last executing test programs: 3m54.452656971s ago: executing program 4 (id=3129): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000100020075"], 0x8) 3m54.1016945s ago: executing program 4 (id=3133): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000340)={[{@uni_xlateno}, {@shortname_winnt}, {@shortname_lower}, {@shortname_win95}, {@fat=@discard}, {@numtail}, {@fat=@nfs}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@uni_xlate}, {@fat=@flush}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 3m53.573714945s ago: executing program 4 (id=3136): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f0000002300)={&(0x7f0000000040)=@id, 0x55, 0x0}, 0x0) 3m53.107155653s ago: executing program 4 (id=3140): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@uuid_on}, {@redirect_dir_on}], [], 0x2c}) 3m52.17615143s ago: executing program 4 (id=3148): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x7, 0x3, 0x7, "471b5c955f4e78d2b75891da7beaa4575d7f5dcafa2a24870f0e79af94a818f5eab50b6426d94f02ce7b9611eca070f98e1e18f1cb2a9f3422ce9281bda520", 0x2c}, 0x60) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x7, "ee937dae4f4384661ff26cba1cb24f02a943eee376895dd46a8dcfad211fdf1cae7accf9b74bb7fb0df654ddb4c5cac24f5ce87a33da2fc61dc1e539ed60b3", 0x29}, 0x60) 3m51.086381932s ago: executing program 4 (id=3158): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m50.129497984s ago: executing program 32 (id=3158): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f00000003c0), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.16628396s ago: executing program 0 (id=4982): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)={0x0, 0xf, 0x4, "563650fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.613958433s ago: executing program 5 (id=4994): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000), 0x65) 6.248532896s ago: executing program 5 (id=4997): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 5.803010936s ago: executing program 0 (id=5000): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000500)={0x1, 0x0, 0x2, &(0x7f0000000540)={0x0, "05000000434fd7f5e7d85c8bbfe6931aa54bce5d926e7908d52773897f00"}}) 5.658123975s ago: executing program 5 (id=5002): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="190954930d9f2a8b"}}) 5.288172901s ago: executing program 0 (id=5005): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, &(0x7f0000000300)=[{&(0x7f0000001200)=""/4084, 0xff4}], 0x1, 0x0, 0x4, 0x2) 4.953531282s ago: executing program 0 (id=5009): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00bd9b124589a8c8201d361af26385e0757ca171375f6e83f03738a084d5fe4600b2fe6de02ad3e10893da97964b52fc78c719430dfa505a385c6d282d70e2fec553dd9ac9809243b1a29bc08d7f7a6f0e70a5508031645ef7add68d4d9c8754a3e90bbd4b024e15cc4f471f75c1b2a017c875e1914492cc452cf63ad6b967708973b6a817ee446b08bf4645fcb1c9ca7d2a050eedb746360c10fd7647e46600c87ff9593c24e6828a68c610300201e89491d853b6e412bf80a39bf4df669712a41e06dfea5f790ff9317cfbb6706e60a6f523fab861ff1b8e1a"], 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) fsync(r0) 3.964125493s ago: executing program 6 (id=5014): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3.88845399s ago: executing program 2 (id=5015): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303031302c63726561746f723d917ff2342c666f7263652c6e6c733d6b6f69382d752c63726561746f723dab9643f32c6465636f6d706f73652c666f7263652c6465636f6d706f73652c00f269cce791d4f7eac9d5176d"], 0x2, 0x6a7, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x88800, 0x1) getdents64(r0, &(0x7f0000000200)=""/96, 0x60) 3.534639699s ago: executing program 6 (id=5016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x1, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1000}}, 0x14}, 0x1, 0x0, 0x0, 0x48884}, 0x0) 3.477125157s ago: executing program 2 (id=5017): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000c40)="538d88a8", 0x4, 0x40800, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) 3.381674161s ago: executing program 0 (id=5018): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 3.138843233s ago: executing program 6 (id=5019): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) 3.077223966s ago: executing program 5 (id=5020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) 3.045406326s ago: executing program 3 (id=5021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x24, r1, 0x401, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2c004}, 0xc4) 2.887277079s ago: executing program 2 (id=5023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x30000, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 2.697735628s ago: executing program 6 (id=5024): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2.680810396s ago: executing program 3 (id=5025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.447273098s ago: executing program 2 (id=5026): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000d9a4c37a3c2b"], 0x26}}, 0x0) 2.193683583s ago: executing program 6 (id=5027): r0 = creat(&(0x7f0000000300)='./bus\x00', 0x72) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}]) 2.188229185s ago: executing program 3 (id=5028): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$watch_queue(&(0x7f0000000000), 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 2.047952814s ago: executing program 2 (id=5029): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x3) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3) 1.891330967s ago: executing program 1 (id=5030): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x9, 0x1a2, &(0x7f0000000000)="$eJzs0L9r1GAcx/H390nul1DlVBwq2AOLMUe1yVUdnA6nEy7g4CJ46HGNvWKqXHODLS10kYJU+y/oIHVUQScR/QeKg+CgcekmvaE4iIOcJPdU8G/o84Lkk+8Hknx5unEvLgB/9lY61MlYHOYTgg1MyKhTapRv9fxD5+YouKLnDZ0vdI7HS8t321EULlYuVyj/VwA/s+5fFb/ihKIk1JEveyudttwOGNZZULMB5SbVx1gteu4Txu0xjt/CYuhscFXRE6cJR6b7RabjpeVz8wvtuXAuvFerzVzyLnjexXT/KPTeIO4jUTxlFTegEFByV8m1eLhtH2JKELerEkuqA/ItNrets6enBih3lyHCB2dA4ZvdrajrnKF4M12+wTHhGVbAZJOSwubOfBR6DeSaei2+/dn+lVMU1yzrfOd+NLt+Q8nv/FZddovi75BzfGpVn5n0aDjKR9YTJhMaCVsJO9+ZkHfpX/bP1V5L7y/1dJJTPM/zoN3vL/o5QJyAWnqVYSz7nMr2KsN7/Y4Ovu4/GIZhGIZhGIZhGAfA3wAAAP//qqZhEQ==") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 1.784734998s ago: executing program 3 (id=5031): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) 1.72179394s ago: executing program 6 (id=5032): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x82102500, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1.647096945s ago: executing program 2 (id=5033): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="100670"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.411711013s ago: executing program 1 (id=5034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x375}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) 1.402978488s ago: executing program 3 (id=5035): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0xa73, &(0x7f0000003cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4c402, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 1.238871402s ago: executing program 5 (id=5036): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$netrom(r0, 0x0, 0x0) 1.195675293s ago: executing program 1 (id=5037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x44, r1, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xff11}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 841.670961ms ago: executing program 1 (id=5038): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) 794.550006ms ago: executing program 0 (id=5039): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x439, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f000000a2c0)=ANY=[@ANYBLOB="13000000fffffff2003800050000000005"]) 773.155587ms ago: executing program 5 (id=5040): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1) 752.254782ms ago: executing program 3 (id=5041): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_continue}, {@errors_remount}, {}, {}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}, {@time_offset={'time_offset', 0x3d, 0x7}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 464.120354ms ago: executing program 1 (id=5042): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) 0s ago: executing program 1 (id=5043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 636.629657][T12333] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 636.667479][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.690625][T12333] usb 3-1: USB disconnect, device number 40 [ 637.392543][T12333] kernel write not supported for file /input/mouse0 (pid: 12333 comm: kworker/1:3) [ 637.602464][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 637.678852][ T5816] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 637.728718][T14344] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 637.881292][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 637.893525][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 637.919226][T14344] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 637.944628][T14344] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.955414][ T5816] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 637.974621][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.994145][T14344] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 638.013552][ T5816] usb 1-1: Product: syz [ 638.038679][ T5816] usb 1-1: Manufacturer: syz [ 638.050429][T14344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.058832][ T5816] usb 1-1: SerialNumber: syz [ 638.092881][ T5816] usb 1-1: config 0 descriptor?? [ 638.109814][ T971] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 638.150661][ T5816] hub 1-1:0.0: bad descriptor, ignoring hub [ 638.180354][T14344] hub 7-1:4.0: USB hub found [ 638.185427][ T5816] hub 1-1:0.0: probe with driver hub failed with error -5 [ 638.239909][ T5816] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input46 [ 638.271756][ T971] usb 2-1: Using ep0 maxpacket: 8 [ 638.284037][ T971] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 638.316726][ T971] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 638.384151][T14344] hub 7-1:4.0: 12 ports detected [ 638.407742][T14344] usb 7-1: selecting invalid altsetting 1 [ 638.419436][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 638.439605][T14344] hub 7-1:4.0: Using single TT (err -22) [ 638.468800][T14344] hub 7-1:4.0: insufficient power available to use all downstream ports [ 638.487675][ T971] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.577409][ T971] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 638.609711][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.617773][ T971] usb 2-1: Product: syz [ 638.639256][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 638.651953][ T971] usb 2-1: Manufacturer: syz [ 638.667027][ T971] usb 2-1: SerialNumber: syz [ 638.715200][ T971] usb 2-1: config 0 descriptor?? [ 638.763202][T16453] loop3: detected capacity change from 0 to 4096 [ 638.779906][ T971] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 [ 638.793389][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 638.801335][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 638.816728][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 638.857532][T14344] usb 7-1: USB disconnect, device number 10 [ 638.976384][ T971] imon:send_packet: packet tx failed (-71) [ 638.998781][ T971] imon 2-1:0.0: panel buttons/knobs setup failed [ 639.023189][ T30] audit: type=1800 audit(1747919743.665:3704): pid=16453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4203" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 639.146906][ T30] audit: type=1804 audit(1747919743.775:3705): pid=16458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4203" name=2F6E6577726F6F742F3733352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop3" ino=33 res=1 errno=0 [ 639.319594][ T971] rc_core: IR keymap rc-imon-pad not found [ 639.369540][ T971] Registered IR keymap rc-empty [ 639.374644][ T971] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 639.450602][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 639.459272][ T971] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 639.519490][ T971] imon:send_packet: packet tx failed (-71) [ 639.526252][T16462] loop0: detected capacity change from 0 to 64 [ 639.589571][ T971] imon 2-1:0.0: remote input dev register failed [ 639.627342][ T971] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 639.638750][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 639.671292][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.684899][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 639.742501][T16462] Trying to free block not in datazone [ 639.749335][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.804076][T16448] loop5: detected capacity change from 0 to 32768 [ 639.814545][T16464] Trying to free block not in datazone [ 639.833452][T16448] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4198 (16448) [ 639.835368][ T971] imon 2-1:0.0: unable to initialize intf0, err 0 [ 639.860841][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 639.890134][T16464] minix_free_inode: bit 5 already cleared [ 639.896325][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 639.920541][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.928767][ T971] imon:imon_probe: failed to initialize context! [ 639.935135][ T971] imon 2-1:0.0: unable to register, err -19 [ 639.980996][ T9] usb 3-1: config 0 descriptor?? [ 640.015732][T16448] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 640.027769][ T971] usb 2-1: USB disconnect, device number 45 [ 640.083795][T16448] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 640.133331][T16448] BTRFS info (device loop5): using free-space-tree [ 640.447489][ T9] dragonrise 0003:0079:0006.006D: item fetching failed at offset 2/5 [ 640.480001][ T9] dragonrise 0003:0079:0006.006D: parse failed [ 640.496584][ T9] dragonrise 0003:0079:0006.006D: probe with driver dragonrise failed with error -22 [ 640.701319][ T971] usb 3-1: USB disconnect, device number 41 [ 640.720050][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 640.854994][ T5831] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 640.930660][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 641.116701][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 641.128294][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 641.180763][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 641.267435][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.365560][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 641.412188][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.505712][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.550676][ T9] usb 2-1: invalid MIDI out EP 0 [ 641.612301][T16465] loop3: detected capacity change from 0 to 32768 [ 641.691434][T16501] loop2: detected capacity change from 0 to 128 [ 641.762427][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 641.784993][ T5816] usb 1-1: USB disconnect, device number 40 [ 641.811851][T16501] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 641.865689][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.889653][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 