last executing test programs: 10.055759697s ago: executing program 3 (id=880): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 9.762715236s ago: executing program 3 (id=883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000a40)={{0x3000, 0xf000, 0x3, 0xa4, 0xff, 0x2, 0x9f, 0xb, 0x5, 0x1, 0x6, 0x5}, {0x8080000, 0x5000, 0x10, 0x1, 0x4, 0x7f, 0x6, 0x1, 0x8, 0x7, 0x4, 0x4}, {0xdddd1000, 0x0, 0xc, 0x1, 0x1, 0x9c, 0x2, 0x6, 0x1, 0xa5, 0x2, 0x83}, {0x0, 0x6000, 0x3, 0xd, 0x6, 0x3, 0x7, 0x5, 0x1, 0x5, 0x9, 0xf}, {0xd000, 0x1000, 0x0, 0x7d, 0xc2, 0x3, 0x6, 0x81, 0x6, 0x6, 0x6}, {0x1, 0x0, 0xa, 0x40, 0x7, 0xf9, 0x1, 0x0, 0x5c, 0x1, 0x8, 0x2}, {0x0, 0x8080000, 0xd, 0x5, 0x4, 0xb, 0xf, 0xf5, 0xfd, 0x6, 0x2}, {0x8080000, 0xf92088b069b10f92, 0x0, 0xe, 0x6, 0x6, 0x0, 0x80, 0x6, 0x4, 0x4c, 0x18}, {0x3000, 0x16dd}, {0x5000, 0xffff}, 0xa, 0x0, 0xdddd1000, 0x2020, 0x0, 0x901, 0x4, [0x10, 0x72, 0x5, 0x6]}) 9.424551885s ago: executing program 3 (id=885): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x120, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xb0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x60}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x94, 0x6, [@m_gact={0x90, 0x1f, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb3, 0x6, 0x0, 0x5, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0xffffff80, 0x0, 0x0, 0x3a1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x2, 0x20000000, 0x5, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5e, 0x0, 0x5, 0xe, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.103344234s ago: executing program 3 (id=888): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac05460200000000000109022400010000000009040000010300000009210000000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2000000d200a7ea311df0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.367742724s ago: executing program 1 (id=905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 5.818625621s ago: executing program 1 (id=908): r0 = syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) 5.114104399s ago: executing program 3 (id=909): syz_mount_image$btrfs(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000300)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@metadata_ratio={'metadata_ratio', 0x3d, 0xe3}}, {@acl}, {@noautodefrag}, {@ref_verify}, {@noacl}, {@noenospc_debug}]}, 0x5, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x1, 0x1001f1) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'pids'}]}, 0x6) 4.600987507s ago: executing program 0 (id=912): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4.453743827s ago: executing program 2 (id=913): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000f80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1c) 4.355814276s ago: executing program 0 (id=914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x4) 4.215831786s ago: executing program 1 (id=915): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200003, 0x200, 0x0, 0x7}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) 4.215151636s ago: executing program 2 (id=916): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x400) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xd) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) 4.005457055s ago: executing program 0 (id=917): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 2.840608631s ago: executing program 1 (id=919): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa0042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f", 0x2}], 0x1) ioctl$TCFLSH(r0, 0x540b, 0x0) 2.83661133s ago: executing program 2 (id=920): get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 2.65012685s ago: executing program 0 (id=921): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x23, {[@local=@item_012={0x2, 0x2, 0x0, "6d18"}, @main=@item_4={0x3, 0x0, 0x8, "090000f3"}, @global=@item_4={0x3, 0x1, 0x4, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, 'p'}, @global=@item_4={0x3, 0x1, 0x8, "0600"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "581dca68"}, @main=@item_4={0x3, 0x0, 0x9, "93cb2eba"}]}}, 0x0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) 2.513347139s ago: executing program 1 (id=922): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x41a, &(0x7f00000002c0)=ANY=[], 0xff, 0xaec, &(0x7f0000001d00)="$eJzs3U2MW0cBAOCxd73JNilx2oQuaWgTCm356abZLOEngqRKhETUVIhLpYpLlKYlIgSJIgFVJZKcuNGqChInfsSpl6ogJHpBUU9cKtFIFVJPhQMHoiAqcYBAYhTvjPd5YufZ3l3bu/4+aTyeN+955j0/P7/fmQBMrGrzdXFxrhLCpTdfPfb3h/82e2vI4dYY9ebrdCFVCyFUYno6+7z3p5biGx+8dKpTXAkLzdeUDk9da027JYRwPuwJl0M97Lp05ZW3F548ceH4xb3vvHbo6trMPQAATJavXT60uPMvf7p/+/XXHzgSNrWGp/3zekxvjfv9R+KOf9r/r4b2dKUQimay8aZjqM62jzfVYbxiObVsvOku5c9k5de6jLcp3Ln8qcKwTvMN61laj+uhUp1vS1er8/NLx+SheVw/U5k/d+bscy+MqKLAqvvXgyGEPYVw9GJ7etzC4TGow4ChMQZ1WJfhyPDKut5YMvJ5HlJobBv1FghgSX698Dbn8zMLK9P6tOneyr/2RLXz9DCQ9jVo2Ot/7o7lz4y4/LCG5d8bf9fjvPxDCL++YIvD6tmoa1Oar/Q72hrT1fhHn64H5Pcvdf/95Vc62ofm1yNqPdaz23WE9XJ9oVs9p4Zcj0F1q3++XmxUX4pxWg5fzvKLv5/8O10v3zHQ2b/z8/+TEqbGoA6CMEgIbenaSj6rMeLtDzC+8vvmGun6aJTf15fnbyrJ39w1v9IcNFsy/V0l+VtK8mGS/fZ7PwkvV5aP8/Nj+n7Px6fzbHfH+EN91ic/H9lv+fl9v/1aafn5/cQwzn5/8unTn3/2mStL9/9XWuv/zbi+p8ONevxtXY4jpPOFy+fVl7Tu/a+3l1PtMt49WX3u7jB+8/2O9vEqO5Y/JxS2M7fVY659um3dxtvdPl49G282hs1ZffP9k7uy6dL+R9qupuU1nc1vLZuPmaweabuyPcZ5PWAQaX3sdv9/Wj/nQq3y3Jmzpx+P6bSe/nGqtunW8P1Drjewcr0+/zMX2p//2doaXqsWtwvblodXlrYLb8TPax++0CqnffiBmE7/c9+cmm0Onz/1nbPPrv7sw0R74Ycvfuvk2bOnv+vNwG++Mh7V6OdNOmwZl/p4M3ZvRrxhAtbcvh8t7QQ8dubbJ58//fzpcwcOHjywsHDwCwcW9zX36/cV9+6Lzo+gtsBqWv7TH3VNAAAAAAAAAAAAgF59//ixK+++9bn3lp7/X37+Lz3/n+78Tc///zh7/j9/Tj49B5+eA9zeIb85TtbA6kw2Xi2Ge7P67sjK2ZlN9+EYt/rxi8//p+Lydl1Tfe7Lhte6JLPmBG5rL2Uma4Mk7y/wYzG+GONfhQE0tLzKKqnMdh4c47L2rdO6ntqnKLRLYS1dR9L3ltaG1I5Jev67Y7tOhS97+xDqyOobxuOEo55HoLN/bIz2v3vsr/GfyzM+uvaaVxZmRr6shxCmh1vez0awToxJaHTdS++1BxuA1THq/j/Tec8Un/vDVzffCmm0a0+0by/z9kuhH39+tz091v1/DqH8vN++YZV/ISt3XJf/avf/2er/ruftX9ZjXn2wcv/z86vvFYoNu3otP5//1A70jv7Kvx7LT3PzSOit/MYvs/LzC0I9+m9W/l09ln/b/O8erPz/xfLTYnv0oV7LX6pxpdpej/y8cbr+l583Tm5k85/a9rzZWu9vK//rL3aa/wE7arwZy4dJtl76me1Xth/R2mkv3l8Q+ur/Nzq/uv3/tiqbbdby+zA+G9NpQ5zuc8j7O+m3/un+ivQ/sDP7/ErJ/5v+f9e3L8b4Tr+H1NLfVGF9rMe//EK6uSxTutZh2W7UbQ2sV+9vjOt/GylsHoM6TFZIO1WDTd+YGmC6Vj9xI573RqOxtie0Sqys8EtbV60iE2qkX/4YHCeMuvxRL/8yef+/+T583v9vnp/3/5vn5/3/5vmz8Rvqlp/3/5svz7z/3zz/vuxz8/6B50ryP1KSv6tzfuuw/f6S6XeX5H+0JH9vK/9w2xgp/4GS6R8syb+nJP+hkvyPh8LJ4w75nyiZ/uGS/EcL+cU+oFP+J0um3+jS8yiTOv8wyfLn8/z+YXKk6z/dfv87SvKB9eunr+8/+sxvvlFfev5/pnU+JF3HOxLTtXj89IOYzq97h0L6Vt5bMf3XLH/cz3fAJMnbz8j/3x8pyQfWr3Sfl983TKDK5s6DY1zWblW3/XzWl0/F+NMx/kyMH4vxfIz3xXh/jBeGVD/WxtE3fnfo5cry8f62LL/X+8nz54Ha2okKIRzosT75+YF+72fP2/Hr10rLH/BxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJGpNl8XF+cqIVx689VjT584s+/WkMOtMerN1+lCqtaaLoTHYzwV41/ENzc+eOlUMb4Z40pYCJVQaQ0PT11rlbQlhHA+7AmXQz3sunTllbcXnjxx4fjFve+8dujq2i0BAAAA2Pj+HwAA//92OQ9T") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.704425236s ago: executing program 4 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 1.620955806s ago: executing program 3 (id=924): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='h', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000000580)=""/4056, &(0x7f00000004c0)=0xfd8) 1.486817616s ago: executing program 2 (id=925): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote, 0xba}}]}, 0x190) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x4}}}}}}, 0x0) 1.399809725s ago: executing program 4 (id=926): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) preadv2(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/75, 0x4b}], 0x1, 0x61cac479, 0x7, 0x8) 1.125600045s ago: executing program 1 (id=927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) 1.073916704s ago: executing program 4 (id=928): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='[:\x00\x00', 0x0) 858.455133ms ago: executing program 2 (id=929): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x2, 0x0, 0x40000000}, 0xc) close(r0) 665.730213ms ago: executing program 4 (id=930): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000040)={&(0x7f0000000000)=""/16, 0x10}) 505.319742ms ago: executing program 0 (id=931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000100)={0x7, 0x0, [{0x2, 0x0, 0x0, 0x5}, {0x76b48f433226e54c, 0x5, 0xe, 0x0, 0xcdd, 0x2, 0x10000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0xc, 0x0, 0xa, 0x7fe}, {0x0, 0x1b5d, 0x6, 0x1, 0x7, 0x5, 0xfffffff9}, {0x0, 0x4, 0x2, 0x19, 0x5b47, 0x7, 0xe}, {0x80000001, 0xc6, 0x3, 0xc, 0x8000, 0x7, 0x8}]}) 233.006541ms ago: executing program 4 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad040000000000000002000000ff"], 0x24}}, 0x60) 39.29705ms ago: executing program 2 (id=933): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f0000000640)=ANY=[], 0x1, 0x669, &(0x7f0000001000)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000340)=""/40, 0x28) getdents(r0, 0xfffffffffffffffd, 0x58) 29.47782ms ago: executing program 0 (id=934): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xc) 0s ago: executing program 4 (id=935): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460030005180280100800800030005ac0f001100010093dd80c8cc75ddfc5f65573a6100000005000200030000000400008005003400f7000000080026006c09"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): 2.578927][ T4396] logitech 0003:046D:C295.0003: unknown main item tag 0x0 [ 162.587069][ T4396] logitech 0003:046D:C295.0003: unknown main item tag 0x0 [ 162.594371][ T4396] logitech 0003:046D:C295.0003: unknown main item tag 0x0 [ 162.604215][ T4396] logitech 0003:046D:C295.0003: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.4-1/input0 [ 162.609366][ T4299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.615674][ T4396] logitech 0003:046D:C295.0003: no inputs found [ 162.699786][ T4299] usb 1-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 162.709295][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.737909][ T4299] usb 1-1: config 0 descriptor?? [ 163.444131][ T4396] usb 5-1: USB disconnect, device number 6 [ 163.681023][ T22] usb 1-1: USB disconnect, device number 8 [ 163.937657][ T5499] loop3: detected capacity change from 0 to 1024 [ 164.001059][ T5499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.053939][ T5499] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.120335][ T26] audit: type=1800 audit(1734443620.750:18): pid=5499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 164.199328][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 164.438732][ T4295] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.324120][ T4263] Bluetooth: hci3: command 0x0405 tx timeout [ 166.545605][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.561675][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.571493][ T4295] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 166.637618][ T4295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.700893][ T4295] usb 3-1: config 0 descriptor?? [ 167.516670][ T4295] usbhid 3-1:0.0: can't add hid device: -71 [ 167.534044][ T4295] usbhid: probe of 3-1:0.0 failed with error -71 [ 167.564764][ T4295] usb 3-1: USB disconnect, device number 4 [ 167.724174][ T5529] loop0: detected capacity change from 0 to 512 [ 167.770602][ T5529] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 167.792473][ T5529] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 167.810839][ T5529] EXT4-fs (loop0): 1 truncate cleaned up [ 167.817363][ T5529] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 168.782521][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 168.829183][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 169.012755][ T5526] loop1: detected capacity change from 0 to 32768 [ 169.043313][ T5547] IPv6: syztnl0: Disabled Multicast RS [ 169.082281][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.146078][ T5526] XFS (loop1): Mounting V5 Filesystem [ 169.267405][ T5526] XFS (loop1): Ending clean mount [ 169.286202][ T22] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 169.321110][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.541274][ T4248] XFS (loop1): Unmounting Filesystem [ 169.602359][ T4393] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.743784][ T22] usb 3-1: Product: syz [ 169.748016][ T22] usb 3-1: Manufacturer: syz [ 169.753558][ T22] usb 3-1: SerialNumber: syz [ 169.772609][ T22] usb 3-1: config 0 descriptor?? [ 169.793834][ T4393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.815713][ T4393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.829228][ T4393] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 169.841129][ T4393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.871190][ T4393] usb 1-1: config 0 descriptor?? [ 169.982647][ T22] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 170.001802][ T22] asix: probe of 3-1:0.0 failed with error -71 [ 170.021940][ T22] usb 3-1: USB disconnect, device number 5 [ 170.452362][ T5565] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.461404][ T5565] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.480736][ T5565] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.496754][ T4393] hid-led: probe of 0003:27B8:01ED.0005 failed with error -71 [ 170.503093][ T5565] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.530423][ T4393] usb 1-1: USB disconnect, device number 9 [ 173.364956][ T5584] loop4: detected capacity change from 0 to 64 [ 173.392859][ T5588] loop2: detected capacity change from 0 to 8 [ 173.783474][ T5598] xt_connbytes: Forcing CT accounting to be enabled [ 173.816240][ T5598] Cannot find set identified by id 0 to match [ 175.746545][ T5622] netlink: 56 bytes leftover after parsing attributes in process `syz.1.387'. [ 175.771070][ T5622] tipc: Enabling of bearer <^dp:s> rejected, media not registered [ 176.058150][ T5628] loop1: detected capacity change from 0 to 4096 [ 176.229474][ T5628] ntfs: volume version 3.1. [ 177.409270][ T26] audit: type=1326 audit(1734443634.