last executing test programs: 3m56.923114242s ago: executing program 0 (id=890): r0 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3m56.661402928s ago: executing program 0 (id=892): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x402, &(0x7f00000000c0), 0x1, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x8480) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001180)={{0xfffffffe, 0x0, 0x200000, 0x803, 'syz0\x00', 0x2}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 3m56.356095735s ago: executing program 0 (id=897): syz_open_dev$loop(&(0x7f0000000080), 0x4a5, 0x40840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00006e2000/0x4000)=nil, 0x4000) 3m56.062362994s ago: executing program 0 (id=900): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000000340)={[{@creator={'creator', 0x3d, "0448dc1a"}}, {@barrier}, {@gid}, {@uid}, {}, {@nodecompose}, {@gid}, {@type={'type', 0x3d, "0da5b329"}}, {@nobarrier}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000c00)="$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") mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 3m55.570523554s ago: executing program 0 (id=906): openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) getsockname$tipc(r0, 0x0, &(0x7f0000000080)) 3m55.02211775s ago: executing program 0 (id=910): r0 = syz_io_uring_setup(0x3866, &(0x7f0000000000)={0x0, 0xffffffff, 0x1, 0x0, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x6, 0x4004, @fd_index=0x4, 0x4001ff, 0x0, 0x0, 0x5, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x2, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 3m54.333849389s ago: executing program 32 (id=910): r0 = syz_io_uring_setup(0x3866, &(0x7f0000000000)={0x0, 0xffffffff, 0x1, 0x0, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x6, 0x4004, @fd_index=0x4, 0x4001ff, 0x0, 0x0, 0x5, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x2, 0x0, 0x4) io_uring_enter(r0, 0x2, 0x10a5, 0x3, 0x0, 0x0) 3.7862306s ago: executing program 3 (id=2541): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0xfffffff5}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x352}]}, 0x3c}}, 0x0) 3.49646875s ago: executing program 2 (id=2544): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 3.25014867s ago: executing program 2 (id=2545): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x143040, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xc4042, 0x1ff) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000000000000}) 3.035697155s ago: executing program 3 (id=2546): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 2.771587891s ago: executing program 3 (id=2548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 2.681541162s ago: executing program 1 (id=2549): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 2.539219613s ago: executing program 3 (id=2550): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TCFLSH(r0, 0x400455cb, 0x2) 1.891109s ago: executing program 4 (id=2553): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fb0f000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1.70292999s ago: executing program 4 (id=2554): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.593788078s ago: executing program 2 (id=2555): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000200)=ANY=[], 0x5, 0x62c, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) lseek(r0, 0x7fffdfff, 0x1) getdents64(r0, 0x0, 0x0) 1.540114657s ago: executing program 1 (id=2556): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00') 1.348975478s ago: executing program 2 (id=2557): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5, 0x1}]}}}}}}}, 0x0) 862.626587ms ago: executing program 1 (id=2558): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f00000003c0), 0xffffffffffffffff, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 712.943487ms ago: executing program 4 (id=2559): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 617.509597ms ago: executing program 1 (id=2560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 597.879773ms ago: executing program 4 (id=2561): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 494.544602ms ago: executing program 4 (id=2562): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 432.651899ms ago: executing program 1 (id=2563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 360.246964ms ago: executing program 2 (id=2564): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000780)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 324.007027ms ago: executing program 1 (id=2565): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2a, 0x34b, &(0x7f00000007c0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 235.403659ms ago: executing program 4 (id=2566): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f00000001c0)={0x2, 0x1, 0x3, 0x0, 0x0, 0x3, 0x2401}) 207.941052ms ago: executing program 3 (id=2567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 69.190314ms ago: executing program 2 (id=2568): setreuid(0xee01, 0x0) r0 = getuid() setreuid(0xffffffffffffffff, r0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 0s ago: executing program 3 (id=2569): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16149d21ea575b32, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 11: unknown main item tag 0x2 [ 305.133634][ T2130] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 305.163939][ T2130] hid-multitouch 0003:045E:9994.0011: unknown main item tag 0x0 [ 305.206031][ T2130] hid-multitouch 0003:045E:9994.0011: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.1-1/input0 [ 305.298988][ T2130] usb 2-1: USB disconnect, device number 18 [ 305.327730][T10241] fido_id[10241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 305.667986][ T5807] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 305.864440][ T5807] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 305.864476][ T5807] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 305.864497][ T5807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 305.864549][ T5807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 305.961730][ T5807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 305.975397][ T5807] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 305.975430][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 305.975452][ T5807] usb 4-1: Product: syz [ 305.975468][ T5807] usb 4-1: Manufacturer: syz [ 305.982319][ T5807] cdc_wdm 4-1:1.0: skipping garbage [ 305.982343][ T5807] cdc_wdm 4-1:1.0: skipping garbage [ 305.996156][ T5807] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 305.996181][ T5807] cdc_wdm 4-1:1.0: Unknown control protocol [ 306.209983][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.217040][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.223774][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.230444][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.238475][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.245241][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.253152][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.259843][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.266369][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.273025][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.279628][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.286347][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.292858][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.299527][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.305993][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.312730][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.319117][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.325770][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.332262][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 306.338921][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 306.345494][ T8] usb 4-1: USB disconnect, device number 24 [ 306.345561][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 306.996342][T10252] loop1: detected capacity change from 0 to 40427 [ 307.012752][T10252] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 307.058541][T10252] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 307.100308][T10252] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 307.146350][T10252] F2FS-fs (loop1): invalid crc value [ 307.204715][T10252] F2FS-fs (loop1): Found nat_bits in checkpoint [ 307.341775][T10252] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 