last executing test programs: 47.018798547s ago: executing program 1 (id=2874): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x2, @sdr={0x0, 0x3}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x2, 0xfffffffd, 0x31364d59, 0x4, 0xfffffffb, 0x3, 0x6, 0x4, 0x0, 0x4, 0x1}}) 46.902282449s ago: executing program 1 (id=2877): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 46.815409221s ago: executing program 1 (id=2878): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)={0x200}) 46.720702352s ago: executing program 1 (id=2880): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 46.615797504s ago: executing program 1 (id=2881): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x5}, {0x6, 0x80, 0x4f, 0xffffffff}]}) write$ppp(r0, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00', 0x7) 46.078801001s ago: executing program 1 (id=2884): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) read(r0, &(0x7f0000000200)=""/193, 0xc1) 45.725151107s ago: executing program 32 (id=2884): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x5, 0x31, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) read(r0, &(0x7f0000000200)=""/193, 0xc1) 27.84581227s ago: executing program 3 (id=3023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 27.616866164s ago: executing program 3 (id=3028): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xe2, 0x3}}}]}, 0x38}}, 0x8004) 27.451993436s ago: executing program 3 (id=3031): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x37, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff0}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 27.122401471s ago: executing program 3 (id=3033): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 26.589915598s ago: executing program 3 (id=3035): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'utf8'}}]}, 0x1, 0x304, &(0x7f0000000780)="$eJzs3U9v00gYx/HfOEmbbqtutu1qpb3sqruV4FJR4IC4gFCu3DkhoEmliqiItkjAhVBxRLwA7rwFXgQXEG8AuHDiBfRmNOOx4yQTp5Gaui3fj9TKGc+fZ7AdP2OJWgB+WbeaX95d+W5/jFRRRdJ1KZJUl6qS/tRf9Sc7+9v7nXarqKOKa2F/jJKWZqjO5k471NS2cy28hv1U1UK+DNMRx/HNr2UHgdK5qz8gkmb9dej21084ruPiJzebfu5K/5QYTinyB9gc6lBPtVhiOACAU8Df/yN/m1hwRUZRJK352/6Zvv8POiw7gON1tTNUFBc2yN3/XXYXG3t8f3e7eus9t4Sz+6N0lXiUYGoDn2eUnFl9CaYJryq/xQkfSzS3tV3V+uZLtSId6IaXa7DifreSUzc1JtrVwNp0FJsxjuytptu/JbOxGeXc4O40pK3tTttlnoH4l0ODTvKvPSnzwXwyd01db9XK8r9qbOxhckeqMXCkopqN/9LoHuddK1vLTtkk84z6qvzhBvnbj+CNmWU9vCLJ95k+IOhmEQTiPEg33NhL6n+skMxuIzSA6XW+HGrVyD4Nt3VjrfS1qvgzYX3zUafwUcp0pFM0b8wds6ofeq9mLv+PbHxryl2ZRV/1xtX0Z0Yyn5lwzaqr2Ri6c3SzrX+zCLzZiecGacKnZa/1QNe0uPfs+cNKp9PetRv3AxuPF3aNL6m9koJ1pr9RUUEddXsl7ubxIo6P2nM8zeAvHmuH9vsjK7GXT6iyvcqykuikD9P526gqtKv5UUUn5FQ30tRlwub14C6baI1oNZXvKJwyeyY96L5gKInFOWfzLpOs/1wm77M69z1jfzUK8vTiRab6etzIVnD9qeBSKHcZszaYH72Cy414ecSa0a25/rsg/Z8rNCocseHiPDdMU591j+f/AAAAAAAAAAAAAAAAAAAAZ81J/I+FsucIAAAAAAAAAAAAAAAAAAAAAMBZd/T3/8713tQU+hvx7v2/jbHv/+17AbB/URTv/wXK8TMAAP//WW58Eg==") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000180)) 26.045786276s ago: executing program 3 (id=3038): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1}, 0x20008040) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=""/77, 0x4d}, 0x9}], 0x1, 0x40, 0x0) 25.81105687s ago: executing program 33 (id=3038): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f0000000340)=[{0x0}], 0x1}, 0x20008040) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, &(0x7f0000000380)=""/77, 0x4d}, 0x9}], 0x1, 0x40, 0x0) 2.882648338s ago: executing program 4 (id=3189): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)={0x0, 0xfb, 0x26, 0x1, 0x5, "b005b7041ee9e88b5309a0e26cbf1b10", "08ed8413c1416c60c5fd44bef002de57ae"}, 0x26, 0x2) 2.745538209s ago: executing program 2 (id=3191): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.485852984s ago: executing program 2 (id=3192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x50}}, 0x0) 2.482643053s ago: executing program 4 (id=3193): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x6, 0xc8}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x1, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x20000000) 2.338018795s ago: executing program 2 (id=3194): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000400)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf122dc16a5658a3b58626b458ae4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000bc0)="0477960a4a7cdcc82d22c608976fa6f22b7490ecdbaaf42479d77d9e627191a829d060f883de6e51d53849ee5f3bf9db2ca65b1471df6770af", 0x39, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={'sha256-generic\x00'}}) 2.172741108s ago: executing program 4 (id=3196): syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x143, &(0x7f0000000400)="$eJzszr1LelEcx/HP+d2rvyjNAgMLMqHlkvR0hZqCNJIMKihcmgQ9UaAoCuVoRFtbq0MlNIn/gj0tSUG09C+0uAWNxbkPRdDS/nlt532+93vu8sKjgQjwHoBlqVgolWWlInORzY215NZrux1X3Qugx7pfLZWlqMicPX8VB3bxH/Dgy60f2NnLy6lsMa/GunHAAJDow6LqM6odAr2qBe3ZWacZ48DNkN3MX1rMaSM6kAjYTe37OAd0tW/we98bgGo92mp21h/uU5MTl6MajlPRMfdX3R6WJ2ZyuOELaUjLuwu8iI7PnniabjWfAWEdYqY5J4Cac0TNC33Ftw9si5/veBEK62ngSACn1l33WvjVFwAK/fNnzvu1Ay0CiGo9mwl5GpngwD9ohrudiIiIiIiIiIiIiIiIiIjoDz4DAAD//+7/VYE=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x7ff, 0x1) getdents64(r0, 0x0, 0x10) 2.089542329s ago: executing program 2 (id=3197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4) sched_setscheduler(0x0, 0x1, 0x0) 1.996068221s ago: executing program 4 (id=3198): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 1.826138003s ago: executing program 4 (id=3202): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 1.586066037s ago: executing program 0 (id=3205): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x100b) 1.511184338s ago: executing program 0 (id=3207): unshare(0x22020600) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) fadvise64(r0, 0x0, 0xfffffffffffffffd, 0x2) 1.119917184s ago: executing program 2 (id=3209): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f0000000040)=0x100b) 1.013292885s ago: executing program 2 (id=3210): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000580)={0x20, 0x16, 0x3, "37fb72"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 965.734046ms ago: executing program 5 (id=3211): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000002c0)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x16e0, &(0x7f0000000340)={0x0, 0xef74, 0x40, 0x1, 0x36}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 868.468517ms ago: executing program 5 (id=3212): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000240)='./bus\x00', 0x1010000, &(0x7f0000000b80)={[{@utf8}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@rodir}, {@shortname_lower}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_win95}, {@shortname_lower}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@fat=@check_strict}]}, 0x1, 0x369, &(0x7f0000000700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 563.067192ms ago: executing program 5 (id=3213): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 509.905483ms ago: executing program 0 (id=3214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x240, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 441.755584ms ago: executing program 5 (id=3215): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000"], 0x20}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 345.615515ms ago: executing program 0 (id=3216): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 321.553185ms ago: executing program 5 (id=3217): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 303.716245ms ago: executing program 0 (id=3218): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 62.969129ms ago: executing program 5 (id=3219): r0 = io_uring_setup(0x70f8, &(0x7f00000005c0)) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 41.54608ms ago: executing program 0 (id=3220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0xffff0000, 0x0, 0xf000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xd000, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x80, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xe, 0x0, 0x2}, {0x6000}, {0x1, 0xfffe}, 0x1, 0x0, 0x0, 0x0, 0xd, 0x4000, 0x900, [0x0, 0x0, 0x10000, 0x3]}) 0s ago: executing program 4 (id=3221): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) kernel console output (not intermixed with test programs): at=0 ip=0x7fcd6e18e929 code=0x7ffc0000 [ 321.410652][ T28] audit: type=1326 audit(1095.164:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd6e1858e7 code=0x7ffc0000 [ 321.455297][ T28] audit: type=1326 audit(1095.164:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd6e12ab19 code=0x7ffc0000 [ 321.509453][ T28] audit: type=1326 audit(1095.164:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd6e1858e7 code=0x7ffc0000 [ 321.593422][ T28] audit: type=1326 audit(1095.164:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.1.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd6e12ab19 code=0x7ffc0000 [ 321.795918][ T1091] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 321.867411][ T5787] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 322.007184][T11684] loop2: detected capacity change from 0 to 32768 [ 322.038470][T11698] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2300'. [ 322.079886][T11684] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 322.317846][T11708] loop0: detected capacity change from 0 to 512 [ 322.359457][T11708] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 322.380987][T11710] loop1: detected capacity change from 0 to 1024 [ 322.460606][T11710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.532006][T11684] syz.2.2293 (11684) used greatest stack depth: 18288 bytes left [ 322.608180][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 322.655692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.679264][T10175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.066398][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 323.381514][T11716] loop0: detected capacity change from 0 to 32768 [ 323.391651][T11716] XFS: ikeep mount option is deprecated. [ 323.434923][T11716] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 323.503424][T11749] loop2: detected capacity change from 0 to 128 [ 323.584772][T11716] XFS (loop0): Ending clean mount [ 323.605437][T11716] XFS (loop0): Quotacheck needed: Please wait. [ 323.721724][T11716] XFS (loop0): Quotacheck: Done. [ 323.881328][T11732] loop1: detected capacity change from 0 to 32768 [ 323.977788][ T5791] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 324.174467][T11763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 324.703645][T11778] loop2: detected capacity change from 0 to 4096 [ 324.732830][T11778] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 324.762434][T11785] loop1: detected capacity change from 0 to 512 [ 324.775431][T11785] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 324.799581][T11785] EXT4-fs (loop1): invalid journal inode [ 324.808257][T11785] EXT4-fs (loop1): can't get journal size [ 324.836261][T11785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 324.843250][T11778] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 324.844758][T11785] System zones: 1-12, 13-13 [ 324.864644][T11785] EXT4-fs (loop1): 1 truncate cleaned up [ 324.871738][T11785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.960033][T11793] ptrace attach of "./syz-executor exec"[5791] was attempted by ""[11793] [ 325.055027][T10175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.128934][T11797] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2337'. [ 325.233205][T11803] loop2: detected capacity change from 0 to 256 [ 325.318616][T11803] FAT-fs (loop2): Directory bread(block 64) failed [ 325.334394][T11803] FAT-fs (loop2): Directory bread(block 65) failed [ 325.349315][T11803] FAT-fs (loop2): Directory bread(block 66) failed [ 325.358485][T11806] loop3: detected capacity change from 0 to 1024 [ 325.372798][T11803] FAT-fs (loop2): Directory bread(block 67) failed [ 325.390029][T11803] FAT-fs (loop2): Directory bread(block 68) failed [ 325.402746][T11803] FAT-fs (loop2): Directory bread(block 69) failed [ 325.410915][T11803] FAT-fs (loop2): Directory bread(block 70) failed [ 325.436297][T11803] FAT-fs (loop2): Directory bread(block 71) failed [ 325.450682][T11803] FAT-fs (loop2): Directory bread(block 72) failed [ 325.458663][T11803] FAT-fs (loop2): Directory bread(block 73) failed [ 325.525053][ T2964] hfsplus: b-tree write err: -5, ino 4 [ 326.262309][T11831] loop0: detected capacity change from 0 to 1024 [ 326.272819][T11818] loop2: detected capacity change from 0 to 40427 [ 326.283682][T11818] F2FS-fs (loop2): invalid crc value [ 326.293879][T11818] F2FS-fs (loop2): Found nat_bits in checkpoint [ 326.349709][T11818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 326.352454][T11831] hfsplus: catalog searching failed [ 326.395703][ T12] hfsplus: b-tree write err: -5, ino 3 [ 326.411425][T11818] syz.2.2348: attempt to access beyond end of device [ 326.411425][T11818] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 326.470095][T11836] binder_alloc: binder_alloc_mmap_handler: 11835 200000ffc000-200001000000 already mapped failed -16 [ 326.532632][ T5790] syz-executor: attempt to access beyond end of device [ 326.532632][ T5790] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 326.574945][ T5790] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 326.814544][T11845] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2361'. [ 326.830482][T11846] loop1: detected capacity change from 0 to 512 [ 326.879153][T11846] EXT4-fs (loop1): Test dummy encryption mode enabled [ 326.904986][T11846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 326.965099][T11846] EXT4-fs (loop1): 1 truncate cleaned up [ 326.982418][T11846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.011042][T11846] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.2359: Siphash requires key [ 327.071151][T10175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.416958][T11866] overlayfs: missing 'workdir' [ 327.441913][T11865] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 327.695295][T11878] misc userio: Begin command sent, but we're already running [ 327.752769][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 327.752789][ T28] audit: type=1800 audit(1101.694:199): pid=11882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2376" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 328.202526][T11898] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2383'. [ 328.495713][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2389'. [ 328.935705][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.982275][T11931] loop0: detected capacity change from 0 to 512 [ 329.022739][T11932] loop2: detected capacity change from 0 to 512 [ 