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 177.581200][ T26] audit: type=1326 audit(1734443634.160:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 177.621312][ T5641] loop2: detected capacity change from 0 to 4096 [ 177.850834][ T26] audit: type=1326 audit(1734443634.160:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 177.896061][ T5641] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 178.187969][ T26] audit: type=1326 audit(1734443634.160:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 178.662109][ T26] audit: type=1326 audit(1734443634.160:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 179.330561][ T26] audit: type=1326 audit(1734443634.160:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 179.419475][ T26] audit: type=1326 audit(1734443634.170:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 179.442283][ T26] audit: type=1326 audit(1734443634.170:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 179.464479][ T26] audit: type=1326 audit(1734443634.170:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 179.508711][ T26] audit: type=1326 audit(1734443634.170:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaed85d19 code=0x7fc00000 [ 179.571731][ T4299] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.445115][ T5663] loop1: detected capacity change from 0 to 1024 [ 180.531834][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 180.538707][ T4299] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 180.547215][ T4299] usb 5-1: config 150 has no interface number 0 [ 180.554123][ T4299] usb 5-1: config 150 interface 204 has no altsetting 0 [ 180.561114][ T4299] usb 5-1: config 150 interface 1 has no altsetting 0 [ 180.574115][ T5663] EXT4-fs error (device loop1): ext4_acquire_dquot:6794: comm syz.1.401: Failed to acquire dquot type 0 [ 180.583547][ T4299] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 180.601626][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.621637][ T4299] usb 5-1: Product: syz [ 180.625876][ T4299] usb 5-1: Manufacturer: syz [ 180.630504][ T4299] usb 5-1: SerialNumber: syz [ 180.645021][ T5663] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 180.666721][ T5663] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.401: corrupted inode contents [ 180.691747][ T5663] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #13: comm syz.1.401: mark_inode_dirty error [ 180.719045][ T5663] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.401: corrupted inode contents [ 180.757798][ T5663] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.401: mark_inode_dirty error [ 180.801450][ T5663] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.401: corrupted inode contents [ 180.846940][ T5663] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 180.876921][ T4299] xr_serial 5-1:150.204: xr_serial converter detected [ 180.926422][ T5663] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #13: comm syz.1.401: corrupted inode contents [ 180.978493][ T5663] EXT4-fs error (device loop1): ext4_truncate:4311: inode #13: comm syz.1.401: mark_inode_dirty error [ 181.022105][ T5663] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 181.035995][ T5663] EXT4-fs (loop1): 1 truncate cleaned up [ 181.042432][ T5663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.144214][ T5664] loop2: detected capacity change from 0 to 32768 [ 181.298362][ T5664] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 181.321701][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 181.369941][ T4299] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 181.381409][ T4299] xr_serial: probe of ttyUSB0 failed with error -71 [ 181.385153][ T4299] usb 5-1: USB disconnect, device number 7 [ 181.394383][ T4299] xr_serial 5-1:150.204: device disconnected [ 181.672395][ T4252] ocfs2: Unmounting device (7,2) on (node local) [ 182.051282][ T5680] loop3: detected capacity change from 0 to 4096 [ 182.109605][ T5680] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 182.634990][ T4261] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 182.667855][ T4261] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 182.801857][ T4261] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 183.592154][ T5706] loop3: detected capacity change from 0 to 128 [ 183.629093][ T5684] loop1: detected capacity change from 0 to 32768 [ 183.640318][ T5706] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.662487][ T5684] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.410 (5684) [ 183.675826][ T5706] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.750629][ T5684] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 183.776507][ T5684] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 183.811263][ T5684] BTRFS info (device loop1): setting nodatacow, compression disabled [ 183.866197][ T5684] BTRFS info (device loop1): setting datacow [ 183.872648][ T5684] BTRFS info (device loop1): doing ref verification [ 183.879291][ T5684] BTRFS info (device loop1): force clearing of disk cache [ 183.887882][ T5684] BTRFS info (device loop1): turning off barriers [ 183.918030][ T5684] BTRFS info (device loop1): enabling ssd optimizations [ 183.972521][ T5684] BTRFS info (device loop1): using spread ssd allocation scheme [ 184.013651][ T5684] BTRFS info (device loop1): using free space tree [ 184.050026][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 184.692528][ T5713] sctp: failed to load transform for md5: -2 [ 185.441811][ T5684] BTRFS error (device loop1): open_ctree failed [ 185.568543][ T5708] loop4: detected capacity change from 0 to 32768 [ 185.769666][ T5753] loop2: detected capacity change from 0 to 512 [ 185.788123][ T5708] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 185.893188][ T5753] __quota_error: 36 callbacks suppressed [ 185.893210][ T5753] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 185.950909][ T5753] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 185.994953][ T5753] EXT4-fs error (device loop2): ext4_acquire_dquot:6794: comm syz.2.425: Failed to acquire dquot type 1 [ 186.042684][ T5753] EXT4-fs (loop2): 1 truncate cleaned up [ 186.048621][ T5753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.052043][ T4253] ocfs2: Unmounting device (7,4) on (node local) [ 186.058300][ T5753] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.081178][ T5753] EXT4-fs (loop2): unmounting filesystem. [ 186.452983][ T4263] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 186.462185][ T4263] Bluetooth: hci3: Injecting HCI hardware error event [ 186.470976][ T4266] Bluetooth: hci3: hardware error 0x00 [ 186.504226][ T5764] loop3: detected capacity change from 0 to 512 [ 186.511375][ T5764] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.522516][ T5764] EXT4-fs: inline encryption not supported [ 186.554436][ T5764] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 186.714811][ T5764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8803e01c, mo2=0002] [ 186.745539][ T5764] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.831312][ T5764] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.429: bg 0: block 361: padding at end of block bitmap is not set [ 186.918321][ T5764] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 186.959496][ T5764] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.429: attempt to clear invalid blocks 33619980 len 1 [ 187.028114][ T5764] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.429: invalid indirect mapped block 1811939328 (level 0) [ 187.090011][ T5764] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.429: invalid indirect mapped block 2185560079 (level 1) [ 187.120725][ T5764] EXT4-fs (loop3): 1 truncate cleaned up [ 187.141652][ T5764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.205754][ T5759] loop1: detected capacity change from 0 to 32768 [ 187.238805][ T5764] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 187.502058][ T5759] JBD2: Ignoring recovery information on journal [ 188.145053][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 188.171079][ T5759] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 189.196973][ T4266] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 189.224294][ T4248] ocfs2: Unmounting device (7,1) on (node local) [ 190.418803][ T5794] loop1: detected capacity change from 0 to 512 [ 190.538569][ T5794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.572720][ T5794] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.636993][ T5794] EXT4-fs error (device loop1): ext4_get_first_dir_block:3583: inode #12: comm syz.1.433: Attempting to read directory block (0) that is past i_size (3) [ 190.653949][ T5794] EXT4-fs (loop1): Remounting filesystem read-only [ 190.731640][ T4579] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 190.764757][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 190.921641][ T4579] usb 5-1: Using ep0 maxpacket: 32 [ 190.928606][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 190.971944][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.995472][ T4579] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.044249][ T4579] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 191.055620][ T4579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.073826][ T4579] usb 5-1: config 0 descriptor?? [ 191.134143][ T5792] loop0: detected capacity change from 0 to 32768 [ 191.156002][ T5792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.435 (5792) [ 191.200411][ T5792] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.230926][ T5792] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 191.246451][ T5792] BTRFS info (device loop0): using free space tree [ 191.314314][ T5814] loop1: detected capacity change from 0 to 8 [ 191.482921][ T5792] BTRFS info (device loop0): enabling ssd optimizations [ 191.517725][ T4579] smartjoyplus 0003:0B43:0003.0006: hidraw0: USB HID vff.f7 Device [HID 0b43:0003] on usb-dummy_hcd.4-1/input0 [ 191.561995][ T4579] smartjoyplus 0003:0B43:0003.0006: no output reports found [ 191.697308][ T5804] loop2: detected capacity change from 0 to 32768 [ 191.762091][ T4483] usb 5-1: USB disconnect, device number 8 [ 191.779519][ T5804] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 191.994168][ T4252] ocfs2: Unmounting device (7,2) on (node local) [ 192.060088][ T4256] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.839493][ T4481] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 194.069033][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.082780][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.211878][ T4481] usb 3-1: Using ep0 maxpacket: 8 [ 194.254583][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.302063][ T4481] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 194.385485][ T5857] loop4: detected capacity change from 0 to 1024 [ 194.507720][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.523993][ T4481] usb 3-1: config 0 descriptor?? [ 194.535079][ T5857] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 194.557197][ T5857] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 194.578869][ T5857] EXT4-fs error (device loop4): ext4_acquire_dquot:6794: comm syz.4.453: Failed to acquire dquot type 0 [ 194.599344][ T5857] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 194.622561][ T5857] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #13: comm syz.4.453: corrupted inode contents [ 194.661585][ T5857] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #13: comm syz.4.453: mark_inode_dirty error [ 194.682822][ T5857] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #13: comm syz.4.453: corrupted inode contents [ 194.702976][ T5857] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.453: mark_inode_dirty error [ 194.719265][ T5857] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #13: comm syz.4.453: corrupted inode contents [ 194.731751][ T5857] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 194.746905][ T5857] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #13: comm syz.4.453: corrupted inode contents [ 194.765953][ T5857] EXT4-fs error (device loop4): ext4_truncate:4311: inode #13: comm syz.4.453: mark_inode_dirty error [ 194.781365][ T5857] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 194.792616][ T4334] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 194.800722][ T5857] EXT4-fs (loop4): 1 truncate cleaned up [ 194.809754][ T5857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.984372][ T5872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'. [ 195.005031][ T4481] corsair-psu 0003:1B1C:1C1E.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1c1e] on usb-dummy_hcd.2-1/input0 [ 195.024876][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 195.141992][ T4481] corsair-psu 0003:1B1C:1C1E.0007: unable to initialize device (-38) [ 195.193401][ T4481] corsair-psu: probe of 0003:1B1C:1C1E.0007 failed with error -38 [ 195.264729][ T4481] usb 3-1: USB disconnect, device number 6 [ 195.485453][ T4334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.517075][ T4334] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.543244][ T4334] usb 1-1: config 1 interface 0 has no altsetting 0 [ 195.552922][ T4334] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.563403][ T4334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.571501][ T4334] usb 1-1: Product: syz [ 195.576312][ T4334] usb 1-1: Manufacturer: syz [ 195.580947][ T4334] usb 1-1: SerialNumber: syz [ 195.826372][ T4334] cdc_ether 1-1:1.0: skipping garbage [ 195.841647][ T4334] usb 1-1: bad CDC descriptors [ 195.862685][ T4334] usb 1-1: USB disconnect, device number 10 [ 196.247129][ T4263] Bluetooth: hci1: command 0x0406 tx timeout [ 196.253265][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 198.027928][ T5888] tipc: Invalid UDP bearer configuration [ 198.027980][ T5888] tipc: Enabling of bearer rejected, failed to enable media [ 198.121253][ T5878] loop3: detected capacity change from 0 to 32768 [ 198.128726][ T5878] XFS: ikeep mount option is deprecated. [ 198.198754][ T5878] XFS (loop3): Mounting V5 Filesystem [ 198.225267][ T5876] loop4: detected capacity change from 0 to 40427 [ 198.295571][ T5876] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 198.337885][ T5876] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 198.367468][ T5878] XFS (loop3): Ending clean mount [ 198.416857][ T5878] XFS (loop3): syz.3.461 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 198.435679][ T5876] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.452400][ T4481] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 198.495446][ T5876] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 198.543358][ T5876] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 198.551048][ T5876] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.630155][ T4261] XFS (loop3): Unmounting Filesystem [ 198.671885][ T4481] usb 1-1: Using ep0 maxpacket: 32 [ 198.709453][ T4481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.741102][ T4481] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.761129][ T4481] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.779542][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.808692][ T4481] usb 1-1: config 0 descriptor?? [ 198.817531][ T4481] hub 1-1:0.0: USB hub found [ 199.021685][ T4481] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 199.233021][ T4481] usbhid 1-1:0.0: can't add hid device: -71 [ 199.241644][ T4481] usbhid: probe of 1-1:0.0 failed with error -71 [ 199.304499][ T4481] usb 1-1: USB disconnect, device number 11 [ 199.697751][ T5906] loop1: detected capacity change from 0 to 32768 [ 199.707092][ T5890] loop2: detected capacity change from 0 to 65536 [ 199.799053][ T5915] Zero length message leads to an empty skb [ 200.163415][ T5906] XFS (loop1): Mounting V5 Filesystem [ 200.375915][ T5890] XFS (loop2): Mounting V5 Filesystem [ 200.560272][ T5890] XFS (loop2): Ending clean mount [ 200.753601][ T4252] XFS (loop2): Unmounting Filesystem [ 200.851758][ T5906] XFS (loop1): Ending clean mount [ 200.936027][ T5906] XFS (loop1): Quotacheck needed: Please wait. [ 201.153542][ T5939] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 201.766144][ T5906] XFS (loop1): Quotacheck: Done. [ 201.862917][ T4248] XFS (loop1): Unmounting Filesystem [ 202.139248][ T14] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 202.321803][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 202.328876][ T14] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.381704][ T14] usb 5-1: config 0 has no interface number 0 [ 