641.944426][T16501] ext4 filesystem being mounted at mnt:[4026533073] supports timestamps until 2038-01-19 (0x7fffffff) [ 641.956859][ T9] usb 2-1: USB disconnect, device number 46 [ 642.102596][T16501] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.445461][T16510] loop0: detected capacity change from 0 to 2048 [ 642.455717][T16511] netlink: 'syz.5.4221': attribute type 1 has an invalid length. [ 642.519341][T16510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.815191][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 642.818703][ T5889] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 643.040900][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.063398][ T5889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 643.128680][ T5889] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 643.174532][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.221657][ T5889] usb 3-1: config 0 descriptor?? [ 643.256141][T16525] loop5: detected capacity change from 0 to 256 [ 643.411938][T16530] loop0: detected capacity change from 0 to 1024 [ 643.431611][T16525] FAT-fs (loop5): Directory bread(block 64) failed [ 643.438206][T16525] FAT-fs (loop5): Directory bread(block 65) failed [ 643.464486][T16530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 643.499684][T16525] FAT-fs (loop5): Directory bread(block 66) failed [ 643.527390][T16525] FAT-fs (loop5): Directory bread(block 67) failed [ 643.534401][ T47] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 643.554314][T16530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.560682][T16525] FAT-fs (loop5): Directory bread(block 68) failed [ 643.614751][T16525] FAT-fs (loop5): Directory bread(block 69) failed [ 643.621994][T16525] FAT-fs (loop5): Directory bread(block 70) failed [ 643.629611][T16525] FAT-fs (loop5): Directory bread(block 71) failed [ 643.636325][T16525] FAT-fs (loop5): Directory bread(block 72) failed [ 643.643357][T16525] FAT-fs (loop5): Directory bread(block 73) failed [ 643.664804][ T5889] Bluetooth: Can't get version to change to load ram patch err [ 643.676075][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.706403][ T5889] Bluetooth: Loading patch file failed [ 643.732974][ T5889] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 643.734016][ T47] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 643.773113][ T47] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 643.779778][ T5889] usb 3-1: USB disconnect, device number 42 [ 643.821587][ T47] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 643.839439][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 643.849127][ T47] usb 2-1: config 220 has no interface number 2 [ 643.869940][ T47] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 643.928215][ T47] usb 2-1: config 220 interface 0 has no altsetting 0 [ 643.947919][ T47] usb 2-1: config 220 interface 76 has no altsetting 0 [ 643.965897][ T47] usb 2-1: config 220 interface 1 has no altsetting 0 [ 643.976156][ T47] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 643.991431][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.008100][ T47] usb 2-1: Product: syz [ 644.046490][ T47] usb 2-1: Manufacturer: syz [ 644.066759][ T47] usb 2-1: SerialNumber: syz [ 644.148449][T16538] loop6: detected capacity change from 0 to 512 [ 644.211527][T16538] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.355061][T16538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.389293][ T47] usb 2-1: selecting invalid altsetting 0 [ 644.435542][T16538] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.438824][ T47] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 644.496503][T16538] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4231: corrupted xattr block 19: overlapping e_value [ 644.528040][ T47] usb 2-1: No valid video chain found. [ 644.561047][T16545] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.4231: corrupted xattr block 19: overlapping e_value [ 644.610559][ T47] usb 2-1: selecting invalid altsetting 0 [ 644.616373][ T47] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 644.670897][ T47] usb 2-1: USB disconnect, device number 47 [ 644.826759][T13949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.889475][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 645.026885][T16528] loop3: detected capacity change from 0 to 32768 [ 645.072172][T16528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4226 (16528) [ 645.187430][T16528] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 645.212850][T16528] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 645.255794][T16528] BTRFS info (device loop3): using free-space-tree [ 645.769213][T16574] loop0: detected capacity change from 0 to 4096 [ 645.819991][T16574] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 645.919009][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 646.012649][ T5835] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 646.047206][T16574] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 646.969232][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 647.146139][T16603] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.4254'. [ 647.210033][T16603] openvswitch: netlink: Message has 5 unknown bytes. [ 647.563025][T16607] loop6: detected capacity change from 0 to 32768 [ 647.605555][T16607] OCFS2: ERROR (device loop6): ocfs2_get_clusters_nocache: Inode 69 has bad extent record (0, 1, 0) [ 647.618030][T16607] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 647.627955][T16607] OCFS2: File system is now read-only. [ 647.633468][T16607] (syz.6.4255,16607,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 647.644189][T16607] (syz.6.4255,16607,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 647.652935][T16607] (syz.6.4255,16607,0):ocfs2_map_slot_buffers:378 ERROR: status = -30 [ 647.661167][T16607] (syz.6.4255,16607,0):ocfs2_init_slot_info:426 ERROR: status = -30 [ 647.669961][T16607] (syz.6.4255,16607,0):ocfs2_initialize_super:2222 ERROR: status = -30 [ 647.679155][T16607] (syz.6.4255,16607,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 648.010343][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 648.802224][T16599] loop1: detected capacity change from 0 to 32768 [ 648.832753][T16599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4249 (16599) [ 648.896151][T16599] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 648.933647][T16599] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 648.962945][T16599] BTRFS info (device loop1): using free-space-tree [ 649.041469][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 649.287217][T16629] loop3: detected capacity change from 0 to 32768 [ 649.347658][T16629] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 649.472995][T16629] XFS (loop3): Ending clean mount [ 649.685486][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 649.798294][T16623] loop0: detected capacity change from 0 to 32768 [ 649.840223][ T5835] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 649.878867][T16623] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4262 (16623) [ 649.990075][T16623] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 650.077486][T16623] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 650.086617][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 650.127699][T16623] BTRFS info (device loop0): using free-space-tree [ 650.690034][ T5889] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 650.729117][T13221] Bluetooth: hci6: command 0x1003 tx timeout [ 650.735662][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 650.775290][T16691] loop6: detected capacity change from 0 to 1024 [ 650.923737][ T5823] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 650.928722][ T5889] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.988779][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 651.029685][ T5889] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 651.057268][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.120864][ T5889] usb 2-1: config 0 descriptor?? [ 651.126215][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 651.290834][ T12] hfsplus: b-tree write err: -5, ino 4 [ 651.596826][T16707] loop6: detected capacity change from 0 to 512 [ 651.664877][T16707] EXT4-fs: Ignoring removed nobh option [ 651.792196][T16707] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.4282: invalid indirect mapped block 256 (level 2) [ 651.855755][T16707] EXT4-fs (loop6): 2 truncates cleaned up [ 651.870806][ T5889] usb 2-1: USB disconnect, device number 48 [ 651.947187][T16707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.087506][ T30] audit: type=1800 audit(1747919756.725:3706): pid=16707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4282" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 652.159139][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 652.310491][T13949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.584777][T16720] loop5: detected capacity change from 0 to 4096 [ 652.769351][T16731] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 652.832669][ T30] audit: type=1800 audit(1747919757.475:3707): pid=16720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4287" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 653.014997][T16737] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4295'. [ 653.220609][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 653.316706][T16739] loop6: detected capacity change from 0 to 4096 [ 653.679183][ T5889] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 653.890099][ T5889] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 653.898271][ T5889] usb 3-1: config 0 has no interface number 0 [ 653.939434][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 653.970058][ T5889] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 654.018706][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 654.081327][ T5889] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 654.125477][ T5889] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 654.178281][T16757] netlink: 'syz.5.4304': attribute type 1 has an invalid length. [ 654.195880][ T5889] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 654.239856][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 654.254458][ T5889] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 654.280425][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.335394][ T5889] usb 3-1: config 0 descriptor?? [ 654.348829][ T5816] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 654.374994][T16747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 654.385400][T16747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 654.453237][ T5889] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 654.518987][T16733] loop0: detected capacity change from 0 to 32768 [ 654.531864][T16759] loop5: detected capacity change from 0 to 256 [ 654.547461][ T5816] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 654.575256][ T5816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.609023][T16759] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 654.633448][ T5816] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 654.653272][T16759] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 654.659643][T16761] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4307'. [ 654.664012][ T5816] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 654.692364][T16733] ERROR: (device loop0): dbAllocNext: Corrupt dmap page [ 654.692364][T16733] [ 654.693516][T16759] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 654.729896][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.748442][T16733] ERROR: (device loop0): remounting filesystem as read-only [ 654.760001][ T5816] usb 2-1: config 0 descriptor?? [ 654.769570][T16759] exFAT-fs (loop5): error, bogus directory size (clus : ondisk(12) != counted(13)) [ 654.804326][T16759] exFAT-fs (loop5): Filesystem has been set read-only [ 654.860906][ T47] usb 3-1: USB disconnect, device number 43 [ 654.887421][ T47] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 655.248849][ T5816] logitech 0003:046D:C294.006F: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 655.283160][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 655.291265][T16750] loop3: detected capacity change from 0 to 32768 [ 655.303013][ T5816] logitech 0003:046D:C294.006F: no inputs found [ 655.305447][T16763] loop6: detected capacity change from 0 to 4096 [ 655.394656][T16750] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 655.522197][ T5956] usb 2-1: USB disconnect, device number 49 [ 655.673532][T16750] XFS (loop3): Ending clean mount [ 655.913211][ T5835] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 656.237102][T16774] loop2: detected capacity change from 0 to 4096 [ 656.268117][T16780] loop6: detected capacity change from 0 to 4096 [ 656.320765][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 656.371233][T16780] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 656.561177][T16780] ntfs3(loop6): ino=1a, mi_enum_attr [ 656.566554][T16780] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 656.778652][ T5889] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 656.990827][ T5889] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 657.024056][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.045776][T16788] loop0: detected capacity change from 0 to 4096 [ 657.108751][T16788] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 657.109925][ T5889] usb 6-1: config 0 descriptor?? [ 657.207054][ T5889] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 657.232067][T16788] ntfs3(loop0): ino=1a, mi_enum_attr [ 657.238436][ T5889] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 657.255085][T16788] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 657.269742][T16801] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4322'. [ 657.309176][T16788] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 657.361160][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 657.387515][ T5889] usb 6-1: USB disconnect, device number 37 [ 657.490482][ T5956] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 657.668655][ T5956] usb 7-1: Using ep0 maxpacket: 8 [ 657.709785][ T5956] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.761896][ T5956] usb 7-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 657.781416][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.832478][ T5956] usb 7-1: config 0 descriptor?? [ 657.885762][T16809] loop0: detected capacity change from 0 to 1024 [ 657.933250][T16809] EXT4-fs: quotafile must be on filesystem root [ 657.948927][ T5889] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 658.121641][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 658.128403][ T5889] usb 2-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 658.172599][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.253142][ T5889] usb 2-1: config 0 descriptor?? [ 658.304436][ T5956] kye 0003:0458:4018.0070: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.6-1/input0 [ 658.308848][ T5889] usb-storage 2-1:0.0: USB Mass Storage device detected [ 658.375602][ T5889] usb-storage 2-1:0.0: This device (090a,1200,2487 S 01 P 21) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc7-syzkaller-00014-gd608703fcdd9) [ 658.375602][ T5889] Please send a copy of this message to and [ 658.416305][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 658.490708][T12333] usb 7-1: USB disconnect, device number 11 [ 658.551119][T16823] fido_id[16823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 658.624825][ T5889] usb 2-1: USB disconnect, device number 50 [ 658.979364][ T5816] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 659.154419][ T5816] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 659.197947][ T5816] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.252396][ T5816] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 659.274663][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.306570][ T5816] hub 6-1:4.0: USB hub found [ 659.440688][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 659.464778][T16837] loop1: detected capacity change from 0 to 4096 [ 659.495396][T16837] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 659.514141][ T5816] hub 6-1:4.0: 12 ports detected [ 659.548058][ T5816] usb 6-1: selecting invalid altsetting 1 [ 659.569619][ T5816] hub 6-1:4.0: Using single TT (err -22) [ 659.606876][T16837] ntfs3(loop1): ino=19, mi_enum_attr [ 659.613704][ T5816] hub 6-1:4.0: insufficient power available to use all downstream ports [ 659.633710][T16837] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 659.643980][T16837] ntfs3(loop1): ino=18, mi_enum_attr [ 659.793822][ T30] audit: type=1800 audit(1747919764.435:3708): pid=16837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4337" name="file0" dev="loop1" ino=0 res=0 errno=0 [ 659.891094][T16841] loop6: detected capacity change from 0 to 8192 [ 659.942569][ T5816] usb 6-1: USB disconnect, device number 38 [ 660.171866][T16846] loop3: detected capacity change from 0 to 1024 [ 660.228427][T16846] hfsplus: trying to free free bnode 0(1) [ 660.424787][ T3451] hfsplus: b-tree write err: -5, ino 4 [ 660.479822][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 660.698484][T16857] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 661.471000][T12333] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 661.520282][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 661.641078][T12333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.656931][T16852] loop6: detected capacity change from 0 to 32768 [ 661.663511][T12333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.704660][T16852] (syz.6.4344,16852,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 661.715356][T12333] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 661.755794][T16852] (syz.6.4344,16852,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 661.766507][T12333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.827812][T16852] JBD2: Ignoring recovery information on journal [ 661.905227][T12333] usb 4-1: config 0 descriptor?? [ 661.967866][T16856] loop0: detected capacity change from 0 to 32768 [ 662.021547][T16852] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 662.087695][T16870] loop5: detected capacity change from 0 to 32768 [ 662.102361][T16870] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4353 (16870) [ 662.133154][T16856] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 662.146182][T16870] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 662.170009][T16852] (syz.6.4344,16852,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 662.176920][T16870] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 662.257837][T16870] BTRFS info (device loop5): using free-space-tree [ 662.572260][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 662.610592][T12333] hid-led 0003:27B8:01ED.0071: probe with driver hid-led failed with error -71 [ 662.679096][T12333] usb 4-1: USB disconnect, device number 40 [ 662.712554][ T5823] ocfs2: Unmounting device (7,0) on (node local) [ 662.767024][T13949] ocfs2: Unmounting device (7,6) on (node local) [ 662.893900][T16905] loop1: detected capacity change from 0 to 1024 [ 662.995317][T16905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.995472][T16905] ext4 filesystem being mounted at /725/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.065356][T16912] loop6: detected capacity change from 0 to 64 [ 663.077635][T16905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 663.108086][ T5831] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 663.148806][T16905] EXT4-fs (loop1): Remounting filesystem read-only [ 663.229104][T16905] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.1.4371: cleanup dec ref error -28 [ 663.607899][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 663.638709][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.029500][T16926] loop3: detected capacity change from 0 to 164 [ 664.038912][ T47] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 664.078715][ T5889] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 664.083304][T16926] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 664.210029][ T47] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 664.210076][ T47] usb 6-1: config 0 has no interface number 0 [ 664.210140][ T47] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 664.210183][ T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 664.210233][ T47] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 664.210282][ T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 664.210331][ T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 664.210380][ T47] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 664.210446][ T47] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 664.210488][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.214012][ T47] usb 6-1: config 0 descriptor?? [ 664.214992][T16918] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 664.261113][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 664.261191][ T5889] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 664.261236][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.270979][ T5889] usb 1-1: config 0 descriptor?? [ 664.312033][T16918] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 664.420210][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.613549][ T47] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 664.656519][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 664.906633][ T5956] usb 6-1: USB disconnect, device number 39 [ 664.951337][ T5956] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 665.013665][T16937] IPVS: Unknown mcast interface: pim6reg0 [ 665.031673][T16935] loop1: detected capacity change from 0 to 256 [ 665.052406][ T5889] nintendo 0003:057E:200E.0072: unknown main item tag 0x3 [ 665.180184][ T5889] nintendo 0003:057E:200E.0072: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 665.300156][ T5889] nintendo 0003:057E:200E.0072: Failed charging grip handshake [ 665.307839][ T5889] nintendo 0003:057E:200E.0072: Failed to initialize controller; ret=-110 [ 665.366153][ T5889] nintendo 0003:057E:200E.0072: probe - fail = -110 [ 665.398842][ T5889] nintendo 0003:057E:200E.0072: probe with driver nintendo failed with error -110 [ 665.449714][ T5889] usb 1-1: USB disconnect, device number 41 [ 665.573972][T16948] loop3: detected capacity change from 0 to 2048 [ 665.648039][T16948] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 665.693359][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 665.736891][T16946] fido_id[16946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 665.819745][T16953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 665.861676][T16956] syz.1.4379 uses obsolete (PF_INET,SOCK_PACKET) [ 666.565525][T16971] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4386'. [ 666.723000][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 666.873376][T16945] loop6: detected capacity change from 0 to 32768 [ 666.960988][T16945] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 667.273323][T13949] ocfs2: Unmounting device (7,6) on (node local) [ 667.298227][T16986] loop1: detected capacity change from 0 to 512 [ 667.327255][T16986] EXT4-fs: Ignoring removed nobh option [ 667.374566][T16990] loop2: detected capacity change from 0 to 4096 [ 667.385390][T16990] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 667.393812][T16986] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #11: comm syz.1.4393: invalid indirect mapped block 256 (level 2) [ 667.490101][ T5816] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 667.560268][T16986] EXT4-fs (loop1): 2 truncates cleaned up [ 667.578204][T16986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.611127][T16990] ntfs3(loop2): ino=19, mi_enum_attr [ 667.616543][T16990] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 667.663804][ T5816] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 667.698721][ T5816] usb 1-1: config 0 has no interface number 0 [ 667.729814][ T5816] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 667.748846][ T30] audit: type=1800 audit(1747919772.385:3709): pid=16986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4393" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 667.771517][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 667.781191][T16992] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 667.787933][ T5816] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 667.875027][ T5816] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 667.897300][ T5816] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 667.941642][ T5816] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 667.967980][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.007826][ T5816] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 668.067467][ T5816] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 668.126729][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.195701][ T5816] usb 1-1: config 0 descriptor?? [ 668.221953][T16989] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 668.240443][T16989] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 668.303110][ T5816] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 668.341468][T17005] loop5: detected capacity change from 0 to 512 [ 668.439435][T17005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.470792][T17005] ext4 filesystem being mounted at /714/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.525917][T17011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 668.703094][ T5816] usb 1-1: USB disconnect, device number 42 [ 668.770398][ T5816] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 668.799881][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 668.835463][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.078763][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 669.078757][ T5956] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 669.253654][ T5956] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 669.266298][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 669.279535][ T5889] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 669.303928][ T5956] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.366651][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 669.411857][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 669.459941][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 669.465373][ T5956] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 669.483269][ T5889] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 669.494269][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 669.503653][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.558709][ T5956] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.568631][ T5889] usb 4-1: Product: syz [ 669.593523][ T5889] usb 4-1: Manufacturer: syz [ 669.608258][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 669.614917][ T5889] usb 4-1: SerialNumber: syz [ 669.661189][ T5889] usb 4-1: config 0 descriptor?? [ 669.666758][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 669.700300][ T5889] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 669.710289][ T5956] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 669.719092][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 669.769644][ T5956] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.819513][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 669.835505][T17043] loop0: detected capacity change from 0 to 256 [ 669.842658][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 669.858241][T17043] exfat: Deprecated parameter 'namecase' [ 669.880725][ T5956] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 669.888314][T17043] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 669.930866][ T5956] usb 7-1: string descriptor 0 read error: -22 [ 669.954451][ T5956] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 670.004366][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.064294][ T5956] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 670.143921][ T5889] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 670.170440][ T5889] visor 4-1:0.0: probe with driver visor failed with error -5 [ 670.258723][ T47] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 670.287117][T17047] netlink: 'syz.5.4420': attribute type 1 has an invalid length. [ 670.297150][T17047] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4420'. [ 670.308380][T12333] usb 7-1: USB disconnect, device number 12 [ 670.399410][ T5816] usb 4-1: USB disconnect, device number 41 [ 670.438749][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 670.454772][ T47] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 670.477934][ T47] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 670.494884][ T47] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 170, changing to 11 [ 670.499058][ T5889] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 670.527293][ T47] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid maxpacket 34661, setting to 1024 [ 670.549355][ T47] usb 2-1: config 0 interface 0 has no altsetting 0 [ 670.584270][ T47] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 670.602300][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.613679][ T47] usb 2-1: Product: syz [ 670.617964][ T47] usb 2-1: Manufacturer: syz [ 670.623221][ T47] usb 2-1: SerialNumber: syz [ 670.631545][ T47] usb 2-1: config 0 descriptor?? [ 670.637671][T17045] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 670.693428][ T5889] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 670.720165][ T5889] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.742857][ T5889] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 670.768691][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.794091][ T5889] hub 1-1:4.0: USB hub found [ 670.881393][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 670.889821][T17045] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 671.020567][ T5889] hub 1-1:4.0: 12 ports detected [ 671.025631][ T5889] usb 1-1: selecting invalid altsetting 1 [ 671.068626][ T5889] hub 1-1:4.0: Using single TT (err -22) [ 671.098794][ T5889] hub 1-1:4.0: insufficient power available to use all downstream ports [ 671.200111][T17063] No buffer was provided with the request [ 671.213652][ T5816] usb 2-1: USB disconnect, device number 51 [ 671.479124][ T5889] usb 1-1: USB disconnect, device number 43 [ 671.480843][T17070] loop6: detected capacity change from 0 to 16 [ 671.569422][T17070] erofs (device loop6): mounted with root inode @ nid 36. [ 671.580520][T17065] loop3: detected capacity change from 0 to 4096 [ 671.924702][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 672.286828][T17077] xt_CT: No such helper "pptp" [ 672.613389][T17087] loop0: detected capacity change from 0 to 2048 [ 672.664138][T17091] loop1: detected capacity change from 0 to 1024 [ 672.683718][T17087] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 672.728201][T17087] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 672.766745][T17087] UDF-fs: Scanning with blocksize 512 failed [ 672.795245][T17087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 672.833215][T17091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.971301][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 673.067994][T17101] loop5: detected capacity change from 0 to 4096 [ 673.154418][T17101] EXT4-fs (loop5): Test dummy encryption mode enabled [ 673.186839][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.225142][T17101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.523832][T17101] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 673.820938][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.000027][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 674.033094][T17127] loop0: detected capacity change from 0 to 16 [ 674.035819][T17126] loop1: detected capacity change from 0 to 512 [ 674.079692][T17127] erofs (device loop0): mounted with root inode @ nid 36. [ 674.082936][T17126] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 674.217569][T17126] EXT4-fs (loop1): invalid journal inode [ 674.260448][T17126] EXT4-fs (loop1): can't get journal size [ 674.292223][T17126] EXT4-fs (loop1): 1 truncate cleaned up [ 674.309713][T17126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.553544][T17126] EXT4-fs warning (device loop1): ext4_group_extend:1862: can't shrink FS - resize aborted [ 674.651773][T17145] netlink: 'syz.6.4461': attribute type 1 has an invalid length. [ 674.743890][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.040978][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 675.312658][T17163] loop1: detected capacity change from 0 to 128 [ 675.462331][T17163] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 675.504183][T17163] FAT-fs (loop1): Filesystem has been set read-only [ 675.555541][T17170] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 675.678726][ T5956] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 675.752168][T17169] loop3: detected capacity change from 0 to 4096 [ 675.785804][T17169] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 675.855697][ T5956] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 675.898667][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.950925][ T5956] usb 7-1: config 0 descriptor?? [ 675.985894][ T5956] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 676.029619][T17169] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 676.081662][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 676.219325][T17178] loop5: detected capacity change from 0 to 4096 [ 676.236877][T17178] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 676.384071][T17178] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 676.569273][ T5956] gspca_cpia1: usb_control_msg 01, error -71 [ 676.586894][ T5956] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 676.637688][ T5956] usb 7-1: USB disconnect, device number 13 [ 676.960636][T17192] x_tables: ip_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 0 [ 677.119451][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 677.186150][T17197] loop2: detected capacity change from 0 to 1024 [ 677.255160][T17197] hfsplus: bad catalog entry type [ 677.421787][T17198] loop1: detected capacity change from 0 to 4096 [ 677.492002][ T3437] hfsplus: b-tree write err: -5, ino 4 [ 677.582545][T17198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.058311][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.161619][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 678.205161][T17218] loop2: detected capacity change from 0 to 256 [ 678.247275][T17218] exfat: Deprecated parameter 'utf8' [ 678.268705][ T5816] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 678.362611][T17218] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 678.459399][ T5816] usb 7-1: Using ep0 maxpacket: 32 [ 678.479535][ T5816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.498640][ T5816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.524648][ T5816] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 678.544166][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.567718][ T5816] usb 7-1: config 0 descriptor?? [ 678.647832][T17204] loop5: detected capacity change from 0 to 32768 [ 678.657872][T17204] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4487 (17204) [ 678.732954][T17224] loop0: detected capacity change from 0 to 4096 [ 678.750053][T17204] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 678.802196][T17204] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 678.831289][T17204] BTRFS info (device loop5): using free-space-tree [ 679.033425][ T5816] koneplus 0003:1E7D:2D51.0073: unknown main item tag 0x0 [ 679.138842][ T5816] koneplus 0003:1E7D:2D51.0073: unbalanced collection at end of report description [ 679.193330][ T5816] koneplus 0003:1E7D:2D51.0073: parse failed [ 679.208126][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 679.244618][ T5816] koneplus 0003:1E7D:2D51.0073: probe with driver koneplus failed with error -22 [ 679.336025][ T5816] usb 7-1: USB disconnect, device number 14 [ 679.640857][ T5831] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 679.739063][ T5956] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 679.921216][ T5956] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 679.946838][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.023057][ T5956] usb 4-1: config 0 descriptor?? [ 680.124409][ T5816] hid-generic 0000:0003:0000.0074: unknown main item tag 0x0 [ 680.183711][ T5816] hid-generic 0000:0003:0000.0074: unknown main item tag 0x0 [ 680.245741][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 680.273364][ T5816] hid-generic 0000:0003:0000.0074: hidraw0: HID v0.00 Device [syz1] on syz0 [ 680.473388][T17273] loop6: detected capacity change from 0 to 2048 [ 680.515498][ T5956] apple 0003:05AC:027D.0075: hidraw0: USB HID v1.01 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 680.570775][T17273] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 680.688775][T17282] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 680.695156][T17274] fido_id[17274]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 680.788109][ T5956] usb 4-1: USB disconnect, device number 42 [ 680.811452][T17285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4515'. [ 680.853356][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4515'. [ 680.898086][T17285] netlink: 'syz.5.4515': attribute type 5 has an invalid length. [ 681.021519][T17290] loop2: detected capacity change from 0 to 512 [ 681.155192][T17290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.178922][T17290] ext4 filesystem being mounted at /760/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.286670][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 681.483161][T17291] fido_id[17291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 681.631804][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.686314][T17304] sg_write: data in/out 268435417/14 bytes for SCSI command 0x0-- guessing data in; [ 681.686314][T17304] program syz.6.4523 not setting count and/or reply_len properly [ 682.321031][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 682.349970][T17320] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4530'. [ 682.459237][ T5889] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 682.645413][ T5889] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 682.645463][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.645502][ T5889] usb 7-1: Product: syz [ 682.645531][ T5889] usb 7-1: Manufacturer: syz [ 682.645559][ T5889] usb 7-1: SerialNumber: syz [ 682.650394][ T5889] usb 7-1: config 0 descriptor?? [ 682.676138][ T5889] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 683.267657][ T5889] gspca_sunplus: reg_r err -71 [ 683.289640][ T5889] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 683.310657][T17336] loop3: detected capacity change from 0 to 1024 [ 683.340402][ T5889] usb 7-1: USB disconnect, device number 15 [ 683.359582][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 683.534140][ T13] hfsplus: b-tree write err: -5, ino 4 [ 683.719330][T17343] loop0: detected capacity change from 0 to 1024 [ 683.735255][T17345] loop5: detected capacity change from 0 to 164 [ 683.904795][T17345] ISOFS: unable to read i-node block [ 684.400862][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 684.530911][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4548'. [ 685.147947][T17379] loop3: detected capacity change from 0 to 1024 [ 685.271766][T17379] hfsplus: bad catalog entry type [ 685.439197][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 685.524429][ T991] hfsplus: b-tree write err: -5, ino 4 [ 685.827350][T17400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4567'. [ 685.892898][T17403] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4568'. [ 686.087333][T17407] loop1: detected capacity change from 0 to 164 [ 686.356050][T17415] loop2: detected capacity change from 0 to 128 [ 686.479822][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 687.067810][T17428] loop6: detected capacity change from 0 to 512 [ 687.095393][T17428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.096628][T17431] loop1: detected capacity change from 0 to 64 [ 687.172614][T17431] hfs: walked past end of dir [ 687.219857][T17428] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.4580: bg 0: block 425: padding at end of block bitmap is not set [ 687.244346][T17428] EXT4-fs (loop6): Remounting filesystem read-only [ 687.250723][T17436] binder: 17435:17436 ioctl c0306201 2000000003c0 returned -22 [ 687.519839][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 687.776149][T13949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.864870][T17449] netlink: 'syz.5.4591': attribute type 2 has an invalid length. [ 687.869448][T17445] loop1: detected capacity change from 0 to 4096 [ 687.921393][T17445] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 688.094807][T17445] ntfs3(loop1): ino=b, mi_enum_attr [ 688.127081][T17445] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 688.169679][T17445] ntfs3(loop1): Failed to load $Extend (-22). [ 688.199246][T17445] ntfs3(loop1): Failed to initialize $Extend. [ 688.285408][ T30] audit: type=1800 audit(1747919792.925:3710): pid=17445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4585" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 688.569545][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 688.656212][T17457] loop5: detected capacity change from 0 to 4096 [ 688.723235][T17457] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 689.116545][T17469] loop3: detected capacity change from 0 to 64 [ 689.188121][T17469] overlay: filesystem on ./bus not supported [ 689.410988][T17473] loop6: detected capacity change from 0 to 2048 [ 689.453554][T17473] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=2362, location=2362 [ 689.476616][T17443] loop2: detected capacity change from 0 to 32768 [ 689.549604][T17473] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 689.608146][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 689.631147][T17473] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 689.698362][T17473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.723840][T17451] loop0: detected capacity change from 0 to 32768 [ 689.740341][T17443] jfs_rename: dtInsert returned -EIO [ 689.897370][T17451] ialloc: diAlloc returned -5! [ 690.232331][ T112] ERROR: (device loop0): diUpdatePMap: the iag is outside the map [ 690.232331][ T112] [ 690.262449][ T112] ERROR: (device loop0): remounting filesystem as read-only [ 690.640769][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 690.886276][T17497] loop1: detected capacity change from 0 to 4096 [ 691.108335][T17505] loop3: detected capacity change from 0 to 256 [ 691.269631][T17505] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 691.682014][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 691.729498][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4611'. [ 691.738440][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4611'. [ 691.751407][T17517] loop1: detected capacity change from 0 to 512 [ 691.799688][T17517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 691.806542][T17517] EXT4-fs: Ignoring removed i_version option [ 691.819729][T17516] netlink: 'syz.0.4611': attribute type 19 has an invalid length. [ 691.934289][T17517] EXT4-fs (loop1): 1 orphan inode deleted [ 692.003200][T17517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.129151][T17525] netlink: 'syz.6.4625': attribute type 3 has an invalid length. [ 692.317771][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.394065][T17527] loop0: detected capacity change from 0 to 1024 [ 692.696159][T17512] loop5: detected capacity change from 0 to 32768 [ 692.715550][T17512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4621 (17512) [ 692.737362][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 692.839872][T17512] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 692.871846][ T12] hfsplus: b-tree write err: -5, ino 4 [ 692.939669][T17512] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 692.978751][T17512] BTRFS info (device loop5): using free-space-tree [ 693.156369][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4634'. [ 693.390816][T17563] tc_dump_action: action bad kind [ 693.496493][ T5831] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 693.718644][ T5956] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 693.760342][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 693.976837][ T5956] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 693.986247][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.030245][ T5956] usb 7-1: Product: syz [ 694.034491][ T5956] usb 7-1: Manufacturer: syz [ 694.056877][ T5956] usb 7-1: SerialNumber: syz [ 694.079301][T17537] loop1: detected capacity change from 0 to 32768 [ 694.098759][ T5956] usb 7-1: config 0 descriptor?? [ 694.128008][T17529] loop3: detected capacity change from 0 to 32768 [ 694.226612][T17537] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 694.255294][T17529] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 694.360218][ T5956] usb 7-1: USB disconnect, device number 16 [ 694.427921][T17581] loop0: detected capacity change from 0 to 1024 [ 694.447463][T17581] EXT4-fs: Ignoring removed bh option [ 