329.111592][T11932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.156538][T11932] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.2399: corrupted inode contents [ 329.178579][T11932] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.2399: mark_inode_dirty error [ 329.197347][T11932] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.2399: corrupted inode contents [ 329.229218][T11932] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.2399: mark_inode_dirty error [ 329.348228][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.424396][ T5794] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 329.434987][ T5849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.600433][T11960] loop3: detected capacity change from 0 to 512 [ 329.621618][T11960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 329.635037][ T5794] usb 2-1: Using ep0 maxpacket: 32 [ 329.650803][ T5794] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 329.672046][ T5794] usb 2-1: config 0 has no interface number 0 [ 329.692280][ T5794] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 329.712633][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.724529][ T5794] usb 2-1: Product: syz [ 329.728875][ T5794] usb 2-1: Manufacturer: syz [ 329.747904][T11967] loop0: detected capacity change from 0 to 2048 [ 329.758021][ T5794] usb 2-1: SerialNumber: syz [ 329.768647][ T5794] usb 2-1: config 0 descriptor?? [ 329.789563][ T5794] smsc95xx v2.0.0 [ 329.841225][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 329.906118][ T5849] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 329.917861][ T28] audit: type=1800 audit(1103.864:200): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2416" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 330.094824][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 330.116548][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.136009][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.146340][ T5849] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 330.161429][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.178755][ T5849] usb 3-1: config 0 descriptor?? [ 330.212456][ T5794] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 330.234476][ T5794] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 330.344192][T11984] loop3: detected capacity change from 0 to 2048 [ 330.370538][T11985] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 330.463360][ T5794] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 330.484768][ T5794] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 330.503099][ T5794] usb 2-1: USB disconnect, device number 18 [ 330.620348][ T5849] wacom 0003:056A:0000.0012: ignoring exceeding usage max [ 330.653158][ T5849] wacom 0003:056A:0000.0012: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 330.688529][ T5849] wacom 0003:056A:0000.0012: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.2-1/input0 [ 330.713000][ T5849] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0000.0012/input/input24 [ 330.801835][T11992] tap0: tun_chr_ioctl cmd 1074025677 [ 330.814125][T11992] tap0: linktype set to 0 [ 330.883295][ T5849] usb 3-1: USB disconnect, device number 18 [ 331.301827][T12009] loop3: detected capacity change from 0 to 1024 [ 331.337643][ T28] audit: type=1800 audit(1105.284:201): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2434" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 331.452054][ T2964] hfsplus: b-tree write err: -5, ino 4 [ 331.528660][T12013] loop0: detected capacity change from 0 to 4096 [ 332.075036][ T5849] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 332.202013][T12044] loop2: detected capacity change from 0 to 4096 [ 332.244964][T12044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.336044][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.488745][T12055] ref_ctr_offset mismatch. inode: 0xd86 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 332.631708][T12064] netlink: 'syz.1.2458': attribute type 15 has an invalid length. [ 332.831259][T12073] netlink: 'syz.0.2462': attribute type 9 has an invalid length. [ 332.852101][T12073] netlink: 'syz.0.2462': attribute type 6 has an invalid length. [ 332.872732][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 333.093415][T12084] sch_fq: defrate 6 ignored. [ 333.163463][T12083] loop3: detected capacity change from 0 to 2048 [ 333.197275][T12083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.414432][ T5832] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 333.604364][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 333.636744][ T5832] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.649953][ T5832] usb 3-1: config 0 has no interface number 0 [ 333.660962][ T5832] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 333.686683][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.706956][ T5832] usb 3-1: Product: syz [ 333.711200][ T5832] usb 3-1: Manufacturer: syz [ 333.723026][ T5832] usb 3-1: SerialNumber: syz [ 333.728105][ T5794] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 333.744443][ T5832] usb 3-1: config 0 descriptor?? [ 333.914420][ T5794] usb 4-1: Using ep0 maxpacket: 32 [ 333.947114][ T5794] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 333.965961][ T5832] usb 3-1: selecting invalid altsetting 1 [ 333.972388][ T5832] speedtch 3-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 333.991569][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.004460][ T5832] speedtch 3-1:0.1: usbatm_usb_probe: bind failed: -22! [ 334.025755][ T5794] usb 4-1: config 0 descriptor?? [ 334.035157][ T5832] speedtch: probe of 3-1:0.1 failed with error -22 [ 334.058955][ T5832] usb 3-1: USB disconnect, device number 19 [ 334.249523][ T5794] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 334.265771][ T5794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.278505][T12096] loop1: detected capacity change from 0 to 32768 [ 334.283968][ T5794] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 334.294160][ T5794] usb 4-1: media controller created [ 334.296658][T12096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2473 (12096) [ 334.321202][T12096] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.331660][T12096] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 334.331736][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.346932][T12096] BTRFS info (device loop1): turning off barriers [ 334.359043][T12096] BTRFS info (device loop1): setting nodatasum [ 334.365521][T12096] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 334.375536][T12096] BTRFS info (device loop1): use zstd compression, level 3 [ 334.383313][T12096] BTRFS info (device loop1): using free space tree [ 334.460881][ T5794] az6027: usb out operation failed. (-71) [ 334.467340][ T5794] az6027: usb out operation failed. (-71) [ 334.473112][ T5794] stb0899_attach: Driver disabled by Kconfig [ 334.479214][ T5794] az6027: no front-end attached [ 334.479214][ T5794] [ 334.487332][ T5794] az6027: usb out operation failed. (-71) [ 334.493208][ T5794] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 334.502422][ T5794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 334.517998][ T5794] dvb-usb: schedule remote query interval to 400 msecs. [ 334.525518][ T5794] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 334.547398][ T5794] usb 4-1: USB disconnect, device number 22 [ 334.620063][ T5794] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 334.678067][T10175] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 334.975566][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 335.129359][T12124] bridge0: port 2(syz_tun) entered blocking state [ 335.138082][T12124] bridge0: port 2(syz_tun) entered disabled state [ 335.145730][T12124] syz_tun: entered allmulticast mode [ 335.155631][T12124] syz_tun: entered promiscuous mode [ 335.162463][T12124] bridge0: port 2(syz_tun) entered blocking state [ 335.171279][T12124] bridge0: port 2(syz_tun) entered forwarding state [ 335.227196][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2477'. [ 335.484768][T12136] loop1: detected capacity change from 0 to 4096 [ 335.508602][T12136] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 335.564155][T12144] loop0: detected capacity change from 0 to 256 [ 335.590066][T12144] exfat: Deprecated parameter 'namecase' [ 335.607789][T12144] exfat: Deprecated parameter 'utf8' [ 335.673426][T12136] ntfs3: loop1: ino=1e, "file1" ntfs_rename [ 335.872186][T12148] bridge0: port 3(syz_tun) entered blocking state [ 335.894844][T12148] bridge0: port 3(syz_tun) entered disabled state [ 335.901665][T12148] syz_tun: entered allmulticast mode [ 335.916079][T12148] syz_tun: entered promiscuous mode [ 335.922670][T12148] bridge0: port 3(syz_tun) entered blocking state [ 335.929359][T12148] bridge0: port 3(syz_tun) entered forwarding state [ 336.207488][T12143] loop2: detected capacity change from 0 to 32768 [ 336.225100][T12143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2489 (12143) [ 336.243711][T12143] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 336.260310][T12143] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 336.269080][T12143] BTRFS info (device loop2): force clearing of disk cache [ 336.276565][T12143] BTRFS info (device loop2): metadata ratio 0 [ 336.282700][T12143] BTRFS info (device loop2): enabling ssd optimizations [ 336.289877][T12143] BTRFS info (device loop2): using spread ssd allocation scheme [ 336.298356][T12143] BTRFS info (device loop2): using free space tree [ 336.359712][T12143] BTRFS info (device loop2): auto enabling async discard [ 336.370435][T12143] BTRFS info (device loop2): rebuilding free space tree [ 336.491089][T12176] loop3: detected capacity change from 0 to 1024 [ 336.561401][T12176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.599726][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 336.677081][ T5790] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 336.769653][ T12] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 336.789911][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 336.807870][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 336.807870][ T12] [ 336.819545][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 336.825646][ T12] EXT4-fs (loop3): Free/Dirty block details [ 336.832137][ T12] EXT4-fs (loop3): free_blocks=4293918720 [ 336.839601][ T12] EXT4-fs (loop3): dirty_blocks=80 [ 336.845062][ T12] EXT4-fs (loop3): Block reservation details [ 336.851094][ T12] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 336.863712][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.970365][ T5832] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 337.174438][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 337.179059][T12190] loop2: detected capacity change from 0 to 256 [ 337.190494][ T5832] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.224361][ T5832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 337.257636][ T5832] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 337.274391][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.295408][ T5832] usb 1-1: config 0 descriptor?? [ 337.727615][ T5832] logitech 0003:046D:C623.0013: item fetching failed at offset 8/69 [ 337.745137][ T5832] logitech 0003:046D:C623.0013: parse failed [ 337.751384][ T5832] logitech: probe of 0003:046D:C623.0013 failed with error -22 [ 337.985967][ T5832] usb 1-1: USB disconnect, device number 23 [ 338.060629][T12194] loop2: detected capacity change from 0 to 32768 [ 338.249308][T12188] loop3: detected capacity change from 0 to 65536 [ 338.256166][ T5849] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 338.296409][T12188] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 338.315347][T12188] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 338.349211][T12188] XFS (loop3): Ending clean mount [ 338.415828][ T5787] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 338.444722][ T5849] usb 2-1: Using ep0 maxpacket: 8 [ 338.474616][ T5849] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 338.493942][ T5849] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 338.514908][ T5849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.595210][ T5849] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.610676][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.644703][ T5849] usb 2-1: Product: syz [ 338.649071][ T5849] usb 2-1: Manufacturer: syz [ 338.653891][ T5849] usb 2-1: SerialNumber: syz [ 338.663745][T12217] loop2: detected capacity change from 0 to 128 [ 338.705995][T12217] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 338.738946][T12217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.782089][T12219] loop0: detected capacity change from 0 to 1764 [ 338.964746][T12221] loop0: detected capacity change from 0 to 128 [ 339.284395][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 339.357046][ T5849] usb 2-1: 0:2 : does not exist [ 339.466707][ T8] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 339.476416][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.488667][ T8] usb 4-1: config 0 descriptor?? [ 339.590645][ T5832] usb 2-1: USB disconnect, device number 19 [ 339.702092][ T8] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 339.712514][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 339.897238][T12229] loop0: detected capacity change from 0 to 4096 [ 339.956570][ T8] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 339.965000][ T8] [drm] Initialized udl on minor 2 [ 340.093771][T12233] macvlan3: entered promiscuous mode [ 340.139201][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 340.179992][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 340.427411][ T8] usb 4-1: USB disconnect, device number 23 [ 340.433619][ T5832] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.449735][ T5832] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 340.813093][T12244] loop2: detected capacity change from 0 to 32768 [ 340.838947][T12244] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.875648][T12244] XFS (loop2): Ending clean mount [ 340.931922][ T5790] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 341.193426][T12261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 341.276804][T12263] loop2: detected capacity change from 0 to 64 [ 341.365429][ T28] audit: type=1800 audit(1115.314:202): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2524" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 341.422235][ T28] audit: type=1804 audit(1115.344:203): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2524" name="/newroot/623/file1/file1" dev="loop2" ino=18 res=1 errno=0 [ 341.510047][T12269] loop1: detected capacity change from 0 to 2048 [ 341.539136][T12269] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 341.600654][T12272] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.982636][T12267] loop0: detected capacity change from 0 to 32768 [ 342.486514][T12296] loop1: detected capacity change from 0 to 8192 [ 342.538525][T12296] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.840668][T12293] loop3: detected capacity change from 0 to 32768 [ 342.911576][T12293] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 343.012607][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 343.018691][T12307] loop1: detected capacity change from 0 to 4096 [ 343.026802][T12307] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 343.047268][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.101822][T12307] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 343.130557][T12307] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 343.178847][T12307] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 343.224806][T12307] ntfs: volume version 3.1. [ 343.481958][ T2964] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 343.521318][T10175] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 343.762783][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'. [ 344.128449][T12337] loop3: detected capacity change from 0 to 512 [ 344.145650][T12337] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.202848][T12337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.255058][T12337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.501025][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.202092][T12365] loop0: detected capacity change from 0 to 128 [ 345.232456][T12365] EXT4-fs: Ignoring removed nobh option [ 345.392717][T12298] syz.2.2544 (12298): drop_caches: 1 [ 345.447471][T12373] loop0: detected capacity change from 0 to 512 [ 345.774425][ T5849] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 345.881084][T12387] loop0: detected capacity change from 0 to 512 [ 345.985349][ T5849] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 345.997776][ T5849] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 346.008761][ T5849] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.018091][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.038446][T12375] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 346.049861][ T5849] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 346.328756][ T5832] usb 3-1: USB disconnect, device number 20 [ 348.006833][T12438] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 349.027296][T12456] loop1: detected capacity change from 0 to 40427 [ 349.057264][T12456] F2FS-fs (loop1): Found nat_bits in checkpoint [ 349.132600][T12456] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 349.460959][T12469] loop0: detected capacity change from 0 to 32768 [ 349.656755][T12481] loop3: detected capacity change from 0 to 65 [ 349.683473][T12481] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 349.694180][T12481] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 349.805557][T12471] loop2: detected capacity change from 0 to 40427 [ 349.829922][T12471] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 349.857057][T12471] F2FS-fs (loop2): invalid crc value [ 349.878999][T12471] F2FS-fs (loop2): Found nat_bits in checkpoint [ 349.977409][T12471] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 350.149425][ T5790] syz-executor: attempt to access beyond end of device [ 350.149425][ T5790] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 350.184667][ T5790] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 351.050941][ T23] kernel read not supported for file /dsp (pid: 23 comm: kworker/1:0) [ 351.204043][T12519] tipc: Started in network mode [ 351.214455][T12519] tipc: Node identity 2d6806f2b032df77002e0000004, cluster identity 4711 [ 351.224703][T12520] IPVS: set_ctl: invalid protocol: 127 127.0.0.1:20001 [ 351.263802][T12511] loop2: detected capacity change from 0 to 40427 [ 351.289446][T12511] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 351.314555][T12511] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 351.358781][T12511] F2FS-fs (loop2): Found nat_bits in checkpoint [ 351.457391][T12511] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 351.474332][T12511] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 351.612876][T12534] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 352.535460][T12553] program syz.2.2650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.914472][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 352.999107][T12549] loop0: detected capacity change from 0 to 40427 [ 353.124639][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 353.142539][ T8] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 353.161381][ T8] usb 3-1: config 0 has no interface number 0 [ 353.173531][ T8] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 353.200751][ T8] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 353.224733][ T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 353.239467][ T8] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 353.247795][ T8] usb 3-1: Product: syz [ 353.254841][ T8] usb 3-1: SerialNumber: syz [ 353.262671][ T8] usb 3-1: config 0 descriptor?? [ 353.281392][ T8] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 353.293463][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input28 [ 353.385940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.533765][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 353.747103][T12577] binder: 12576:12577 ioctl c00c6211 0 returned -14 [ 353.796515][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.808031][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.815533][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.822746][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.829955][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.837607][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.844968][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.853684][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.860925][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.866288][T12580] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2662'. [ 353.868117][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.919482][ T5832] usb 3-1: USB disconnect, device number 21 [ 353.925568][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 353.946936][ T5832] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 354.050654][T12582] bond0: entered promiscuous mode [ 354.075137][T12582] bond_slave_0: entered promiscuous mode [ 354.083218][T12582] bond_slave_1: entered promiscuous mode [ 354.331189][T12595] tipc: Started in network mode [ 354.337659][T12595] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 354.345465][T12595] tipc: Enabled bearer , priority 10 [ 354.397835][T12597] loop3: detected capacity change from 0 to 1024 [ 355.095841][T12623] loop2: detected capacity change from 0 to 1024 [ 355.106826][T12624] loop0: detected capacity change from 0 to 128 [ 355.166297][T12623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.258632][ T28] audit: type=1800 audit(1129.204:204): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2681" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 355.289067][T12602] loop1: detected capacity change from 0 to 40427 [ 355.303649][T12602] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 355.312495][T12602] F2FS-fs (loop1): Image doesn't support compression [ 355.319562][T12602] F2FS-fs (loop1): heap/no_heap options were deprecated [ 355.329648][T12602] F2FS-fs (loop1): Image doesn't support compression [ 355.357370][T12602] F2FS-fs (loop1): invalid crc value [ 355.382689][T12602] F2FS-fs (loop1): Found nat_bits in checkpoint [ 355.474458][ T5832] tipc: Node number set to 15444650 [ 355.518637][T12602] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 355.696147][T10175] syz-executor: attempt to access beyond end of device [ 355.696147][T10175] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 355.710824][T10175] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 355.767051][T12623] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4036: comm syz.2.2681: Allocating blocks 497-513 which overlap fs metadata [ 355.831525][T12622] EXT4-fs (loop2): pa ffff888073459ae0: logic 32, phys. 161, len 22 [ 355.840841][T12622] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1 [ 355.974466][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.468029][T12658] loop1: detected capacity change from 0 to 4096 [ 356.476519][T12658] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 356.541325][T12658] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 356.559246][T12658] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 356.705419][ T5849] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 356.749994][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2701'. [ 356.759943][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2701'. [ 356.914714][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 356.924373][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.939480][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.951086][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 356.964632][ T5832] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 356.966338][ T5849] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 356.981509][ T5849] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 356.990132][ T5849] usb 3-1: Manufacturer: syz [ 356.997742][ T5849] usb 3-1: config 0 descriptor?? [ 357.019388][T12680] loop0: detected capacity change from 0 to 256 [ 357.174473][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 357.191146][ T5832] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 357.199735][ T5832] usb 4-1: config 0 has no interface number 0 [ 357.208828][ T5832] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 357.225327][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.233568][ T5832] usb 4-1: Product: syz [ 357.239137][ T5832] usb 4-1: Manufacturer: syz [ 357.243985][ T5832] usb 4-1: SerialNumber: syz [ 357.244064][ T23] usb 3-1: USB disconnect, device number 22 [ 357.252009][ T5832] usb 4-1: config 0 descriptor?? [ 357.266505][ T5832] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 357.471211][ T5832] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 357.483968][ T5832] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 357.499222][ T5849] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 357.692400][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 357.707448][ T5849] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 357.716858][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.725289][ T5849] usb 1-1: Product: syz [ 357.730070][ T5849] usb 1-1: Manufacturer: syz [ 357.734966][ T5849] usb 1-1: SerialNumber: syz [ 357.743007][ T5849] usb 1-1: config 0 descriptor?? [ 357.894538][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 357.903115][ T5832] usb 4-1: USB disconnect, device number 24 [ 357.930859][ T5832] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 357.952804][ T5832] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 357.977100][ T5832] quatech2 4-1:0.51: device disconnected [ 358.077964][T12692] loop1: detected capacity change from 0 to 2048 [ 358.116424][T12694] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.176390][T12692] overlayfs: upper fs does not support tmpfile. [ 358.186879][T12692] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 358.194081][T12692] overlayfs: failed to set xattr on upper [ 358.201097][T12692] overlayfs: ...falling back to redirect_dir=nofollow. [ 358.208820][T12692] overlayfs: ...falling back to index=off. [ 358.215032][T12692] overlayfs: ...falling back to uuid=null. [ 358.328097][T12694] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 358.349164][T12694] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 358.384675][T12694] Remounting filesystem read-only [ 358.390225][ T12] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 358.392918][ T5849] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 358.407851][ T12] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 358.408025][ T5849] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 358.422658][ T5849] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 358.424392][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.449426][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.469499][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.487610][ T12] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 358.505585][ T12] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 358.506917][ T5849] peak_usb: probe of 1-1:0.0 failed with error -22 [ 358.514326][ T12] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 358.531626][ T12] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 358.539253][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.556396][ T12] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 358.563506][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.575134][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.584054][ T12] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 358.613847][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.634373][ T12] NILFS (loop1): discard dirty page: offset=98304, ino=3 [ 358.644324][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.664890][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.684213][ T12] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 358.691580][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.701903][ T5832] usb 1-1: USB disconnect, device number 24 [ 358.725840][ T12] NILFS (loop1): discard dirty page: offset=131072, ino=3 [ 358.733058][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.742421][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.751468][ T12] NILFS (loop1): discard dirty block: blocknr=46, size=1024 [ 358.761039][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.771365][ T12] NILFS (loop1): discard dirty page: offset=163840, ino=3 [ 358.778994][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.788187][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.797227][ T12] NILFS (loop1): discard dirty block: blocknr=47, size=1024 [ 358.805104][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.814055][ T12] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 358.822029][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.835399][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.847609][ T12] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 358.856767][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.869577][ T12] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 358.879228][ T12] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 358.890913][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.911194][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.920467][ T12] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.947411][T10175] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 358.954180][T10175] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 358.967260][T10175] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.979587][T10175] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 358.989288][T10175] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 359.020527][T12707] loop2: detected capacity change from 0 to 1024 [ 359.137431][T12713] input: syz1 as /devices/virtual/input/input29 [ 359.145093][ T2964] hfsplus: b-tree write err: -5, ino 4 [ 359.340583][T12724] loop3: detected capacity change from 0 to 164 [ 359.391473][T12724] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 360.494415][ T8] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 360.725301][ T8] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 360.754337][ T8] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 360.784395][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 360.791109][ T8] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 360.817352][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.834488][ T8] usb 2-1: config 0 descriptor?? [ 360.842097][T12745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.271994][T12745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.284907][T12745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.303831][ T8] smartjoyplus 0003:6666:8804.0014: item fetching failed at offset 7/8 [ 361.330267][ T8] smartjoyplus 0003:6666:8804.0014: parse failed [ 361.337615][ T8] smartjoyplus: probe of 0003:6666:8804.0014 failed with error -22 [ 361.533550][ T5794] usb 2-1: USB disconnect, device number 20 [ 361.568354][T12756] loop0: detected capacity change from 0 to 40427 [ 361.785173][T12775] loop2: detected capacity change from 0 to 256 [ 361.802292][T12775] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.813215][T12775] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 361.869390][T12775] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 362.292525][T12786] loop2: detected capacity change from 0 to 2048 [ 362.360972][T12789] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.378815][T12790] loop1: detected capacity change from 0 to 256 [ 362.391640][ T28] audit: type=1800 audit(1136.334:205): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2751" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 362.797974][T12800] loop3: detected capacity change from 0 to 4096 [ 362.939805][T12806] tun0: tun_chr_ioctl cmd 1074812117 [ 363.269326][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2765'. [ 363.330377][T12820] usb usb8: usbfs: process 12820 (syz.1.2767) did not claim interface 6 before use [ 363.414383][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 363.434508][ T5849] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 363.547611][T12828] loop1: detected capacity change from 0 to 512 [ 363.563570][T12828] EXT4-fs (loop1): Test dummy encryption mode enabled [ 363.575719][T12828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 363.606415][ T8] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 363.618596][ T8] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 363.634555][ T8] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 363.634782][ T5849] usb 1-1: Using ep0 maxpacket: 16 [ 363.650027][ T8] usb 4-1: config 220 has no interface number 2 [ 363.656986][ T8] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 363.661093][T12828] EXT4-fs: Ignoring removed bh option [ 363.670972][ T8] usb 4-1: config 220 interface 0 has no altsetting 0 [ 363.671002][ T8] usb 4-1: config 220 interface 76 has no altsetting 0 [ 363.671022][ T8] usb 4-1: config 220 interface 1 has no altsetting 0 [ 363.675218][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 363.707863][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.711148][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 363.716318][ T8] usb 4-1: Product: syz [ 363.734058][ T8] usb 4-1: Manufacturer: syz [ 363.738821][ T8] usb 4-1: SerialNumber: syz [ 363.744731][T12832] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 363.765700][ T5849] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 363.775719][T12828] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 363.796505][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.816885][ T5849] usb 1-1: config 0 descriptor?? [ 363.827627][ T5849] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 363.849701][T10175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.978048][ T8] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 363.990410][ T8] usb 4-1: No valid video chain found. [ 364.000065][ T8] usb 4-1: selecting invalid altsetting 0 [ 364.017455][ T8] usb 4-1: selecting invalid altsetting 0 [ 364.023531][ T8] usbtest: probe of 4-1:220.1 failed with error -22 [ 364.041754][ T8] usb 4-1: USB disconnect, device number 25 [ 364.059246][ T5145] bcm5974 1-1:0.0: could not read from device [ 364.086780][ T5145] bcm5974 1-1:0.0: could not read from device [ 364.109019][ T5849] bcm5974 1-1:0.0: could not read from device [ 364.150600][ T5145] bcm5974 1-1:0.0: could not read from device [ 364.164039][ T5849] input: failed to attach handler mousedev to device input30, error: -5 [ 364.190027][ T5145] bcm5974 1-1:0.0: could not read from device [ 364.197531][ T5849] usb 1-1: USB disconnect, device number 25 [ 364.209176][ T5145] bcm5974 1-1:0.0: could not read from device [ 365.748352][T12890] mkiss: ax0: crc mode is auto. [ 365.788357][T12892] loop0: detected capacity change from 0 to 512 [ 365.806417][T12892] EXT4-fs: Ignoring removed nobh option [ 365.917657][T12898] sctp: [Deprecated]: syz.1.2799 (pid 12898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.917657][T12898] Use struct sctp_sack_info instead [ 366.949846][T12925] kAFS: unable to lookup cell '.,' [ 367.245765][ T5849] kernel write not supported for file /sg0 (pid: 5849 comm: kworker/1:5) [ 367.774403][ T5841] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 367.783984][T12947] loop0: detected capacity change from 0 to 2048 [ 367.905010][T12949] loop2: detected capacity change from 0 to 4096 [ 367.912518][T12949] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.930014][T12949] EXT4-fs (loop2): Test dummy encryption mode enabled [ 367.946394][T12949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.984378][T12949] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 367.987243][ T5841] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 368.004774][ T5841] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 368.033448][ T5841] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 368.042566][ T5841] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 368.070187][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 368.082557][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.089151][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 368.134704][ T5841] usb 2-1: string descriptor 0 read error: -22 [ 368.141334][ T5841] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 368.165235][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.166919][T12955] loop0: detected capacity change from 0 to 2048 [ 368.187239][ T5841] usb 2-1: config 0 descriptor?? [ 368.193165][T12941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 368.206381][ T5841] hub 2-1:0.0: bad descriptor, ignoring hub [ 368.222607][ T5841] hub: probe of 2-1:0.0 failed with error -5 [ 368.240196][ T5841] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 368.498291][ T5841] usb 2-1: USB disconnect, device number 21 [ 368.778498][T12970] loop3: detected capacity change from 0 to 128 [ 368.975968][T12961] loop2: detected capacity change from 0 to 40427 [ 368.996852][T12961] F2FS-fs (loop2): invalid crc value [ 369.204926][T12961] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 369.627292][T12997] loop0: detected capacity change from 0 to 64 [ 369.645722][T12994] loop1: detected capacity change from 0 to 2048 [ 369.674461][T12994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.764399][T12994] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2843: bg 0: block 345: padding at end of block bitmap is not set [ 369.808034][T13003] loop2: detected capacity change from 0 to 128 [ 369.815527][T12994] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0 [ 369.824092][T12994] fs-verity (loop1, inode 13): Error -117 building Merkle tree [ 369.844073][T13003] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.857491][T13006] netlink: 'syz.0.2846': attribute type 3 has an invalid length. [ 369.871776][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 369.872077][T10175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.916146][ T5832] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 370.060751][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.124493][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 370.140464][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.157667][ T5832] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 370.184372][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.206689][ T5832] usb 4-1: config 0 descriptor?? [ 370.372842][T13021] loop2: detected capacity change from 0 to 512 [ 370.386139][T13021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.393593][T13021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.412598][T13021] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 370.438173][T13021] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 370.447305][T13021] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 370.488622][T13021] EXT4-fs (loop2): 1 truncate cleaned up [ 370.516756][T13021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.637578][ T5832] creative-sb0540 0003:041E:3100.0015: unknown main item tag 0x0 [ 370.641795][T13021] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 370.677822][T13021] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 370.678885][ T5832] creative-sb0540 0003:041E:3100.0015: item fetching failed at offset 3/5 [ 370.730377][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.758418][ T5832] creative-sb0540 0003:041E:3100.0015: parse failed [ 370.794670][ T5832] creative-sb0540: probe of 0003:041E:3100.0015 failed with error -22 [ 370.850666][ T23] usb 4-1: USB disconnect, device number 26 [ 371.165794][T13034] loop2: detected capacity change from 0 to 2048 [ 371.203773][T13034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.243369][T13034] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 371.264451][T13034] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 371.278279][T13034] EXT4-fs (loop2): This should not happen!! Data will be lost [ 371.278279][T13034] [ 371.290240][T13034] EXT4-fs (loop2): Total free blocks count 0 [ 371.296911][T13034] EXT4-fs (loop2): Free/Dirty block details [ 371.303096][T13034] EXT4-fs (loop2): free_blocks=2415919104 [ 371.315864][T13034] EXT4-fs (loop2): dirty_blocks=16 [ 371.321097][T13034] EXT4-fs (loop2): Block reservation details [ 371.332311][T13034] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 371.415257][ T2935] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 371.951156][T13061] loop1: detected capacity change from 0 to 4096 [ 371.965707][T13061] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 372.061580][T13070] loop3: detected capacity change from 0 to 128 [ 372.090144][T13070] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 372.128380][T13070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.864667][T13076] loop0: detected capacity change from 0 to 40427 [ 373.181355][T13090] loop2: detected capacity change from 0 to 4096 [ 373.204374][T13090] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 373.224835][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.402270][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.603417][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.737264][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.937801][T13105] loop0: detected capacity change from 0 to 128 [ 374.379281][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.395430][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.406214][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.438994][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.452899][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 374.465204][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.742257][ T5849] hid-generic 0005:15C2:0007.0016: collection stack underflow [ 374.780285][ T5849] hid-generic 0005:15C2:0007.0016: item 0 0 0 12 parsing failed [ 374.852895][ T5849] hid-generic: probe of 0005:15C2:0007.0016 failed with error -22 [ 375.038961][T13117] chnl_net:caif_netlink_parms(): no params data found [ 375.189573][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.197611][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.205034][T13117] bridge_slave_0: entered allmulticast mode [ 375.212325][T13117] bridge_slave_0: entered promiscuous mode [ 375.247778][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.267559][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.282943][T13117] bridge_slave_1: entered allmulticast mode [ 375.293391][T13117] bridge_slave_1: entered promiscuous mode [ 375.465067][T13117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.479254][T13148] loop3: detected capacity change from 0 to 1024 [ 375.489368][T13117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.532727][ T12] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 375.647910][T13150] syz.3.2907 (13150): /proc/13149/oom_adj is deprecated, please use /proc/13149/oom_score_adj instead. [ 375.700228][ T12] hsr_slave_0: left promiscuous mode [ 375.707035][ T12] hsr_slave_1: left promiscuous mode [ 375.715179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.729266][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.742450][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.753843][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.765824][ T12] bridge_slave_1: left allmulticast mode [ 375.774825][ T12] bridge_slave_1: left promiscuous mode [ 375.802542][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.831532][ T12] bridge_slave_0: left allmulticast mode [ 375.837855][ T12] bridge_slave_0: left promiscuous mode [ 375.843719][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.980031][ T12] veth1_macvtap: left promiscuous mode [ 375.999896][ T12] veth0_macvtap: left promiscuous mode [ 376.014980][ T12] veth1_vlan: left promiscuous mode [ 376.020406][ T12] veth0_vlan: left promiscuous mode [ 376.574772][ T5105] Bluetooth: hci1: command tx timeout [ 377.145287][T13174] trusted_key: syz.3.2916 sent an empty control message without MSG_MORE. [ 