202.395724][ T14] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.425929][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.452514][ T14] usb 5-1: Product: syz [ 202.456746][ T14] usb 5-1: Manufacturer: syz [ 202.484868][ T14] usb 5-1: SerialNumber: syz [ 202.550052][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'. [ 202.980368][ T14] usb 5-1: config 0 descriptor?? [ 202.988510][ T14] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.565989][ T14] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.580287][ T14] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 203.741913][ T4398] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 203.781353][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.782293][ T4580] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 203.799239][ T127] usb 5-1: USB disconnect, device number 9 [ 203.816672][ T127] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.857550][ T127] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.895169][ T127] quatech2 5-1:0.51: device disconnected [ 203.942522][ T4398] usb 2-1: Using ep0 maxpacket: 8 [ 203.956945][ T4398] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 203.970517][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.988580][ T4398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.999714][ T4398] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 204.019661][ T4398] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 204.029453][ T4398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.041145][ T4580] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 204.059491][ T4398] usb 2-1: config 0 descriptor?? [ 204.065738][ T4580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.081577][ T4580] usb 3-1: Product: syz [ 204.085785][ T4580] usb 3-1: Manufacturer: syz [ 204.090529][ T4580] usb 3-1: SerialNumber: syz [ 204.123546][ T4580] usb 3-1: config 0 descriptor?? [ 204.433998][ T4580] usb 3-1: USB disconnect, device number 7 [ 204.487619][ T4398] kye 0003:0458:0087.0008: report_id 0 is invalid [ 204.502349][ T4398] kye 0003:0458:0087.0008: item 0 1 1 8 parsing failed [ 204.520155][ T4398] kye 0003:0458:0087.0008: parse failed [ 204.542463][ T4398] kye: probe of 0003:0458:0087.0008 failed with error -22 [ 204.712042][ T4398] usb 2-1: USB disconnect, device number 5 [ 204.876210][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.073768][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 205.098425][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.122535][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.142790][ T14] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 205.155011][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.369158][ T14] usb 5-1: config 0 descriptor?? [ 206.336906][ T14] wacom 0003:056A:00E5.0009: unbalanced collection at end of report description [ 206.383785][ T14] wacom 0003:056A:00E5.0009: parse failed [ 206.404710][ T5980] sp0: Synchronizing with TNC [ 206.421763][ T14] wacom: probe of 0003:056A:00E5.0009 failed with error -22 [ 206.452799][ T14] usb 5-1: USB disconnect, device number 10 [ 206.763933][ T4334] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 206.975206][ T4334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.008284][ T4334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 207.079182][ T4334] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 207.093225][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.108977][ T4334] usb 3-1: config 0 descriptor?? [ 207.251706][ T4398] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 207.371633][ T4481] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.391857][ T127] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.444850][ T4398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.455152][ T4398] usb 1-1: config 0 has no interfaces? [ 207.460710][ T4398] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.469835][ T4398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.487762][ T4398] usb 1-1: config 0 descriptor?? [ 207.526408][ T4334] monterey 0003:0566:3004.000A: unknown main item tag 0x6 [ 207.539146][ T4334] monterey 0003:0566:3004.000A: report_id 29495 is invalid [ 207.547670][ T4334] monterey 0003:0566:3004.000A: item 0 2 1 8 parsing failed [ 207.560423][ T4334] monterey: probe of 0003:0566:3004.000A failed with error -22 [ 207.563342][ T4481] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 207.594199][ T127] usb 2-1: config 0 has no interfaces? [ 207.603022][ T127] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 207.617657][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.630168][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.642177][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.654155][ T127] usb 2-1: config 0 descriptor?? [ 207.659222][ T4481] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 207.674766][ T4481] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 207.684056][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.694750][ T4481] usb 5-1: config 0 descriptor?? [ 207.723329][ T4334] usb 1-1: USB disconnect, device number 12 [ 207.757463][ T4580] usb 3-1: USB disconnect, device number 8 [ 207.885482][ T4393] usb 2-1: USB disconnect, device number 6 [ 208.113851][ T4481] wacom 0003:056A:0331.000B: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 208.349967][ T4393] usb 5-1: USB disconnect, device number 11 [ 208.647195][ T6001] loop0: detected capacity change from 0 to 32768 [ 208.661980][ T4334] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.688294][ T6001] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 208.772187][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.793452][ T4256] ocfs2: Unmounting device (7,0) on (node local) [ 208.854506][ T4334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.869948][ T4334] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 208.879521][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.907046][ T4334] usb 3-1: config 0 descriptor?? [ 208.964812][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 208.990741][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.015379][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.026255][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.040568][ T14] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.053831][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.068883][ T14] usb 2-1: config 0 descriptor?? [ 210.131889][ T4334] logitech 0003:046D:C293.000C: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.2-1/input0 [ 210.148770][ T14] HID 045e:07da: Invalid code 65791 type 1 [ 210.163727][ T14] HID 045e:07da: Invalid code 768 type 1 [ 210.169430][ T14] HID 045e:07da: Invalid code 769 type 1 [ 210.176856][ T4334] logitech 0003:046D:C293.000C: no inputs found [ 210.210119][ T14] HID 045e:07da: Invalid code 770 type 1 [ 210.220336][ T14] HID 045e:07da: Invalid code 771 type 1 [ 210.228978][ T14] HID 045e:07da: Invalid code 772 type 1 [ 210.239770][ T14] HID 045e:07da: Invalid code 773 type 1 [ 210.249236][ T14] HID 045e:07da: Invalid code 774 type 1 [ 210.261053][ T14] HID 045e:07da: Invalid code 775 type 1 [ 210.267677][ T14] HID 045e:07da: Invalid code 776 type 1 [ 210.333346][ T4481] usb 3-1: USB disconnect, device number 9 [ 210.442745][ T14] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000D/input/input10 [ 210.683767][ T14] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 210.726263][ T4334] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 210.982579][ T4334] usb 5-1: Using ep0 maxpacket: 16 [ 210.998540][ T4334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.275533][ T14] usb 2-1: USB disconnect, device number 7 [ 211.282720][ T4334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.298211][ T4334] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 211.309310][ T4334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.362987][ T4334] usb 5-1: config 0 descriptor?? [ 211.417436][ T4334] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 211.558423][ T6030] loop0: detected capacity change from 0 to 4096 [ 211.663125][ T6036] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.681455][ T4334] usb 5-1: USB disconnect, device number 12 [ 211.872705][ T4262] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 211.920982][ T6030] syz.0.506 (6030) used greatest stack depth: 18768 bytes left [ 211.936100][ T6039] loop3: detected capacity change from 0 to 512 [ 211.962972][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.982722][ T6039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.071802][ T4262] usb 3-1: Using ep0 maxpacket: 32 [ 212.084672][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.100130][ T4262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.117711][ T4262] usb 3-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 212.128340][ T4262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.158476][ T4262] usb 3-1: config 0 descriptor?? [ 212.173178][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 212.189273][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.193822][ T6039] EXT4-fs (loop3): 1 orphan inode deleted [ 212.206109][ T6039] EXT4-fs (loop3): 1 truncate cleaned up [ 212.212508][ T6039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 212.213296][ T14] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 212.901583][ T26] audit: type=1800 audit(1734443669.420:63): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.509" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 212.963900][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 212.975516][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17488, setting to 1024 [ 213.037157][ T14] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 213.066350][ T14] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 213.089019][ T14] usb 2-1: Manufacturer: syz [ 213.101215][ T14] usb 2-1: config 0 descriptor?? [ 213.115716][ T6032] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 213.150733][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 213.375244][ T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 213.383495][ T4262] usb 3-1: string descriptor 0 read error: -71 [ 213.391190][ T4262] uclogic 0003:5543:006E.000E: failed retrieving string descriptor #200: -71 [ 213.401426][ T4481] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.414234][ T14] usb 2-1: USB disconnect, device number 8 [ 213.420955][ T4262] uclogic 0003:5543:006E.000E: failed retrieving pen parameters: -71 [ 213.435308][ T4262] uclogic 0003:5543:006E.000E: failed probing pen v2 parameters: -71 [ 213.445197][ T4262] uclogic 0003:5543:006E.000E: failed probing parameters: -71 [ 213.453382][ T4262] uclogic: probe of 0003:5543:006E.000E failed with error -71 [ 213.510355][ T4262] usb 3-1: USB disconnect, device number 10 [ 213.581869][ T4481] usb 5-1: Using ep0 maxpacket: 8 [ 213.621434][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.650285][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.666760][ T4481] usb 5-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 213.686487][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.709320][ T4481] usb 5-1: config 0 descriptor?? [ 214.048760][ T4262] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 214.185860][ T6067] loop1: detected capacity change from 0 to 64 [ 214.235145][ T4481] wacom 0003:056A:0336.000F: ignoring exceeding usage max [ 214.253660][ T4262] usb 1-1: Using ep0 maxpacket: 16 [ 214.269079][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.275324][ T4481] wacom 0003:056A:0336.000F: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.4-1/input0 [ 215.076227][ T4481] usb 5-1: USB disconnect, device number 13 [ 215.171275][ T4262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.186005][ T4262] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 215.213188][ T4262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.260752][ T4262] usb 1-1: config 0 descriptor?? [ 215.531895][ T4580] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.686024][ T4262] chicony 0003:04F2:1421.0010: unbalanced collection at end of report description [ 215.696457][ T4262] chicony 0003:04F2:1421.0010: Chicony hid parse failed: -22 [ 215.704791][ T4262] chicony: probe of 0003:04F2:1421.0010 failed with error -22 [ 215.743377][ T4580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.755386][ T4580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.766858][ T4580] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.780149][ T4580] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.80 [ 215.789956][ T4580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.798707][ T4481] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.808349][ T4580] usb 2-1: config 0 descriptor?? [ 215.899985][ T4262] usb 1-1: USB disconnect, device number 13 [ 215.972138][ T4483] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 216.013966][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.025344][ T4481] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.035716][ T4481] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 216.046338][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.057953][ T4481] usb 3-1: config 0 descriptor?? [ 216.183677][ T4483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.196020][ T4483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.209671][ T4483] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 216.219007][ T4483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.230220][ T4483] usb 5-1: config 0 descriptor?? [ 216.239400][ T4580] acrux 0003:1A34:0802.0011: item fetching failed at offset 3/5 [ 216.252136][ T4580] acrux 0003:1A34:0802.0011: parse failed [ 216.257958][ T4580] acrux: probe of 0003:1A34:0802.0011 failed with error -22 [ 216.483731][ T4481] lg-g15 0003:046D:C222.0012: unbalanced delimiter at end of report description [ 216.490212][ T4398] usb 2-1: USB disconnect, device number 9 [ 216.516782][ T4481] lg-g15: probe of 0003:046D:C222.0012 failed with error -22 [ 216.697949][ T4262] usb 3-1: USB disconnect, device number 11 [ 216.778551][ T4483] apple 0003:05AC:024B.0013: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.4-1/input0 [ 217.487819][ T4580] usb 5-1: USB disconnect, device number 14 [ 217.755324][ T6092] netlink: 'syz.0.529': attribute type 3 has an invalid length. [ 218.062653][ T4393] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.351790][ T4393] usb 2-1: Using ep0 maxpacket: 16 [ 218.382482][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.503117][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.610351][ T4393] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 218.750239][ T4393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.854782][ T4393] usb 2-1: config 0 descriptor?? [ 218.983739][ T4580] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.214634][ T4580] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 219.241730][ T4580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.249788][ T4580] usb 1-1: Product: syz [ 219.261933][ T4580] usb 1-1: Manufacturer: syz [ 219.266600][ T4580] usb 1-1: SerialNumber: syz [ 219.280306][ T4580] usb 1-1: config 0 descriptor?? [ 