307.365100][T10252] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 307.510602][ T9817] syz-executor: attempt to access beyond end of device [ 307.510602][ T9817] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 307.525687][ T9817] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 308.910258][T10322] loop3: detected capacity change from 0 to 64 [ 309.542680][T10331] loop1: detected capacity change from 0 to 1024 [ 309.608012][T10331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.707228][T10331] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.1.1634: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 309.805731][T10331] EXT4-fs error (device loop1) in ext4_delete_inline_entry:1794: Corrupt filesystem [ 309.891203][ T9817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.932698][T10329] loop3: detected capacity change from 0 to 32768 [ 309.960130][T10329] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1633 (10329) [ 310.015397][T10329] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.048108][T10329] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 310.056914][T10329] BTRFS info (device loop3): enabling auto defrag [ 310.091208][T10329] BTRFS info (device loop3): use no compression [ 310.097683][T10329] BTRFS info (device loop3): max_inline at 4096 [ 310.141942][T10329] BTRFS info (device loop3): using free space tree [ 310.162615][T10336] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1636'. [ 310.368158][T10329] BTRFS info (device loop3): enabling ssd optimizations [ 310.375251][T10329] BTRFS info (device loop3): auto enabling async discard [ 310.833665][ T5778] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.959194][ T7030] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (7030) [ 310.971351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 311.049308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 311.057822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 311.066621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 311.208309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 312.279807][T10360] loop4: detected capacity change from 0 to 40427 [ 312.371228][T10360] F2FS-fs (loop4): Image doesn't support compression [ 312.372761][T10387] loop3: detected capacity change from 0 to 32768 [ 312.432562][T10387] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 312.455665][T10360] F2FS-fs (loop4): invalid crc value [ 312.472513][T10387] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 312.492655][T10360] F2FS-fs (loop4): Found nat_bits in checkpoint [ 312.500581][T10387] (syz.3.1651,10387,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 312.509043][T10387] (syz.3.1651,10387,0):ocfs2_search_chain:1761 ERROR: status = -12 [ 312.517685][T10387] (syz.3.1651,10387,0):ocfs2_search_chain:1871 ERROR: status = -12 [ 312.525718][T10387] (syz.3.1651,10387,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -12 [ 312.534684][T10387] (syz.3.1651,10387,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12 [ 312.543326][T10387] (syz.3.1651,10387,0):__ocfs2_claim_clusters:2365 ERROR: status = -12 [ 312.551753][T10387] (syz.3.1651,10387,0):__ocfs2_claim_clusters:2373 ERROR: status = -12 [ 312.560195][T10387] (syz.3.1651,10387,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12 [ 312.569329][T10387] (syz.3.1651,10387,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -12 [ 312.578275][T10387] (syz.3.1651,10387,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12 [ 312.587747][T10387] (syz.3.1651,10387,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12 [ 312.598348][T10387] (syz.3.1651,10387,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12 [ 312.607524][T10387] (syz.3.1651,10387,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12 [ 312.618320][T10387] (syz.3.1651,10387,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12 [ 312.627732][T10387] (syz.3.1651,10387,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12 [ 312.637377][T10387] (syz.3.1651,10387,0):ocfs2_symlink:1914 ERROR: status = -12 [ 312.646645][T10387] (syz.3.1651,10387,0):ocfs2_symlink:2068 ERROR: status = -12 [ 312.824054][T10360] F2FS-fs (loop4): Start checkpoint disabled! [ 312.887034][T10360] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 312.897552][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 313.414986][T10408] loop1: detected capacity change from 0 to 1024 [ 313.498621][ T1080] kworker/u4:6: attempt to access beyond end of device [ 313.498621][ T1080] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 313.529868][T10408] hfsplus: bad catalog entry type [ 313.551599][ T1080] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 313.591285][ T1080] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 313.799328][T10417] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1664'. [ 313.998631][ T2130] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 314.210285][ T2130] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 314.235235][ T2130] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 314.256058][ T2130] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 314.266168][ T2130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.567489][T10436] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1671'. [ 314.577415][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 314.593184][T10436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1671'. [ 314.918366][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1673'. [ 315.064603][T10444] loop3: detected capacity change from 0 to 128 [ 315.124154][T10446] program syz.2.1675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.146973][T10430] loop4: detected capacity change from 0 to 32768 [ 315.177135][T10430] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 315.351622][ T2130] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 315.387321][ T5777] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 315.402343][ T2130] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input29 [ 315.472316][ T2130] input: failed to attach handler kbd to device input29, error: -5 [ 315.532363][ T2130] usb 2-1: USB disconnect, device number 19 [ 316.371097][T10474] loop4: detected capacity change from 0 to 256 [ 316.379048][T10474] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.413224][T10474] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 317.412663][T10492] loop3: detected capacity change from 0 to 4096 [ 317.552608][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.552619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.559402][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.682636][ T27] audit: type=1800 audit(1772632091.637:36): pid=10492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1696" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 317.821563][T10478] loop4: detected capacity change from 0 to 32768 [ 317.847786][T10502] loop1: detected capacity change from 0 to 1024 [ 317.893820][T10478] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.966134][T10502] hfsplus: bad catalog entry type [ 318.020136][T10478] XFS (loop4): Ending clean mount [ 318.068393][T10478] XFS (loop4): Quotacheck needed: Please wait. [ 318.076431][ T1080] hfsplus: b-tree write err: -5, ino 4 [ 318.216700][T10478] XFS (loop4): Quotacheck: Done. [ 318.353214][T10514] loop3: detected capacity change from 0 to 64 [ 318.411952][T10514] hfs: unable to locate alternate MDB [ 318.431889][T10514] hfs: continuing without an alternate MDB [ 318.533540][ T8166] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 318.842050][T10521] loop3: detected capacity change from 0 to 512 [ 318.996568][T10521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.246410][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.607016][T10538] mkiss: ax0: crc mode is auto. [ 319.698035][ T5827] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 319.795561][T10545] loop1: detected capacity change from 0 to 512 [ 319.889642][T10545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.925108][ T5827] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.943777][ T5827] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.955453][ T5827] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.965744][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.980310][T10534] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.992359][ T5827] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 320.022858][T10549] tipc: Started in network