377.729168][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.811547][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.912893][ T12] team0 (unregistering): Port device team_slave_1 removed [ 378.030866][ T12] team0 (unregistering): Port device team_slave_0 removed [ 378.062944][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.096085][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.170889][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.227787][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.307844][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.361094][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.684310][ T5105] Bluetooth: hci1: command tx timeout [ 378.760587][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.992888][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.526518][ T12] bond0 (unregistering): Released all slaves [ 379.657512][T13117] team0: Port device team_slave_0 added [ 379.668831][T13182] netlink: 'syz.3.2919': attribute type 8 has an invalid length. [ 379.706085][T13117] team0: Port device team_slave_1 added [ 379.793607][T13117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.809663][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.841745][T13117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.861765][T13117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.871157][T13117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.898853][T13117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.013937][T13117] hsr_slave_0: entered promiscuous mode [ 380.028629][T13117] hsr_slave_1: entered promiscuous mode [ 380.045477][T13117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.053618][T13117] Cannot create hsr debugfs directory [ 380.282204][T13117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.292820][T13117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 380.303140][T13117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 380.316292][T13117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.404967][T13117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.433640][T13117] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.449693][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.456950][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.473173][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.480394][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.714181][T13117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.736138][ T5105] Bluetooth: hci1: command tx timeout [ 380.976488][T13117] veth0_vlan: entered promiscuous mode [ 380.993470][T13117] veth1_vlan: entered promiscuous mode [ 381.027263][T13117] veth0_macvtap: entered promiscuous mode [ 381.040561][T13117] veth1_macvtap: entered promiscuous mode [ 381.060074][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.071451][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.081916][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.092913][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.102987][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.113739][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.125833][T13117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.147991][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.159170][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.169650][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.181508][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.191727][T13117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.202574][T13117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.215348][T13117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.230940][T13117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.240533][T13117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.249570][T13117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.258704][T13117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.359393][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.367426][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.410927][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.419136][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.578683][T13203] loop3: detected capacity change from 0 to 512 [ 381.610683][T13203] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.699798][T13203] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 381.730961][T13203] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 381.795268][T13215] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 381.838193][T13215] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 381.862711][T13215] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 382.010446][ T5787] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 382.474838][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 382.495977][T13221] loop2: detected capacity change from 0 to 40427 [ 382.507308][T13221] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 382.518845][T13221] F2FS-fs (loop2): invalid crc value [ 382.534842][T13221] F2FS-fs (loop2): Found nat_bits in checkpoint [ 382.598055][T13221] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 382.665960][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 382.680117][ T5832] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.680221][ T5790] syz-executor: attempt to access beyond end of device [ 382.680221][ T5790] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.680291][ T5790] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 382.699445][ T5832] usb 5-1: config 0 has no interface number 0 [ 382.734901][ T5832] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.756686][ T5832] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.783782][ T5832] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 382.793956][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.828829][ T5105] Bluetooth: hci1: command tx timeout [ 382.866026][ T5832] usb 5-1: config 0 descriptor?? [ 383.224453][ T5794] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 383.246191][T13247] loop2: detected capacity change from 0 to 512 [ 383.253491][T13247] EXT4-fs: Ignoring removed i_version option [ 383.265718][T13247] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 383.299263][T13247] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 383.314436][T13245] loop3: detected capacity change from 0 to 2048 [ 383.332752][T13247] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 383.349299][T13245] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only [ 383.351545][T13247] EXT4-fs (loop2): 1 truncate cleaned up [ 383.361421][T13245] hpfs: filesystem error: improperly stopped [ 383.372860][T13245] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 383.374966][T13247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.424368][ T5794] usb 1-1: Using ep0 maxpacket: 16 [ 383.448097][ T5794] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 383.457134][ T5794] usb 1-1: config 0 has no interface number 0 [ 383.464473][ T5794] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 383.475265][ T5794] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.485698][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.499118][ T5794] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 383.508790][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.521634][ T5794] usb 1-1: Product: syz [ 383.528380][ T5832] uclogic 0003:28BD:0071.0017: pen parameters not found [ 383.537423][ T5794] usb 1-1: Manufacturer: syz [ 383.542090][ T5794] usb 1-1: SerialNumber: syz [ 383.547073][ T5832] uclogic 0003:28BD:0071.0017: interface is invalid, ignoring [ 383.560153][ T5794] usb 1-1: config 0 descriptor?? [ 383.578713][T13242] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 383.586495][T13242] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 383.696138][T13253] loop2: detected capacity change from 0 to 512 [ 383.729376][T13253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.784606][ T5831] usb 5-1: USB disconnect, device number 2 [ 383.826738][ T28] audit: type=1800 audit(1157.774:206): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2939" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 383.838631][T13242] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 383.881798][T13242] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 384.042544][T13260] loop3: detected capacity change from 0 to 256 [ 384.089950][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.521293][ T5794] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.544382][ T5794] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 384.563281][ T5794] asix: probe of 1-1:0.251 failed with error -71 [ 384.592004][ T5794] usb 1-1: USB disconnect, device number 26 [ 384.720195][T13281] loop4: detected capacity change from 0 to 128 [ 385.220138][T13285] loop3: detected capacity change from 0 to 32768 [ 385.228558][T13285] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2952 (13285) [ 385.255001][T13285] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 385.277009][T13285] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 385.288032][T13285] BTRFS info (device loop3): force clearing of disk cache [ 385.299422][T13285] BTRFS info (device loop3): enabling auto defrag [ 385.306718][T13285] BTRFS info (device loop3): max_inline at 0 [ 385.312888][T13285] BTRFS info (device loop3): enabling disk space caching [ 385.323070][T13285] BTRFS info (device loop3): disk space caching is enabled [ 385.412815][T13285] BTRFS info (device loop3): enabling ssd optimizations [ 385.443923][T13285] BTRFS info (device loop3): rebuilding free space tree [ 385.492397][T13285] BTRFS info (device loop3): disabling free space tree [ 385.499880][T13285] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 385.510536][T13285] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 385.634493][ T28] audit: type=1326 audit(1159.574:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13319 comm="syz.4.2961" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dceb8e929 code=0x0 [ 385.661100][ T5787] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 386.239827][ T28] audit: type=1326 audit(1160.184:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13331 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3c18e929 code=0x7ffc0000 [ 386.269793][ T28] audit: type=1326 audit(1160.214:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13331 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3c18e929 code=0x7ffc0000 [ 386.297272][ T28] audit: type=1326 audit(1160.214:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13331 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1e3c18e929 code=0x7ffc0000 [ 386.319255][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.382287][ T28] audit: type=1326 audit(1160.214:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13331 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3c18e929 code=0x7ffc0000 [ 386.404315][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.441431][ T28] audit: type=1326 audit(1160.214:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13331 comm="syz.2.2966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3c18e929 code=0x7ffc0000 [ 386.723854][T13342] loop0: detected capacity change from 0 to 4096 [ 387.121970][T13337] loop2: detected capacity change from 0 to 32768 [ 387.707364][T13362] loop3: detected capacity change from 0 to 256 [ 387.737161][T13362] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.774611][T13362] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 387.809202][T13362] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 388.426012][T13363] loop2: detected capacity change from 0 to 32768 [ 388.437018][T13363] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2976 (13363) [ 388.468843][T13363] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 388.494438][T13363] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 388.503419][T13363] BTRFS info (device loop2): using free space tree [ 388.608023][T13363] BTRFS info (device loop2): enabling ssd optimizations [ 388.623974][T13363] BTRFS info (device loop2): auto enabling async discard [ 388.922898][ T5790] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 389.489068][T13418] loop2: detected capacity change from 0 to 2048 [ 389.522087][T13420] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2997'. [ 389.567781][T13418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.625964][T13418] EXT4-fs error (device loop2): ext4_ext_precache:627: inode #2: comm syz.2.2993: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 389.662779][T13400] loop4: detected capacity change from 0 to 40427 [ 389.698423][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.743053][T13400] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 389.785850][T13400] F2FS-fs (loop4): invalid crc value [ 389.822682][T13400] F2FS-fs (loop4): Found nat_bits in checkpoint [ 389.952142][T13400] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 390.060189][T13445] serio: Serial port ttynull [ 390.093050][T13117] syz-executor: attempt to access beyond end of device [ 390.093050][T13117] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 390.112520][T13117] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 390.144945][ T5831] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 390.337695][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 390.361253][ T5831] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 390.385312][ T5831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.400532][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.408871][ T5831] usb 4-1: Product: syz [ 390.413162][ T5831] usb 4-1: Manufacturer: syz [ 390.423723][ T5831] usb 4-1: SerialNumber: syz [ 390.679561][T13460] netem: unknown loss type 0 [ 390.686775][T13460] netem: change failed [ 390.718151][ T5831] cdc_ncm 4-1:1.0: bind() failure [ 390.731854][ T5831] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 390.747216][ T5831] cdc_ncm 4-1:1.1: bind() failure [ 390.759524][ T5831] usb 4-1: USB disconnect, device number 27 [ 390.918537][T13466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3015'. [ 390.979963][T13470] loop2: detected capacity change from 0 to 256 [ 391.052233][T13470] FAT-fs (loop2): Directory bread(block 64) failed [ 391.064843][T13470] FAT-fs (loop2): Directory bread(block 65) failed [ 391.071650][T13470] FAT-fs (loop2): Directory bread(block 66) failed [ 391.094733][T13470] FAT-fs (loop2): Directory bread(block 67) failed [ 391.110202][T13470] FAT-fs (loop2): Directory bread(block 68) failed [ 391.122785][T13476] loop0: detected capacity change from 0 to 512 [ 391.126984][T13470] FAT-fs (loop2): Directory bread(block 69) failed [ 391.139137][T13470] FAT-fs (loop2): Directory bread(block 70) failed [ 391.147538][T13470] FAT-fs (loop2): Directory bread(block 