694.473613][T11398] udevd[11398]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.529662][T17581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.561091][T17529] XFS (loop3): Ending clean mount [ 694.606304][T17581] ext4 filesystem being mounted at /780/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.640375][T17529] XFS (loop3): Quotacheck needed: Please wait. [ 694.755123][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 694.759649][ T30] audit: type=1800 audit(1747919799.395:3711): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4640" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 694.799164][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 694.892237][T17529] XFS (loop3): Quotacheck: Done. [ 695.207015][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.370227][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.376593][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.390274][ T5835] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 695.708704][T17605] loop1: detected capacity change from 0 to 512 [ 695.851083][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 695.889932][T17605] EXT4-fs (loop1): 1 orphan inode deleted [ 695.897773][T17605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.921045][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 695.987692][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 695.998900][T17605] ext4 filesystem being mounted at /773/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 696.343971][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.802877][T17622] loop3: detected capacity change from 0 to 4096 [ 696.818953][T17622] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 696.866195][T17627] loop0: detected capacity change from 0 to 1024 [ 696.881099][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 696.957613][T17622] ntfs3(loop3): ino=1a, mi_enum_attr [ 696.957673][T17622] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 696.958513][T17622] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 696.980717][T17627] hfsplus: request for non-existent node 134217728 in B*Tree [ 696.980801][T17627] hfsplus: request for non-existent node 134217728 in B*Tree [ 697.786918][T17642] loop1: detected capacity change from 0 to 512 [ 697.931623][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 697.962262][T17642] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 698.006387][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4669'. [ 698.100942][T17651] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 [ 698.145261][ T5889] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 698.290579][T17657] loop2: detected capacity change from 0 to 512 [ 698.336427][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.358039][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.387887][ T5889] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 698.424949][ T5889] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 698.452853][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 698.489911][T17657] EXT4-fs (loop2): 1 orphan inode deleted [ 698.497802][T17657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.529006][ T36] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 698.540341][ T5889] usb 1-1: Product: syz [ 698.560158][ T5889] usb 1-1: config 0 descriptor?? [ 698.577083][ T36] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 698.608164][T17657] ext4 filesystem being mounted at /788/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.745284][T17657] EXT4-fs warning (device loop2): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed [ 698.858652][ T47] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 698.955453][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.969041][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 698.997743][ T5889] waltop 0003:172F:0037.0076: unknown main item tag 0x0 [ 699.017588][ T5889] waltop 0003:172F:0037.0076: unknown main item tag 0x0 [ 699.026443][ T5889] waltop 0003:172F:0037.0076: unknown main item tag 0x0 [ 699.040391][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 699.066855][ T5889] waltop 0003:172F:0037.0076: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 699.069820][ T47] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.143727][ T47] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.191033][ T47] usb 2-1: config 0 interface 0 has no altsetting 0 [ 699.209302][ T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 699.247488][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.282809][ T5889] usb 1-1: USB disconnect, device number 44 [ 699.325142][ T47] usb 2-1: config 0 descriptor?? [ 699.596038][T17680] fido_id[17680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 699.794099][ T47] logitech 0003:046D:C29C.0077: unknown main item tag 0x0 [ 699.794148][ T47] logitech 0003:046D:C29C.0077: unknown main item tag 0x0 [ 699.794185][ T47] logitech 0003:046D:C29C.0077: unknown main item tag 0x0 [ 699.794220][ T47] logitech 0003:046D:C29C.0077: unknown main item tag 0x0 [ 699.794254][ T47] logitech 0003:046D:C29C.0077: unknown main item tag 0x0 [ 699.794289][ T47] logitech 0003:046D:C29C.0077: unknown main item tag 0x0 [ 699.794324][ T47] logitech 0003:046D:C29C.0077: unknown main item tag 0x0 [ 699.818164][ T47] logitech 0003:046D:C29C.0077: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 699.831984][T17685] loop5: detected capacity change from 0 to 4096 [ 699.992617][ T47] logitech 0003:046D:C29C.0077: no inputs found [ 700.000475][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 700.018859][ T47] usb 2-1: USB disconnect, device number 52 [ 700.350126][T17690] fido_id[17690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 700.357695][T17697] loop3: detected capacity change from 0 to 1024 [ 700.401683][T17697] EXT4-fs: Ignoring removed nobh option [ 700.490125][T17697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.557257][ T30] audit: type=1800 audit(1747919805.195:3712): pid=17697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4689" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 700.717918][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.040988][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 701.241827][T17709] loop6: detected capacity change from 0 to 1024 [ 701.445120][T17687] loop2: detected capacity change from 0 to 32768 [ 701.613346][T17687] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 702.031255][ T5928] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 702.079460][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 702.149002][ T5829] ocfs2: Unmounting device (7,2) on (node local) [ 702.157573][T17725] binder: 17724:17725 ioctl c018620c 200000000000 returned -22 [ 702.233737][T17705] loop1: detected capacity change from 0 to 32768 [ 702.244682][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 702.298764][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 702.334570][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 702.383625][ T5928] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 702.438590][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.452242][T17705] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 702.476876][ T5928] usb 4-1: config 0 descriptor?? [ 702.636206][T17736] sp0: Synchronizing with TNC [ 702.928288][ T5826] ocfs2: Unmounting device (7,1) on (node local) [ 702.952987][ T5928] kovaplus 0003:1E7D:2D50.0078: unknown main item tag 0x0 [ 703.016220][ T5928] kovaplus 0003:1E7D:2D50.0078: unknown main item tag 0x0 [ 703.029495][T17743] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.048968][ T5928] kovaplus 0003:1E7D:2D50.0078: unknown main item tag 0x0 [ 703.102911][ T5928] kovaplus 0003:1E7D:2D50.0078: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 703.119850][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 703.258841][ T5928] kovaplus 0003:1E7D:2D50.0078: couldn't init struct kovaplus_device [ 703.267043][ T5928] kovaplus 0003:1E7D:2D50.0078: couldn't install mouse [ 703.317553][ T5928] kovaplus 0003:1E7D:2D50.0078: probe with driver kovaplus failed with error -71 [ 703.399200][ T5928] usb 4-1: USB disconnect, device number 43 [ 703.525808][T17754] loop5: detected capacity change from 0 to 256 [ 703.582010][T17754] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 703.952374][T17759] loop2: detected capacity change from 0 to 2048 [ 704.054725][T17759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.160343][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 704.239703][T17759] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 704.666222][T17778] loop0: detected capacity change from 0 to 512 [ 704.676964][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.701233][T17778] EXT4-fs: Ignoring removed nobh option [ 704.706870][T17778] EXT4-fs: Ignoring removed mblk_io_submit option [ 704.820056][T17778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.905461][T17785] loop5: detected capacity change from 0 to 1024 [ 705.086817][T17787] CUSE: DEVNAME unspecified [ 705.204640][T17790] loop3: detected capacity change from 0 to 512 [ 705.232183][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 705.271618][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.308352][T17790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 705.350054][ T3451] hfsplus: b-tree write err: -5, ino 4 [ 705.406528][T17790] EXT4-fs (loop3): 1 truncate cleaned up [ 705.421458][T17790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.583571][T17790] ./file0: Can't lookup blockdev [ 705.897833][T17807] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4738'. [ 705.970698][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.256957][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 706.298150][T17816] loop1: detected capacity change from 0 to 512 [ 706.330718][T17816] ext4: Unknown parameter 'noacl' [ 706.493483][T17819] [U] ^C [ 706.785858][T17824] loop2: detected capacity change from 0 to 1024 [ 706.925979][T17822] loop1: detected capacity change from 0 to 4096 [ 706.969907][T17822] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 707.076781][T17822] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 707.280288][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 707.360534][T17800] loop0: detected capacity change from 0 to 32768 [ 707.398325][T17800] XFS: attr2 mount option is deprecated. [ 707.428194][T17800] XFS: ikeep mount option is deprecated. [ 707.456971][T17800] XFS: noikeep mount option is deprecated. [ 707.538232][T17800] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 707.588844][T17810] loop6: detected capacity change from 0 to 32768 [ 707.636093][T17810] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 707.786570][T17810] (syz.6.4739,17810,0):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume. [ 707.825698][T17800] XFS (loop0): Ending clean mount [ 707.843112][T17810] (syz.6.4739,17810,1):ocfs2_group_add:511 ERROR: status = -22 [ 707.884373][T17800] XFS (loop0): Quotacheck needed: Please wait. [ 708.022596][T17800] XFS (loop0): Quotacheck: Done. [ 708.100554][T13949] ocfs2: Unmounting device (7,6) on (node local) [ 708.198982][T17826] loop5: detected capacity change from 0 to 32768 [ 708.276627][T17814] loop3: detected capacity change from 0 to 32768 [ 708.319052][T17826] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 708.319186][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 708.370490][T17814] XFS: ikeep mount option is deprecated. [ 708.411644][ T5823] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 708.417868][T17814] XFS: noikeep mount option is deprecated. [ 708.576401][T17814] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 708.823517][ T5831] ocfs2: Unmounting device (7,5) on (node local) [ 708.941632][T17814] XFS (loop3): Ending clean mount [ 708.964295][T17865] sg_write: process 1659 (syz.1.4758) changed security contexts after opening file descriptor, this is not allowed. [ 709.021031][T17814] XFS (loop3): Quotacheck needed: Please wait. [ 709.252397][T17814] XFS (loop3): Quotacheck: Done. [ 709.360434][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 709.471204][ T5835] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 709.912177][T17850] loop6: detected capacity change from 0 to 32768 [ 709.999259][T17873] loop1: detected capacity change from 0 to 4096 [ 710.039210][T17876] loop2: detected capacity change from 0 to 2048 [ 710.064963][T17873] NILFS (loop1): invalid segment: Checksum error in segment payload [ 710.122715][T17873] NILFS (loop1): trying rollback from an earlier position [ 710.213856][T17876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 710.246573][T17873] NILFS (loop1): recovery complete [ 710.293564][T17880] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 710.380828][T17882] tipc: Started in network mode [ 710.408711][T17882] tipc: Node identity 68a, cluster identity 4711 [ 710.417596][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 710.458973][T17882] tipc: Node number set to 1674 [ 710.464491][T17882] tipc: Cannot configure node identity twice [ 711.193764][T17898] loop1: detected capacity change from 0 to 2048 [ 711.225598][T17898] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 711.326011][T17898] syz.1.4769: attempt to access beyond end of device [ 711.326011][T17898] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 711.343741][T17901] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 711.471041][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 711.537983][T17907] syz.1.4769: attempt to access beyond end of device [ 711.537983][T17907] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 711.566091][T17908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.609684][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 711.647179][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 711.713425][T17907] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 711.726399][T17898] Remounting filesystem read-only [ 711.808755][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 711.856272][T17907] NILFS (loop1): error -5 reading inode: ino=15 [ 711.877646][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 711.962695][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 711.963965][T17913] loop0: detected capacity change from 0 to 256 [ 712.016773][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 712.057201][T17913] exfat: Deprecated parameter 'utf8' [ 712.109481][T17913] exfat: Deprecated parameter 'utf8' [ 712.144856][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 712.222891][T17913] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x864056ba, utbl_chksum : 0xe619d30d) [ 712.278829][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 712.341193][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 712.459643][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 712.484530][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 712.497245][T17890] loop2: detected capacity change from 0 to 32768 [ 712.570344][T17890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4768 (17890) [ 712.585064][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 712.628679][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 