219.291673][ T127] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 219.308877][ T4393] megaworld 0003:07B5:0312.0014: item fetching failed at offset 2/5 [ 219.327418][ T4393] megaworld 0003:07B5:0312.0014: parse failed [ 219.336073][ T4393] megaworld: probe of 0003:07B5:0312.0014 failed with error -22 [ 219.533640][ T4393] usb 1-1: USB disconnect, device number 14 [ 219.637769][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.922973][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.295303][ T127] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 220.339410][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.355290][ T127] usb 3-1: config 0 descriptor?? [ 220.363784][ T4580] usb 2-1: USB disconnect, device number 10 [ 220.795851][ T127] wacom 0003:056A:00F8.0015: unknown main item tag 0x0 [ 220.813654][ T127] wacom 0003:056A:00F8.0015: unknown main item tag 0x0 [ 220.820598][ T127] wacom 0003:056A:00F8.0015: unknown main item tag 0x0 [ 220.868516][ T127] wacom 0003:056A:00F8.0015: unknown main item tag 0x0 [ 220.884546][ T127] wacom 0003:056A:00F8.0015: unknown main item tag 0x0 [ 220.908506][ T127] wacom 0003:056A:00F8.0015: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.2-1/input0 [ 220.924899][ T6131] loop1: detected capacity change from 0 to 256 [ 221.019580][ T4262] usb 3-1: USB disconnect, device number 12 [ 221.371134][ T6140] loop1: detected capacity change from 0 to 4096 [ 221.492875][ T6142] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.603198][ T4579] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 221.802354][ T4579] usb 1-1: Using ep0 maxpacket: 8 [ 221.810614][ T4579] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 221.826120][ T4579] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 221.846636][ T4579] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.879034][ T4579] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.898125][ T4579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.910031][ T4579] usb 1-1: Product: syz [ 221.914751][ T4579] usb 1-1: Manufacturer: syz [ 221.919474][ T4579] usb 1-1: SerialNumber: syz [ 222.168390][ T6144] loop2: detected capacity change from 0 to 32768 [ 222.197204][ T6144] XFS (loop2): Mounting V5 Filesystem [ 222.218637][ T4580] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 222.230338][ T6144] XFS (loop2): Ending clean mount [ 222.243146][ T6144] XFS (loop2): Quotacheck needed: Please wait. [ 222.285134][ T6144] XFS (loop2): Quotacheck: Done. [ 222.357772][ T4579] usb 1-1: 0:2 : does not exist [ 222.371608][ T4252] XFS (loop2): Unmounting Filesystem [ 222.412302][ T4580] usb 2-1: Using ep0 maxpacket: 16 [ 222.421211][ T4580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.439715][ T4580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.469267][ T4580] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 222.499868][ T4580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.530379][ T4580] usb 2-1: config 0 descriptor?? [ 222.613610][ T4398] usb 1-1: USB disconnect, device number 15 [ 223.095548][ T4580] bigben 0003:146B:0902.0016: unexpected rdesc, please submit for review [ 223.438576][ T4580] bigben 0003:146B:0902.0016: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 223.691792][ T4580] bigben 0003:146B:0902.0016: missing HID_OUTPUT_REPORT 0 [ 223.730130][ T4580] bigben 0003:146B:0902.0016: no output report found [ 223.781222][ T4580] usb 2-1: USB disconnect, device number 11 [ 224.808669][ T6186] netlink: 47 bytes leftover after parsing attributes in process `syz.2.561'. [ 224.837157][ T6188] tipc: Started in network mode [ 224.852427][ T6188] tipc: Node identity ac14140f, cluster identity 4711 [ 224.886597][ T6188] tipc: Enabled bearer , priority 10 [ 224.896727][ T6190] loop4: detected capacity change from 0 to 2048 [ 224.972749][ T6190] UDF-fs: bad mount option "dmode=000Ï”00000000000000000005" or missing value [ 225.181326][ T6164] loop3: detected capacity change from 0 to 32768 [ 225.324429][ T6196] loop1: detected capacity change from 0 to 512 [ 225.334381][ T6196] EXT4-fs: Ignoring removed nobh option [ 225.358150][ T6164] XFS (loop3): Mounting V5 Filesystem [ 225.855954][ T6196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 226.087642][ T6196] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.095430][ T4398] tipc: Node number set to 2886997007 [ 226.171239][ T6196] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.1.566: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 226.211227][ T6164] XFS (loop3): Ending clean mount [ 226.268376][ T6164] XFS (loop3): Quotacheck needed: Please wait. [ 226.275771][ T6196] EXT4-fs (loop1): Remounting filesystem read-only [ 226.304711][ T6196] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 226.412834][ T6196] EXT4-fs (loop1): Remounting filesystem read-only [ 226.488444][ T6164] XFS (loop3): Quotacheck: Done. [ 226.626215][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 226.706504][ T4261] XFS (loop3): Unmounting Filesystem [ 226.932679][ T6213] loop4: detected capacity change from 0 to 8192 [ 226.981129][ T6213] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.118135][ T6193] loop0: detected capacity change from 0 to 32768 [ 227.297870][ T6193] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 227.309296][ T6193] XFS (loop0): Mounting V5 Filesystem [ 227.399675][ T6211] loop2: detected capacity change from 0 to 32768 [ 227.459625][ T6193] XFS (loop0): Ending clean mount [ 227.459695][ T6211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.567 (6211) [ 227.528544][ T6193] XFS (loop0): Quotacheck needed: Please wait. [ 227.560903][ T6211] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 227.589565][ T6211] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 227.668262][ T6211] BTRFS info (device loop2): enabling ssd optimizations [ 227.733530][ T6193] XFS (loop0): Quotacheck: Done. [ 227.735821][ T6211] BTRFS info (device loop2): using spread ssd allocation scheme [ 227.752323][ T6211] BTRFS info (device loop2): doing ref verification [ 227.812255][ T6211] BTRFS info (device loop2): force clearing of disk cache [ 227.831337][ T6211] BTRFS info (device loop2): turning off barriers [ 227.861414][ T6211] BTRFS info (device loop2): setting nodatasum [ 227.907862][ T6211] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 227.972063][ T6211] BTRFS info (device loop2): trying to use backup root at mount time [ 228.016776][ T6211] BTRFS info (device loop2): turning on flush-on-commit [ 228.043747][ T6211] BTRFS info (device loop2): using free space tree [ 228.070542][ T4256] XFS (loop0): Unmounting Filesystem [ 228.265816][ T75] BTRFS warning (device loop2): checksum verify failed on logical 5328896 mirror 1 wanted 0xac8366d3d2e6f7dc04e332773638acafeccdac9b39be662d19e98924efedf548 found 0x555d32193a914d42d389b1e05458529882ae939c31956ddeeeea0b47c00b0f4c level 0 [ 228.300205][ T6253] loop4: detected capacity change from 0 to 64 [ 228.379703][ T6211] BTRFS warning (device loop2): failed to read root (objectid=4): -5 [ 228.394549][ T6211] BTRFS warning (device loop2): try to load backup roots slot 1 [ 228.417508][ T6211] BTRFS warning (device loop2): global root 2 0 already exists [ 228.473607][ T6211] BTRFS error (device loop2): failed to load root extent [ 228.519542][ T26] audit: type=1800 audit(1734443685.150:64): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.576" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 228.522375][ T6211] BTRFS warning (device loop2): try to load backup roots slot 2 [ 228.626159][ T6226] loop3: detected capacity change from 0 to 32768 [ 228.654851][ T6211] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 228.658134][ T6255] loop1: detected capacity change from 0 to 2048 [ 228.681447][ T6211] BTRFS warning (device loop2): couldn't read tree root [ 228.693749][ T6211] BTRFS warning (device loop2): try to load backup roots slot 3 [ 228.716954][ T51] BTRFS warning (device loop2): checksum verify failed on logical 5242880 mirror 1 wanted 0x8d90b910ec13d95ec17ddbe87d1d5dca5d3dff1259e90cf51f7cd4ff39170caa found 0x8287b74276fb45cf1998ac026d264aa1b2b054c1658f116933ad9797a44d14a8 level 0 [ 228.728492][ T6255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 228.828526][ T6226] find_entry called with index = 0 [ 228.829640][ T6211] BTRFS warning (device loop2): couldn't read tree root [ 228.870349][ T6226] read_mapping_page failed! [ 228.933315][ T6226] ERROR: (device loop3): txCommit: [ 228.933315][ T6226] [ 229.024354][ T6226] ERROR: (device loop3): diFree: numfree > numinos [ 229.024354][ T6226] [ 229.235939][ T6255] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 229.245357][ T6211] BTRFS error (device loop2): open_ctree failed [ 229.331283][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 229.381779][ T4398] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 229.594755][ T4398] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 229.630307][ T4398] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 229.659452][ T4398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.683049][ T4398] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 229.822354][ T4393] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.958202][ T6272] loop2: detected capacity change from 0 to 2048 [ 230.020225][ T6275] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.022477][ T4393] usb 2-1: Using ep0 maxpacket: 16 [ 230.070373][ T4393] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.084227][ T4393] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.091160][ T6272] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x6, nchildren = 0 [ 230.100723][ T4393] usb 2-1: config 0 interface 0 has no altsetting 0 [ 230.113699][ T6272] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 230.131654][ T4481] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 230.132740][ T4393] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 230.159099][ T4393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.186229][ T4393] usb 2-1: config 0 descriptor?? [ 230.193434][ T6272] Remounting filesystem read-only [ 230.293908][ T4252] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 230.332169][ T4481] usb 5-1: Using ep0 maxpacket: 16 [ 230.338878][ T4252] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 230.349398][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.371983][ T4252] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.387407][ T4481] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.402247][ T4252] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.415263][ T4481] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.434289][ T4252] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 230.451819][ T4481] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.501638][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.542622][ T4481] usb 5-1: config 0 descriptor?? [ 230.626065][ T4393] microsoft 0003:045E:00F9.0017: item fetching failed at offset 0/2 [ 230.651121][ T4393] microsoft 0003:045E:00F9.0017: parse failed [ 230.665449][ T4393] microsoft: probe of 0003:045E:00F9.0017 failed with error -22 [ 230.776291][ T4398] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 230.908101][ T7] usb 2-1: USB disconnect, device number 12 [ 230.959458][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 230.980387][ T4398] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 230.992572][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.009048][ T4398] stv0680 1-1:4.0: last error: 86, command = 0x0 [ 231.030373][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.037906][ T4398] usb 1-1: USB disconnect, device number 16 [ 231.054828][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.092753][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.112219][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.142293][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.149780][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.169812][ T6280] loop3: detected capacity change from 0 to 32768 [ 231.178550][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.186725][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.199656][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.209809][ T6280] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.586 (6280) [ 231.225332][ T4481] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 231.234765][ T4481] microsoft 0003:045E:07DA.0018: unbalanced collection at end of report description [ 231.249621][ T4481] microsoft 0003:045E:07DA.0018: parse failed [ 231.256892][ T4481] microsoft: probe of 0003:045E:07DA.0018 failed with error -22 [ 231.275448][ T4481] usb 5-1: USB disconnect, device number 15 [ 231.311769][ T6280] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.341999][ T6280] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 231.351398][ T6280] BTRFS info (device loop3): using free space tree [ 231.431375][ T6280] BTRFS info (device loop3): enabling ssd optimizations [ 232.077280][ T4261] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.093060][ T6317] loop4: detected capacity change from 0 to 4096 [ 232.116277][ T127] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.149640][ T6317] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 232.213920][ T6323] loop1: detected capacity change from 0 to 512 [ 232.285756][ T6323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.328115][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.361888][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.384515][ T127] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 232.430482][ T6323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 232.442886][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.456380][ T127] usb 3-1: config 0 descriptor?? [ 232.462837][ T6323] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.743874][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 232.916941][ T127] wacom 0003:056A:032B.0019: unknown main item tag 0x0 [ 232.937925][ T127] wacom 0003:056A:032B.0019: unknown main item tag 0x0 [ 232.992523][ T127] wacom 0003:056A:032B.0019: hidraw0: USB HID v0.00 Device [HID 056a:032b] on usb-dummy_hcd.2-1/input0 [ 233.161416][ T127] usb 3-1: USB disconnect, device number 13 [ 233.224805][ T6337] loop1: detected capacity change from 0 to 256 [ 233.252340][ T6337] exfat: Deprecated parameter 'utf8' [ 233.272663][ T6337] exfat: Deprecated parameter 'utf8' [ 233.298101][ T6337] exfat: Deprecated parameter 'utf8' [ 233.345249][ T6337] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 233.416656][ T6321] loop0: detected capacity change from 0 to 32768 [ 233.514301][ T6321] XFS (loop0): Mounting V5 Filesystem [ 233.660017][ T6321] XFS (loop0): Ending clean mount [ 233.853411][ T4256] XFS (loop0): Unmounting Filesystem [ 233.903508][ T6355] loop1: detected capacity change from 0 to 1024 [ 234.064322][ T6339] loop4: detected capacity change from 0 to 32768 [ 234.084981][ T6339] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.604 (6339) [ 234.119114][ T6355] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 234.160737][ T6339] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 234.181843][ T6339] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 234.193483][ T6339] BTRFS info (device loop4): using free space tree [ 234.293152][ T6361] loop3: detected capacity change from 0 to 4096 [ 234.407580][ T6379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'. [ 234.435184][ T6361] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 234.508921][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 234.557438][ T6339] BTRFS info (device loop4): enabling ssd optimizations [ 235.001340][ T4253] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 235.362519][ T6391] loop0: detected capacity change from 0 to 64 [ 235.621268][ T6394] loop3: detected capacity change from 0 to 512 [ 235.630228][ T4482] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 235.701723][ T6394] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 235.748654][ T6394] UDF-fs: Scanning with blocksize 512 failed [ 235.785660][ T6394] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 235.831593][ T6394] UDF-fs: Scanning with blocksize 1024 failed [ 235.844730][ T4482] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.882096][ T4482] usb 2-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 235.901309][ T6394] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 235.921654][ T6394] UDF-fs: Scanning with blocksize 2048 failed [ 235.932266][ T4482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.955250][ T6394] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 235.980255][ T4482] usb 2-1: config 0 descriptor?? [ 236.043097][ T6394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.071128][ T6406] tipc: Started in network mode [ 236.080844][ T6406] tipc: Node identity ffffffff, cluster identity 4711 [ 236.092941][ T6406] tipc: Node number set to 4294967295 [ 236.241810][ T4579] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 236.415557][ T4482] maltron 0003:058F:9410.001A: item fetching failed at offset 5/7 [ 236.446110][ T4482] maltron: probe of 0003:058F:9410.001A failed with error -22 [ 236.463525][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.499820][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.542615][ T4579] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 236.561945][ T4579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.602488][ T4579] usb 5-1: config 0 descriptor?? [ 236.641014][ T4482] usb 2-1: USB disconnect, device number 13 [ 237.048486][ T4579] dragonrise 0003:0079:0006.001B: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 237.081605][ T4579] dragonrise 0003:0079:0006.001B: no inputs found [ 237.102381][ T4579] dragonrise 0003:0079:0006.001B: force feedback init failed [ 237.166902][ T6408] loop2: detected capacity change from 0 to 32768 [ 237.211113][ T6410] loop0: detected capacity change from 0 to 32768 [ 237.224250][ T6408] XFS (loop2): Mounting V5 Filesystem [ 237.262087][ T4579] usb 5-1: USB disconnect, device number 16 [ 237.280199][ T6408] XFS (loop2): Ending clean mount [ 237.332665][ T6410] XFS (loop0): Mounting V5 Filesystem [ 237.368201][ T4252] XFS (loop2): Unmounting Filesystem [ 237.469882][ T6412] loop3: detected capacity change from 0 to 32768 [ 237.514923][ T6412] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 237.526179][ T6412] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 237.607842][ T6410] XFS (loop0): Ending clean mount [ 237.631806][ T6412] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 237.709140][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 237.728672][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 237.936258][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 207ms [ 237.984244][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 237.991446][ T6412] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 238.031166][ T4256] XFS (loop0): Unmounting Filesystem [ 238.191070][ T41] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 238.404072][ T41] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 238.421940][ T41] usb 2-1: config 0 has no interface number 0 [ 238.430417][ T41] usb 2-1: config 0 interface 98 has no altsetting 0 [ 238.513903][ T41] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 238.541435][ T6445] device veth0_virt_wifi entered promiscuous mode [ 238.552221][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.560453][ T41] usb 2-1: Product: syz [ 238.581758][ T41] usb 2-1: Manufacturer: syz [ 238.586041][ T6445] device veth0_virt_wifi left promiscuous mode [ 238.586587][ T41] usb 2-1: SerialNumber: syz [ 238.625103][ T41] usb 2-1: config 0 descriptor?? [ 238.849127][ T6440] loop4: detected capacity change from 0 to 32768 [ 238.872913][ T41] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 238.916447][ T6440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.627 (6440) [ 238.963455][ T6440] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.002375][ T6440] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 239.041829][ T6440] BTRFS info (device loop4): metadata ratio 2 [ 239.048010][ T6440] BTRFS info (device loop4): force zlib compression, level 3 [ 239.078016][ T6440] BTRFS info (device loop4): use zlib compression, level 3 [ 239.122308][ T6440] BTRFS info (device loop4): enabling auto defrag [ 239.128982][ T6440] BTRFS info (device loop4): max_inline at 0 [ 239.143791][ T6452] loop2: detected capacity change from 0 to 1024 [ 239.161574][ T6440] BTRFS info (device loop4): using free space tree [ 239.275576][ T4916] hfsplus: b-tree write err: -5, ino 4 [ 239.381711][ T6440] BTRFS info (device loop4): enabling ssd optimizations [ 239.462184][ T6447] loop3: detected capacity change from 0 to 32768 [ 239.513169][ T6447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.630 (6447) [ 239.593898][ T6447] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.612242][ T41] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 239.652388][ T6447] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 239.685168][ T6447] BTRFS info (device loop3): using free space tree [ 239.704508][ T4253] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.824279][ T41] usb 2-1: device firmware changed [ 239.834721][ T41] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 239.843675][ T41] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 239.879199][ T41] usb 2-1: USB disconnect, device number 14 [ 240.042471][ T41] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 240.067502][ T6392] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 240.080420][ T6392] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 240.091638][ T6392] kobject_add_internal failed for firmware (error: -2 parent: 2-1) [ 240.105823][ T6392] firmware ueagle-atm!eagleII.fw: fw_load_sysfs_fallback: device_register failed [ 240.119489][ T6392] usb 2-1: [UEAGLE-ATM] firmware is not available [ 240.185761][ T6447] BTRFS info (device loop3): enabling ssd optimizations [ 240.260123][ T41] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 240.284460][ T6447] BTRFS error (device loop3): balance: invalid convert data profile raid1c4 [ 240.312260][ T41] usb 2-1: config 0 has no interface number 0 [ 240.320428][ T41] usb 2-1: config 0 interface 98 has no altsetting 0 [ 240.379289][ T41] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 240.391892][ T6449] loop0: detected capacity change from 0 to 32768 [ 240.451615][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.460305][ T41] usb 2-1: Product: syz [ 240.485543][ T41] usb 2-1: Manufacturer: syz [ 240.491478][ T41] usb 2-1: SerialNumber: syz [ 240.509290][ T4261] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.563955][ T41] usb 2-1: config 0 descriptor?? [ 240.698642][ T26] audit: type=1800 audit(1734443697.330:65): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.628" name="file0" dev="loop0" ino=7 res=0 errno=0 [ 240.902302][ T41] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 241.026287][ T4393] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 241.241711][ T4393] usb 5-1: Using ep0 maxpacket: 16 [ 241.251438][ T4393] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 241.284531][ T4393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.320524][ T4393] usb 5-1: Product: syz [ 241.345853][ T4393] usb 5-1: Manufacturer: syz [ 241.351180][ T4393] usb 5-1: SerialNumber: syz [ 241.368367][ T4393] usb 5-1: config 0 descriptor?? [ 241.380987][ T4393] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 241.414288][ T6512] loop2: detected capacity change from 0 to 4096 [ 241.480615][ T6512] NILFS (loop2): invalid segment: Checksum error in segment payload [ 241.540056][ T6512] NILFS (loop2): trying rollback from an earlier position [ 241.648944][ T6512] NILFS (loop2): recovery complete [ 241.667232][ T6518] loop1: detected capacity change from 0 to 512 [ 241.794571][ T6518] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 241.832332][ T6519] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.875686][ T41] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 241.884222][ T41] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 241.930789][ T6392] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 242.008655][ T4393] ssu100: probe of 5-1:0.0 failed with error -71 [ 242.041435][ T4393] usb 5-1: USB disconnect, device number 17 [ 242.276060][ T6392] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 242.294782][ T41] usb 2-1: USB disconnect, device number 15 [ 242.350526][ T6518] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 242.444183][ T6518] EXT4-fs (loop1): 1 truncate cleaned up [ 242.450699][ T6518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 242.732606][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 242.887061][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.650'. [ 243.111647][ T4398] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 243.312791][ T4398] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.349605][ T4398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.368089][ T4398] usb 5-1: Product: syz [ 243.387146][ T4398] usb 5-1: Manufacturer: syz [ 243.397396][ T4398] usb 5-1: SerialNumber: syz [ 243.411708][ T4393] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 243.462703][ T4398] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.514632][ T4398] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 243.614160][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.640826][ T6542] loop3: detected capacity change from 0 to 32768 [ 243.651328][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.676918][ T6542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.649 (6542) [ 243.735727][ T4393] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.760518][ T4393] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 243.770946][ T4393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.809581][ T4393] usb 2-1: config 0 descriptor?? [ 243.817870][ T6544] loop2: detected capacity change from 0 to 32768 [ 243.824001][ T6542] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.846403][ T6542] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 243.876671][ T6542] BTRFS info (device loop3): setting nodatacow, compression disabled [ 243.922989][ T6544] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 243.928815][ T6542] BTRFS info (device loop3): setting datacow [ 243.951034][ T6542] BTRFS info (device loop3): doing ref verification [ 243.971845][ T6542] BTRFS info (device loop3): force clearing of disk cache [ 243.979155][ T6542] BTRFS info (device loop3): turning off barriers [ 244.033481][ T6542] BTRFS info (device loop3): enabling ssd optimizations [ 244.051596][ T6542] BTRFS info (device loop3): using spread ssd allocation scheme [ 244.060608][ T6542] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 244.080917][ T26] audit: type=1800 audit(1734443700.710:66): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.651" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 244.134720][ T4579] usb 5-1: USB disconnect, device number 18 [ 244.162806][ T6542] BTRFS info (device loop3): force lzo compression, level 0 [ 244.172984][ T6542] BTRFS info (device loop3): using free space tree [ 244.271916][ T4252] ocfs2: Unmounting device (7,2) on (node local) [ 244.322050][ T4393] glorious 0003:258A:0036.001C: unknown main item tag 0x0 [ 244.330094][ T4393] glorious 0003:258A:0036.001C: unknown main item tag 0x0 [ 244.340279][ T4393] glorious 0003:258A:0036.001C: unknown main item tag 0x0 [ 244.352407][ T4393] glorious 0003:258A:0036.001C: unknown main item tag 0x0 [ 244.359889][ T4393] glorious 0003:258A:0036.001C: unknown main item tag 0x0 [ 244.375393][ T4393] glorious 0003:258A:0036.001C: unknown main item tag 0x0 [ 244.418666][ T4393] glorious 0003:258A:0036.001C: unknown main item tag 0x0 [ 244.438920][ T4393] glorious 0003:258A:0036.001C: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.1-1/input0 [ 244.564723][ T6542] BTRFS info (device loop3): rebuilding free space tree [ 244.572103][ T4482] usb 2-1: USB disconnect, device number 16 [ 244.771726][ T4398] usb 5-1: Service connection timeout for: 256 [ 244.799564][ T4398] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 244.860398][ T4398] ath9k_htc: Failed to initialize the device [ 244.865010][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 245.735851][ T4579] usb 5-1: ath9k_htc: USB layer deinitialized [ 245.758968][ T4261] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 245.891644][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 246.030238][ T26] audit: type=1326 audit(1734443702.670:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a785d19 code=0x7ffc0000 [ 246.060854][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'. [ 246.091819][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 246.108310][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 246.143726][ T26] audit: type=1326 audit(1734443702.720:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f927a784680 code=0x7ffc0000 [ 246.170243][ T7] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 246.191032][ T26] audit: type=1326 audit(1734443702.760:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a785d19 code=0x7ffc0000 [ 246.219885][ T7] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 246.248920][ T7] usb 3-1: Product: syz [ 246.264949][ T7] usb 3-1: Manufacturer: syz [ 246.281270][ T7] usb 3-1: SerialNumber: syz [ 246.302933][ T26] audit: type=1326 audit(1734443702.760:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.1.