71) failed [ 391.157678][T13470] FAT-fs (loop2): Directory bread(block 72) failed [ 391.164513][T13470] FAT-fs (loop2): Directory bread(block 73) failed [ 391.850738][T13505] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3031'. [ 391.864686][ T5794] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 392.003781][T13508] loop2: detected capacity change from 0 to 2048 [ 392.031811][T13508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.074710][ T5794] usb 1-1: Using ep0 maxpacket: 8 [ 392.082058][ T5794] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 392.104381][ T5794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.124093][ T5794] pvrusb2: Hardware description: Terratec Grabster AV400 [ 392.134452][ T5794] pvrusb2: ********** [ 392.138822][ T5794] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 392.146951][T13510] loop3: detected capacity change from 0 to 1024 [ 392.168838][T13508] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 392.174380][ T5794] pvrusb2: Important functionality might not be entirely working. [ 392.191135][ T5794] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 392.214356][ T5794] pvrusb2: ********** [ 392.219025][T13492] loop4: detected capacity change from 0 to 40427 [ 392.219951][T13510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.245655][T13492] F2FS-fs (loop4): heap/no_heap options were deprecated [ 392.263786][T13492] F2FS-fs (loop4): invalid crc value [ 392.336593][ T2320] pvrusb2: Invalid write control endpoint [ 392.352594][T13516] EXT4-fs error (device loop3): __ext4_remount:6741: comm syz.3.3033: Abort forced by user [ 392.404381][T13516] EXT4-fs (loop3): Remounting filesystem read-only [ 392.423477][T13516] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 392.423599][ T2320] pvrusb2: Invalid write control endpoint [ 392.439188][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 392.449360][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 392.457051][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 392.467243][ T2320] pvrusb2: Device being rendered inoperable [ 392.473264][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 392.480732][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 392.492835][ T2320] pvrusb2: Attached sub-driver cx25840 [ 392.498474][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 392.510443][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 392.553475][T13492] F2FS-fs (loop4): Start checkpoint disabled! [ 392.561512][ T5794] usb 1-1: USB disconnect, device number 27 [ 392.561538][T13492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 392.671760][ T12] kworker/u4:1: attempt to access beyond end of device [ 392.671760][ T12] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 392.690373][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 393.017249][T13330] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.171931][ T2964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.282847][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.304644][ T2964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.527329][ T2964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.736374][ T2964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.907830][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 393.998160][ T2964] tipc: Left network mode [ 394.117435][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.118841][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.156516][ T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 394.166003][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.175705][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.195225][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.212067][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.233567][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.257748][ T8] usb 3-1: config 0 descriptor?? [ 394.263355][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 394.272749][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.338545][ T5798] Bluetooth: hci1: command tx timeout [ 394.393163][T13532] loop4: detected capacity change from 0 to 32768 [ 394.464601][T13532] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3043 (13532) [ 394.538422][T13532] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.563104][T13532] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 394.572426][T13532] BTRFS info (device loop4): setting nodatacow, compression disabled [ 394.580966][T13532] BTRFS info (device loop4): max_inline at 0 [ 394.589971][T13532] BTRFS info (device loop4): turning off barriers [ 394.601229][T13532] BTRFS info (device loop4): force zlib compression, level 3 [ 394.609434][T13532] BTRFS info (device loop4): doing ref verification [ 394.616548][T13532] BTRFS info (device loop4): force clearing of disk cache [ 394.623813][T13532] BTRFS info (device loop4): enabling ssd optimizations [ 394.642356][T13532] BTRFS info (device loop4): max_inline at 4096 [ 394.684285][T13532] BTRFS info (device loop4): using free space tree [ 394.730350][ T8] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 394.758878][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0018/input/input33 [ 394.871216][T13532] BTRFS info (device loop4): auto enabling async discard [ 394.900454][T13532] BTRFS info (device loop4): rebuilding free space tree [ 394.923183][ T8] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 394.980047][ C0] Mem-Info: [ 394.984066][ C0] active_anon:10608 inactive_anon:0 isolated_anon:0 [ 394.984066][ C0] active_file:1109 inactive_file:3324 isolated_file:0 [ 394.984066][ C0] unevictable:768 dirty:369 writeback:0 [ 394.984066][ C0] slab_reclaimable:11803 slab_unreclaimable:95985 [ 394.984066][ C0] mapped:26320 shmem:7585 pagetables:545 [ 394.984066][ C0] sec_pagetables:0 bounce:0 [ 394.984066][ C0] kernel_misc_reclaimable:0 [ 394.984066][ C0] free:1395862 free_pcp:3621 free_cma:0 [ 395.029364][ C0] Node 0 active_anon:42432kB inactive_anon:0kB active_file:4436kB inactive_file:13088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105212kB dirty:1452kB writeback:0kB shmem:28804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11420kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no [ 395.062259][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:24kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 395.092821][ C0] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.120030][ C0] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 395.125860][ C0] Node 0 DMA32 free:1660592kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:42256kB inactive_anon:0kB active_file:4232kB inactive_file:12120kB unevictable:1536kB writepending:1444kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:6800kB local_pcp:5256kB free_cma:0kB [ 395.156175][ C0] lowmem_reserve[]: 0 0 1 1 1 [ 395.160960][ C0] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:176kB inactive_anon:0kB active_file:204kB inactive_file:968kB unevictable:0kB writepending:8kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 395.188580][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 395.193334][ C0] Node 1 Normal free:3907476kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:24kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:7668kB local_pcp:0kB free_cma:0kB [ 395.222483][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 395.227524][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 395.240607][ C0] Node 0 DMA32: 2*4kB (ME) 5*8kB (UE) 12*16kB (E) 4*32kB (UE) 123*64kB (ME) 341*128kB (UME) 126*256kB (UM) 87*512kB (UM) 52*1024kB (UME) 28*2048kB (UME) 347*4096kB (UM) = 1660592kB [ 395.258662][ C0] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 395.270983][ C0] Node 1 Normal: 237*4kB (UME) 58*8kB (UME) 39*16kB (UE) 247*32kB (UME) 87*64kB (UME) 22*128kB (U) 10*256kB (UE) 3*512kB (UM) 2*1024kB (U) 4*2048kB (U) 946*4096kB (UM) = 3907476kB [ 395.289026][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 395.298592][ C0] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 395.307963][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 395.317902][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 395.327357][ C0] 11897 total pagecache pages [ 395.332069][ C0] 0 pages in swap cache [ 395.336238][ C0] Free swap = 124428kB [ 395.340427][ C0] Total swap = 124996kB [ 395.344600][ C0] 2097051 pages RAM [ 395.348414][ C0] 0 pages HighMem/MovableOnly [ 395.353101][ C0] 416138 pages reserved [ 395.357288][ C0] 0 pages cma reserved [ 395.367563][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.759248][ T8] usb 3-1: USB disconnect, device number 23 [ 395.839214][T13117] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.159965][T13542] chnl_net:caif_netlink_parms(): no params data found [ 396.341371][ T5798] Bluetooth: hci0: command tx timeout [ 396.686625][T13587] overlayfs: upper fs does not support tmpfile. [ 396.797169][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.804901][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.812192][T13542] bridge_slave_0: entered allmulticast mode [ 396.820060][T13542] bridge_slave_0: entered promiscuous mode [ 396.836028][T13585] netlink: 'syz.0.3056': attribute type 11 has an invalid length. [ 396.848164][T13585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3056'. [ 396.874696][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.888565][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.904559][T13542] bridge_slave_1: entered allmulticast mode [ 396.913856][T13542] bridge_slave_1: entered promiscuous mode [ 397.000206][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.027691][T13591] loop2: detected capacity change from 0 to 4096 [ 397.098354][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.135274][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.166171][ T28] audit: type=1800 audit(1171.114:213): pid=13591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3058" name="file2" dev="loop2" ino=31 res=0 errno=0 [ 397.240497][ T2964] hsr_slave_0: left promiscuous mode [ 397.249395][ T2964] hsr_slave_1: left promiscuous mode [ 397.258436][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.268590][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.276971][ T2964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.284850][ T2964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.292902][ T2964] bridge_slave_1: left allmulticast mode [ 397.299617][ T2964] bridge_slave_1: left promiscuous mode [ 397.305883][ T2964] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.318353][ T2964] bridge_slave_0: left promiscuous mode [ 397.324671][ T2964] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.369767][ T2964] veth1_macvtap: left promiscuous mode [ 397.383508][ T2964] veth1_vlan: left promiscuous mode [ 397.389857][ T2964] veth0_vlan: left promiscuous mode [ 397.484488][ T5832] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 397.694534][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 397.705799][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0 [ 397.726339][ T5832] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 397.744319][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.752406][ T5832] usb 1-1: Product: syz [ 397.764268][ T5832] usb 1-1: Manufacturer: syz [ 397.768959][ T5832] usb 1-1: SerialNumber: syz [ 397.795632][ T5832] usb 1-1: config 0 descriptor?? [ 398.113286][T13605] loop4: detected capacity change from 0 to 2048 [ 398.153540][T13606] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.234524][ T5832] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 398.430726][ T5105] Bluetooth: hci0: command tx timeout [ 398.631527][T13612] loop4: detected capacity change from 0 to 4096 [ 398.641549][ T5832] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 398.648140][T13612] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 398.653021][ T5832] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 398.686443][ T5832] gs_usb: probe of 1-1:0.0 failed with error -71 [ 398.720910][ T5832] usb 1-1: USB disconnect, device number 28 [ 398.809085][ T28] audit: type=1800 audit(1172.754:214): pid=13612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3068" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 399.361230][T13614] loop4: detected capacity change from 0 to 32768 [ 399.384150][ T2964] team0 (unregistering): Port device team_slave_1 removed [ 399.399816][T13614] find_entry called with index >= next_index [ 399.443786][ T28] audit: type=1800 audit(1173.384:215): pid=13614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3069" name="file2" dev="loop4" ino=5 res=0 errno=0 [ 399.524779][ T2964] team0 (unregistering): Port device team_slave_0 removed [ 399.594628][ T5831] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 399.620381][ T2964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.635220][ T2964] bond_slave_1 (unregistering): left promiscuous mode [ 399.739171][ T2964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.751753][ T2964] bond_slave_0 (unregistering): left promiscuous mode [ 399.817519][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 399.828796][ T5831] usb 1-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 399.852746][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.865545][ T5831] usb 1-1: config 0 descriptor?? [ 399.871450][T13616] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 400.322328][ T5831] wacom 0003:056A:00DE.0019: unknown main item tag 0x0 [ 400.349281][ T5831] wacom 0003:056A:00DE.0019: unknown main item tag 0x0 [ 400.356339][ T5831] wacom 0003:056A:00DE.0019: unknown main item tag 0x0 [ 400.363250][ T5831] wacom 0003:056A:00DE.0019: unknown main item tag 0x0 [ 400.386879][ T5831] wacom 0003:056A:00DE.0019: unknown main item tag 0x0 [ 400.396215][ T5831] wacom 0003:056A:00DE.0019: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 400.407861][ T5831] wacom 0003:056A:00DE.0019: hidraw0: USB HID v1.01 Device [HID 056a:00de] on usb-dummy_hcd.0-1/input0 [ 400.426735][ T5831] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00DE.0019/input/input34 [ 400.508700][ T5105] Bluetooth: hci0: command tx timeout [ 400.573457][ T5831] usb 1-1: USB disconnect, device number 29 [ 400.688174][T13621] loop4: detected capacity change from 0 to 128 [ 400.701937][ T2964] bond0 (unregistering): Released all slaves [ 400.918906][T13542] team0: Port device team_slave_0 added [ 400.972267][T13542] team0: Port device team_slave_1 added [ 401.072893][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.081377][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.099458][T13627] loop2: detected capacity change from 0 to 4096 [ 401.115943][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.134336][T13627] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 