712.680853][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 712.741257][ T5928] kernel write not supported for file /stat (pid: 5928 comm: kworker/1:6) [ 712.751815][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 712.772956][T17890] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 712.801431][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 712.835715][T17890] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 712.868740][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 712.933554][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 713.108656][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 713.140888][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 713.189001][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 713.227286][T17935] netlink: 'syz.6.4785': attribute type 1 has an invalid length. [ 713.237547][T17935] netlink: 184 bytes leftover after parsing attributes in process `syz.6.4785'. [ 713.247147][T17935] netlink: 'syz.6.4785': attribute type 1 has an invalid length. [ 713.298513][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 713.338862][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 713.403378][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 713.453383][T17890] BTRFS error (device loop2 state M): cannot disable free-space-tree [ 713.458692][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 713.519905][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 713.559692][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 713.599014][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 713.638946][T17948] loop5: detected capacity change from 0 to 512 [ 713.646401][T17948] EXT4-fs: Ignoring removed nobh option [ 713.693271][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 713.729095][ T5829] BTRFS info (device loop2 state M): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 713.745183][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 713.777197][T17948] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 713.813855][T17955] macvlan3: entered promiscuous mode [ 713.824831][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 713.837743][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 713.847786][T17948] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.4787: invalid indirect mapped block 2683928664 (level 1) [ 713.853901][T17898] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 713.873992][T17898] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 713.889542][T17955] macvlan3: entered allmulticast mode [ 713.900266][ T30] audit: type=1800 audit(1747919818.545:3713): pid=17898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4769" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 713.979855][T17948] EXT4-fs (loop5): 1 truncate cleaned up [ 714.029138][T17948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.382694][T17964] dlm: plock device version mismatch: kernel (1.2.0), user (1.53411925.0) [ 714.438316][T17967] loop0: detected capacity change from 0 to 512 [ 714.491380][T17967] EXT4-fs: inline encryption not supported [ 714.560045][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 714.583233][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.719929][T17967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.749282][T17973] loop6: detected capacity change from 0 to 1024 [ 714.775313][T17967] ext4 filesystem being mounted at /805/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.863083][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4800'. [ 714.944327][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4800'. [ 714.999999][T17977] netlink: 'syz.2.4800': attribute type 13 has an invalid length. [ 715.034035][T17973] hfsplus: request for non-existent node 16777216 in B*Tree [ 715.043554][T17977] netlink: 'syz.2.4800': attribute type 12 has an invalid length. [ 715.104916][T17973] hfsplus: request for non-existent node 16777216 in B*Tree [ 715.135476][T17983] loop1: detected capacity change from 0 to 256 [ 715.181707][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.236280][T17983] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x20d18cad, utbl_chksum : 0xe619d30d) [ 715.613762][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 715.689544][ T30] audit: type=1800 audit(1747919820.325:3714): pid=17973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4797" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 715.876912][T17991] loop0: detected capacity change from 0 to 2048 [ 715.916990][T17991] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 716.036005][T17991] UDF-fs: unknown compression code (0) [ 716.339885][ T30] audit: type=1326 audit(1747919820.985:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.3.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d918e969 code=0x7ffc0000 [ 716.478037][ T30] audit: type=1326 audit(1747919820.985:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.3.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d918e969 code=0x7ffc0000 [ 716.509628][T18007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4813'. [ 716.548691][ T30] audit: type=1326 audit(1747919821.025:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.3.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc5d918e969 code=0x7ffc0000 [ 716.593315][ T30] audit: type=1326 audit(1747919821.025:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.3.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d918e969 code=0x7ffc0000 [ 716.616888][ T30] audit: type=1326 audit(1747919821.025:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.3.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d918e969 code=0x7ffc0000 [ 716.651492][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 716.708722][ T47] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 716.759465][ T30] audit: type=1326 audit(1747919821.395:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d798e969 code=0x7ffc0000 [ 716.846169][ T30] audit: type=1326 audit(1747919821.395:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d798e969 code=0x7ffc0000 [ 716.888692][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 716.908089][ T47] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 716.908139][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.908178][ T47] usb 1-1: Product: syz [ 716.908206][ T47] usb 1-1: Manufacturer: syz [ 716.908235][ T47] usb 1-1: SerialNumber: syz [ 716.912686][ T47] usb 1-1: config 0 descriptor?? [ 716.916906][ T47] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 716.947494][ T30] audit: type=1326 audit(1747919821.405:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18008 comm="syz.1.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f56d798e969 code=0x7ffc0000 [ 717.099216][T18018] loop1: detected capacity change from 0 to 128 [ 717.158966][T18018] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 717.610449][ T47] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 717.650328][ T47] usb 1-1: USB disconnect, device number 45 [ 717.687742][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 717.999023][ T5889] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 718.169352][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 718.171554][ T5889] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.171611][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 718.171663][ T5889] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 718.171715][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.178026][ T5889] usb 6-1: config 0 descriptor?? [ 718.431212][T18013] loop6: detected capacity change from 0 to 32768 [ 718.491321][T18013] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 718.526508][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4833'. [ 718.545014][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4833'. [ 718.624797][ T5889] zeroplus 0003:0C12:0005.0079: item fetching failed at offset 0/3 [ 718.625644][ T5889] zeroplus 0003:0C12:0005.0079: parse failed [ 718.625739][ T5889] zeroplus 0003:0C12:0005.0079: probe with driver zeroplus failed with error -22 [ 718.719101][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 718.777758][T18013] XFS (loop6): Ending clean mount [ 718.842448][T18013] XFS (loop6): Quotacheck needed: Please wait. [ 718.889957][ T5889] usb 6-1: USB disconnect, device number 40 [ 718.981901][T18013] XFS (loop6): Quotacheck: Done. [ 719.203151][T13949] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 719.760959][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 719.937739][T18085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4845'. [ 720.016006][T18086] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 720.108657][T12333] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 720.309084][T12333] usb 1-1: Using ep0 maxpacket: 8 [ 720.321991][T12333] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 720.348603][T12333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.358707][T12333] usb 1-1: Product: syz [ 720.362909][T12333] usb 1-1: Manufacturer: syz [ 720.393170][T12333] usb 1-1: SerialNumber: syz [ 720.428338][T12333] usb 1-1: config 0 descriptor?? [ 720.466209][T12333] gspca_main: se401-2.14.0 probing 047d:5003 [ 720.530413][T18099] loop3: detected capacity change from 0 to 1024 [ 720.759743][ T5816] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 720.780848][T18104] loop1: detected capacity change from 0 to 1024 [ 720.811031][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 720.861049][T12333] gspca_se401: Wrong descriptor type [ 720.894355][ T12] hfsplus: b-tree write err: -5, ino 4 [ 720.953065][ T5816] usb 7-1: too many endpoints for config 0 interface 0 altsetting 14: 69, using maximum allowed: 30 [ 720.995738][ T5816] usb 7-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.001105][ T12] hfsplus: b-tree write err: -5, ino 4 [ 721.016690][ T5816] usb 7-1: config 0 interface 0 altsetting 14 endpoint 0x2 has invalid maxpacket 3487, setting to 64 [ 721.058694][ T5816] usb 7-1: config 0 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 69 [ 721.096117][T12333] usb 1-1: USB disconnect, device number 46 [ 721.111748][ T5816] usb 7-1: config 0 interface 0 has no altsetting 0 [ 721.118452][ T5816] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 721.192781][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.236712][ T5816] usb 7-1: config 0 descriptor?? [ 721.252923][T18100] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 721.784767][ T5816] macally 0003:060B:0001.007A: hidraw0: USB HID v0.c4 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 721.829614][ T5889] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 721.853394][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 721.990926][ T5889] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 722.022072][ T5816] usb 7-1: USB disconnect, device number 17 [ 722.035323][ T5889] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 722.036003][T18102] loop5: detected capacity change from 0 to 32768 [ 722.069451][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.102170][ T5889] usb 3-1: Product: syz [ 722.106415][ T5889] usb 3-1: Manufacturer: syz [ 722.131494][ T5889] usb 3-1: SerialNumber: syz [ 722.200898][T18125] fido_id[18125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 722.205951][T18102] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 722.332444][T18102] XFS (loop5): Ending clean mount [ 722.374347][ T5889] usb 3-1: selecting invalid altsetting 1 [ 722.408927][T18102] XFS (loop5): Quotacheck needed: Please wait. [ 722.529095][T18141] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4868'. [ 722.576091][ T5889] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 722.576233][ T5889] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 722.580468][T18141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4868'. [ 722.605833][T18141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4868'. [ 722.606223][T18102] XFS (loop5): Quotacheck: Done. [ 722.620038][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4868'. [ 722.781677][ T5889] usb 3-1: USB disconnect, device number 44 [ 722.880663][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 722.938795][T18146] loop3: detected capacity change from 0 to 1024 [ 723.017319][T18146] EXT4-fs: Ignoring removed bh option [ 723.042846][ T5831] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 723.058729][T18146] EXT4-fs: inline encryption not supported [ 723.088119][T18146] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 723.164349][T18146] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 723.243561][T18146] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.4871: lblock 2 mapped to illegal pblock 2 (length 1) [ 723.253367][T18156] loop6: detected capacity change from 0 to 256 [ 723.271649][T18146] __quota_error: 5 callbacks suppressed [ 723.271671][T18146] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 723.293122][T18146] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.4871: lblock 0 mapped to illegal pblock 48 (length 1) [ 723.358001][T18156] FAT-fs (loop6): Directory bread(block 64) failed [ 723.385328][T18146] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 723.395151][T18156] FAT-fs (loop6): Directory bread(block 65) failed [ 723.427517][T18146] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4871: Failed to acquire dquot type 0 [ 723.447823][T18156] FAT-fs (loop6): Directory bread(block 66) failed [ 723.457832][T18156] FAT-fs (loop6): Directory bread(block 67) failed [ 723.498821][T18146] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 723.510413][T18156] FAT-fs (loop6): Directory bread(block 68) failed [ 723.517008][T18156] FAT-fs (loop6): Directory bread(block 69) failed [ 723.559469][T18146] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.4871: mark_inode_dirty error [ 723.577463][T18156] FAT-fs (loop6): Directory bread(block 70) failed [ 723.629417][T18156] FAT-fs (loop6): Directory bread(block 71) failed [ 723.636115][T18156] FAT-fs (loop6): Directory bread(block 72) failed [ 723.648639][T18146] EXT4-fs warning (device loop3): ext4_evict_inode:261: couldn't mark inode dirty (err -117) [ 723.689440][T18156] FAT-fs (loop6): Directory bread(block 73) failed [ 723.736717][T18146] EXT4-fs (loop3): 1 orphan inode deleted [ 723.749569][ T991] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 723.800766][T18146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.844888][ T991] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 723.899640][ T991] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 723.919293][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 724.058890][T18146] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz.3.4871: Invalid inode table block 1 in block_group 0 [ 724.099041][T18146] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 724.348262][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.376519][ T5835] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 724.391615][T18170] loop1: detected capacity change from 0 to 16 [ 724.440532][T18170] erofs (device loop1): mounted with root inode @ nid 36. [ 724.452197][ T5835] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 