T4756] usb 5-1: config 0 has no interface number 0 [ 168.597249][ T4756] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.634896][ T4756] usb 5-1: config 0 interface 85 has no altsetting 0 [ 168.654793][ T4756] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 168.684344][ T4756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.706138][ T4756] usb 5-1: Product: syz [ 168.721855][ T4756] usb 5-1: Manufacturer: syz [ 168.737938][ T4756] usb 5-1: SerialNumber: syz [ 168.760235][ T4756] usb 5-1: config 0 descriptor?? [ 168.878316][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 168.887798][ T6119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.673'. [ 169.338791][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 169.391238][ T4756] appletouch 5-1:0.85: Geyser mode initialized. [ 169.405463][ T4756] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input12 [ 169.542606][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 169.555261][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 169.620655][ T14] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 169.638331][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.638429][ T6129] loop1: detected capacity change from 0 to 256 [ 169.656331][ T14] usb 4-1: Product: syz [ 169.668607][ T14] usb 4-1: Manufacturer: syz [ 169.687966][ T14] usb 4-1: SerialNumber: syz [ 169.732845][ T14] usb 4-1: config 0 descriptor?? [ 169.753518][ T4384] usb 5-1: USB disconnect, device number 9 [ 169.759774][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 169.781782][ T14] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.791560][ T6129] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 169.805146][ T14] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 169.833345][ T4384] appletouch 5-1:0.85: input: appletouch disconnected [ 169.908120][ T6132] loop2: detected capacity change from 0 to 1024 [ 169.961636][ T6132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.114843][ T6132] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 170.138449][ T1169] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 170.270147][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 170.359104][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.398396][ T1169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.409323][ T14] em28xx 4-1:0.0: chip ID is em2870 [ 170.428307][ T1169] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 170.448216][ T1169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.473358][ T1169] usb 1-1: config 0 descriptor?? [ 170.695074][ T14] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 170.748200][ T14] em28xx 4-1:0.0: board has no eeprom [ 170.751009][ T6149] input: syz0 as /devices/virtual/input/input13 [ 170.828027][ T14] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 170.836135][ T14] em28xx 4-1:0.0: dvb set to bulk mode. [ 170.860246][ T4344] em28xx 4-1:0.0: Binding DVB extension [ 170.898395][ T14] usb 4-1: USB disconnect, device number 9 [ 170.915903][ T14] em28xx 4-1:0.0: Disconnecting em28xx [ 170.925843][ T1169] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 170.968818][ T1169] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 170.977023][ T1169] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 171.008180][ T1169] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 171.016402][ T1169] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 171.044203][ T1169] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 171.087964][ T1169] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 171.111883][ T4344] em28xx 4-1:0.0: Registering input extension [ 171.138677][ T1169] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 171.154689][ T14] em28xx 4-1:0.0: Closing input extension [ 171.184543][ T1169] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 171.214456][ C0] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init [ 171.291811][ T14] em28xx 4-1:0.0: Freeing device [ 171.456352][ T1169] usb 1-1: USB disconnect, device number 4 [ 171.461515][ T6147] loop1: detected capacity change from 0 to 32768 [ 171.534476][ T6147] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.685 (6147) [ 171.598280][ T6147] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 171.637817][ T6147] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 171.646653][ T6147] BTRFS info (device loop1): using free space tree [ 171.675291][ T6155] fido_id[6155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 171.947829][ T6147] BTRFS info (device loop1): enabling ssd optimizations [ 172.052527][ T4267] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.056219][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 172.575887][ T6200] loop7: detected capacity change from 0 to 7 [ 172.606769][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.617242][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.643203][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.652939][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.709119][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.721474][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.752118][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.762027][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.770568][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.779853][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.807473][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.816734][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.833203][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.842762][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.850883][ T6200] ldm_validate_partition_table(): Disk read failed. [ 172.859791][ T6207] binder: 6206:6207 ioctl c018620b 200000000100 returned -14 [ 172.909285][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.918695][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.932446][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.942288][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 172.992704][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.001999][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 173.015575][ T6200] Dev loop7: unable to read RDB block 0 [ 173.039915][ T6200] loop7: unable to read partition table [ 173.070321][ T6200] loop7: partition table beyond EOD, truncated [ 173.086058][ T6200] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 173.181815][ T6216] program syz.2.706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.419070][ T6225] loop2: detected capacity change from 0 to 128 [ 173.485726][ T6227] loop3: detected capacity change from 0 to 512 [ 173.540563][ T6227] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.613453][ T6230] loop4: detected capacity change from 0 to 128 [ 173.623933][ T6227] EXT4-fs (loop3): 1 truncate cleaned up [ 173.628089][ T6230] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.649973][ T6230] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.669669][ T6232] netlink: 'syz.1.712': attribute type 39 has an invalid length. [ 173.678807][ T6227] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.806010][ T6227] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #2: block 13: comm syz.3.711: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 173.831466][ T33] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.864247][ T6227] EXT4-fs (loop3): Remounting filesystem read-only [ 174.034346][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 174.180107][ T6236] loop4: detected capacity change from 0 to 4096 [ 174.188736][ T26] audit: type=1326 audit(1764039613.576:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ae038f749 code=0x0 [ 174.264708][ T6236] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 174.484799][ T11] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 174.506467][ T4268] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 174.513023][ T4268] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 174.545191][ T4268] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 174.556660][ T4365] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 174.586917][ T4268] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 175.404558][ T6254] loop4: detected capacity change from 0 to 32768 [ 175.635997][ T6264] loop3: detected capacity change from 0 to 8192 [ 175.696997][ T6264] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 175.750792][ T6264] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 175.766427][ T6264] REISERFS (device loop3): using ordered data mode [ 175.809048][ T6257] loop1: detected capacity change from 0 to 32768 [ 175.829873][ T6264] reiserfs: using flush barriers [ 175.914953][ T6264] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 175.970024][ T6275] netlink: 104 bytes leftover after parsing attributes in process `syz.2.728'. [ 175.982813][ T6257] XFS (loop1): Mounting V5 Filesystem [ 175.987341][ T6264] REISERFS (device loop3): checking transaction log (loop3) [ 176.004141][ T6278] loop4: detected capacity change from 0 to 512 [ 176.044150][ T6264] REISERFS (device loop3): Using r5 hash to sort names [ 176.075826][ T6264] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 176.113142][ T6278] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.729: inode #1: comm syz.4.729: iget: illegal inode # [ 176.149279][ T6264] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 176.175961][ T6257] XFS (loop1): Ending clean mount [ 176.202812][ T6257] XFS (loop1): Quotacheck needed: Please wait. [ 176.241687][ T6278] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.729: error while reading EA inode 1 err=-117 [ 176.268723][ T26] audit: type=1800 audit(1764039615.657:16): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.727" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 176.398230][ T6284] loop2: detected capacity change from 0 to 128 [ 176.409199][ T6278] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 176.425207][ T6257] XFS (loop1): Quotacheck: Done. [ 176.488866][ T6284] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 176.526019][ T6278] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.729: inode #1: comm syz.4.729: iget: illegal inode # [ 176.551673][ T6284] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.665133][ T6278] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.729: error while reading EA inode 1 err=-117 [ 176.747926][ T6278] EXT4-fs (loop4): 1 orphan inode deleted [ 176.779809][ T6278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 176.883069][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 176.920799][ T4267] XFS (loop1): Unmounting Filesystem [ 177.148844][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 177.358508][ T4384] kernel read not supported for file /rfkill (pid: 4384 comm: kworker/0:6) [ 177.415436][ T6299] loop4: detected capacity change from 0 to 1024 [ 177.854268][ T11] hfsplus: b-tree write err: -5, ino 4 [ 178.793329][ T6336] loop4: detected capacity change from 0 to 1024 [ 179.143306][ T11] hfsplus: b-tree write err: -5, ino 4 [ 179.253203][ T6347] loop4: detected capacity change from 0 to 8 [ 179.278321][ T6325] loop2: detected capacity change from 0 to 32768 [ 179.341656][ T14] kernel read not supported for file /rfkill (pid: 14 comm: kworker/0:1) [ 179.770878][ T6358] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 179.855643][ T6358] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 179.931879][ T6358] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 180.398197][ T6371] loop4: detected capacity change from 0 to 1024 [ 180.464716][ T6373] loop3: detected capacity change from 0 to 8 [ 180.552264][ T6373] SQUASHFS error: Failed to read block 0x260685: -5 [ 180.588882][ T6371] hfsplus: can't free extent [ 180.601033][ T6373] SQUASHFS error: Unable to read metadata cache entry [260685] [ 180.651127][ T6373] SQUASHFS error: Unable to read directory block [260685:0] [ 180.996574][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 181.194246][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 181.222938][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 181.238862][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 181.283131][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 181.303452][ T6387] netlink: 'syz.4.769': attribute type 6 has an invalid length. [ 181.449542][ T6369] loop2: detected capacity change from 0 to 32768 [ 181.559251][ T6369] XFS (loop2): Mounting V5 Filesystem [ 181.717278][ T6369] XFS (loop2): Ending clean mount [ 181.798105][ T26] audit: type=1326 audit(1764039621.190:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.4.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffbf8f749 code=0x7ffc0000 [ 181.908681][ T26] audit: type=1326 audit(1764039621.190:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.4.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8ffbf8f749 code=0x7ffc0000 [ 181.966876][ T4274] XFS (loop2): Unmounting Filesystem [ 181.995236][ T26] audit: type=1326 audit(1764039621.190:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.4.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ffbf8f783 code=0x7ffc0000 [ 182.061337][ T26] audit: type=1326 audit(1764039621.190:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.4.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ffbf8f783 code=0x7ffc0000 [ 182.135202][ T26] audit: type=1326 audit(1764039621.190:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.4.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffbf8f749 code=0x7ffc0000 [ 182.166081][ T26] audit: type=1326 audit(1764039621.190:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.4.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffbf8f749 code=0x7ffc0000 [ 182.214736][ T26] audit: type=1326 audit(1764039621.190:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.4.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffbf8f749 code=0x7ffc0000 [ 182.272066][ T6403] device macsec1 entered promiscuous mode [ 182.553620][ T6429] netlink: 76 bytes leftover after parsing attributes in process `syz.0.784'. [ 183.062751][ T6441] loop1: detected capacity change from 0 to 4096 [ 183.127478][ T6441] NILFS (loop1): invalid segment: Checksum error in segment payload [ 183.173458][ T6441] NILFS (loop1): trying rollback from an earlier position [ 183.237418][ T6441] NILFS (loop1): recovery complete [ 183.283377][ T6452] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.349147][ T6454] loop3: detected capacity change from 0 to 128 [ 183.383306][ T6454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.423394][ T6454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.446084][ T6454] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.539726][ T6454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 183.598338][ T6454] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.777302][ T6467] program syz.2.799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.795758][ T6468] netlink: 144 bytes leftover after parsing attributes in process `syz.0.800'. [ 183.896873][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 185.790164][ T6530] loop2: detected capacity change from 0 to 4096 [ 185.810637][ T6530] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 185.860250][ T6530] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 186.398359][ T6544] loop4: detected capacity change from 0 to 64 [ 186.825681][ T6553] loop3: detected capacity change from 0 to 64 [ 187.000470][ T6553] hfs: request for non-existent node 131072 in B*Tree [ 187.036321][ T6553] hfs: request for non-existent node 131072 in B*Tree [ 187.068418][ T6558] netlink: 'syz.1.843': attribute type 12 has an invalid length. [ 187.112188][ T6558] netlink: 120 bytes leftover after parsing attributes in process `syz.1.843'. [ 187.485242][ T6564] loop1: detected capacity change from 0 to 2048 [ 187.725435][ T6569] loop2: detected capacity change from 0 to 256 [ 187.738291][ T6568] device ip6gretap1 entered promiscuous mode [ 187.836109][ T6569] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 187.950074][ T6573] device sit0 entered promiscuous mode [ 188.011462][ T6573] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 188.040357][ T6576] loop4: detected capacity change from 0 to 256 [ 188.076933][ T6573] netlink: 1 bytes leftover after parsing attributes in process `syz.1.849'. [ 188.835237][ T6596] loop1: detected capacity change from 0 to 512 [ 188.864509][ T6596] EXT4-fs: Ignoring removed i_version option [ 188.880838][ T6596] EXT4-fs: Ignoring removed oldalloc option [ 188.975217][ T6596] EXT4-fs (loop1): 1 truncate cleaned up [ 189.007007][ T6603] loop3: detected capacity change from 0 to 512 [ 189.013484][ T6596] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 189.035357][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 189.041301][ T6603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.188895][ T6603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.206325][ T6596] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.861: invalid indirect mapped block 234881024 (level 0) [ 189.231840][ T5878] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.244126][ T5878] usb 3-1: config 0 has no interface number 0 [ 189.247492][ T6603] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.257307][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.289919][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.315125][ T5878] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.356364][ T5878] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 189.383731][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.426575][ T5878] usb 3-1: config 0 descriptor?? [ 189.435862][ T6615] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 189.489555][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 189.624062][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 190.062805][ T5878] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0007/input/input15 [ 190.187731][ T5878] uclogic 0003:28BD:0042.0007: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 190.255699][ T5878] usb 3-1: USB disconnect, device number 2 [ 190.534308][ T6632] fido_id[6632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 190.614732][ T6626] loop3: detected capacity change from 0 to 40427 [ 190.666098][ T6626] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 190.694684][ T6626] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 190.773834][ T6626] F2FS-fs (loop3): invalid crc value [ 190.831230][ T6626] F2FS-fs (loop3): Found nat_bits in checkpoint [ 191.063517][ T6626] F2FS-fs (loop3): Start checkpoint disabled! [ 191.088075][ T6626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 191.187499][ T6626] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xf8c/0x1980 [ 191.267833][ T4384] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.411050][ T4757] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 191.467865][ T4384] usb 1-1: Using ep0 maxpacket: 8 [ 191.476526][ T4384] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 191.515321][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.531256][ T4384] usb 1-1: config 0 descriptor?? [ 191.607617][ T4757] usb 2-1: Using ep0 maxpacket: 8 [ 191.616801][ T4757] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 191.646212][ T4757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.698796][ T4757] pvrusb2: Hardware description: Terratec Grabster AV400 [ 191.733148][ T4757] pvrusb2: ********** [ 191.746626][ T4757] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 191.796878][ T4757] pvrusb2: Important functionality might not be entirely working. [ 191.837059][ T4757] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 191.867992][ T4757] pvrusb2: ********** [ 191.884181][ T2309] pvrusb2: Invalid write control endpoint [ 191.952736][ T4384] uclogic 0003:145F:0212.0008: interface is invalid, ignoring [ 192.003423][ T2309] pvrusb2: Invalid write control endpoint [ 192.011162][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 192.022531][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 192.031431][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 192.043452][ T2309] pvrusb2: Device being rendered inoperable [ 192.050189][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 192.057946][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 192.070630][ T2309] pvrusb2: Attached sub-driver cx25840 [ 192.076964][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 192.090259][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 192.110770][ T6646] pvrusb2: Attempted to execute control transfer when device not ok [ 192.129757][ T4384] usb 2-1: USB disconnect, device number 8 [ 192.164503][ T6669] loop2: detected capacity change from 0 to 128 [ 192.169179][ T5878] usb 1-1: USB disconnect, device number 5 [ 192.407376][ T4757] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 192.597768][ T4757] usb 4-1: Using ep0 maxpacket: 8 [ 192.616081][ T4757] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 192.636652][ T4757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.649228][ T4757] usb 4-1: Product: syz [ 192.655601][ T4757] usb 4-1: Manufacturer: syz [ 192.666716][ T4757] usb 4-1: SerialNumber: syz [ 192.711181][ T4757] usb 4-1: config 0 descriptor?? [ 192.749938][ T4757] option 4-1:0.0: GSM modem (1-port) converter detected [ 192.953647][ T4757] usb 4-1: USB disconnect, device number 10 [ 192.968352][ T4757] option 4-1:0.0: device disconnected [ 193.034282][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 193.034300][ T26] audit: type=1326 audit(1764039632.426:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6690 comm="syz.1.901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f481038f749 code=0x0 [ 193.664455][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 193.904551][ T6730] loop3: detected capacity change from 0 to 2048 [ 193.929573][ T6733] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.349780][ T6743] netlink: 'syz.3.924': attribute type 298 has an invalid length. [ 194.365837][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372374][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.654465][ T6754] Bluetooth: MGMT ver 1.22 [ 194.791241][ T6756] loop1: detected capacity change from 0 to 1024 [ 194.867584][ T6756] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 194.934682][ T6764] loop4: detected capacity change from 0 to 64 [ 195.243215][ T6766] mmap: syz.3.935 (6766) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 195.946825][ T6763] loop2: detected capacity change from 0 to 32768 [ 196.025436][ T6763] XFS (loop2): Mounting V5 Filesystem [ 196.049267][ T6790] cgroup: fork rejected by pids controller in /syz3 [ 196.110139][ T6763] XFS (loop2): Ending clean mount [ 196.150467][ T6763] XFS (loop2): Quotacheck needed: Please wait. [ 196.284970][ T6763] XFS (loop2): Quotacheck: Done. [ 196.508316][ T4274] XFS (loop2): Unmounting Filesystem [ 197.368536][ T4344] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 197.405403][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 197.443964][ T6806] loop4: detected capacity change from 0 to 32768 [ 197.478984][ T6806] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.951 (6806) [ 197.509454][ T6806] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 197.552460][ T6806] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 197.570668][ T4344] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 197.587685][ T6806] BTRFS info (device loop4): enabling auto defrag [ 197.600866][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.617347][ T6806] BTRFS info (device loop4): use no compression [ 197.627497][ T6806] BTRFS info (device loop4): force clearing of disk cache [ 197.631845][ T4344] usb 2-1: Product: syz [ 197.637018][ T6806] BTRFS info (device loop4): max_inline at 4096 [ 197.648158][ T6806] BTRFS info (device loop4): disabling free space tree [ 197.657533][ T4344] usb 2-1: Manufacturer: syz [ 197.662560][ T4344] usb 2-1: SerialNumber: syz [ 197.674424][ T4344] usb 2-1: config 0 descriptor?? [ 197.912624][ T4344] usb 2-1: USB disconnect, device number 9 [ 197.942128][ T6806] BTRFS info (device loop4): enabling ssd optimizations [ 197.969366][ T6806] BTRFS info (device loop4): rebuilding free space tree [ 198.132584][ T6806] BTRFS info (device loop4): disabling free space tree [ 198.150358][ T6806] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.189833][ T6806] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.305883][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.317962][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.327163][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.343419][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.352457][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.362608][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.457674][ T4365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.607758][ T4365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.696396][ T4268] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.048184][ T4715] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop4 scanned by udevd (4715) [ 199.508164][ T4365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.700870][ T4365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.873590][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.031180][ T6844] chnl_net:caif_netlink_parms(): no params data found [ 200.095354][ T7] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 200.133361][ T7] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 200.172560][ T7] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 200.223737][ T7] usb 2-1: config 220 has no interface number 2 [ 200.231024][ T7] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 200.260711][ T7] usb 2-1: config 220 interface 0 has no altsetting 0 [ 200.283784][ T7] usb 2-1: config 220 interface 76 has no altsetting 0 [ 200.291637][ T7] usb 2-1: config 220 interface 1 has no altsetting 0 [ 200.307845][ T7] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 200.328971][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.342064][ T7] usb 2-1: Product: syz [ 200.348718][ T7] usb 2-1: Manufacturer: syz [ 200.360724][ T7] usb 2-1: SerialNumber: syz [ 200.433283][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 200.479909][ T6905] can0: slcan on ttyS3. [ 200.624300][ T7] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 200.641308][ T7] usb 2-1: No valid video chain found. [ 200.649249][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.653175][ T7] usb 2-1: selecting invalid altsetting 0 [ 200.678760][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.700388][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 200.718118][ T7] usb 2-1: selecting invalid altsetting 0 [ 200.721157][ T6844] device bridge_slave_0 entered promiscuous mode [ 200.734327][ T7] usbtest: probe of 2-1:220.1 failed with error -22 [ 200.761458][ T7] usb 2-1: USB disconnect, device number 10 [ 200.875919][ T6911] can0 (unregistered): slcan off ttyS3. [ 201.093202][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.103233][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.115790][ T6844] device bridge_slave_1 entered promiscuous mode [ 202.021334][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.137646][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.265285][ T6951] loop2: detected capacity change from 0 to 8 [ 202.404738][ T6844] team0: Port device team_slave_0 added [ 202.414798][ T6951] SQUASHFS error: lzo decompression failed, data probably corrupt [ 202.499429][ T6951] SQUASHFS error: Failed to read block 0x91: -5 [ 202.512253][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 202.534272][ T6951] SQUASHFS error: Unable to read metadata cache entry [8f] [ 202.550684][ T6844] team0: Port device team_slave_1 added [ 202.589371][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.601358][ T6951] SQUASHFS error: Unable to read inode 0x11f [ 202.607136][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.682077][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.915519][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.958175][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.079634][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.360549][ T6948] loop4: detected capacity change from 0 to 40427 [ 203.413198][ T6844] device hsr_slave_0 entered promiscuous mode [ 203.421131][ T6948] F2FS-fs (loop4): invalid crc value [ 203.439414][ T6844] device hsr_slave_1 entered promiscuous mode [ 203.464372][ T6844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.497336][ T6844] Cannot create hsr debugfs directory [ 203.509861][ T6948] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.741985][ T6948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 204.387519][ T6985] loop2: detected capacity change from 0 to 512 [ 204.477417][ T4715] blk_print_req_error: 10 callbacks suppressed [ 204.477436][ T4715] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.614037][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 204.640096][ T6988] loop4: detected capacity change from 0 to 512 [ 204.668552][ T6969] loop1: detected capacity change from 0 to 32768 [ 204.843754][ T6988] EXT4-fs (loop4): 1 orphan inode deleted [ 204.854370][ T6988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.944139][ T6988] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.980148][ T6993] loop2: detected capacity change from 0 to 1024 [ 204.983363][ T4715] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 205.545710][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 206.041012][ T4365] device hsr_slave_0 left promiscuous mode [ 206.064742][ T4365] device hsr_slave_1 left promiscuous mode [ 206.075730][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.088881][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.104854][ T7009] loop2: detected capacity change from 0 to 8192 [ 206.113915][ T7014] loop4: detected capacity change from 0 to 8 [ 206.121952][ T4365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.139892][ T4365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.161192][ T4365] device bridge_slave_1 left promiscuous mode [ 206.170880][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.202780][ T7014] SQUASHFS error: lzo decompression failed, data probably corrupt [ 206.229551][ T4365] device bridge_slave_0 left promiscuous mode [ 206.246480][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.252198][ T7014] SQUASHFS error: Failed to read block 0x91: -5 [ 206.295415][ T7014] SQUASHFS error: Unable to read metadata cache entry [8f] [ 206.321484][ T7014] SQUASHFS error: Unable to read inode 0x11f [ 206.340717][ T3598] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 206.386501][ T4365] device veth1_macvtap left promiscuous mode [ 206.405917][ T4365] device veth0_macvtap left promiscuous mode [ 206.422674][ T4365] device veth1_vlan left promiscuous mode [ 206.444879][ T4365] device veth0_vlan left promiscuous mode [ 206.511953][ T3638] udevd[3638]: worker [5247] terminated by signal 33 (Unknown signal 33) [ 206.528489][ T3638] udevd[3638]: worker [5247] failed while handling '/devices/virtual/block/loop4' [ 206.542264][ T3598] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.574200][ T3598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.619048][ T3598] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.649470][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.669538][ T3598] usb 2-1: SerialNumber: syz [ 206.674370][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 206.674409][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 206.674437][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 206.674466][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 206.681143][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 206.862496][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 206.934090][ T3598] usb 2-1: 0:2 : does not exist [ 206.975638][ T3598] usb 2-1: USB disconnect, device number 11 [ 207.079940][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 207.087875][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.099583][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.110865][ T5878] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 207.120751][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.132626][ T5878] usb 1-1: config 0 descriptor?? [ 207.270598][ T4715] udevd[4715]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.569282][ T5878] ft260 0003:0403:6030.0009: unknown main item tag 0x7 [ 207.582483][ T5878] ft260 0003:0403:6030.0009: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 207.647328][ T4365] team0 (unregistering): Port device team_slave_1 removed [ 207.712650][ T4365] team0 (unregistering): Port device team_slave_0 removed [ 207.772835][ T5878] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 207.792220][ T4365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.863918][ T4365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.981006][ T5878] ft260 0003:0403:6030.0009: failed to retrieve system status [ 208.017419][ T5878] ft260: probe of 0003:0403:6030.0009 failed with error -71 [ 208.045626][ T5878] usb 1-1: USB disconnect, device number 6 [ 208.058617][ T4508] udevd[4508]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 208.190180][ T7021] fido_id[7021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 208.884505][ T4365] bond0 (unregistering): Released all slaves [ 209.096227][ T7028] device macvlan0 entered promiscuous mode [ 209.699155][ T6844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.808541][ T6844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.851137][ T6844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.860910][ T7044] loop4: detected capacity change from 0 to 4096 [ 209.905559][ T6844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.971093][ T7044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 210.126200][ T7063] EXT4-fs: Cannot change quota options when quota turned on [ 210.177395][ T7061] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 210.236456][ T7061] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 210.483218][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.524290][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 210.582652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.591935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.626841][ T6844] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.780078][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.808911][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.843165][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.850415][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.938363][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.947645][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.998840][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.006024][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.065279][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.095324][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.125797][ T7078] netlink: 'syz.4.1028': attribute type 1 has an invalid length. [ 211.145768][ T7078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'. [ 211.218719][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.237459][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.325473][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.372910][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.398732][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.420017][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.438502][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.452915][ T6844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.480466][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.494067][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.509150][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.522917][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.891117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.903836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.929626][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.958468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.970266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.994555][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.006936][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.022021][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.037062][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.045860][ T6844] device veth0_vlan entered promiscuous mode [ 212.061378][ T6844] device veth1_vlan entered promiscuous mode [ 212.096391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.105434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.121435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.134450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.152019][ T6844] device veth0_macvtap entered promiscuous mode [ 212.165839][ T6844] device veth1_macvtap entered promiscuous mode [ 