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927a785d19 code=0x7ffc0000 [ 246.574331][ T7] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 246.594778][ T7] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 246.614244][ T7] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 246.629091][ T7] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 246.775270][ T7] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 246.810244][ T7] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 246.876111][ T7] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 247.059704][ T7] usb 3-1: USB disconnect, device number 14 [ 247.083428][ T7] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 247.160873][ T7] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 247.190229][ T7] visor 3-1:1.0: device disconnected [ 247.515266][ T6613] loop3: detected capacity change from 0 to 128 [ 247.580432][ T6613] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 247.737855][ T6613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.762109][ T6594] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 248.562704][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 248.814000][ T6594] usb 1-1: Using ep0 maxpacket: 8 [ 248.839300][ T6594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.876841][ T6594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.939326][ T6594] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 248.971774][ T6594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.650654][ T6594] usb 1-1: config 0 descriptor?? [ 249.873994][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 250.081695][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 250.100019][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.148102][ T6594] pantherlord 0003:0810:0001.001D: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.0-1/input0 [ 250.189292][ T7] usb 3-1: config 0 has no interface number 0 [ 250.200967][ T6594] pantherlord 0003:0810:0001.001D: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 250.926536][ T6594] usb 1-1: USB disconnect, device number 17 [ 250.944310][ T7] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 250.965345][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.987909][ T7] usb 3-1: Product: syz [ 250.994532][ T7] usb 3-1: Manufacturer: syz [ 251.001099][ T7] usb 3-1: SerialNumber: syz [ 251.025957][ T7] usb 3-1: config 0 descriptor?? [ 251.050554][ T7] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 251.675273][ T7] gspca_spca1528: reg_w err -71 [ 251.704164][ T7] spca1528: probe of 3-1:0.1 failed with error -71 [ 251.742085][ T7] usb 3-1: USB disconnect, device number 15 [ 252.865822][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 252.888889][ T6690] loop1: detected capacity change from 0 to 512 [ 253.046815][ T6690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 253.121860][ T6690] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.253203][ T26] audit: type=1800 audit(1734443709.890:71): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.698" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 253.254797][ T6690] EXT4-fs (loop1): resizing filesystem from 128 to 1 blocks [ 253.274324][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.322433][ T6690] EXT4-fs warning (device loop1): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 253.466440][ T6677] loop3: detected capacity change from 0 to 32768 [ 253.520378][ T6677] JBD2: Ignoring recovery information on journal [ 253.635029][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 253.677520][ T6677] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 254.043102][ T4261] ocfs2: Unmounting device (7,3) on (node local) [ 255.495247][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.501852][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.271471][ T6773] loop1: detected capacity change from 0 to 512 [ 258.891304][ T6773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.320667][ T6773] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.129786][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 260.932417][ T6793] device sit0 entered promiscuous mode [ 260.975925][ T6793] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 261.011674][ T6793] netlink: 1 bytes leftover after parsing attributes in process `syz.0.735'. [ 261.364106][ T4580] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 262.280560][ T4580] usb 5-1: Using ep0 maxpacket: 8 [ 262.290798][ T4580] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.322872][ T4580] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.335506][ T4580] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.346995][ T4580] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.361063][ T4580] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.370847][ T4580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.430205][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 262.546480][ T6806] loop0: detected capacity change from 0 to 32768 [ 262.574170][ T6806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.739 (6806) [ 262.623316][ T4580] usb 5-1: GET_CAPABILITIES returned 0 [ 262.632630][ T4580] usbtmc 5-1:16.0: can't read capabilities [ 262.636240][ T6806] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.680755][ T6806] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 262.696611][ T6806] BTRFS info (device loop0): metadata ratio 2 [ 262.728778][ T6806] BTRFS info (device loop0): force zlib compression, level 3 [ 262.774491][ T6806] BTRFS info (device loop0): use zlib compression, level 3 [ 262.814147][ T6806] BTRFS info (device loop0): enabling auto defrag [ 262.820901][ T6806] BTRFS info (device loop0): max_inline at 0 [ 262.830596][ T6806] BTRFS info (device loop0): using free space tree [ 262.956305][ T6802] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 262.969319][ T4580] usb 5-1: USB disconnect, device number 19 [ 263.148369][ T6806] BTRFS info (device loop0): enabling ssd optimizations [ 263.450054][ T4256] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.057414][ T6829] loop1: detected capacity change from 0 to 32768 [ 264.102638][ T6829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.745 (6829) [ 264.239927][ T6829] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.278721][ T6829] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 264.349303][ T6829] BTRFS info (device loop1): using free space tree [ 264.533389][ T6860] loop4: detected capacity change from 0 to 1024 [ 264.718402][ T26] audit: type=1800 audit(1734443721.350:72): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.750" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 264.745929][ T6749] Set syz1 is full, maxelem 65536 reached [ 264.758632][ T6829] BTRFS info (device loop1): enabling ssd optimizations [ 264.878420][ T6879] ALSA: mixer_oss: invalid OSS volume 'SYN‘H' [ 265.111794][ T4248] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.173155][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 265.827917][ T6901] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 265.878076][ T6903] loop1: detected capacity change from 0 to 164 [ 266.005971][ T4400] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 266.015712][ T4397] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 266.079788][ T6905] loop4: detected capacity change from 0 to 1024 [ 266.221701][ T4400] usb 1-1: Using ep0 maxpacket: 16 [ 266.240377][ T4397] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 266.275102][ T4400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.294881][ T6905] hfsplus: keylen 65060 too large [ 266.304388][ T4397] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.351393][ T6905] hfsplus: xattr searching failed [ 266.356503][ T4400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.377114][ T4397] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.407910][ T4400] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.437600][ T4397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.467451][ T6907] sp0: Synchronizing with TNC [ 266.468644][ T4397] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.493272][ T4400] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 266.537669][ T4400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.554924][ T4397] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.577157][ T4397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.587504][ T4400] usb 1-1: config 0 descriptor?? [ 266.613384][ T4397] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.656658][ T4397] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.684431][ T4397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.734056][ T4397] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.747986][ T4397] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.762460][ T4397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.812449][ T4397] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.846431][ T4397] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.877927][ T4397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.918719][ T4397] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.942464][ T4397] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 266.992633][ T4397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.039852][ T4397] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.067661][ T4400] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 267.090223][ T4397] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.111804][ T4400] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 267.119578][ T4400] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 267.151658][ T4397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.159659][ T4400] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 267.192521][ T4400] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 267.202521][ T4397] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 267.235042][ T4400] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 267.244367][ T4397] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 267.273596][ T4400] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 267.304613][ T4397] usb 3-1: config 0 interface 0 has no altsetting 0 [ 267.307009][ T4397] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 267.307046][ T4397] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 267.307070][ T4397] usb 3-1: Product: syz [ 267.307088][ T4397] usb 3-1: Manufacturer: syz [ 267.307105][ T4397] usb 3-1: SerialNumber: syz [ 267.310040][ T4397] usb 3-1: config 0 descriptor?? [ 267.323756][ T4397] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 267.392804][ T4400] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001E/input/input21 [ 267.455611][ T4400] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 267.468787][ T4400] usb 1-1: USB disconnect, device number 18 [ 267.587201][ T4397] usb 3-1: USB disconnect, device number 16 [ 267.622452][ T4397] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 267.771150][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 268.328096][ T6921] loop1: detected capacity change from 0 to 32768 [ 268.433865][ T6921] [ 268.433865][ T6921] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.433865][ T6921] [ 269.603159][ T4248] [ 269.603159][ T4248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.603159][ T4248] [ 269.683025][ T4248] [ 269.683025][ T4248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.683025][ T4248] [ 269.686395][ T6954] netlink: 168 bytes leftover after parsing attributes in process `syz.0.780'. [ 270.174315][ T6961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.782'. [ 270.954853][ T6964] loop2: detected capacity change from 0 to 4096 [ 271.005411][ T6968] loop0: detected capacity change from 0 to 1024 [ 271.071270][ T6964] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 271.176338][ T6964] EXT4-fs (loop2): shut down requested (0) [ 271.563279][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 272.358663][ T6971] loop4: detected capacity change from 0 to 32768 [ 272.394035][ T6971] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.785 (6971) [ 272.472200][ T6971] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 272.533081][ T6971] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 272.562290][ T6971] BTRFS info (device loop4): force zlib compression, level 3 [ 272.607078][ T6971] BTRFS info (device loop4): max_inline at 4096 [ 272.658191][ T6971] BTRFS info (device loop4): using free space tree [ 272.867504][ T6971] BTRFS info (device loop4): enabling ssd optimizations [ 272.944758][ T26] audit: type=1800 audit(1734443729.580:73): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.785" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 273.094791][ T6990] loop0: detected capacity change from 0 to 32768 [ 273.171192][ T6990] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 273.280386][ T4253] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 273.427584][ T7020] loop1: detected capacity change from 0 to 32768 [ 273.454921][ T7020] XFS (loop1): Mounting V5 Filesystem [ 273.533788][ T7020] XFS (loop1): Ending clean mount [ 273.752409][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.796'. [ 273.931788][ T4256] ocfs2: Unmounting device (7,0) on (node local) [ 274.582083][ T26] audit: type=1326 audit(1734443731.210:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.2.797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa13ed85d19 code=0x0 [ 274.684994][ T4248] XFS (loop1): Unmounting Filesystem [ 274.809665][ T7040] virtio-fs: tag <(null)> not found [ 274.990068][ T7042] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 275.846773][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 276.403810][ T7083] sctp: [Deprecated]: syz.2.808 (pid 7083) Use of int in maxseg socket option. [ 276.403810][ T7083] Use struct sctp_assoc_value instead [ 276.872162][ T4482] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 277.087272][ T4482] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 277.121744][ T4482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.143813][ T4482] usb 1-1: Product: syz [ 277.149251][ T4482] usb 1-1: Manufacturer: syz [ 277.211719][ T4482] usb 1-1: SerialNumber: syz [ 277.256055][ T4482] usb 1-1: config 0 descriptor?? [ 277.574484][ T7107] loop4: detected capacity change from 0 to 8 [ 277.730005][ T7111] loop1: detected capacity change from 0 to 2048 [ 277.763257][ T7107] SQUASHFS error: Failed to read block 0x2d7: -5 [ 277.796990][ T7107] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 277.862946][ T7111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 277.881703][ T7111] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.158205][ T4482] usb 1-1: Firmware version (0.0) predates our first public release. [ 278.177368][ T4482] usb 1-1: Please update to version 0.2 or newer [ 278.213380][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 278.381823][ T4482] usb 1-1: USB disconnect, device number 19 [ 278.472505][ T4400] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 278.567720][ T7131] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 278.672749][ T7131] team0: Port device netdevsim0 added [ 278.693935][ T4400] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 278.709322][ T7133] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 278.725936][ T4400] usb 5-1: config 0 has no interface number 0 [ 278.754387][ T4400] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.827012][ T4400] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 278.860914][ T7133] team0: Port device netdevsim0 removed [ 278.878781][ T4400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.923132][ T7133] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.954127][ T4400] usb 5-1: Product: syz [ 278.958672][ T4400] usb 5-1: Manufacturer: syz [ 278.968487][ T7115] loop3: detected capacity change from 0 to 32768 [ 278.982450][ T4400] usb 5-1: SerialNumber: syz [ 278.989349][ T7115] XFS (loop3): Invalid device [./file0], error=-15 [ 279.004671][ T4400] usb 5-1: config 0 descriptor?? [ 279.028911][ T4400] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 279.168517][ T7138] loop0: detected capacity change from 0 to 2048 [ 279.281987][ T7139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.369747][ T4400] usb 5-1: USB disconnect, device number 20 [ 279.394953][ T4400] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 279.418622][ T7144] netlink: 'syz.1.825': attribute type 32 has an invalid length. [ 279.725436][ T7139] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 279.801669][ T7139] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 279.902675][ T7139] Remounting filesystem read-only [ 279.928473][ T11] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 279.956959][ T11] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 280.042356][ T11] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 280.068225][ T11] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 280.077013][ T11] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 280.123434][ T11] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 280.130780][ T11] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 280.138389][ T11] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 280.147313][ T11] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 280.156187][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.226542][ T11] NILFS (loop0): discard dirty page: offset=229376, ino=3 [ 280.279139][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.282333][ T7141] mmap: syz.3.824 (7141) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 280.317383][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.342273][ T11] NILFS (loop0): discard dirty block: blocknr=50, size=1024 [ 280.359170][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.369478][ T11] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 280.378299][ T11] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 280.406757][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.491478][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.577865][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.590701][ T11] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 280.602740][ T11] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 280.612961][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.626029][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.638322][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.798136][ T4256] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 280.840665][ T4256] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 280.854781][ T4256] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 280.882475][ T4256] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.903348][ T4256] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 280.949039][ T4256] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 281.820379][ T7183] loop3: detected capacity change from 0 to 4096 [ 282.022361][ T7184] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.242505][ T7186] loop2: detected capacity change from 0 to 2048 [ 282.347096][ T7186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 282.371716][ T7186] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.492593][ T26] audit: type=1800 audit(1734443739.130:75): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.840" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 282.689922][ T7191] loop3: detected capacity change from 0 to 32768 [ 282.770721][ T7191] XFS (loop3): Mounting V5 Filesystem [ 282.811474][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 282.977576][ T7191] XFS (loop3): Ending clean mount [ 282.986074][ T7191] XFS (loop3): Unmounting Filesystem [ 284.982557][ T4298] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 285.192696][ T4298] usb 3-1: Using ep0 maxpacket: 32 [ 285.208975][ T4298] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 285.261988][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.299345][ T4298] usb 3-1: config 0 descriptor?? [ 285.331271][ T4298] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 285.347849][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 285.394220][ T7236] device xfrm1 entered promiscuous mode [ 285.844779][ T7225] loop1: detected capacity change from 0 to 32768 [ 286.484534][ T7225] JBD2: Ignoring recovery information on journal [ 287.130596][ T7247] loop4: detected capacity change from 0 to 4096 [ 287.315906][ T7247] NILFS (loop4): invalid segment: Checksum error in segment payload [ 287.357898][ T7247] NILFS (loop4): trying rollback from an earlier position [ 287.419263][ T7247] NILFS (loop4): recovery complete [ 287.443797][ T4298] gspca_vc032x: reg_w err -71 [ 287.449298][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.464700][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.470835][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.474931][ T7225] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 287.477800][ T7255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.512118][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.518761][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.551601][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.558462][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.581937][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.584025][ T26] audit: type=1800 audit(1734443744.220:76): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.859" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 287.631617][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.642827][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.648935][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.666979][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.675683][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.683943][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.690410][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.701950][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.710230][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.729804][ T4298] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.742518][ T4298] gspca_vc032x: Unknown sensor... [ 287.748163][ T4298] vc032x: probe of 3-1:0.0 failed with error -22 [ 287.808120][ T4298] usb 3-1: USB disconnect, device number 17 [ 287.830586][ T26] audit: type=1804 audit(1734443744.460:77): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.859" name="/newroot/175/file1/bus" dev="loop4" ino=12 res=1 errno=0 [ 287.917896][ T4248] ocfs2: Unmounting device (7,1) on (node local) [ 288.189881][ T7263] loop3: detected capacity change from 0 to 2048 [ 288.333428][ T7270] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.448098][ T7270] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 288.505667][ T7270] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 288.542462][ T7270] Remounting filesystem read-only [ 288.623872][ T4261] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 288.665390][ T4261] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 288.705276][ T4261] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 288.745356][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.781589][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.812142][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 288.852406][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.882811][ T7277] bond0: option min_links: invalid value (18446744072400961536) [ 288.900488][ T4261] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 288.919708][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.938761][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 288.947123][ T7277] bond0: option min_links: allowed values 0 - 2147483647 [ 288.965788][ T4261] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 288.977167][ T7279] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.871'. [ 289.019144][ T4261] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 289.042872][ T4261] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 289.050613][ T4261] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 289.098118][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.134235][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.182914][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.229080][ T4261] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 289.235614][ T7285] loop2: detected capacity change from 0 to 128 [ 289.265097][ T4261] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 289.292120][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.315899][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.348003][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.374185][ T4261] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 289.387137][ T7285] ufs: You didn't specify the type of your ufs filesystem [ 289.387137][ T7285] [ 289.387137][ T7285] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 289.387137][ T7285] [ 289.387137][ T7285] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 289.408277][ T4261] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 289.478493][ T7285] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 289.550081][ T4261] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 289.585027][ T4261] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 289.710667][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.876'. [ 289.758187][ T4261] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 289.792382][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 290.182712][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 290.242514][ T4293] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 290.290051][ T22] usb 2-1: config 0 has no interfaces? [ 290.443872][ T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 290.474380][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.512282][ T4293] usb 3-1: Using ep0 maxpacket: 16 [ 290.528999][ T22] usb 2-1: SerialNumber: syz [ 290.539124][ T4293] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 290.613251][ T22] usb 2-1: config 0 descriptor?? [ 290.643066][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.689404][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12160, setting to 1024 [ 290.751707][ T4293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 290.778882][ T4293] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.823807][ T4293] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 290.851725][ T4293] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.854908][ T952] usb 2-1: USB disconnect, device number 17 [ 290.871620][ T4293] usb 3-1: Manufacturer: syz [ 290.909117][ T4293] usb 3-1: config 0 descriptor?? [ 290.920359][ T7305] loop3: detected capacity change from 0 to 16 [ 290.968052][ T7305] erofs: (device loop3): mounted with root inode @ nid 36. [ 291.257887][ T4293] rc_core: IR keymap rc-hauppauge not found [ 291.281789][ T4293] Registered IR keymap rc-empty [ 291.313604][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 291.375705][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 291.442289][ T4293] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 291.473866][ T4293] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 291.580198][ T7319] loop4: detected capacity change from 0 to 128 [ 291.610585][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 291.676884][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 291.763310][ T7319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 291.834616][ T7319] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 291.891455][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 291.941894][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 291.988782][ T26] audit: type=1800 audit(1734443748.620:78): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.886" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 292.025720][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 292.082622][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 292.131228][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 292.142694][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 292.167425][ T7329] loop1: detected capacity change from 0 to 2048 [ 292.189199][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 292.215515][ T7329] EXT4-fs: Ignoring removed nobh option [ 292.245086][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 292.304862][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 292.331819][ T7329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 292.358816][ T4293] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 292.365169][ T7316] loop0: detected capacity change from 0 to 32768 [ 292.378147][ T7329] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.440903][ T7316] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.884 (7316) [ 292.474576][ T4293] mceusb 3-1:0.0: Registered áž with mce emulator interface version 1c [ 292.483524][ T7335] vxcan1: tx address claim with dest, not broadcast [ 292.522521][ T7329] fs-verity: sha512 using implementation "sha512-avx2" [ 292.540854][ T4293] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 292.555741][ T7316] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 292.606349][ T4293] usb 3-1: USB disconnect, device number 18 [ 292.615620][ T7316] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 292.682761][ T7316] BTRFS info (device loop0): using free space tree [ 292.886592][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 293.005036][ T7316] BTRFS info (device loop0): enabling ssd optimizations [ 293.124686][ T7361] netem: incorrect gi model size [ 293.135516][ T7361] netem: change failed [ 293.352712][ T4256] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 293.671462][ T7373] loop4: detected capacity change from 0 to 512 [ 293.777786][ T7371] loop2: detected capacity change from 0 to 2048 [ 293.800299][ T7373] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.900: casefold flag without casefold feature [ 293.849037][ T7371] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 293.927753][ T4390] udevd[4390]: incorrect nilfs2 checksum on /dev/loop2 [ 293.937405][ T7373] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.900: couldn't read orphan inode 15 (err -117) [ 293.957424][ T7373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 293.990028][ T7381] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.046570][ T26] audit: type=1800 audit(1734443750.680:79): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.900" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 294.202813][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 294.647593][ T7390] loop0: detected capacity change from 0 to 256 [ 294.749185][ T7390] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104b5, chksum : 0x72e3a6c8, utbl_chksum : 0xe619d30d) [ 295.351801][ T4297] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 295.721637][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 295.747062][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 35, changing to 9 [ 295.872347][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 17156, setting to 1024 [ 295.937492][ T7403] loop2: detected capacity change from 0 to 128 [ 295.980453][ T4297] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 296.014766][ T4297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.023033][ T7403] CUSE: unknown device info "à40tCÓûwÃØ­¿VŸÎ‰ø÷×ûÿ`ÛýuH~ ï¾" [ 296.038916][ T4297] usb 5-1: Product: syz [ 296.057223][ T4297] usb 5-1: Manufacturer: syz [ 296.077547][ T4297] usb 5-1: SerialNumber: syz [ 296.080453][ T7403] CUSE: unknown device info "Ð)œÊ‚iÛV¹˜ˆ´~®êÞµ~wz÷3÷_ûßÞ“ÓH4l©?DºíË5NVÑ¢¹~yøèÃÑýÂ3Ë¿jÖõ±-oÝ.