mode [ 320.058183][T10549] tipc: Node identity ac1414aa, cluster identity 4711 [ 320.066738][T10545] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 320.083298][T10549] tipc: Enabling of bearer rejected, failed to enable media [ 320.186826][T10550] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 320.359652][ T5827] usb 4-1: USB disconnect, device number 25 [ 320.425128][ T9817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.898265][ T5807] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 320.993885][T10557] loop4: detected capacity change from 0 to 32768 [ 321.022393][T10557] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 321.098273][ T5807] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 321.124367][T10557] XFS (loop4): Ending clean mount [ 321.133730][T10557] XFS (loop4): Quotacheck needed: Please wait. [ 321.138974][ T5807] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 321.185416][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.263544][ T5807] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 321.308000][T10557] XFS (loop4): Quotacheck: Done. [ 321.459170][ T8166] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 321.828053][ T2130] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 322.030472][ T2130] usb 4-1: config 0 has no interfaces? [ 322.036067][ T2130] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 322.046207][ T2130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.057368][ T2130] usb 4-1: config 0 descriptor?? [ 322.307282][ T2130] usb 4-1: USB disconnect, device number 26 [ 322.355027][ T5807] stv0680 2-1:4.0: Could not get descriptor 0200 [ 322.558083][ T5807] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 322.599170][ T5807] stv0680 2-1:4.0: last error: 2, command = 0x6 [ 322.626396][ T5807] usb 2-1: USB disconnect, device number 20 [ 322.642250][T10603] program syz.2.1735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.982288][T10609] loop4: detected capacity change from 0 to 2048 [ 323.016131][T10609] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 323.068950][T10609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.161737][ T27] audit: type=1800 audit(1772632097.117:37): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1738" name=E5 dev="loop4" ino=1367 res=0 errno=0 [ 323.907985][ T5840] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 324.118149][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 324.129718][ T5840] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 324.155413][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.168342][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 324.193781][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400 [ 324.207544][ T5840] pvrusb2: ********** [ 324.212991][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 324.229733][ T5840] pvrusb2: Important functionality might not be entirely working. [ 324.261371][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 324.294708][ T5840] pvrusb2: ********** [ 324.343085][T10651] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1758'. [ 324.376617][T10651] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1758'. [ 324.412183][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1758'. [ 324.444426][ T2319] pvrusb2: Invalid write control endpoint [ 324.457622][T10651] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1758'. [ 324.627320][ T2319] pvrusb2: Invalid write control endpoint [ 324.650518][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 324.675635][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 324.684652][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 324.716106][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 324.727812][ T2319] pvrusb2: Device being rendered inoperable [ 324.738489][T10628] pvrusb2: Attempted to execute control transfer when device not ok [ 324.758957][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 324.767021][ T7147] usb 2-1: USB disconnect, device number 21 [ 324.773270][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 324.798500][ T2319] pvrusb2: Attached sub-driver cx25840 [ 324.804052][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 324.838996][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 325.998312][ T5827] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 326.129531][T10678] loop3: detected capacity change from 0 to 32768 [ 326.203030][ T27] audit: type=1800 audit(1772632100.157:38): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1771" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 326.229293][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 326.250188][ T5827] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 326.268243][ T5827] usb 5-1: config 179 has no interface number 0 [ 326.291798][ T5827] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 326.326852][ T5827] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 326.366547][ T5827] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 326.431209][ T5827] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 326.475570][ T5827] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 326.538062][ T5827] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 326.549474][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.574073][T10683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 327.197430][ T5827] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input30 [ 327.216727][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'. [ 327.525395][ T5827] usb 5-1: USB disconnect, device number 10 [ 327.525466][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 327.525521][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 327.603199][ T5827] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 327.661624][ T3515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.956666][ T3515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.177089][ T3515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.293168][T10705] loop3: detected capacity change from 0 to 32768 [ 328.444167][ T3515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.460349][T10705] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 328.755459][T10705] XFS (loop3): Ending clean mount [ 328.829394][T10705] XFS (loop3): Quotacheck needed: Please wait. [ 329.060801][T10705] XFS (loop3): Quotacheck: Done. [ 329.124196][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.137622][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.190016][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.229031][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.239916][ T5771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 329.248379][ T5771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.695147][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.024067][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 330.716471][T10769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1806'. [ 331.398045][ T5771] Bluetooth: hci1: command tx timeout [ 331.494307][T10734] chnl_net:caif_netlink_parms(): no params data found [ 331.530240][T10789] loop4: detected capacity change from 0 to 128 [ 331.588276][T10789] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 331.612410][T10789] hpfs: filesystem error: improperly stopped [ 331.663183][T10789] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 331.686259][T10789] hpfs: You really don't want any checks? You are crazy... [ 331.730689][T10789] hpfs: hpfs_map_sector(): read error [ 331.757369][T10789] hpfs: code page support is disabled [ 331.779863][T10789] hpfs: hpfs_map_4sectors(): unaligned read [ 331.800676][T10789] hpfs: hpfs_map_4sectors(): unaligned read [ 331.806681][T10789] hpfs: filesystem error: unable to find root dir [ 332.100509][T10734] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.107829][T10734] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.115978][T10734] bridge_slave_0: entered allmulticast mode [ 332.124020][T10734] bridge_slave_0: entered promiscuous mode [ 332.360052][T10734] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.376812][T10734] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.388461][T10734] bridge_slave_1: entered allmulticast mode [ 332.396521][T10734] bridge_slave_1: entered promiscuous mode [ 332.538133][T10814] loop3: detected capacity change from 0 to 4096 [ 332.557422][T10814] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 