212.186558][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.203561][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.213834][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.230565][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.240914][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.251938][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.262258][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.274913][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.292420][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.304600][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.314156][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.332810][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.345506][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.365886][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.381757][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.394619][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.411170][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.424016][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.442855][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.454961][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.471150][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.484524][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.502442][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.518280][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.542450][ T6844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.558381][ T6844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.571450][ T6844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.581592][ T6844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.698413][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.706838][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.749482][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.754298][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.771744][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.785095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.463602][ T7141] loop4: detected capacity change from 0 to 2048 [ 213.649726][ T7141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 213.666694][ T7141] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.740899][ T7149] device batadv_slave_0 entered promiscuous mode [ 213.749963][ T7149] batman_adv: batadv0: Adding interface: macvtap1 [ 213.756987][ T7149] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 213.781777][ T7149] batman_adv: batadv0: Interface activated: macvtap1 [ 214.035448][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 214.223726][ T7158] loop4: detected capacity change from 0 to 1024 [ 214.279528][ T7132] loop3: detected capacity change from 0 to 32768 [ 214.299853][ T7158] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 214.330193][ T7138] loop2: detected capacity change from 0 to 32768 [ 214.351269][ T7138] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1041 (7138) [ 214.526795][ T7138] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 214.540906][ T7165] loop1: detected capacity change from 0 to 128 [ 214.593815][ T7138] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 214.619813][ T7165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 214.640561][ T7164] EXT4-fs warning (device loop4): empty_inline_dir:1874: bad inline directory (dir #12) - no `..' [ 214.655151][ T7138] BTRFS info (device loop2): enabling ssd optimizations [ 214.673050][ T7138] BTRFS info (device loop2): turning off barriers [ 214.681394][ T7138] BTRFS info (device loop2): use no compression [ 214.688857][ T7138] BTRFS info (device loop2): using free space tree [ 214.718009][ T7165] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.750221][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.855701][ T26] audit: type=1800 audit(1764039654.257:28): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1050" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 214.977417][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 215.068247][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 215.441760][ T4274] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 215.632381][ T4715] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by udevd (4715) [ 215.999215][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 216.091975][ T7216] IPVS: Error joining to the multicast group [ 216.231322][ T7220] loop3: detected capacity change from 0 to 4096 [ 216.296262][ T7220] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.336138][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1067'. [ 216.420576][ T4757] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 216.585326][ T4355] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 216.608810][ T4757] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 216.640928][ T4757] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 216.682196][ T4757] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 216.719194][ T4757] usb 3-1: config 220 has no interface number 2 [ 216.730980][ T4757] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 216.770435][ T4757] usb 3-1: config 220 interface 0 has no altsetting 0 [ 216.778238][ T4757] usb 3-1: config 220 interface 76 has no altsetting 0 [ 216.780120][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.786291][ T4757] usb 3-1: config 220 interface 1 has no altsetting 0 [ 216.815706][ T7220] EXT4-fs (loop3): Test dummy encryption mode enabled [ 216.823551][ T4757] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 216.847237][ T4757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.848082][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.861541][ T4757] usb 3-1: Product: syz [ 216.872261][ T4757] usb 3-1: Manufacturer: syz [ 216.873018][ T7220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.877272][ T4757] usb 3-1: SerialNumber: syz [ 216.955212][ T4355] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 217.010162][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.055900][ T4355] usb 2-1: config 0 descriptor?? [ 217.110672][ T4757] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 217.121626][ T6844] EXT4-fs (loop3): unmounting filesystem. [ 217.124056][ T4757] usb 3-1: No valid video chain found. [ 217.142972][ T4757] usb 3-1: selecting invalid altsetting 0 [ 217.207147][ T4757] usb 3-1: selecting invalid altsetting 0 [ 217.213060][ T4757] usbtest: probe of 3-1:220.1 failed with error -22 [ 217.266224][ T4757] usb 3-1: USB disconnect, device number 3 [ 217.494165][ T4355] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 217.511281][ T4355] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 217.524672][ T4355] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 217.560091][ T4355] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 217.576450][ T4355] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 217.593752][ T4355] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 217.693462][ T4355] playstation 0003:054C:0DF2.000A: Invalid reportID received, expected 9 got 0 [ 217.723212][ T4355] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22 [ 217.744768][ T4355] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 217.765932][ T4355] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 217.792583][ T4355] playstation: probe of 0003:054C:0DF2.000A failed with error -22 [ 217.902419][ T6874] usb 2-1: USB disconnect, device number 12 [ 217.931661][ T7246] loop4: detected capacity change from 0 to 8192 [ 217.982497][ T7246] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 218.017337][ T7246] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 218.052841][ T7246] REISERFS (device loop4): using journaled data mode [ 218.108117][ T7246] reiserfs: using flush barriers [ 218.194992][ T7246] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 218.214997][ T7246] REISERFS (device loop4): checking transaction log (loop4) [ 218.230774][ T7253] fido_id[7253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 218.267350][ T7246] REISERFS (device loop4): Using r5 hash to sort names [ 218.286893][ T7251] loop2: detected capacity change from 0 to 32768 [ 218.304826][ T7246] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 218.361097][ T7246] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 218.383755][ T7251] JBD2: Ignoring recovery information on journal [ 218.520544][ T7251] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 218.593806][ T7264] loop1: detected capacity change from 0 to 2048 [ 218.628166][ T7264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.831370][ T4274] ocfs2: Unmounting device (7,2) on (node local) [ 219.050138][ T7255] loop3: detected capacity change from 0 to 32768 [ 219.443752][ T6874] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.645623][ T6874] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 219.670637][ T6874] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 219.710157][ T6874] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 219.774221][ T6874] usb 5-1: config 220 has no interface number 2 [ 219.780941][ T6874] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 219.867023][ T6874] usb 5-1: config 220 interface 0 has no altsetting 0 [ 219.890844][ T7286] loop2: detected capacity change from 0 to 764 [ 219.898523][ T6874] usb 5-1: config 220 interface 76 has no altsetting 0 [ 219.913489][ T6874] usb 5-1: config 220 interface 1 has no altsetting 0 [ 219.980167][ T6874] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 220.003081][ T6874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.026732][ T7286] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 220.069411][ T6874] usb 5-1: Product: syz [ 220.096676][ T6874] usb 5-1: Manufacturer: syz [ 220.130705][ T6874] usb 5-1: SerialNumber: syz [ 220.378823][ T6874] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 220.416085][ T6874] usb 5-1: No valid video chain found. [ 220.421899][ T6874] usb 5-1: selecting invalid altsetting 0 [ 220.479769][ T6874] usb 5-1: selecting invalid altsetting 0 [ 220.479802][ T6874] usbtest: probe of 5-1:220.1 failed with error -22 [ 220.487394][ T6874] usb 5-1: USB disconnect, device number 10 [ 220.887676][ T7311] process 'syz.2.1104' launched '/dev/fd/4' with NULL argv: empty string added [ 222.562442][ T7217] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 222.630404][ T7333] loop3: detected capacity change from 0 to 131072 [ 222.655101][ T7333] F2FS-fs (loop3): invalid crc value [ 222.717998][ T7333] F2FS-fs (loop3): Found nat_bits in checkpoint [ 222.778092][ T7333] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 222.788307][ T7217] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 222.807027][ T7333] F2FS-fs (loop3): recover xattr in inode (7), error(0) [ 222.814822][ T7333] F2FS-fs (loop3): set inode (7) has corrupted xattr [ 222.830211][ T7217] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 222.845709][ T7217] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 222.856630][ T7217] usb 5-1: config 220 has no interface number 2 [ 222.863310][ T7217] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 222.865494][ T7361] loop2: detected capacity change from 0 to 128 [ 222.877124][ T7217] usb 5-1: config 220 interface 0 has no altsetting 0 [ 222.877151][ T7217] usb 5-1: config 220 interface 76 has no altsetting 0 [ 222.877172][ T7217] usb 5-1: config 220 interface 1 has no altsetting 0 [ 222.879938][ T7217] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 222.994313][ T7217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.009482][ T7217] usb 5-1: Product: syz [ 223.015863][ T7217] usb 5-1: Manufacturer: syz [ 223.020725][ T7217] usb 5-1: SerialNumber: syz [ 223.072328][ T4757] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 223.257465][ T7217] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 223.271915][ T4757] usb 1-1: Using ep0 maxpacket: 16 [ 223.278540][ T7217] usb 5-1: No valid video chain found. [ 223.280235][ T4757] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.294694][ T7217] usb 5-1: selecting invalid altsetting 0 [ 223.325970][ T4757] usb 1-1: config 0 interface 0 has no altsetting 0 [ 223.355761][ T7217] usb 5-1: selecting invalid altsetting 0 [ 223.376056][ T7217] usbtest: probe of 5-1:220.1 failed with error -22 [ 223.383707][ T4757] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 223.433848][ T4757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.436271][ T7217] usb 5-1: USB disconnect, device number 11 [ 223.488870][ T4757] usb 1-1: config 0 descriptor?? [ 223.765363][ T7372] loop2: detected capacity change from 0 to 256 [ 223.888579][ T7372] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x542a3d5d, utbl_chksum : 0xe619d30d) [ 223.918280][ T4757] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 224.311517][ T6877] usb 1-1: USB disconnect, device number 7 [ 224.419588][ T7378] fido_id[7378]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 224.771833][ T7395] loop2: detected capacity change from 0 to 4096 [ 224.779766][ T7395] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 224.839657][ T26] audit: type=1800 audit(1764039664.242:29): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1138" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 224.950945][ T6877] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 225.142902][ T6877] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 225.153087][ T6877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.179419][ T6877] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.210835][ T6877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.250061][ T6877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.303936][ T6877] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.347590][ T6877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.378965][ T6877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.409902][ T6877] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.438998][ T6877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.477335][ T6877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.515645][ T6877] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.561273][ T6877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.598043][ T6877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.624031][ T6877] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.665327][ T6877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.696639][ T6877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.743483][ T6877] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.775264][ T6877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.819195][ T6877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.858650][ T6877] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.896337][ T6877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.917377][ T6877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.951231][ T6877] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.977385][ T6877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.009516][ T6877] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 226.029149][ T6877] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 226.071262][ T6877] usb 2-1: Product: syz [ 226.085896][ T6877] usb 2-1: Manufacturer: syz [ 226.107559][ T6877] usb 2-1: SerialNumber: syz [ 226.131396][ T6877] usb 2-1: config 0 descriptor?? [ 226.170502][ T6877] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 226.200350][ T7432] loop3: detected capacity change from 0 to 2048 [ 226.349317][ T7432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.380523][ T4757] usb 2-1: USB disconnect, device number 13 [ 226.400748][ T4757] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 226.407713][ T7432] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.502740][ T7432] fs-verity: sha512 using implementation "sha512-avx2" [ 226.689328][ T6844] EXT4-fs (loop3): unmounting filesystem. [ 227.257823][ T7471] loop2: detected capacity change from 0 to 1024 [ 227.387135][ T7471] hfsplus: keylen 65060 too large [ 227.398314][ T7471] hfsplus: xattr search failed [ 227.815596][ T7485] loop4: detected capacity change from 0 to 2048 [ 227.873093][ T7489] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.099569][ T5878] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 228.117294][ T7495] loop2: detected capacity change from 0 to 256 [ 228.267943][ T7495] FAT-fs (loop2): Directory bread(block 64) failed [ 228.274884][ T7495] FAT-fs (loop2): Directory bread(block 65) failed [ 228.289513][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 228.296857][ T7495] FAT-fs (loop2): Directory bread(block 66) failed [ 228.311216][ T5878] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 228.324611][ T7495] FAT-fs (loop2): Directory bread(block 67) failed [ 228.346613][ T7495] FAT-fs (loop2): Directory bread(block 68) failed [ 228.353102][ T5878] usb 1-1: config 0 has no interface number 0 [ 228.378848][ T5878] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 228.386257][ T7495] FAT-fs (loop2): Directory bread(block 69) failed [ 228.423978][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.435705][ T7495] FAT-fs (loop2): Directory bread(block 70) failed [ 228.447055][ T5878] usb 1-1: Product: syz [ 228.456042][ T5878] usb 1-1: Manufacturer: syz [ 228.467028][ T5878] usb 1-1: SerialNumber: syz [ 228.478504][ T7495] FAT-fs (loop2): Directory bread(block 71) failed [ 228.482723][ T5878] usb 1-1: config 0 descriptor?? [ 228.507906][ T5878] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 228.518105][ T7495] FAT-fs (loop2): Directory bread(block 72) failed [ 228.552717][ T7495] FAT-fs (loop2): Directory bread(block 73) failed [ 228.682867][ T7508] sctp: [Deprecated]: syz.1.1187 (pid 7508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.682867][ T7508] Use struct sctp_sack_info instead [ 228.711998][ T5878] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 228.740553][ T5878] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 229.069139][ T26] audit: type=1326 audit(1764039668.474:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffbf8f749 code=0x7fc00000 [ 229.128640][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 229.206883][ T126] usb 1-1: USB disconnect, device number 8 [ 229.227153][ T126] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 229.270811][ T126] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 229.319287][ T126] quatech2 1-1:0.51: device disconnected [ 229.677888][ T9] tipc: Subscription rejected, illegal request [ 229.695550][ T7533] loop7: detected capacity change from 0 to 7 [ 229.722482][ T4715] Dev loop7: unable to read RDB block 7 [ 229.730245][ T4715] loop7: unable to read partition table [ 229.736849][ T4715] loop7: partition table beyond EOD, truncated [ 229.767081][ T7533] Dev loop7: unable to read RDB block 7 [ 229.813148][ T7533] loop7: unable to read partition table [ 229.847298][ T7533] loop7: partition table beyond EOD, truncated [ 229.875613][ T7533] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 229.966333][ T3638] Dev loop7: unable to read RDB block 7 [ 229.988496][ T3638] loop7: unable to read partition table [ 230.014943][ T3638] loop7: partition