401.163902][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.171121][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.224418][ T5832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 401.229537][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.317719][T13629] sctp: [Deprecated]: syz.0.3076 (pid 13629) Use of int in maxseg socket option. [ 401.317719][T13629] Use struct sctp_assoc_value instead [ 401.414356][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 401.441155][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.476076][ T5832] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 401.491112][T13542] hsr_slave_0: entered promiscuous mode [ 401.498503][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.508781][T13542] hsr_slave_1: entered promiscuous mode [ 401.526838][ T5832] usb 5-1: config 0 descriptor?? [ 401.620027][ T1091] Bluetooth: hci4: Frame reassembly failed (-84) [ 401.809104][T13542] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 401.821394][T13542] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 401.836328][T13542] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 401.847691][T13542] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 401.971251][ T5832] kye 0003:0458:4018.001A: hidraw0: USB HID v0.07 Device [HID 0458:4018] on usb-dummy_hcd.4-1/input0 [ 401.984513][ T5831] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 402.004161][T13542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.031593][T13542] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.048532][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.055747][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.074794][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.083362][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.186305][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 402.201923][ T5849] usb 5-1: USB disconnect, device number 3 [ 402.210168][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.231650][ T5831] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 402.241984][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.251148][ T5831] usb 3-1: Product: syz [ 402.255867][ T5831] usb 3-1: Manufacturer: syz [ 402.260517][ T5831] usb 3-1: SerialNumber: syz [ 402.269662][ T5831] usb 3-1: config 0 descriptor?? [ 402.292604][ T5831] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 402.418371][T13542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.509578][ T986] usb 3-1: Failed to submit usb control message: -71 [ 402.509929][ T5832] usb 3-1: USB disconnect, device number 24 [ 402.534328][ T986] usb 3-1: unable to send the bmi data to the device: -71 [ 402.541671][ T986] usb 3-1: unable to get target info from device [ 402.554160][ T986] usb 3-1: could not get target info (-71) [ 402.561380][ T986] usb 3-1: could not probe fw (-71) [ 402.591501][ T5798] Bluetooth: hci0: command tx timeout [ 402.826605][T13542] veth0_vlan: entered promiscuous mode [ 402.848430][T13542] veth1_vlan: entered promiscuous mode [ 402.913717][T13542] veth0_macvtap: entered promiscuous mode [ 402.916749][T13658] loop9: detected capacity change from 0 to 8 [ 402.932905][T13658] Dev loop9: unable to read RDB block 8 [ 402.935741][T13542] veth1_macvtap: entered promiscuous mode [ 402.938822][T13658] loop9: unable to read partition table [ 402.950408][T13658] loop9: partition table beyond EOD, truncated [ 402.957839][T13658] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 402.972440][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.985531][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.996871][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.008509][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.018796][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.029546][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.056489][T13542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.075751][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.088649][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.107388][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.118797][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.128928][T13542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.140010][T13542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.152119][T13542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.175320][T13542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.187804][T13542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.198825][T13542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.208421][T13542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.356108][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.369325][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.392418][ T8] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 403.415979][ T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.423872][ T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.590562][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.601138][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.620277][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.629851][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.640989][ T8] usb 5-1: Product: syz [ 403.646672][ T8] usb 5-1: Manufacturer: syz [ 403.651341][ T8] usb 5-1: SerialNumber: syz [ 403.694788][ T5798] Bluetooth: hci4: command 0xfc11 tx timeout [ 403.702943][ T5105] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 403.866201][ T8] usb 5-1: 0:2 : does not exist [ 403.895194][ T8] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 403.933078][ T8] usb 5-1: USB disconnect, device number 4 [ 404.422792][T13699] loop0: detected capacity change from 0 to 65 [ 404.604502][T13707] block nbd2: not configured, cannot reconfigure [ 404.665811][ T5105] Bluetooth: hci0: command tx timeout [ 404.834515][ T5831] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 405.014399][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 405.022355][ T5831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.041060][ T5831] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.058903][ T5831] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 405.068244][ T5849] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 405.082470][ T5831] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 405.092252][ T5831] usb 6-1: Product: syz [ 405.100907][ T5831] usb 6-1: Manufacturer: syz [ 405.106788][ T5831] usb 6-1: SerialNumber: syz [ 405.114000][ T5831] usb 6-1: config 0 descriptor?? [ 405.264362][ T5849] usb 5-1: Using ep0 maxpacket: 32 [ 405.273323][ T5849] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.283918][ T5849] usb 5-1: config 0 has no interface number 0 [ 405.294034][ T5849] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.315356][ T5849] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.329236][ T5849] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 405.339886][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.348262][ T8] usb 6-1: USB disconnect, device number 2 [ 405.359660][ T5849] usb 5-1: config 0 descriptor?? [ 405.564523][T13726] loop0: detected capacity change from 0 to 65536 [ 405.666564][T13728] loop2: detected capacity change from 0 to 256 [ 405.685705][T13728] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 405.792449][ T5849] hid (null): unknown global tag 0xc [ 405.982610][ T5849] uclogic 0003:28BD:0094.001B: pen parameters not found [ 406.000758][ T5849] uclogic 0003:28BD:0094.001B: interface is invalid, ignoring [ 406.038146][ T5849] usb 5-1: USB disconnect, device number 5 [ 406.184434][T13741] wireguard0: entered promiscuous mode [ 406.190051][T13741] wireguard0: entered allmulticast mode [ 406.310235][T13744] loop2: detected capacity change from 0 to 512 [ 406.330497][T13744] EXT4-fs: Ignoring removed i_version option [ 406.355396][T13744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 406.407472][T13744] EXT4-fs (loop2): 1 truncate cleaned up [ 406.431066][T13744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.635560][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.851323][T13747] loop0: detected capacity change from 0 to 40427 [ 407.442244][T13774] loop0: detected capacity change from 0 to 16 [ 407.724992][T13765] loop4: detected capacity change from 0 to 32768 [ 407.734088][T13765] (syz.4.3124,13765,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 407.759352][T13765] (syz.4.3124,13765,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 407.794066][T13765] (syz.4.3124,13765,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 407.820177][T13765] (syz.4.3124,13765,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 407.855144][T13765] JBD2: Ignoring recovery information on journal [ 407.945519][T13765] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 407.964370][ T5849] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 408.010453][T13765] (syz.4.3124,13765,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 408.010517][ T2964] (kworker/u4:11,2964,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 408.078764][T13765] (syz.4.3124,13765,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x2e880d5e. Applying ECC. [ 408.083522][ T55] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 408.093292][T13765] (syz.4.3124,13765,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x960d5e93 [ 408.114995][T13765] (syz.4.3124,13765,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 408.133854][T13765] (syz.4.3124,13765,1):ocfs2_quota_read:201 ERROR: status = -5 [ 408.141726][T13765] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6 [ 408.155098][T13765] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 408.169870][T13765] (syz.4.3124,13765,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 408.190057][T13765] (syz.4.3124,13765,1):ocfs2_mknod:314 ERROR: status = -5 [ 408.212561][ T5849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.223773][T13765] (syz.4.3124,13765,1):ocfs2_mknod:502 ERROR: status = -5 [ 408.232116][ T5849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 408.241252][T13765] (syz.4.3124,13765,1):ocfs2_create:676 ERROR: status = -5 [ 408.249133][ T5849] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 408.264298][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.285635][ T5849] usb 1-1: config 0 descriptor?? [ 408.296877][ T5849] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 408.309341][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 408.318719][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 408.326361][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 408.334374][ T55] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 408.344693][T13117] ocfs2: Unmounting device (7,4) on (node local) [ 408.345651][ T55] usb 3-1: config 0 has no interface number 0 [ 408.361741][ T5849] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 408.384317][ T55] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 408.394164][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.395290][ T5849] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 408.412078][ T55] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.445156][ T5849] usb 1-1: media controller created [ 408.451671][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.460850][ T55] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 408.489841][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 408.507238][ T5849] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 408.516205][ T55] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 408.535055][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.546158][ T5849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 408.564318][ T55] usb 3-1: Product: syz [ 408.568559][ T55] usb 3-1: Manufacturer: syz [ 408.573194][ T55] usb 3-1: SerialNumber: syz [ 408.582358][ T5849] dvb-usb: schedule remote query interval to 150 msecs. [ 408.590382][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 408.608915][ T55] usb 3-1: config 0 descriptor?? [ 408.614193][ T5849] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 408.617684][T13778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 408.643842][ T5841] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 408.653857][ T5849] usb 1-1: USB disconnect, device number 30 [ 408.667824][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.682873][ T5841] usb 6-1: config 0 descriptor?? [ 408.700100][ T5849] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 408.895367][ T55] usb 3-1: USB disconnect, device number 25 [ 409.149544][T13631] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 409.168046][ T5841] logitech 0003:046D:C295.001C: unbalanced delimiter at end of report description [ 409.195074][ T5841] logitech 0003:046D:C295.001C: parse failed [ 409.201244][ T5841] logitech: probe of 0003:046D:C295.001C failed with error -22 [ 409.350179][T13631] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 409.364721][T13631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.374435][ T5841] usb 6-1: USB disconnect, device number 3 [ 409.380530][T13631] usb 5-1: Product: syz [ 409.388474][T13631] usb 5-1: Manufacturer: syz [ 409.393181][T13631] usb 5-1: SerialNumber: syz [ 409.423554][T13631] usb 5-1: config 0 descriptor?? [ 409.563900][T13792] loop2: detected capacity change from 0 to 16 [ 409.572276][T13792] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 409.857120][T13631] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 409.865132][T13631] usb 5-1: Firmware version (0.0) predates our first public release. [ 409.873249][T13631] usb 5-1: Please update to version 0.2 or newer [ 410.106841][T13631] usb 5-1: USB disconnect, device number 6 [ 410.394002][T13806] loop5: detected capacity change from 0 to 2048 [ 410.429390][T13806] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 410.437811][T13806] UDF-fs: Scanning with blocksize 512 failed [ 410.462302][T13806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 411.135976][T13822] tun0: tun_chr_ioctl cmd 1074025677 [ 411.151784][T13822] tun0: linktype set to 270 [ 411.312648][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 411.504571][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 411.523225][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.546008][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.568360][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.578029][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.587975][ T8] usb 6-1: Product: syz [ 411.595474][ T8] usb 6-1: Manufacturer: syz [ 411.600278][ T8] usb 6-1: SerialNumber: syz [ 412.038390][ T8] usb 6-1: 0:2 : does not exist [ 412.254919][ T55] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 412.442510][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'. [ 412.444464][ T8] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 412.463114][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 412.475957][ T55] usb 3-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 412.487240][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.502912][ T55] usb 3-1: config 0 descriptor?? [ 412.533589][ T8] usb 6-1: USB disconnect, device number 4 [ 412.535026][T13839] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 412.996698][ T55] wacom 0003:056A:00DE.001D: unknown main item tag 0x0 [ 413.014516][ T55] wacom 0003:056A:00DE.001D: unknown main item tag 0x0 [ 413.021478][ T55] wacom 0003:056A:00DE.001D: unknown main item tag 0x0 [ 413.044413][ T55] wacom 0003:056A:00DE.001D: unknown main item tag 0x0 [ 413.054488][ T55] wacom 0003:056A:00DE.001D: unknown main item tag 0x0 [ 413.062735][ T55] wacom 0003:056A:00DE.001D: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 413.095214][ T55] wacom 0003:056A:00DE.001D: hidraw0: USB HID v1.01 Device [HID 056a:00de] on usb-dummy_hcd.2-1/input0 [ 413.118185][ T55] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00DE.001D/input/input38 [ 413.183902][T13860] tap0: tun_chr_ioctl cmd 1074025680 [ 413.251130][ T55] usb 3-1: USB disconnect, device number 26 [ 413.384511][ T28] audit: type=1326 audit(1187.314:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b38e929 code=0x7ffc0000 [ 413.436290][ T28] audit: type=1326 audit(1187.314:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b38e929 code=0x7ffc0000 [ 413.494353][ T28] audit: type=1326 audit(1187.354:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c0b38e929 code=0x7ffc0000 [ 413.527658][T13857] loop0: detected capacity change from 0 to 40427 [ 413.540060][ T28] audit: type=1326 audit(1187.354:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b38e929 code=0x7ffc0000 [ 413.562625][T13868] loop4: detected capacity change from 0 to 2048 [ 413.571002][ T28] audit: type=1326 audit(1187.354:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b38e929 code=0x7ffc0000 [ 413.601375][ T28] audit: type=1326 audit(1187.354:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c0b38e929 code=0x7ffc0000 [ 413.603614][T13868] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 413.632914][ T28] audit: type=1326 audit(1187.354:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0b38e929 code=0x7ffc0000 [ 413.654393][T13868] UDF-fs: Scanning with blocksize 512 failed [ 413.678939][T13868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.694802][ T28] audit: type=1326 audit(1187.364:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8c0b3858e7 code=0x7ffc0000 [ 413.754376][ T28] audit: type=1326 audit(1187.364:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8c0b32ab19 code=0x7ffc0000 [ 413.788543][ T28] audit: type=1326 audit(1187.364:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13863 comm="syz.5.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f8c0b38e929 code=0x7ffc0000 [ 414.366683][T13872] loop5: detected capacity change from 0 to 32768 [ 414.383192][T13872] [ 414.383192][T13872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.383192][T13872] [ 414.429437][T13872] [ 414.429437][T13872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.429437][T13872] [ 414.443007][T13872] [ 414.443007][T13872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.443007][T13872] [ 414.459347][T13872] [ 414.459347][T13872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.459347][T13872] [ 414.473290][T13872] [ 414.473290][T13872] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.473290][T13872] [ 414.521618][ T111] [ 414.521618][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.521618][ T111] [ 414.544388][T13631] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 414.547965][T13883] [ 414.547965][T13883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.547965][T13883] [ 414.553272][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 414.590182][T13878] loop0: detected capacity change from 0 to 32768 [ 414.594356][T13883] [ 414.594356][T13883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.594356][T13883] [ 414.611050][T13883] [ 414.611050][T13883] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.611050][T13883] [ 414.630769][ T111] [ 414.630769][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.630769][ T111] [ 414.682979][T13542] [ 414.682979][T13542] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.682979][T13542] [ 414.703466][T13542] [ 414.703466][T13542] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 414.703466][T13542] [ 414.744459][T13631] usb 3-1: Using ep0 maxpacket: 8 [ 414.760178][T13631] usb 3-1: unable to get BOS descriptor or descriptor too short [ 414.769094][T13631] usb 3-1: too many configurations: 73, using maximum allowed: 8 [ 414.777099][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 414.789707][ T8] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 414.806083][T13631] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 414.822124][T13631] usb 3-1: can't read configurations, error -71 [ 414.828703][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.847885][T13878] binfmt_misc: register: failed to install interpreter file ./file1 [ 414.856049][ T8] usb 5-1: config 0 descriptor?? [ 414.859053][ T8] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 415.064097][ T8] usb 5-1: Detected FT232B [ 415.269888][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 415.286810][ T8] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 415.491171][ T8] usb 5-1: USB disconnect, device number 7 [ 415.520755][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 415.563023][ T8] ftdi_sio 5-1:0.0: device disconnected [ 415.654921][T13902] netlink: 'syz.0.3183': attribute type 2 has an invalid length. [ 415.677142][T13902] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3183'. [ 415.777317][T13907] loop0: detected capacity change from 0 to 16 [ 415.784830][T13907] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 415.787888][T13906] loop2: detected capacity change from 0 to 128 [ 415.824633][T13906] EXT4-fs (loop2): Test dummy encryption mode enabled [ 415.855924][T13906] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.095970][T13906] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.177643][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.460450][T13921] loop4: detected capacity change from 0 to 1024 [ 416.485642][T13921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.512245][T13631] kernel read not supported for file /vcs (pid: 13631 comm: kworker/0:1) [ 416.536852][T13921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.561983][T13912] loop0: detected capacity change from 0 to 32768 [ 416.697196][T13117] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.057751][T13937] loop4: detected capacity change from 0 to 16 [ 417.070564][T13935] loop0: detected capacity change from 0 to 2048 [ 417.078886][T13937] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 417.684436][ T55] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 417.874481][ T55] usb 5-1: Using ep0 maxpacket: 32 [ 417.890851][ T55] usb 5-1: config 0 interface 0 has no altsetting 0 [ 417.909517][ T55] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 417.927672][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.956141][ T55] usb 5-1: config 0 descriptor?? [ 418.023710][T13966] loop5: detected capacity change from 0 to 256 [ 418.298873][T13964] loop0: detected capacity change from 0 to 40427 [ 418.333664][T13974] loop5: detected capacity change from 0 to 256 [ 418.372002][T13974] FAT-fs (loop5): Directory bread(block 64) failed [ 418.383949][T13974] FAT-fs (loop5): Directory bread(block 65) failed [ 418.393661][T13974] FAT-fs (loop5): Directory bread(block 66) failed [ 418.410858][T13974] FAT-fs (loop5): Directory bread(block 67) failed [ 418.418554][ T55] corsair-cpro 0003:1B1C:0C10.001E: unknown main item tag 0x0 [ 418.428052][ T55] corsair-cpro 0003:1B1C:0C10.001E: unknown main item tag 0x0 [ 418.436772][T13974] FAT-fs (loop5): Directory bread(block 68) failed [ 418.443593][ T55] corsair-cpro 0003:1B1C:0C10.001E: unknown main item tag 0x0 [ 418.451272][T13974] FAT-fs (loop5): Directory bread(block 69) failed [ 418.458228][ T55] corsair-cpro 0003:1B1C:0C10.001E: unknown main item tag 0x0 [ 418.466189][T13974] FAT-fs (loop5): Directory bread(block 70) failed [ 418.472983][ T55] corsair-cpro 0003:1B1C:0C10.001E: unknown main item tag 0x0 [ 418.480719][T13974] FAT-fs (loop5): Directory bread(block 71) failed [ 418.489991][ T55] corsair-cpro 0003:1B1C:0C10.001E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 418.502256][ T5849] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 418.510674][T13974] FAT-fs (loop5): Directory bread(block 72) failed [ 418.518122][T13974] FAT-fs (loop5): Directory bread(block 73) failed [ 418.696640][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.714629][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.728984][ T5849] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 418.739697][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.750642][ T5849] usb 3-1: config 0 descriptor?? [ 418.903312][T13986] loop5: detected capacity change from 0 to 16 [ 418.913918][T13986] erofs: (device loop5): mounted with root inode @ nid 36. [ 418.934090][ T55] corsair-cpro: probe of 0003:1B1C:0C10.001E failed with error -110 [ 418.974104][ T55] usb 5-1: USB disconnect, device number 8 [ 419.066356][T13542] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 46 [ 419.094615][T13542] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 419.110602][T13542] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 419.215904][ T5849] pyra 0003:1E7D:2CF6.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 419.322445][T13994] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 419.334252][T13994] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 419.342713][T13994] CPU: 0 PID: 13994 Comm: syz.4.3221 Not tainted 6.6.95-syzkaller #0 [ 419.350824][T13994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.360920][T13994] RIP: 0010:klist_remove+0x15c/0x390 [ 419.366264][T13994] Code: 80 3c 04 00 74 08 4c 89 f7 e8 40 0b 84 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 19 0b 84 f7 49 8b 47 58 48 89 44 24 10 4c 89 [ 419.385918][T13994] RSP: 0018:ffffc90005147980 EFLAGS: 00010202 [ 419.392020][T13994] RAX: 000000000000000b RBX: ffff88805b670000 RCX: dffffc0000000000 [ 419.400041][T13994] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 419.408063][T13994] RBP: ffffc90005147a68 R08: ffffffff8e322183 R09: 1ffffffff1c64430 [ 419.416081][T13994] R10: dffffc0000000000 R11: fffffbfff1c64431 R12: 1ffff1100fcf870c [ 419.424187][T13994] R13: dffffc0000000000 R14: ffff88807e7c3860 R15: 0000000000000000 [ 419.432200][T13994] FS: 00007f9dcfab86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 419.441543][T13994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.448178][T13994] CR2: 00007f9dcfa96f98 CR3: 00000000227b1000 CR4: 00000000003506f0 [ 419.456366][T13994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 419.464549][T13994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 SYZFAIL: failed to send rpc fd=3 want=272 sent=0 n=-1 (errno 32: Broken pipe) [ 419.472561][T13994] Call Trace: [ 419.475870][T13994] [ 419.478836][T13994] ? klist_del+0x110/0x110 [ 419.483475][T13994] ? kobject_move+0x597/0x6d0 [ 419.488201][T13994] ? kobject_put+0x470/0x470 [ 419.493430][T13994] ? get_device_parent+0x366/0x390 [ 419.498774][T13994] device_move+0x193/0x6f0 [ 419.503243][T13994] hci_conn_del_sysfs+0xaf/0x160 [ 419.508233][T13994] hci_conn_del+0x8d8/0xc80 [ 419.512790][T13994] hci_conn_hash_flush+0x185/0x220 [ 419.517954][T13994] hci_dev_close_sync+0x962/0xfb0 [ 419.523028][T13994] ? hci_dev_close+0xfe/0x200 [ 419.527761][T13994] ? hci_dev_open_sync+0x2b50/0x2b50 [ 419.533095][T13994] ? do_raw_read_unlock+0x3d/0x80 [ 419.538164][T13994] ? _raw_read_unlock+0x28/0x40 [ 419.543060][T13994] hci_dev_close+0x106/0x200 [ 419.547703][T13994] sock_do_ioctl+0xd7/0x2f0 [ 419.552251][T13994] ? sock_show_fdinfo+0xb0/0xb0 [ 419.557155][T13994] sock_ioctl+0x623/0x7a0 [ 419.561530][T13994] ? sock_poll+0x3d0/0x3d0 [ 419.565999][T13994] ? bpf_lsm_file_ioctl+0x9/0x10 [ 419.571005][T13994] ? security_file_ioctl+0x80/0xa0 [ 419.576161][T13994] ? sock_poll+0x3d0/0x3d0 [ 419.580623][T13994] __se_sys_ioctl+0xfd/0x170 [ 419.585292][T13994] do_syscall_64+0x55/0xb0 [ 419.589760][T13994] ? clear_bhb_loop+0x40/0x90 [ 419.590572][ T5849] pyra 0003:1E7D:2CF6.001F: couldn't init struct pyra_device [ 419.594461][T13994] ? clear_bhb_loop+0x40/0x90 [ 419.594491][T13994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.594513][T13994] RIP: 0033:0x7f9dceb8e929 [ 419.594531][T13994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.594549][T13994] RSP: 002b:00007f9dcfab8038 EFLAGS: 00000246 [ 419.602047][ T5849] pyra 0003:1E7D:2CF6.001F: couldn't install mouse [ 419.606598][T13994] ORIG_RAX: 0000000000000010 [ 419.606610][T13994] RAX: ffffffffffffffda RBX: 00007f9dcedb5fa0 RCX: 00007f9dceb8e929 [ 419.606625][T13994] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 419.606637][T13994] RBP: 00007f9dcec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 419.606650][T13994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.685921][T13994] R13: 0000000000000000 R14: 00007f9dcedb5fa0 R15: 00007ffdd4dc11f8 [ 419.694030][T13994] [ 419.697069][T13994] Modules linked in: [ 419.713892][T13994] ---[ end trace 0000000000000000 ]--- [ 419.720763][T13994] RIP: 0010:klist_remove+0x15c/0x390 [ 419.742769][T13994] Code: 80 3c 04 00 74 08 4c 89 f7 e8 40 0b 84 f7 4d 8b 3e 49 83 e7 fe 49 8d 7f 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 19 0b 84 f7 49 8b 47 58 48 89 44 24 10 4c 89 [ 419.765287][T13994] RSP: 0018:ffffc90005147980 EFLAGS: 00010202 [ 419.771431][T13994] RAX: 000000000000000b RBX: ffff88805b670000 RCX: dffffc0000000000 [ 419.780205][T13994] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 419.789494][T13994] RBP: ffffc90005147a68 R08: ffffffff8e322183 R09: 1ffffffff1c64430 [ 419.798806][T13994] R10: dffffc0000000000 R11: fffffbfff1c64431 R12: 1ffff1100fcf870c [ 419.809146][T13994] R13: dffffc0000000000 R14: ffff88807e7c3860 R15: 0000000000000000 [ 419.849532][T13994] FS: 00007f9dcfab86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 419.861771][T13994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.884419][T13994] CR2: 000055fe85feb000 CR3: 00000000227b1000 CR4: 00000000003506f0 [ 419.892477][T13994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 419.916882][T13994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 419.937427][T13994] Kernel panic - not syncing: Fatal exception [ 419.943826][T13994] Kernel Offset: disabled [ 419.948184][T13994] Rebooting in 86400 seconds..