332.751986][T10734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.812699][T10734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.436217][ T3515] hsr_slave_0: left promiscuous mode [ 333.468279][ T5771] Bluetooth: hci1: command tx timeout [ 333.484230][ T3515] hsr_slave_1: left promiscuous mode [ 333.518609][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.548272][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.578277][ T3515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.585867][ T3515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.619825][ T3515] bridge_slave_1: left allmulticast mode [ 333.625982][ T3515] bridge_slave_1: left promiscuous mode [ 333.648246][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.688537][T10838] loop4: detected capacity change from 0 to 256 [ 333.692850][ T3515] bridge_slave_0: left allmulticast mode [ 333.713729][ T3515] bridge_slave_0: left promiscuous mode [ 333.728155][ T3515] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.738195][ T5827] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 333.858413][ T3515] veth1_macvtap: left promiscuous mode [ 333.864043][ T3515] veth0_macvtap: left promiscuous mode [ 333.878604][ T3515] veth1_vlan: left promiscuous mode [ 333.884019][ T3515] veth0_vlan: left promiscuous mode [ 333.953320][ T5827] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 333.961885][ T5827] usb 4-1: config 0 has no interface number 0 [ 334.020825][ T5827] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 334.048157][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.064893][ T5827] usb 4-1: Product: syz [ 334.073200][ T5827] usb 4-1: Manufacturer: syz [ 334.081894][ T5827] usb 4-1: SerialNumber: syz [ 334.098503][ T5827] usb 4-1: config 0 descriptor?? [ 334.327008][ T5827] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 334.379002][ T5827] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 334.417336][ T5827] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 334.440394][ T5827] usb 4-1: media controller created [ 334.484781][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.623972][ T5827] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 334.715718][ T5827] usb 4-1: USB disconnect, device number 27 [ 335.534578][ T3515] team0 (unregistering): Port device team_slave_1 removed [ 335.548056][ T5771] Bluetooth: hci1: command tx timeout [ 335.650802][ T3515] team0 (unregistering): Port device team_slave_0 removed [ 335.732190][ T3515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.825253][ T3515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.394075][ T3515] bond0 (unregistering): Released all slaves [ 336.565310][T10734] team0: Port device team_slave_0 added [ 336.583837][T10844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'. [ 336.594253][T10844] tipc: Started in network mode [ 336.618282][T10844] tipc: Node identity 7, cluster identity 4711 [ 336.624537][T10844] tipc: Node number set to 7 [ 336.635726][T10846] netlink: 'syz.2.1832': attribute type 1 has an invalid length. [ 336.668835][T10846] netlink: 'syz.2.1832': attribute type 2 has an invalid length. [ 336.694978][T10734] team0: Port device team_slave_1 added [ 336.900570][T10734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.907676][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.973400][T10734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.018790][T10734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.025869][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.114699][T10734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.315306][T10734] hsr_slave_0: entered promiscuous mode [ 337.378539][T10734] hsr_slave_1: entered promiscuous mode [ 337.417977][T10734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.428644][T10734] Cannot create hsr debugfs directory [ 337.638527][ T5771] Bluetooth: hci1: command tx timeout [ 337.902717][T10880] loop4: detected capacity change from 0 to 128 [ 339.091261][T10882] loop3: detected capacity change from 0 to 32768 [ 339.212927][ T27] audit: type=1800 audit(1772632113.167:39): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1846" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 339.284117][T10882] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 339.284117][T10882] [ 339.368264][T10882] ERROR: (device loop3): remounting filesystem as read-only [ 339.412108][T10734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.452837][T10734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.492987][T10734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.537407][T10734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.749508][T10734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.806736][T10734] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.859802][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.867068][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.925576][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.932875][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.612735][T10934] loop3: detected capacity change from 0 to 2048 [ 340.666613][T10734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.678417][T10934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.790221][T10934] ext4 filesystem being mounted at /434/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 340.980942][T10734] veth0_vlan: entered promiscuous mode [ 341.020386][T10924] loop4: detected capacity change from 0 to 32768 [ 341.056270][T10734] veth1_vlan: entered promiscuous mode [ 341.153461][ T27] audit: type=1800 audit(1772632115.107:40): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1856" name="file2" dev="loop4" ino=5 res=0 errno=0 [ 341.221123][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.247555][T10734] veth0_macvtap: entered promiscuous mode [ 341.289386][T10734] veth1_macvtap: entered promiscuous mode [ 341.317029][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.327802][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.368066][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.400328][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.438047][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.477984][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.519774][T10734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.587708][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.648085][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.682162][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.713445][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.729553][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.740570][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.806983][T10734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.826227][T10734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.883649][T10734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.916281][T10734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.936861][T10734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.279415][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.297387][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.417721][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.462838][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.063784][T10980] loop1: detected capacity change from 0 to 2048 [ 343.155122][T10980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.179987][T11017] erspan0: entered promiscuous mode [ 344.552591][T11028] loop3: detected capacity change from 0 to 1024 [ 344.582926][T11028] EXT4-fs: Ignoring removed orlov option [ 344.597041][T11028] EXT4-fs: Ignoring removed nobh option [ 344.714080][T11028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.898996][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.112393][T11044] loop1: detected capacity change from 0 to 256 [ 345.732953][T11059] input: syz1 as /devices/virtual/input/input33 [ 345.884528][T11068] loop4: detected capacity change from 0 to 1024 [ 346.284599][T11076] syzkaller0: tun_chr_ioctl cmd 35111 [ 346.360485][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 346.848049][ T5810] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 346.988190][ T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 347.039107][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 347.052030][ T5810] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 347.072321][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.091746][ T5810] usb 3-1: Product: syz [ 347.096007][ T5810] usb 3-1: Manufacturer: syz [ 347.101150][ T5810] usb 3-1: SerialNumber: syz [ 347.124156][ T5810] usb 3-1: config 0 descriptor?? [ 347.133467][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 347.144730][ T5810] gspca_main: se401-2.14.0 probing 047d:5003 [ 347.198307][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 347.209217][ T23] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.233703][ T23] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.244084][ T23] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 347.273639][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 347.280785][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 347.291796][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.336343][ T23] usb 2-1: config 0 descriptor?? [ 347.406970][T11109] netlink: 'syz.4.1913': attribute type 21 has an invalid length. [ 347.561305][ T5810] gspca_se401: Frame size: 0x0 1/16th janggu [ 347.567496][ T5810] gspca_se401: Frame size: 0x0 1/16th janggu [ 347.573812][ T5810] gspca_se401: Frame size: 0x0 1/16th janggu [ 347.598954][T11113] loop3: detected capacity change from 0 to 512 [ 347.624071][T11113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 347.672917][T11113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.686101][T11113] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.789542][ T5810] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 347.800177][ T23] hid (null): unknown global tag 0x50 [ 347.805733][ T23] hid (null): unknown global tag 0xc [ 347.812554][ T23] hid (null): report_id 0 is invalid [ 347.903848][ T5810] usb 3-1: USB disconnect, device number 24 [ 347.961753][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.106182][ T2130] usb 2-1: USB disconnect, device number 22 [ 348.568277][ T963] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 348.720204][T11127] loop3: detected capacity change from 0 to 32768 [ 348.735950][T11136] loop1: detected capacity change from 0 to 1024 [ 348.758470][ T963] usb 5-1: Using ep0 maxpacket: 32 [ 348.774896][T11127] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 348.789258][T11136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 348.811165][T11127] JBD2: Ignoring recovery information on journal [ 348.824536][ T963] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 348.859642][ T963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.872096][T11136] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.883035][ T963] usb 5-1: Product: syz [ 348.887281][ T963] usb 5-1: Manufacturer: syz [ 348.896749][T11127] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 348.906292][ T963] usb 5-1: SerialNumber: syz [ 348.932160][ T963] usb 5-1: config 0 descriptor?? [ 348.947688][ T27] audit: type=1800 audit(1772632122.897:41): pid=11136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1923" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 348.978289][T11136] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm syz.1.1923: lblock 0 mapped to illegal pblock 0 (length 1) [ 349.034040][T11136] EXT4-fs (loop1): Remounting filesystem read-only [ 349.127000][T10734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.203789][ T963] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 011 [ 349.454025][T11129] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read) [ 349.465346][ T963] usb 5-1: USB disconnect, device number 11 [ 349.560052][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 349.688189][ T5810] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 349.891893][ T5810] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 349.913065][ T5810] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 349.930809][ T5810] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 349.941509][ T5810] usb 2-1: config 220 has no interface number 2 [ 349.957232][ T5810] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 349.970704][ T5810] usb 2-1: config 220 interface 0 has no altsetting 0 [ 349.977582][ T5810] usb 2-1: config 220 interface 76 has no altsetting 0 [ 349.985130][ T5810] usb 2-1: config 220 interface 1 has no altsetting 0 [ 349.997566][ T5810] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 350.008081][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 350.018851][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.026972][ T5810] usb 2-1: Product: syz [ 350.035896][ T5810] usb 2-1: Manufacturer: syz [ 350.042070][ T5810] usb 2-1: SerialNumber: syz [ 350.085630][T11153] loop3: detected capacity change from 0 to 4096 [ 350.181616][T11153] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 350.199308][T11153] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 350.227934][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 350.249614][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.280187][ T5810] uvcvideo 2-1:220.1: Unknown video format 047d4302-0000-0000-0000-00a5e2000004 [ 350.280801][ T23] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 350.313305][ T5810] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 350.329097][ T27] audit: type=1800 audit(1772632124.267:42): pid=11153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1929" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 350.333601][ T5810] usb 2-1: No valid video chain found. [ 350.356532][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.363606][ T23] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 350.376712][T11157] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 350.398354][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.415828][ T23] usb 3-1: Product: syz [ 350.417243][ T5810] usb 2-1: selecting invalid altsetting 0 [ 350.444230][ T5810] usb 2-1: selecting invalid altsetting 0 [ 350.454694][ T5810] usbtest: probe of 2-1:220.1 failed with error -22 [ 350.463711][ T23] usb 3-1: Manufacturer: syz [ 350.473939][ T23] usb 3-1: SerialNumber: syz [ 350.486809][ T23] usb 3-1: config 0 descriptor?? [ 350.497617][ T5810] usb 2-1: USB disconnect, device number 23 [ 350.534950][ T3515] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 350.543750][ T5778] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 350.557257][ T5778] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 350.568010][ T5778] ntfs3: loop3: ino=3, ntfs_set_state failed, -22. [ 350.587759][ T2913] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22. [ 350.688148][ T7147] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 350.880594][ T7147] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.891651][ T7147] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.902990][ T7147] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 350.912698][ T7147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.921114][ T7147] usb 5-1: SerialNumber: syz [ 350.932236][ T23] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 350.944425][T11165] vivid-000: disconnect [ 350.956933][T11163] vivid-000: reconnect [ 351.199390][ T7147] usb 5-1: 0:2 : does not exist [ 351.265941][ T7147] usb 5-1: USB disconnect, device number 12 [ 351.340382][ T7030] udevd[7030]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.422588][ T23] usb 3-1: USB disconnect, device number 25 [ 352.474771][T11203] program syz.4.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.812776][T11182] loop3: detected capacity change from 0 to 32768 [ 352.894976][T11182] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 352.894976][T11182] [ 352.974785][T11182] ERROR: (device loop3): remounting filesystem as read-only [ 353.008106][ T7147] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 353.015925][T11182] xtLookup: xtSearch returned -5 [ 353.048691][T11182] add_index: get/read_metapage failed! [ 353.054257][T11182] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 353.054257][T11182] [ 353.105452][T11182] xtLookup: xtSearch returned -5 [ 353.108429][T11216] program syz.2.1949 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.121240][T11182] free_index: error reading directory table [ 353.147773][T11182] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 353.147773][T11182] [ 353.171743][T11182] xtLookup: xtSearch returned -5 [ 353.176820][T11182] free_index: error reading directory table [ 353.205399][T11182] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 353.205399][T11182] [ 353.239534][ T7147] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.258720][T11182] xtLookup: xtSearch returned -5 [ 353.263815][T11182] free_index: error reading directory table [ 353.279001][ T7147] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 353.288327][T11182] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 353.288327][T11182] [ 353.326572][ T7147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.331216][T11182] xtLookup: xtSearch returned -5 [ 353.347988][T11182] free_index: error reading directory table [ 353.353973][T11182] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 353.353973][T11182] [ 353.397923][ T7147] usb 5-1: config 0 descriptor?? [ 353.407363][T11182] xtLookup: xtSearch returned -5 [ 353.412473][T11182] free_index: error reading directory table [ 353.429309][ T7147] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 353.479427][T11182] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 353.479427][T11182] [ 353.540477][T11182] xtLookup: xtSearch returned -5 [ 353.563060][T11182] add_index: get/read_metapage failed! [ 353.670319][T11208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.697122][T11208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.735096][ T23] usb 5-1: USB disconnect, device number 13 [ 353.759775][T11224] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 353.787407][T11227] loop1: detected capacity change from 0 to 1024 [ 354.000173][T11227] hfsplus: invalid xattr key length: 0 [ 354.144773][ T48] hfsplus: b-tree write err: -5, ino 8 [ 354.278259][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 354.486093][ T23] usb 5-1: config index 0 descriptor too short (expected 89, got 36) [ 354.496893][T11238] loop1: detected capacity change from 0 to 2048 [ 354.511595][ T23] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 354.535098][T11238] EXT4-fs: Ignoring removed oldalloc option [ 354.541523][ T23] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 354.568404][ T23] usb 5-1: config 4 has no interface number 0 [ 354.591144][ T23] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=8e.6e [ 354.609080][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.636121][ T23] usb 5-1: Product: syz [ 354.642029][T11238] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 354.660794][ T23] usb 5-1: Manufacturer: syz [ 354.665479][ T23] usb 5-1: SerialNumber: syz [ 354.708328][T11238] System zones: 0-7 [ 354.727439][T11238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.847474][T11238] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.1957: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 354.920068][T11238] EXT4-fs (loop1): Remounting filesystem read-only [ 354.955319][ T23] usbhid 5-1:4.147: couldn't find an input interrupt endpoint [ 354.974535][ T23] usb 5-1: USB disconnect, device number 14 [ 355.060330][T10734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.488491][ T963] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 355.687443][ T963] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 355.705815][ T963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.724411][ T963] usb 4-1: Product: syz [ 355.737936][ T963] usb 4-1: Manufacturer: syz [ 355.748476][ T963] usb 4-1: SerialNumber: syz [ 355.867476][T11265] netlink: 'syz.4.1968': attribute type 64 has an invalid length. [ 355.881936][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1968'. [ 356.011828][ T963] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 356.063521][ T963] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 356.289223][ T963] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71 [ 356.322909][ T963] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 356.351742][ T963] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 356.363117][T11259] loop1: detected capacity change from 0 to 32768 [ 356.378529][ T963] lan78xx: probe of 4-1:1.0 failed with error -71 [ 356.415742][T11259] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 356.433672][ T963] usb 4-1: USB disconnect, device number 28 [ 356.552564][T11259] XFS (loop1): Ending clean mount [ 356.697716][T10734] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 357.966890][T11285] loop3: detected capacity change from 0 to 32768 [ 358.031964][T11285] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 358.262460][T11285] (syz.3.1973,11285,1):ocfs2_double_lock:1190 ERROR: status = -2 [ 358.292981][T11285] (syz.3.1973,11285,0):ocfs2_rename:1299 ERROR: status = -2 [ 358.321462][T11285] (syz.3.1973,11285,0):ocfs2_rename:1690 ERROR: status = -2 [ 358.526584][T11308] input: syz0 as /devices/virtual/input/input35 [ 358.630250][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 360.058108][ T23] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 360.238265][T11348] loop1: detected capacity change from 0 to 256 [ 360.250362][T11348] exfat: Deprecated parameter 'namecase' [ 360.258232][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 360.266676][T11348] exfat: Deprecated parameter 'namecase' [ 360.275554][ T23] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 360.297890][ T23] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 360.314022][T11348] exfat: Deprecated parameter 'utf8' [ 360.330423][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.354987][ T23] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 360.374769][T11348] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 360.391696][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.418009][ T23] usb 4-1: Product: syz [ 360.424694][ T23] usb 4-1: Manufacturer: syz [ 360.452866][ T23] usb 4-1: SerialNumber: syz [ 360.488871][ T23] usb 4-1: config 0 descriptor?? [ 360.585178][T11334] loop4: detected capacity change from 0 to 32768 [ 360.852276][T11334] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.053959][T11334] XFS (loop4): Ending clean mount [ 361.083016][ T23] gs_usb 4-1:0.0: Configuring for 159 interfaces [ 361.123658][T11334] XFS (loop4): Quotacheck needed: Please wait. [ 361.344047][T11334] XFS (loop4): Quotacheck: Done. [ 361.510737][ T23] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 361.686916][ T8166] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.779657][ T23] gs_usb: probe of 4-1:0.0 failed with error -71 [ 361.857606][ T23] usb 4-1: USB disconnect, device number 29 [ 361.922435][T11354] loop1: detected capacity change from 0 to 131072 [ 361.950631][T11354] F2FS-fs (loop1): Test dummy encryption mode enabled [ 361.964168][T11354] F2FS-fs (loop1): invalid crc value [ 361.992160][T11354] F2FS-fs (loop1): Found nat_bits in checkpoint [ 362.062736][T11354] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 362.272081][T11354] fscrypt (loop1, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 362.500247][T11374] 9p: Unknown access argument 18446744073709551615: -34 [ 363.078230][ T5810] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 363.278076][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 363.302401][ T5810] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 363.343286][ T5810] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 363.418396][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 363.454457][ T5810] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 363.476986][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.493277][ T5810] usb 2-1: Product: syz [ 363.527672][ T5810] usb 2-1: Manufacturer: syz [ 363.546576][ T5810] usb 2-1: SerialNumber: syz [ 363.579416][ T5810] usb 2-1: config 0 descriptor?? [ 363.845909][T11392] loop4: detected capacity change from 0 to 256 [ 363.916335][T11392] FAT-fs (loop4): Directory bread(block 64) failed [ 363.931768][T11392] FAT-fs (loop4): Directory bread(block 65) failed [ 363.954790][T11392] FAT-fs (loop4): Directory bread(block 66) failed [ 363.971316][T11392] FAT-fs (loop4): Directory bread(block 67) failed [ 363.988496][T11392] FAT-fs (loop4): Directory bread(block 68) failed [ 363.999643][ T5810] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 364.007725][T11392] FAT-fs (loop4): Directory bread(block 69) failed [ 364.022440][T11392] FAT-fs (loop4): Directory bread(block 70) failed [ 364.036913][T11392] FAT-fs (loop4): Directory bread(block 71) failed [ 364.054120][T11392] FAT-fs (loop4): Directory bread(block 72) failed [ 364.069588][T11392] FAT-fs (loop4): Directory bread(block 73) failed [ 364.470389][ T23] usb 2-1: USB disconnect, device number 24 [ 364.678992][T11401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2011'. [ 366.559893][T11450] sp0: Synchronizing with TNC [ 366.617649][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2026'. [ 366.998013][T11462] ªªªªªª: renamed from vlan0 (while UP) [ 367.128093][T11467] input: syz1 as /devices/virtual/input/input36 [ 367.598151][ T7147] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 367.808046][ T7147] usb 3-1: Using ep0 maxpacket: 8 [ 367.820411][ T7147] usb 3-1: unable to get BOS descriptor or descriptor too short [ 367.839776][ T7147] usb 3-1: config 4 interface 0 has no altsetting 0 [ 367.863530][ T7147] usb 3-1: string descriptor 0 read error: -22 [ 367.870488][T11489] loop1: detected capacity change from 0 to 8 [ 367.892159][ T7147] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 367.917939][ T7147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.937178][T11489] SQUASHFS error: Unable to read directory block [629:fe] [ 367.988891][ T7147] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 368.027717][ T7147] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 368.057774][ T7147] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 368.083061][ T7147] usb 3-1: media controller created [ 368.181280][ T7147] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.433023][ T7147] zl10353_read_register: readreg error (reg=127, ret==0) [ 368.567167][ T7147] usb 3-1: USB disconnect, device number 26 [ 368.593353][T11504] syz_tun: entered allmulticast mode [ 368.616205][T11503] syz_tun: left allmulticast mode [ 369.704246][T11523] loop1: detected capacity change from 0 to 256 [ 369.718701][T11521] loop4: detected capacity change from 0 to 1024 [ 369.779007][T11521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 369.795505][T11521] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.860130][T11523] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 369.876692][T11521] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.2054: bg 0: block 112: padding at end of block bitmap is not set [ 369.985332][T11521] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 117 [ 370.028173][T11521] EXT4-fs (loop4): This should not happen!! Data will be lost [ 370.028173][T11521] [ 370.218768][ T8166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 370.523542][T11542] bond0: Device is already in use. [ 370.876833][T11552] loop1: detected capacity change from 0 to 1024 [ 371.050202][ T3515] hfsplus: b-tree write err: -5, ino 4 [ 372.144741][T11579] netlink: 'syz.3.2079': attribute type 2 has an invalid length. [ 372.158308][T11579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2079'. [ 372.366565][T11586] loop3: detected capacity change from 0 to 64 [ 372.638122][ T2130] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 372.838772][ T2130] usb 3-1: Using ep0 maxpacket: 16 [ 372.850146][ T2130] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 372.859819][T11597] loop4: detected capacity change from 0 to 1024 [ 372.872277][ T2130] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 372.891940][ T2130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.914862][ T2130] usb 3-1: Product: syz [ 372.919716][ T2130] usb 3-1: Manufacturer: syz [ 372.929618][ T2130] usb 3-1: SerialNumber: syz [ 372.956219][ T2130] usb 3-1: config 0 descriptor?? [ 372.972540][ T2130] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 373.001582][T11595] loop1: detected capacity change from 0 to 8192 [ 373.013937][ T2130] usb 3-1: Detected FT232R [ 373.034163][T11595] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 373.067629][T11595] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 373.090643][T11595] REISERFS (device loop1): using ordered data mode [ 373.097341][T11595] reiserfs: using flush barriers [ 373.112940][T11595] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 373.140340][T11595] REISERFS (device loop1): checking transaction log (loop1) [ 373.220690][ T2130] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 373.386610][ T1080] hfsplus: request for non-existent node 33554434 in B*Tree [ 373.417899][ T1080] hfsplus: request for non-existent node 33554434 in B*Tree [ 373.456408][T11595] REISERFS (device loop1): Using tea hash to sort names [ 373.488596][ T2130] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 373.491903][T11595] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 373.557756][T11595] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 373.707729][ T963] usb 3-1: USB disconnect, device number 27 [ 373.745285][ T963] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 373.769272][ T963] ftdi_sio 3-1:0.0: device disconnected [ 374.216009][T11615] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2095'. [ 374.399371][T11619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2097'. [ 374.467243][T11617] loop1: detected capacity change from 0 to 8192 [ 374.511233][T11617] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 374.598126][T11617] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 374.607483][T11617] REISERFS (device loop1): using ordered data mode [ 374.699943][T11617] reiserfs: using flush barriers [ 374.714779][T11617] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 374.748899][T11617] REISERFS (device loop1): checking transaction log (loop1) [ 375.052366][T11617] REISERFS (device loop1): Using tea hash to sort names [ 375.075786][T11617] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 375.108796][T11617] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 375.178990][T11617] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 375.203530][T11617] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 375.551966][ T963] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 375.590211][ T963] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.016756][T11659] loop3: detected capacity change from 0 to 256 [ 376.090321][T11659] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 376.720589][T11653] loop4: detected capacity change from 0 to 40427 [ 376.731476][T11653] F2FS-fs (loop4): invalid crc value [ 376.751388][T11653] F2FS-fs (loop4): Found nat_bits in checkpoint [ 376.841446][T11653] F2FS-fs (loop4): Start checkpoint disabled! [ 376.873839][T11653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 376.888032][ T2130] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 376.920165][T11678] loop1: detected capacity change from 0 to 16 [ 376.957693][T11678] erofs: (device loop1): mounted with root inode @ nid 36. [ 377.077928][ T2130] usb 4-1: Using ep0 maxpacket: 32 [ 377.103794][ T2130] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 377.113801][ T2130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.125731][ T2130] usb 4-1: config 0 descriptor?? [ 377.135029][ T2130] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 377.666693][ T3515] kworker/u4:12: attempt to access beyond end of device [ 377.666693][ T3515] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 377.695998][ T3515] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 377.711275][ T3515] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 378.159931][ T2130] gspca_vc032x: reg_w err -71 [ 378.177899][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.183294][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.208931][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.214308][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.240091][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.245480][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.278885][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.298166][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.303549][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.338405][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.362380][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.367758][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.403702][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.418078][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.427888][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.433271][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.457905][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.458627][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 378.463251][ T2130] gspca_vc032x: I2c Bus Busy Wait 00 [ 378.509024][ T2130] gspca_vc032x: Unknown sensor... [ 378.514226][ T2130] vc032x: probe of 4-1:0.0 failed with error -22 [ 378.572944][ T2130] usb 4-1: USB disconnect, device number 30 [ 379.003930][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.017976][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.054665][T11735] loop1: detected capacity change from 0 to 4096 [ 380.636852][T11728] loop4: detected capacity