table beyond EOD, truncated [ 230.143358][ T7522] loop4: detected capacity change from 0 to 32768 [ 230.187418][ T7522] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1194 (7522) [ 230.276948][ T7522] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 230.350096][ T7522] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 230.387054][ T7522] BTRFS info (device loop4): using free space tree [ 230.770131][ T7522] BTRFS info (device loop4): enabling ssd optimizations [ 230.918146][ T7558] tap0: tun_chr_ioctl cmd 35108 [ 231.047587][ T4268] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 231.349940][ T4715] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop4 scanned by udevd (4715) [ 231.530868][ T7589] 9pnet_fd: Insufficient options for proto=fd [ 232.569711][ T7620] loop2: detected capacity change from 0 to 1024 [ 232.800664][ T7624] loop2: detected capacity change from 0 to 1024 [ 232.881668][ T7624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 233.045164][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 233.476695][ T4336] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 233.602882][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 233.679375][ T4336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.736518][ T4336] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 233.745771][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.786781][ T4336] usb 2-1: config 0 descriptor?? [ 234.199612][ T4336] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 234.218050][ T4336] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 234.248498][ T4336] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 234.260680][ T6877] kernel write not supported for file /sg0 (pid: 6877 comm: kworker/0:18) [ 234.276568][ T4336] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 234.294271][ T4336] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 234.309791][ T4336] steelseries_srws1 0003:1038:1410.000C: unknown main item tag 0x0 [ 234.325359][ T7668] loop2: detected capacity change from 0 to 65 [ 234.334111][ T4336] steelseries_srws1 0003:1038:1410.000C: unexpected long global item [ 234.349898][ T7668] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 234.384636][ T4336] steelseries_srws1 0003:1038:1410.000C: parse failed [ 234.393062][ T4336] steelseries_srws1: probe of 0003:1038:1410.000C failed with error -22 [ 234.413483][ T7668] BFS-fs: bfs_fill_super(): Last block not available on loop2: 511 [ 234.424582][ T4336] usb 2-1: USB disconnect, device number 14 [ 234.478119][ T7672] netem: incorrect ge model size [ 234.481605][ T7650] loop3: detected capacity change from 0 to 32768 [ 234.494716][ T7672] netem: change failed [ 234.564679][ T7650] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 234.625753][ T7650] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 234.647724][ T6877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.845691][ T6877] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 234.871708][ T6877] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 234.896430][ T6877] usb 1-1: Product: syz [ 234.903550][ T6877] usb 1-1: Manufacturer: syz [ 234.909479][ T6877] usb 1-1: SerialNumber: syz [ 234.936507][ T6877] usb 1-1: config 0 descriptor?? [ 234.951227][ T6844] ocfs2: Unmounting device (7,3) on (node local) [ 234.992578][ T6877] ch341 1-1:0.0: ch341-uart converter detected [ 235.125271][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 235.255480][ T7688] loop4: detected capacity change from 0 to 8 [ 235.750468][ T6877] usb 1-1: failed to send control message: -71 [ 235.765524][ T6877] ch341-uart: probe of ttyUSB0 failed with error -71 [ 235.802549][ T6877] usb 1-1: USB disconnect, device number 9 [ 235.819649][ T6877] ch341 1-1:0.0: device disconnected [ 235.833546][ T7701] loop4: detected capacity change from 0 to 256 [ 235.884368][ T7703] loop3: detected capacity change from 0 to 256 [ 236.027002][ T4715] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.441320][ T7713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1267'. [ 236.485911][ T7713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1267'. [ 236.955005][ T4355] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 237.145394][ T7742] netlink: 'syz.2.1280': attribute type 4 has an invalid length. [ 237.155103][ T4355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.161800][ T7742] netlink: 'syz.2.1280': attribute type 4 has an invalid length. [ 237.176415][ T4355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.193133][ T4355] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 237.211873][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.241338][ T7739] loop4: detected capacity change from 0 to 1024 [ 237.255640][ T4355] usb 4-1: config 0 descriptor?? [ 237.287669][ T7745] loop1: detected capacity change from 0 to 256 [ 237.387952][ T7745] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 237.670336][ T4355] cp2112 0003:10C4:EA90.000D: unknown global tag 0xc [ 237.686624][ T4355] cp2112 0003:10C4:EA90.000D: item 0 1 1 12 parsing failed [ 237.705735][ T4355] cp2112 0003:10C4:EA90.000D: parse failed [ 237.712169][ T4355] cp2112: probe of 0003:10C4:EA90.000D failed with error -22 [ 237.737490][ T7756] loop2: detected capacity change from 0 to 512 [ 237.787019][ T7756] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.880447][ T4355] usb 4-1: USB disconnect, device number 11 [ 237.914683][ T7756] EXT4-fs (loop2): 1 truncate cleaned up [ 237.961124][ T7756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 238.060119][ T7756] syz.2.1286 (pid 7756) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 238.162063][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 238.286265][ T7769] loop2: detected capacity change from 0 to 8 [ 238.323996][ T7769] SQUASHFS error: zlib decompression failed, data probably corrupt [ 238.343400][ T7769] SQUASHFS error: Failed to read block 0x9b: -5 [ 238.355519][ T7769] SQUASHFS error: Unable to read metadata cache entry [99] [ 238.362844][ T7769] SQUASHFS error: Unable to read inode 0x127 [ 238.429221][ T4715] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.472326][ T7772] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 238.719463][ T5878] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 238.876694][ T7784] sctp: [Deprecated]: syz.1.1299 (pid 7784) Use of int in maxseg socket option. [ 238.876694][ T7784] Use struct sctp_assoc_value instead [ 238.894435][ T7217] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 238.925753][ T5878] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 238.944420][ T5878] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 238.979773][ T5878] usb 3-1: config 220 has an invalid descriptor of length 25, skipping remainder of the config [ 239.011177][ T5878] usb 3-1: config 220 has no interface number 2 [ 239.031469][ T5878] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 239.057532][ T5878] usb 3-1: config 220 interface 0 has no altsetting 0 [ 239.073847][ T5878] usb 3-1: config 220 interface 76 has no altsetting 0 [ 239.080948][ T5878] usb 3-1: config 220 interface 1 has no altsetting 0 [ 239.094732][ T7217] usb 4-1: too many configurations: 229, using maximum allowed: 8 [ 239.107561][ T5878] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 239.131735][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.135394][ T7217] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 239.152294][ T5878] usb 3-1: Product: syz [ 239.157985][ T5878] usb 3-1: Manufacturer: syz [ 239.162772][ T5878] usb 3-1: SerialNumber: syz [ 239.168245][ T7217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.179385][ T7217] usb 4-1: Product: syz [ 239.183688][ T7217] usb 4-1: Manufacturer: syz [ 239.192947][ T7217] usb 4-1: SerialNumber: syz [ 239.249089][ T7217] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 239.379201][ T7217] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 239.404421][ T5878] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 239.415503][ T5878] usb 3-1: No valid video chain found. [ 239.429896][ T5878] usb 3-1: selecting invalid altsetting 0 [ 239.475922][ T5878] usb 3-1: selecting invalid altsetting 0 [ 239.481746][ T5878] usbtest: probe of 3-1:220.1 failed with error -22 [ 239.502634][ T5878] usb 3-1: USB disconnect, device number 4 [ 239.730969][ T7799] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 239.739026][ T7799] ecryptfs_parse_options: eCryptfs: unrecognized option [ention_end] [ 239.747363][ T7799] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 239.762431][ T7799] Error parsing options; rc = [-22] [ 240.164597][ T7812] loop2: detected capacity change from 0 to 256 [ 240.207026][ T4336] usb 4-1: USB disconnect, device number 12 [ 241.053750][ T7217] usb 4-1: Service connection timeout for: 258 [ 241.060084][ T7217] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 241.080892][ T7217] ath9k_htc: Failed to initialize the device [ 241.099269][ T4336] usb 4-1: ath9k_htc: USB layer deinitialized [ 241.344521][ T7856] program syz.4.1333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.612786][ T7217] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.802516][ T7217] usb 4-1: Using ep0 maxpacket: 8 [ 241.809832][ T7217] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 241.824564][ T7217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.855048][ T7217] pvrusb2: Hardware