áÖ]—" [ 296.114385][ T4297] usb 5-1: config 0 descriptor?? [ 296.127340][ T7403] CUSE: unknown device info "½ÍпûïM;W" [ 296.156845][ T7403] CUSE: unknown device info "@çiÝSÄz‚öz²" [ 296.190457][ T7403] CUSE: DEVNAME unspecified [ 296.364595][ T4297] usbtouchscreen: probe of 5-1:0.0 failed with error -71 [ 296.418264][ T4297] usb 5-1: USB disconnect, device number 21 [ 296.550422][ T7400] loop3: detected capacity change from 0 to 32768 [ 296.630501][ T7400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.909 (7400) [ 296.689533][ T7400] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.707186][ T7400] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 296.724331][ T7400] BTRFS info (device loop3): metadata ratio 2 [ 296.753208][ T7400] BTRFS info (device loop3): metadata ratio 227 [ 296.799073][ T7400] BTRFS info (device loop3): doing ref verification [ 296.829562][ T7400] BTRFS info (device loop3): using free space tree [ 297.835146][ T7423] sctp: failed to load transform for md5: -2 [ 297.864689][ T7400] BTRFS info (device loop3): enabling ssd optimizations [ 298.753376][ T4293] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 299.093256][ T4293] usb 1-1: Using ep0 maxpacket: 16 [ 299.132223][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.213118][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.259268][ T7460] loop1: detected capacity change from 0 to 2048 [ 299.281063][ T4293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 299.385606][ T7463] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.405349][ T4293] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 299.475925][ T7465] loop4: detected capacity change from 0 to 512 [ 299.478483][ T7463] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 299.487402][ T7465] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.550011][ T7465] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 299.551613][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.584058][ T7463] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 299.588290][ T4293] usb 1-1: config 0 descriptor?? [ 299.596075][ T26] audit: type=1800 audit(1734443756.230:80): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.926" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 299.627805][ T4293] usb 1-1: can't set config #0, error -71 [ 299.641800][ T7463] Remounting filesystem read-only [ 299.649576][ T4293] usb 1-1: USB disconnect, device number 20 [ 299.720557][ T4248] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 299.740031][ T4248] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 299.746801][ T4261] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.754989][ T4248] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 299.764963][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 299.767218][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 299.786460][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 299.797716][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 299.852020][ T4248] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 299.894699][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 299.945556][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 299.978803][ T7473] kAFS: unparsable volume name [ 300.002754][ T4248] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 300.036718][ T4248] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 300.074535][ T4248] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 300.109261][ T4248] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 300.147231][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 300.239072][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 300.275628][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 300.309931][ T4248] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 300.404120][ T4248] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 300.427997][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 300.463487][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 300.489792][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 300.516211][ T4248] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 300.538136][ T4248] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 300.555530][ T4248] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 300.570693][ T4248] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 300.632159][ T4248] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 300.839391][ T26] audit: type=1326 audit(1734443757.470:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f927a77cce7 code=0x7ffc0000 [ 300.923080][ T26] audit: type=1326 audit(1734443757.510:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f927a721f29 code=0x7ffc0000 [ 301.012692][ T7493] loop2: detected capacity change from 0 to 1024 [ 301.070226][ T26] audit: type=1326 audit(1734443757.510:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f927a77cce7 code=0x7ffc0000 [ 301.275509][ T26] audit: type=1326 audit(1734443757.510:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f927a721f29 code=0x7ffc0000 [ 301.422976][ T26] audit: type=1326 audit(1734443757.510:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f927a77cce7 code=0x7ffc0000 [ 301.543622][ T26] audit: type=1326 audit(1734443757.510:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f927a721f29 code=0x7ffc0000 [ 301.645802][ T26] audit: type=1326 audit(1734443757.510:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f927a77cce7 code=0x7ffc0000 [ 301.791581][ T26] audit: type=1326 audit(1734443757.510:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f927a721f29 code=0x7ffc0000 [ 301.912154][ T26] audit: type=1326 audit(1734443757.510:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7488 comm="syz.1.927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f927a77cce7 code=0x7ffc0000 [ 302.581380][ T4248] syz-executor (4248) used greatest stack depth: 18744 bytes left [ 302.619660][ T4629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.641420][ T4629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.787821][ T4629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.803316][ T4629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.884823][ T4629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.900823][ T4629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.971104][ T4629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.987294][ T4629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 304.178854][ T4629] device hsr_slave_0 left promiscuous mode [ 304.199111][ T4629] device hsr_slave_1 left promiscuous mode [ 304.217007][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.227038][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.238558][ T4629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.248800][ T4629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.261123][ T4629] device bridge_slave_1 left promiscuous mode [ 304.276296][ T4629] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.304607][ T4629] device bridge_slave_0 left promiscuous mode [ 304.319027][ T4629] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.379929][ T4629] device veth1_macvtap left promiscuous mode [ 304.403246][ T4629] device veth0_macvtap left promiscuous mode [ 304.422319][ T4629] device veth1_vlan left promiscuous mode [ 304.429823][ T4629] device veth0_vlan left promiscuous mode [ 305.427029][ T4629] team0 (unregistering): Port device team_slave_1 removed [ 305.496949][ T4629] team0 (unregistering): Port device team_slave_0 removed [ 305.574874][ T4629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.680476][ T4629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.571825][ T4629] bond0 (unregistering): Released all slaves [ 306.694766][ T6392] ------------[ cut here ]------------ [ 306.702765][ T6392] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 306.714271][ T6392] WARNING: CPU: 1 PID: 6392 at fs/sysfs/group.c:280 sysfs_remove_group+0x179/0x2a0 [ 306.726412][ T6392] Modules linked in: [ 306.731931][ T6392] CPU: 1 PID: 6392 Comm: kworker/1:19 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 306.745237][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 306.760394][ T6392] Workqueue: events request_firmware_work_func [ 306.772121][ T6392] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 306.781082][ T6392] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 ba a3 c7 ff 49 8b 14 24 48 c7 c7 e0 75 1c 8b 4c 89 f6 e8 87 33 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 21 1a 70 ff [ 306.809755][ T6392] RSP: 0018:ffffc900039e7820 EFLAGS: 00010246 [ 306.818422][ T6392] RAX: 520c587339474b00 RBX: ffff888078638038 RCX: ffff8880258cd940 [ 306.828677][ T6392] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 306.839996][ T6392] RBP: dffffc0000000000 R08: ffffffff8152b84e R09: fffff5200073ce65 [ 306.853312][ T6392] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888078638008 [ 306.865816][ T6392] R13: 1ffffffff170459c R14: ffffffff8b822cc0 R15: ffff888058362ae0 [ 306.879144][ T6392] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 306.895537][ T6392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.903521][ T6392] CR2: 0000001b2d71aff8 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 306.912302][ T6392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 306.924516][ T6392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 306.935768][ T6392] Call Trace: [ 306.939264][ T6392] [ 306.943510][ T6392] ? __warn+0x15a/0x520 [ 306.950406][ T6392] ? sysfs_remove_group+0x179/0x2a0 [ 306.957085][ T6392] ? report_bug+0x2af/0x500 [ 306.962654][ T6392] ? sysfs_remove_group+0x179/0x2a0 [ 306.968878][ T6392] ? handle_bug+0x3d/0x70 [ 306.973930][ T6392] ? exc_invalid_op+0x16/0x40 [ 306.980042][ T6392] ? asm_exc_invalid_op+0x16/0x20 [ 306.986792][ T6392] ? __warn_printk+0x28e/0x350 [ 306.994975][ T6392] ? sysfs_remove_group+0x179/0x2a0 [ 307.001561][ T6392] ? sysfs_unmerge_group+0x108/0x130 [ 307.009139][ T6392] device_del+0x2f1/0xbd0 [ 307.014924][ T6392] ? kill_device+0x160/0x160 [ 307.021242][ T6392] ? complete_all+0x29/0x1d0 [ 307.026395][ T6392] ? __fw_load_abort+0x88/0x190 [ 307.032067][ T6392] firmware_fallback_sysfs+0x686/0x940 [ 307.040412][ T6392] _request_firmware+0xcf0/0x12b0 [ 307.048644][ T6392] ? request_firmware+0x50/0x50 [ 307.055652][ T6392] request_firmware_work_func+0x126/0x270 [ 307.064245][ T6392] ? request_firmware_nowait+0x450/0x450 [ 307.072420][ T6392] ? do_raw_spin_unlock+0x137/0x8a0 [ 307.082724][ T6392] ? process_one_work+0x7a9/0x11d0 [ 307.089555][ T6392] process_one_work+0x8a9/0x11d0 [ 307.095754][ T6392] ? worker_detach_from_pool+0x260/0x260 [ 307.101880][ T6392] ? _raw_spin_lock_irqsave+0x120/0x120 [ 307.114259][ T6392] ? kthread_data+0x4e/0xc0 [ 307.122061][ T6392] ? wq_worker_running+0x97/0x190 [ 307.129652][ T6392] worker_thread+0xa47/0x1200 [ 307.138338][ T6392] ? _raw_spin_unlock+0x40/0x40 [ 307.145111][ T6392] ? release_firmware_map_entry+0x186/0x186 [ 307.153034][ T6392] ? _raw_spin_unlock+0x40/0x40 [ 307.161180][ T6392] kthread+0x28d/0x320 [ 307.169046][ T6392] ? worker_clr_flags+0x190/0x190 [ 307.174407][ T6392] ? kthread_blkcg+0xd0/0xd0 [ 307.179760][ T6392] ret_from_fork+0x1f/0x30 [ 307.186495][ T6392] [ 307.191669][ T6392] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 307.201908][ T6392] CPU: 1 PID: 6392 Comm: kworker/1:19 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 307.216004][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 307.231157][ T6392] Workqueue: events request_firmware_work_func [ 307.241774][ T6392] Call Trace: [ 307.245567][ T6392] [ 307.248706][ T6392] dump_stack_lvl+0x1e3/0x2cb [ 307.254215][ T6392] ? nf_tcp_handle_invalid+0x642/0x642 [ 307.260074][ T6392] ? panic+0x764/0x764 [ 307.264273][ T6392] ? 0xffffffffa00038c0 [ 307.269847][ T6392] ? vscnprintf+0x59/0x80 [ 307.275794][ T6392] panic+0x318/0x764 [ 307.281319][ T6392] ? __warn+0x169/0x520 [ 307.286063][ T6392] ? memcpy_page_flushcache+0xfc/0xfc [ 307.291663][ T6392] ? ret_from_fork+0x1f/0x30 [ 307.296997][ T6392] __warn+0x348/0x520 [ 307.304127][ T6392] ? sysfs_remove_group+0x179/0x2a0 [ 307.310102][ T6392] report_bug+0x2af/0x500 [ 307.315324][ T6392] ? sysfs_remove_group+0x179/0x2a0 [ 307.322339][ T6392] handle_bug+0x3d/0x70 [ 307.328253][ T6392] exc_invalid_op+0x16/0x40 [ 307.338197][ T6392] asm_exc_invalid_op+0x16/0x20 [ 307.345372][ T6392] RIP: 0010:sysfs_remove_group+0x179/0x2a0 [ 307.356782][ T6392] Code: 8b 36 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 ba a3 c7 ff 49 8b 14 24 48 c7 c7 e0 75 1c 8b 4c 89 f6 e8 87 33 38 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 21 1a 70 ff [ 307.381991][ T6392] RSP: 0018:ffffc900039e7820 EFLAGS: 00010246 [ 307.391814][ T6392] RAX: 520c587339474b00 RBX: ffff888078638038 RCX: ffff8880258cd940 [ 307.403594][ T6392] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 307.417094][ T6392] RBP: dffffc0000000000 R08: ffffffff8152b84e R09: fffff5200073ce65 [ 307.427632][ T6392] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888078638008 [ 307.436110][ T6392] R13: 1ffffffff170459c R14: ffffffff8b822cc0 R15: ffff888058362ae0 [ 307.444740][ T6392] ? __warn_printk+0x28e/0x350 [ 307.454067][ T6392] ? sysfs_unmerge_group+0x108/0x130 [ 307.461485][ T6392] device_del+0x2f1/0xbd0 [ 307.469164][ T6392] ? kill_device+0x160/0x160 [ 307.474699][ T6392] ? complete_all+0x29/0x1d0 [ 307.481256][ T6392] ? __fw_load_abort+0x88/0x190 [ 307.490361][ T6392] firmware_fallback_sysfs+0x686/0x940 [ 307.501192][ T6392] _request_firmware+0xcf0/0x12b0 [ 307.507820][ T6392] ? request_firmware+0x50/0x50 [ 307.514529][ T6392] request_firmware_work_func+0x126/0x270 [ 307.522413][ T6392] ? request_firmware_nowait+0x450/0x450 [ 307.529217][ T6392] ? do_raw_spin_unlock+0x137/0x8a0 [ 307.536078][ T6392] ? process_one_work+0x7a9/0x11d0 [ 307.541830][ T6392] process_one_work+0x8a9/0x11d0 [ 307.547051][ T6392] ? worker_detach_from_pool+0x260/0x260 [ 307.553675][ T6392] ? _raw_spin_lock_irqsave+0x120/0x120 [ 307.559602][ T6392] ? kthread_data+0x4e/0xc0 [ 307.565493][ T6392] ? wq_worker_running+0x97/0x190 [ 307.570579][ T6392] worker_thread+0xa47/0x1200 [ 307.575455][ T6392] ? _raw_spin_unlock+0x40/0x40 [ 307.580622][ T6392] ? release_firmware_map_entry+0x186/0x186 [ 307.588450][ T6392] ? _raw_spin_unlock+0x40/0x40 [ 307.595065][ T6392] kthread+0x28d/0x320 [ 307.600077][ T6392] ? worker_clr_flags+0x190/0x190 [ 307.606727][ T6392] ? kthread_blkcg+0xd0/0xd0 [ 307.611684][ T6392] ret_from_fork+0x1f/0x30 [ 307.617501][ T6392] [ 307.623049][ T6392] Kernel Offset: disabled [ 307.627765][ T6392] Rebooting in 86400 seconds..