724.473369][T18172] loop6: detected capacity change from 0 to 512 [ 724.481354][ T5835] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 724.505789][T18166] loop5: detected capacity change from 0 to 4096 [ 724.523216][T18172] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 724.575331][T18172] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4881: iget: bad extended attribute block 9 [ 724.720332][T18172] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.4881: couldn't read orphan inode 15 (err -117) [ 724.800377][T18172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.844610][T18158] loop0: detected capacity change from 0 to 32768 [ 724.937074][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4884'. [ 724.963676][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 725.056605][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4884'. [ 725.250748][T13949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.494016][T18184] loop5: detected capacity change from 0 to 2048 [ 725.657438][T18184] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 725.668677][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4892'. [ 725.745637][T18194] loop0: detected capacity change from 0 to 64 [ 725.933392][T18196] loop3: detected capacity change from 0 to 256 [ 726.001753][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 726.019043][T18198] tipc: Started in network mode [ 726.034822][T18198] tipc: Node identity 68a, cluster identity 4711 [ 726.054568][T18198] tipc: Node number set to 1674 [ 726.083583][T18198] tipc: Cannot configure node identity twice [ 726.257852][T18196] FAT-fs (loop3): Directory bread(block 64) failed [ 726.299962][T18196] FAT-fs (loop3): Directory bread(block 65) failed [ 726.306619][T18196] FAT-fs (loop3): Directory bread(block 66) failed [ 726.389373][T18196] FAT-fs (loop3): Directory bread(block 67) failed [ 726.408795][T18196] FAT-fs (loop3): Directory bread(block 68) failed [ 726.457737][T18196] FAT-fs (loop3): Directory bread(block 69) failed [ 726.482376][T18196] FAT-fs (loop3): Directory bread(block 70) failed [ 726.521038][T18196] FAT-fs (loop3): Directory bread(block 71) failed [ 726.578959][T18196] FAT-fs (loop3): Directory bread(block 72) failed [ 726.608863][T18196] FAT-fs (loop3): Directory bread(block 73) failed [ 726.805024][T18206] loop0: detected capacity change from 0 to 4096 [ 726.814471][T18211] loop1: detected capacity change from 0 to 4096 [ 726.869614][T18206] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 727.041599][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 728.030803][T18236] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 728.079408][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 728.119510][T18242] sg_write: data in/out 2031668/1 bytes for SCSI command 0x26-- guessing data in; [ 728.119510][T18242] program syz.5.4916 not setting count and/or reply_len properly [ 728.434029][T18217] loop6: detected capacity change from 0 to 32768 [ 728.475010][T18217] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4905 (18217) [ 728.576263][T18217] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 728.576381][T18217] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 728.576437][T18217] BTRFS info (device loop6): using free-space-tree [ 729.124091][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 729.229620][T18265] loop5: detected capacity change from 0 to 32768 [ 729.239347][T18265] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 729.239399][T18265] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 729.257893][T18265] gfs2: fsid=syz:syz.0: journal 0 mapped with 23 extents in 0ms [ 729.265882][ T5889] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 729.265942][ T5889] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 729.448902][ T5928] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 729.606576][ T5889] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 340ms [ 729.607768][ T5889] gfs2: fsid=syz:syz.0: jid=0: Done [ 729.610785][T18265] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 729.620101][T13949] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 729.623632][ T5928] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 729.623675][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.623718][ T5928] usb 3-1: Product: syz [ 729.623744][ T5928] usb 3-1: Manufacturer: syz [ 729.623773][ T5928] usb 3-1: SerialNumber: syz [ 729.630004][ T5928] usb 3-1: config 0 descriptor?? [ 729.672146][ T5928] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 045 [ 730.180544][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 730.290419][ T5928] i2c i2c-1: failure reading functionality [ 730.328640][ T5928] i2c i2c-1: connected i2c-tiny-usb device [ 730.399560][ T5928] usb 3-1: USB disconnect, device number 45 [ 730.413522][ T5194] udevd[5194]: worker [13844] terminated by signal 33 (Unknown signal 33) [ 730.461082][ T5194] udevd[5194]: worker [13844] failed while handling '/devices/virtual/block/loop6' [ 730.593975][T18296] sg_write: data in/out 2031668/1 bytes for SCSI command 0x26-- guessing data in; [ 730.593975][T18296] program syz.3.4934 not setting count and/or reply_len properly [ 730.961213][T18298] loop6: detected capacity change from 0 to 4096 [ 731.151184][T18298] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.207530][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 731.321341][T18310] loop0: detected capacity change from 0 to 512 [ 731.376767][T18310] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 731.379336][T18313] syz.2.4939: attempt to access beyond end of device [ 731.379336][T18313] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 731.421542][T13949] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.422552][T18310] EXT4-fs (loop0): 1 truncate cleaned up [ 731.439162][T18310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.460739][T18313] SQUASHFS error: Failed to read block 0x0: -5 [ 731.466987][T18313] unable to read squashfs_super_block [ 731.468152][T18314] loop3: detected capacity change from 0 to 2048 [ 731.497262][T18310] EXT4-fs error (device loop0): ext4_generic_delete_entry:2669: inode #2: block 13: comm syz.0.4941: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 731.533330][T18310] EXT4-fs error (device loop0) in ext4_delete_entry:2741: Corrupt filesystem [ 731.619989][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4943'. [ 731.670042][T18317] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4943'. [ 731.695460][T18317] netlink: 'syz.5.4943': attribute type 10 has an invalid length. [ 731.734732][T18319] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 731.810395][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.841612][ T30] audit: type=1800 audit(1747919836.485:3728): pid=18314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4940" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 732.239976][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 732.574389][T18342] loop1: detected capacity change from 0 to 1024 [ 732.850516][ T3451] hfsplus: b-tree write err: -5, ino 4 [ 732.869614][T18350] loop3: detected capacity change from 0 to 256 [ 732.981328][T18354] loop2: detected capacity change from 0 to 512 [ 732.997485][T18352] loop5: detected capacity change from 0 to 2048 [ 733.008996][ T5928] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 733.020304][T18350] FAT-fs (loop3): Directory bread(block 64) failed [ 733.051981][T18354] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.4959: corrupted in-inode xattr: invalid ea_ino [ 733.073752][T18350] FAT-fs (loop3): Directory bread(block 65) failed [ 733.081437][T18350] FAT-fs (loop3): Directory bread(block 66) failed [ 733.088016][T18350] FAT-fs (loop3): Directory bread(block 67) failed [ 733.105151][T18350] FAT-fs (loop3): Directory bread(block 68) failed [ 733.115184][T18350] FAT-fs (loop3): Directory bread(block 69) failed [ 733.122113][T18350] FAT-fs (loop3): Directory bread(block 70) failed [ 733.138698][T18350] FAT-fs (loop3): Directory bread(block 71) failed [ 733.139339][T18358] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 733.157521][T18350] FAT-fs (loop3): Directory bread(block 72) failed [ 733.157577][T18350] FAT-fs (loop3): Directory bread(block 73) failed [ 733.203092][T18354] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.4959: couldn't read orphan inode 15 (err -117) [ 733.231864][T18359] sd 0:0:1:0: device reset [ 733.249260][ T5928] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 733.258189][ T30] audit: type=1800 audit(1747919837.875:3729): pid=18352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4958" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 733.280012][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 733.312757][ T5928] usb 1-1: config 0 has no interface number 0 [ 733.340924][ T5928] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 733.356002][T18354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.399287][ T30] audit: type=1800 audit(1747919837.895:3730): pid=18352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4958" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 733.441655][ T5928] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 733.477438][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.518022][ T5928] usb 1-1: Product: syz [ 733.526648][ T5928] usb 1-1: Manufacturer: syz [ 733.570358][ T5928] usb 1-1: SerialNumber: syz [ 733.589847][ T5928] usb 1-1: config 0 descriptor?? [ 733.595736][T18346] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 733.609203][ T5928] ums-karma 1-1:0.46: USB Mass Storage device detected [ 733.748509][ T5928] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 733.780944][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.909211][ T971] usb 1-1: USB disconnect, device number 47 [ 734.140261][T18374] bridge0: entered promiscuous mode [ 734.186760][T18374] macvlan2: entered promiscuous mode [ 734.211515][T18371] loop3: detected capacity change from 0 to 4096 [ 734.319162][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 734.520972][T18371] ntfs3(loop3): ino=5, "/" indx_read [ 734.526785][T18371] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 734.968165][T18387] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4973'. [ 735.359712][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 735.378281][T18397] nbd: must specify an index to disconnect [ 735.410673][T18399] loop3: detected capacity change from 0 to 1024 [ 735.426634][T18401] loop6: detected capacity change from 0 to 8 [ 735.451873][T18399] hfsplus: extend alloc file! (8192,8,110) [ 735.543679][T18369] loop1: detected capacity change from 0 to 32768 [ 735.619570][T18369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4966 (18369) [ 735.723670][T18369] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 735.759986][T18369] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 735.780596][T18369] BTRFS info (device loop1): disk space caching is enabled [ 735.788086][T18369] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 735.898756][T12333] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 735.908145][T18409] loop3: detected capacity change from 0 to 256 [ 735.961362][T18409] FAT-fs (loop3): Directory bread(block 1285) failed [ 736.000216][T18409] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 736.099127][T12333] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 736.116848][T18429] pim6reg: entered allmulticast mode [ 736.122424][T12333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.155220][T12333] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 736.176662][T12333] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 736.248718][T12333] usb 1-1: Manufacturer: syz [ 736.281903][T12333] usb 1-1: config 0 descriptor?? [ 736.399204][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 736.471536][T18369] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 736.584679][T12333] rc_core: IR keymap rc-hauppauge not found [ 736.601273][T12333] Registered IR keymap rc-empty [ 736.616574][T12333] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 736.649574][T18440] loop2: detected capacity change from 0 to 512 [ 736.684572][T12333] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49 [ 736.753636][T18442] netlink: 'syz.5.4992': attribute type 11 has an invalid length. [ 736.767003][T18440] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 736.848113][T18440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c09c, mo2=0102] [ 736.907593][ C1] igorplugusb 1-1:0.0: receive overflow invalid: 80 [ 736.928973][T18440] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 736.929010][T18440] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 736.931263][T18440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 737.176851][T18447] loop3: detected capacity change from 0 to 1024 [ 737.198668][T12333] usb 1-1: USB disconnect, device number 48 [ 737.243197][T18447] EXT4-fs: Ignoring removed orlov option [ 737.408495][T18447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.442218][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.469500][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 737.553064][ T30] audit: type=1800 audit(1747919842.195:3731): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4993" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 737.715783][T18460] pimreg: entered allmulticast mode [ 737.731113][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.743526][T18461] loop2: detected capacity change from 0 to 256 [ 737.802320][T18460] pimreg: left allmulticast mode [ 737.846608][T18461] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 737.977328][T18461] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 738.479602][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 738.781459][ T5816] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 738.844772][T18486] netlink: 'syz.6.5010': attribute type 8 has an invalid length. [ 738.857544][T18486] netlink: 197324 bytes leftover after parsing attributes in process `syz.6.5010'. [ 738.939533][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 738.948861][ T5889] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 738.957322][ T5816] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 738.985404][ T5816] usb 2-1: config 0 has no interface number 0 [ 739.007912][ T5816] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.036550][ T5816] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.088426][ T5816] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 739.108333][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.134899][ T5816] usb 2-1: config 0 descriptor?? [ 739.148062][ T5889] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.170803][ T5889] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.202715][ T5889] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.216196][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 739.223908][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 739.233325][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.254527][ T5889] usb 4-1: config 0 descriptor?? [ 739.523764][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 