description: Terratec Grabster AV400 [ 241.862158][ T7217] pvrusb2: ********** [ 241.873426][ T7217] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 241.926730][ T7217] pvrusb2: Important functionality might not be entirely working. [ 241.964646][ T7217] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 241.996612][ T7217] pvrusb2: ********** [ 242.051777][ T2309] pvrusb2: Invalid write control endpoint [ 242.187990][ T7885] program syz.0.1345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.257330][ T2309] pvrusb2: Invalid write control endpoint [ 242.267235][ T7217] usb 4-1: USB disconnect, device number 13 [ 242.283023][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 242.297998][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 242.316401][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 242.336989][ T2309] pvrusb2: Device being rendered inoperable [ 242.347190][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 242.367391][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 242.393565][ T2309] pvrusb2: Attached sub-driver cx25840 [ 242.418279][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 242.449106][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 242.482179][ T4327] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.656707][ T7900] loop2: detected capacity change from 0 to 512 [ 242.679500][ T7900] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 242.689522][ T4327] usb 2-1: Using ep0 maxpacket: 16 [ 242.709637][ T4327] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 242.751158][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.752083][ T7900] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 242.769504][ T4327] usb 2-1: Product: syz [ 242.782008][ T4327] usb 2-1: Manufacturer: syz [ 242.790068][ T4327] usb 2-1: SerialNumber: syz [ 242.818536][ T7900] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 242.828723][ T4327] usb 2-1: config 0 descriptor?? [ 242.847845][ T4327] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 242.867486][ T7900] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=6042e01c, mo2=0000] [ 242.922384][ T7900] EXT4-fs (loop2): failed to initialize system zone (-117) [ 242.962070][ T7900] EXT4-fs (loop2): mount failed [ 243.063248][ T4327] usb 2-1: USB disconnect, device number 15 [ 243.258492][ T7901] loop4: detected capacity change from 0 to 32768 [ 243.349714][ T7901] XFS (loop4): Mounting V5 Filesystem [ 243.435263][ T7901] XFS (loop4): Ending clean mount [ 243.478254][ T7901] XFS (loop4): Quotacheck needed: Please wait. [ 243.571625][ T7217] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 243.601724][ T7901] XFS (loop4): Quotacheck: Done. [ 243.770477][ T4268] XFS (loop4): Unmounting Filesystem [ 243.789644][ T7217] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.815831][ T7217] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.837996][ T7217] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.906266][ T7217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.932241][ T7217] usb 4-1: SerialNumber: syz [ 244.167033][ T7217] usb 4-1: 0:2 : does not exist [ 244.181469][ T7217] usb 4-1: unit 255 not found! [ 244.236707][ T7217] usb 4-1: USB disconnect, device number 14 [ 244.248810][ T7928] [ 244.251216][ T7928] ====================================================== [ 244.258710][ T7928] WARNING: possible circular locking dependency detected [ 244.265778][ T7928] syzkaller #0 Not tainted [ 244.270217][ T7928] ------------------------------------------------------ [ 244.277262][ T7928] syz.2.1357/7928 is trying to acquire lock: [ 244.283273][ T7928] ffff8880544dc800 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 244.294046][ T7928] [ 244.294046][ T7928] but task is already holding lock: [ 244.301452][ T7928] ffff888027a862d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 244.311514][ T7928] [ 244.311514][ T7928] which lock already depends on the new lock. [ 244.311514][ T7928] [ 244.321977][ T7928] [ 244.321977][ T7928] the existing dependency chain (in reverse order) is: [ 244.331178][ T7928] [ 244.331178][ T7928] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 244.338760][ T7928] down_read_killable+0x4c/0x340 [ 244.344306][ T7928] mmap_read_lock_killable+0x1d/0x60 [ 244.350141][ T7928] lock_mm_and_find_vma+0x2b1/0x2f0 [ 244.355906][ T7928] do_user_addr_fault+0x2db/0xb10 [ 244.361928][ T7928] exc_page_fault+0x60/0x100 [ 244.367064][ T7928] asm_exc_page_fault+0x22/0x30 [ 244.372473][ T7928] fault_in_readable+0x13e/0x1f0 [ 244.377956][ T7928] fault_in_iov_iter_readable+0xbb/0x2e0 [ 244.384169][ T7928] generic_perform_write+0x1d2/0x560 [ 244.390023][ T7928] __generic_file_write_iter+0x172/0x430 [ 244.396194][ T7928] generic_file_write_iter+0xab/0x2e0 [ 244.402111][ T7928] vfs_write+0x44c/0x960 [ 244.406900][ T7928] ksys_write+0x143/0x240 [ 244.411787][ T7928] do_syscall_64+0x4c/0xa0 [ 244.416742][ T7928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.423177][ T7928] [ 244.423177][ T7928] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 244.431893][ T7928] __lock_acquire+0x2cf8/0x7c50 [ 244.437296][ T7928] lock_acquire+0x1b4/0x490 [ 244.442341][ T7928] down_write+0x36/0x60 [ 244.447059][ T7928] process_measurement+0x33c/0x1a10 [ 244.452817][ T7928] ima_file_mmap+0x104/0x150 [ 244.457950][ T7928] __se_sys_remap_file_pages+0x53e/0x770 [ 244.464141][ T7928] do_syscall_64+0x4c/0xa0 [ 244.469197][ T7928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.475631][ T7928] [ 244.475631][ T7928] other info that might help us debug this: [ 244.475631][ T7928] [ 244.485874][ T7928] Possible unsafe locking scenario: [ 244.485874][ T7928] [ 244.493337][ T7928] CPU0 CPU1 [ 244.498724][ T7928] ---- ---- [ 244.504193][ T7928] lock(&mm->mmap_lock); [ 244.508542][ T7928] lock(&sb->s_type->i_mutex_key#12); [ 244.516541][ T7928] lock(&mm->mmap_lock); [ 244.523435][ T7928] lock(&sb->s_type->i_mutex_key#12); [ 244.528919][ T7928] [ 244.528919][ T7928] *** DEADLOCK *** [ 244.528919][ T7928] [ 244.537081][ T7928] 1 lock held by syz.2.1357/7928: [ 244.542125][ T7928] #0: ffff888027a862d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 244.552628][ T7928] [ 244.552628][ T7928] stack backtrace: [ 244.558545][ T7928] CPU: 0 PID: 7928 Comm: syz.2.1357 Not tainted syzkaller #0 [ 244.565940][ T7928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.576042][ T7928] Call Trace: [ 244.579339][ T7928] [ 244.582293][ T7928] dump_stack_lvl+0x168/0x22e [ 244.587045][ T7928] ? load_image+0x3b0/0x3b0 [ 244.591765][ T7928] ? show_regs_print_info+0x12/0x12 [ 244.596995][ T7928] ? print_circular_bug+0x12b/0x1a0 [ 244.602221][ T7928] check_noncircular+0x274/0x310 [ 244.607210][ T7928] ? add_chain_block+0x940/0x940 [ 244.612172][ T7928] ? lockdep_lock+0xdc/0x1e0 [ 244.616809][ T7928] ? _find_first_zero_bit+0xcf/0x100 [ 244.622149][ T7928] __lock_acquire+0x2cf8/0x7c50 [ 244.627048][ T7928] ? ima_match_policy+0x104/0x2100 [ 244.632189][ T7928] ? verify_lock_unused+0x140/0x140 [ 244.637434][ T7928] ? ima_match_policy+0x207a/0x2100 [ 244.642669][ T7928] ? __schedule+0x10ba/0x40b0 [ 244.647381][ T7928] lock_acquire+0x1b4/0x490 [ 244.651926][ T7928] ? process_measurement+0x33c/0x1a10 [ 244.657339][ T7928] ? __might_sleep+0xd0/0xd0 [ 244.661971][ T7928] ? __schedule+0x10f4/0x40b0 [ 244.666677][ T7928] ? read_lock_is_recursive+0x10/0x10 [ 244.672180][ T7928] ? ima_get_action+0x71/0xa0 [ 244.676909][ T7928] down_write+0x36/0x60 [ 244.681095][ T7928] ? process_measurement+0x33c/0x1a10 [ 244.686584][ T7928] process_measurement+0x33c/0x1a10 [ 244.691825][ T7928] ? ima_file_mmap+0x150/0x150 [ 244.696612][ T7928] ? aa_file_perm+0x117/0xec0 [ 244.701333][ T7928] ? mtree_load+0xeb/0xa40 [ 244.705779][ T7928] ? mtree_load+0x90a/0xa40 [ 244.710308][ T7928] ? aa_get_current_label+0x110/0x1d0 [ 244.715715][ T7928] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 244.721928][ T7928] ima_file_mmap+0x104/0x150 [ 244.726546][ T7928] ? ima_file_free+0x3e0/0x3e0 [ 244.731333][ T7928] ? common_file_perm+0x171/0x1c0 [ 244.736383][ T7928] ? bpf_lsm_mmap_file+0x5/0x10 [ 244.741259][ T7928] ? security_mmap_file+0x11b/0x180 [ 244.746484][ T7928] __se_sys_remap_file_pages+0x53e/0x770 [ 244.752152][ T7928] ? __se_sys_futex+0x14a/0x440 [ 244.757038][ T7928] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 244.762785][ T7928] ? lock_chain_count+0x20/0x20 [ 244.767680][ T7928] ? lockdep_hardirqs_on+0x94/0x140 [ 244.772905][ T7928] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 244.778649][ T7928] do_syscall_64+0x4c/0xa0 [ 244.783092][ T7928] ? clear_bhb_loop+0x60/0xb0 [ 244.787783][ T7928] ? clear_bhb_loop+0x60/0xb0 [ 244.792477][ T7928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.798392][ T7928] RIP: 0033:0x7f57f018f749 [ 244.802866][ T7928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.822496][ T7928] RSP: 002b:00007f57ee3f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 244.830933][ T7928] RAX: ffffffffffffffda RBX: 00007f57f03e5fa0 RCX: 00007f57f018f749 [ 244.838922][ T7928] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 244.846930][ T7928] RBP: 00007f57f0213f91 R08: 0000000000000000 R09: 0000000000000000 [ 244.854917][ T7928] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 244.862927][ T7928] R13: 00007f57f03e6038 R14: 00007f57f03e5fa0 R15: 00007ffca36ee288 [ 244.870923][ T7928] [ 244.874012][ C0] vkms_vblank_simulate: vblank timer overrun