739.578434][T18469] loop5: detected capacity change from 0 to 40427 [ 739.687867][ T5889] logitech-hidpp-device 0003:046D:C262.007C: item fetching failed at offset 5/8 [ 739.742780][ T5889] logitech-hidpp-device 0003:046D:C262.007C: hidpp_probe:parse failed [ 739.769635][ T5889] logitech-hidpp-device 0003:046D:C262.007C: probe with driver logitech-hidpp-device failed with error -22 [ 739.864251][ T5816] uclogic 0003:28BD:0071.007B: failed retrieving string descriptor #100: -71 [ 739.894298][ T5889] usb 4-1: USB disconnect, device number 44 [ 739.915201][ T5816] uclogic 0003:28BD:0071.007B: failed retrieving pen parameters: -71 [ 739.924521][T18484] loop0: detected capacity change from 0 to 32768 [ 739.968105][ T5816] uclogic 0003:28BD:0071.007B: pen probing failed: -71 [ 739.991424][T18499] loop2: detected capacity change from 0 to 1024 [ 739.999492][ T5816] uclogic 0003:28BD:0071.007B: failed probing parameters: -71 [ 740.031248][ T5816] uclogic 0003:28BD:0071.007B: probe with driver uclogic failed with error -71 [ 740.074411][T18499] hfsplus: bad catalog entry type [ 740.099928][T18484] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 740.123463][T18469] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 740.141427][ T991] hfsplus: b-tree write err: -5, ino 4 [ 740.221839][ T5816] usb 2-1: USB disconnect, device number 53 [ 740.311090][ T5823] ocfs2: Unmounting device (7,0) on (node local) [ 740.521490][T18506] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 909 [ 740.560324][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 740.938729][ T5889] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 741.007426][T18514] loop1: detected capacity change from 0 to 4096 [ 741.084086][T18514] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 741.124524][T18519] netlink: 'syz.3.5025': attribute type 1 has an invalid length. [ 741.154897][ T5889] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 741.189386][ T5889] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 741.209772][T18519] netlink: 'syz.3.5025': attribute type 2 has an invalid length. [ 741.237577][ T5889] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 741.298223][ T5889] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 741.346796][T18514] ntfs3(loop1): failed to convert "c46c" to macceltic [ 741.349464][ T5889] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 741.408386][T18514] ntfs3(loop1): ino=20, mi_enum_attr [ 741.442778][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 741.458677][T18514] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 741.488337][ T5889] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 741.539239][ T5889] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 741.598982][ T5889] usb 1-1: Product: syz [ 741.600588][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 741.613140][ T5889] usb 1-1: Manufacturer: syz [ 741.646998][ T5889] usb 1-1: SerialNumber: syz [ 741.691692][ T5889] usb 1-1: config 0 descriptor?? [ 741.728022][T18509] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 741.757174][ T5889] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 741.810802][ T5889] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 742.135431][T12333] usb 1-1: USB disconnect, device number 49 [ 742.168022][T12333] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 742.338639][T18543] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 742.428932][ T47] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 742.474922][T18544] loop3: detected capacity change from 0 to 2048 [ 742.544286][T18549] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 742.591115][ T47] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 742.613880][ T30] audit: type=1800 audit(1747919847.255:3732): pid=18544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5035" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 742.637383][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.649698][ C1] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 742.661028][ T30] audit: type=1800 audit(1747919847.275:3733): pid=18544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5035" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 742.684825][ T47] usb 3-1: config 0 descriptor?? [ 742.973954][T18554] loop0: detected capacity change from 0 to 512 [ 743.043899][T18554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 743.129012][T18554] EXT4-fs (loop0): 1 truncate cleaned up [ 743.161417][ T47] creative-sb0540 0003:041E:3100.007D: unknown main item tag 0x0 [ 743.178638][ T47] creative-sb0540 0003:041E:3100.007D: unknown main item tag 0x0 [ 743.198764][ T47] creative-sb0540 0003:041E:3100.007D: unknown main item tag 0x0 [ 743.216791][ T47] creative-sb0540 0003:041E:3100.007D: unknown main item tag 0x0 [ 743.244464][ T47] creative-sb0540 0003:041E:3100.007D: unknown main item tag 0x0 [ 743.247135][T18554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.271221][ T47] creative-sb0540 0003:041E:3100.007D: No inputs registered, leaving [ 743.310022][T18563] loop3: detected capacity change from 0 to 256 [ 743.367822][ T47] creative-sb0540 0003:041E:3100.007D: hidraw0: USB HID v1.01 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 743.414251][T18563] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 743.461135][T18554] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #15: comm syz.0.5039: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 743.466949][ T47] usb 3-1: USB disconnect, device number 46 [ 743.680535][ C0] tipc: Duplicate 9eaaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 743.698306][T18558] ================================================================== [ 743.706393][T18558] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x2cb6/0x43c0 [ 743.715048][T18558] Write of size 1440 at addr ffffc90004b19da0 by task vivid-000-vid-c/18558 [ 743.723755][T18558] [ 743.726100][T18558] CPU: 1 UID: 0 PID: 18558 Comm: vivid-000-vid-c Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 743.726147][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 743.726168][T18558] Call Trace: [ 743.726180][T18558] [ 743.726194][T18558] dump_stack_lvl+0x116/0x1f0 [ 743.726253][T18558] print_report+0xc3/0x670 [ 743.726307][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.726350][T18558] ? __virt_addr_valid+0x5e/0x590 [ 743.726405][T18558] ? tpg_fill_plane_buffer+0x2cb6/0x43c0 [ 743.726459][T18558] kasan_report+0xe0/0x110 [ 743.726513][T18558] ? tpg_fill_plane_buffer+0x2cb6/0x43c0 [ 743.726573][T18558] kasan_check_range+0xef/0x1a0 [ 743.726611][T18558] __asan_memcpy+0x3c/0x60 [ 743.726658][T18558] tpg_fill_plane_buffer+0x2cb6/0x43c0 [ 743.726746][T18558] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 743.726809][T18558] vivid_fillbuff+0x8d2/0x4250 [ 743.726880][T18558] ? __pfx_vivid_fillbuff+0x10/0x10 [ 743.726946][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.726988][T18558] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 743.727026][T18558] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.727078][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.727125][T18558] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 743.727177][T18558] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 743.727234][T18558] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 743.727288][T18558] vivid_thread_vid_cap+0x454/0xda0 [ 743.727347][T18558] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 743.727401][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.727443][T18558] ? do_raw_spin_lock+0x12c/0x2b0 [ 743.727481][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.727524][T18558] ? find_held_lock+0x2b/0x80 [ 743.727568][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.727610][T18558] ? rcu_is_watching+0x12/0xc0 [ 743.727651][T18558] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 743.727708][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.727750][T18558] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.727801][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.727844][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.727887][T18558] ? __kthread_parkme+0x19e/0x250 [ 743.727940][T18558] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 743.727992][T18558] kthread+0x3c5/0x780 [ 743.728025][T18558] ? __pfx_kthread+0x10/0x10 [ 743.728057][T18558] ? __pfx_kthread+0x10/0x10 [ 743.728088][T18558] ? __pfx_kthread+0x10/0x10 [ 743.728120][T18558] ? __pfx_kthread+0x10/0x10 [ 743.728151][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 743.728194][T18558] ? rcu_is_watching+0x12/0xc0 [ 743.728235][T18558] ? __pfx_kthread+0x10/0x10 [ 743.728268][T18558] ret_from_fork+0x48/0x80 [ 743.728303][T18558] ? __pfx_kthread+0x10/0x10 [ 743.728336][T18558] ret_from_fork_asm+0x1a/0x30 [ 743.728398][T18558] [ 743.728411][T18558] [ 743.998962][T18558] The buggy address belongs to the virtual mapping at [ 743.998962][T18558] [ffffc90004b03000, ffffc90004b1b000) created by: [ 743.998962][T18558] vb2_vmalloc_alloc+0x135/0x3f0 [ 744.016981][T18558] [ 744.019316][T18558] The buggy address belongs to the physical page: [ 744.025732][T18558] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2000005f8 pfn:0x60d63 [ 744.035201][T18558] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 744.042335][T18558] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 744.050939][T18558] raw: 00000002000005f8 0000000000000000 00000001ffffffff 0000000000000000 [ 744.059529][T18558] page dumped because: kasan: bad access detected [ 744.065942][T18558] page_owner tracks the page as allocated [ 744.071655][T18558] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 18557, tgid 18556 (syz.5.5040), ts 743067495288, free_ts 742870217967 [ 744.091063][T18558] post_alloc_hook+0x181/0x1b0 [ 744.095867][T18558] get_page_from_freelist+0x135c/0x3920 [ 744.101452][T18558] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 744.107396][T18558] alloc_pages_mpol+0x1fb/0x550 [ 744.112293][T18558] alloc_pages_noprof+0x131/0x390 [ 744.117357][T18558] __vmalloc_node_range_noprof+0x732/0x1540 [ 744.123281][T18558] vmalloc_user_noprof+0x6b/0x90 [ 744.128245][T18558] vb2_vmalloc_alloc+0x135/0x3f0 [ 744.133200][T18558] __vb2_queue_alloc+0x8c9/0x1280 [ 744.138238][T18558] vb2_core_reqbufs+0xa90/0xfe0 [ 744.143102][T18558] __vb2_init_fileio+0x3f1/0x1100 [ 744.148143][T18558] __vb2_perform_fileio+0x9c2/0x1660 [ 744.153447][T18558] vb2_fop_read+0x215/0x3e0 [ 744.157988][T18558] v4l2_read+0x229/0x360 [ 744.162254][T18558] vfs_readv+0x6bf/0x8a0 [ 744.166520][T18558] do_readv+0x132/0x330 [ 744.170701][T18558] page last free pid 16422 tgid 16422 stack trace: [ 744.177208][T18558] __free_frozen_pages+0x69d/0xff0 [ 744.182350][T18558] tlb_remove_table_rcu+0x116/0x1a0 [ 744.187577][T18558] rcu_core+0x79c/0x14e0 [ 744.191836][T18558] handle_softirqs+0x219/0x8e0 [ 744.196627][T18558] __irq_exit_rcu+0x109/0x170 [ 744.201331][T18558] irq_exit_rcu+0x9/0x30 [ 744.205602][T18558] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 744.211273][T18558] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 744.217275][T18558] [ 744.219601][T18558] Memory state around the buggy address: [ 744.225234][T18558] ffffc90004b19f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 744.233304][T18558] ffffc90004b19f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 744.241378][T18558] >ffffc90004b1a000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 744.249449][T18558] ^ [ 744.253517][T18558] ffffc90004b1a080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 744.261592][T18558] ffffc90004b1a100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 744.269659][T18558] ================================================================== [ 744.339320][T18558] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 744.347107][T18558] CPU: 0 UID: 0 PID: 18558 Comm: vivid-000-vid-c Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(full) [ 744.359648][T18558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 744.369727][T18558] Call Trace: [ 744.373020][T18558] [ 744.375972][T18558] dump_stack_lvl+0x3d/0x1f0 [ 744.380624][T18558] panic+0x71c/0x800 [ 744.384579][T18558] ? __pfx_panic+0x10/0x10 [ 744.389047][T18558] ? lockdep_hardirqs_on+0x7c/0x110 [ 744.394302][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.399987][T18558] ? tpg_fill_plane_buffer+0x2cb6/0x43c0 [ 744.405681][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.411359][T18558] ? preempt_schedule_common+0x44/0xc0 [ 744.416866][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.422541][T18558] ? preempt_schedule_thunk+0x16/0x30 [ 744.427982][T18558] ? tpg_fill_plane_buffer+0x2cb6/0x43c0 [ 744.433666][T18558] end_report+0x159/0x170 [ 744.438038][T18558] kasan_report+0xee/0x110 [ 744.442496][T18558] ? tpg_fill_plane_buffer+0x2cb6/0x43c0 [ 744.448172][T18558] kasan_check_range+0xef/0x1a0 [ 744.453047][T18558] __asan_memcpy+0x3c/0x60 [ 744.457492][T18558] tpg_fill_plane_buffer+0x2cb6/0x43c0 [ 744.463017][T18558] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 744.468871][T18558] vivid_fillbuff+0x8d2/0x4250 [ 744.473691][T18558] ? __pfx_vivid_fillbuff+0x10/0x10 [ 744.478939][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.484601][T18558] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 744.490256][T18558] ? lockdep_hardirqs_on+0x7c/0x110 [ 744.495491][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.501156][T18558] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 744.507085][T18558] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 744.512854][T18558] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 744.518630][T18558] vivid_thread_vid_cap+0x454/0xda0 [ 744.523886][T18558] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 744.529650][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.535318][T18558] ? do_raw_spin_lock+0x12c/0x2b0 [ 744.540373][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.546031][T18558] ? find_held_lock+0x2b/0x80 [ 744.550739][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.556397][T18558] ? rcu_is_watching+0x12/0xc0 [ 744.561197][T18558] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 744.567040][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.572702][T18558] ? lockdep_hardirqs_on+0x7c/0x110 [ 744.577937][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.583604][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.589262][T18558] ? __kthread_parkme+0x19e/0x250 [ 744.594323][T18558] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 744.600082][T18558] kthread+0x3c5/0x780 [ 744.604171][T18558] ? __pfx_kthread+0x10/0x10 [ 744.608777][T18558] ? __pfx_kthread+0x10/0x10 [ 744.613385][T18558] ? __pfx_kthread+0x10/0x10 [ 744.617997][T18558] ? __pfx_kthread+0x10/0x10 [ 744.622694][T18558] ? srso_alias_return_thunk+0x5/0xfbef5 [ 744.628355][T18558] ? rcu_is_watching+0x12/0xc0 [ 744.633146][T18558] ? __pfx_kthread+0x10/0x10 [ 744.637756][T18558] ret_from_fork+0x48/0x80 [ 744.642191][T18558] ? __pfx_kthread+0x10/0x10 [ 744.646798][T18558] ret_from_fork_asm+0x1a/0x30 [ 744.651610][T18558] [ 744.654878][T18558] Kernel Offset: disabled [ 744.659210][T18558] Rebooting in 86400 seconds..