change from 0 to 32768 [ 380.770201][T11728] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 380.866412][T11728] XFS (loop4): Ending clean mount [ 381.238776][ T8166] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 381.362345][T11767] loop1: detected capacity change from 0 to 256 [ 381.935558][T11775] veth0: entered promiscuous mode [ 381.952431][T11775] veth0: left promiscuous mode [ 382.134375][T11762] loop3: detected capacity change from 0 to 32768 [ 382.175124][T11762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2153 (11762) [ 382.227993][T11762] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 382.249270][T11762] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 382.274136][T11762] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 382.275337][T11785] loop1: detected capacity change from 0 to 256 [ 382.286030][T11762] BTRFS info (device loop3): trying to use backup root at mount time [ 382.301127][T11762] BTRFS info (device loop3): setting nodatasum [ 382.307424][T11762] BTRFS info (device loop3): enabling ssd optimizations [ 382.379598][T11785] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 382.394577][T11762] BTRFS info (device loop3): using spread ssd allocation scheme [ 382.411340][T11762] BTRFS info (device loop3): turning on flush-on-commit [ 382.441660][T11762] BTRFS info (device loop3): force zlib compression, level 3 [ 382.478080][T11762] BTRFS info (device loop3): using free space tree [ 382.557652][T11787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.867979][ T27] audit: type=1804 audit(1772632156.797:43): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2153" name="/newroot/525/file1/file1" dev="loop3" ino=260 res=1 errno=0 [ 382.889816][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.009476][T11799] loop4: detected capacity change from 0 to 32768 [ 383.014735][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 383.050194][T11799] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 383.058529][T11799] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 383.215381][T11799] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 383.227699][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 383.238640][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 383.351666][T11810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2169'. [ 383.380832][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 142ms [ 383.438442][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 383.443771][T11799] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 384.116339][ T2130] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 384.351789][ T2130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.363165][ T2130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.387977][ T2130] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 384.397104][ T2130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.421280][ T2130] usb 4-1: config 0 descriptor?? [ 384.867348][ T2130] lg-g15 0003:046D:0A07.0014: unknown main item tag 0x1 [ 384.905513][ T2130] lg-g15 0003:046D:0A07.0014: item fetching failed at offset 2/5 [ 384.948442][ T2130] lg-g15: probe of 0003:046D:0A07.0014 failed with error -22 [ 385.127205][ T2130] usb 4-1: USB disconnect, device number 31 [ 385.750300][ T2130] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 385.958039][ T2130] usb 5-1: Using ep0 maxpacket: 32 [ 385.982317][ T2130] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.003827][ T2130] usb 5-1: config 0 has no interface number 0 [ 386.021729][ T2130] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 386.054216][ T2130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.079828][ T2130] usb 5-1: Product: syz [ 386.084079][ T2130] usb 5-1: Manufacturer: syz [ 386.108243][ T2130] usb 5-1: SerialNumber: syz [ 386.129762][ T2130] usb 5-1: config 0 descriptor?? [ 386.136132][T11854] loop3: detected capacity change from 0 to 256 [ 386.159912][T11854] exfat: Deprecated parameter 'utf8' [ 386.168778][ T2130] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 386.177647][ T2130] usb 5-1: selecting invalid altsetting 1 [ 386.189755][T11854] exfat: Deprecated parameter 'namecase' [ 386.218028][ T2130] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 386.239030][T11854] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 386.245436][ T2130] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 386.293432][ T2130] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 386.315065][ T2130] usb 5-1: media controller created [ 386.374824][ T2130] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.491676][ T2130] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 386.511863][ T2130] zl10353_read_register: readreg error (reg=127, ret==-71) [ 386.541103][ T2130] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 386.674893][ T2130] usb 5-1: USB disconnect, device number 15 [ 387.011207][T11874] loop1: detected capacity change from 0 to 256 [ 387.049200][T11874] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.102673][ T27] audit: type=1800 audit(1772632161.057:44): pid=11874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2197" name="file1" dev="loop1" ino=1048667 res=0 errno=0 [ 387.123675][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.221101][ T27] audit: type=1800 audit(1772632161.097:45): pid=11874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2197" name="file1" dev="loop1" ino=1048667 res=0 errno=0 [ 387.252409][ T1080] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 387.316535][ T1080] FAT-fs (loop1): Filesystem has been set read-only [ 387.352190][ T1080] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 387.437700][ T48] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 387.459864][ T48] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 387.477736][T11877] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 387.678007][ T5840] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 387.881894][ T5840] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 387.897928][ T5840] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 387.918239][ T5840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.927305][ T5840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 387.950981][ T5840] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 387.964986][ T5840] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.000414][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.029308][ T5840] usb 5-1: Product: syz [ 388.034674][ T5840] usb 5-1: Manufacturer: syz [ 388.055301][ T5840] cdc_wdm 5-1:1.0: skipping garbage [ 388.063793][ T5840] cdc_wdm 5-1:1.0: skipping garbage [ 388.074157][ T5840] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 388.083786][ T5840] cdc_wdm 5-1:1.0: Unknown control protocol [ 388.321207][T11899] loop3: detected capacity change from 0 to 1024 [ 388.426965][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2209'. [ 388.464362][ T42] hfsplus: b-tree write err: -5, ino 8 [ 388.703076][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 388.905235][ T963] usb 5-1: USB disconnect, device number 16 [ 389.148267][ T7147] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 389.310932][T11930] program syz.1.2222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.358197][ T7147] usb 3-1: Using ep0 maxpacket: 16 [ 389.370390][ T7147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.395776][ T7147] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.414170][ T7147] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.458193][ T7147] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 389.498487][ T7147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.519213][ T7147] usb 3-1: config 0 descriptor?? [ 389.969009][ T7147] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max [ 389.989966][ T7147] microsoft 0003:045E:07DA.0015: unsupported Resolution Multiplier 0 [ 389.996295][T11932] loop1: detected capacity change from 0 to 32768 [ 390.005250][ T7147] microsoft 0003:045E:07DA.0015: implement() called with n (152) > 32! (kworker/0:5) [ 390.022509][T11932] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2223 (11932) [ 390.080160][T11932] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 390.104594][T11932] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 390.128073][T11932] BTRFS info (device loop1): force zlib compression, level 3 [ 390.139251][T11932] BTRFS info (device loop1): force clearing of disk cache [ 390.167457][T11932] BTRFS info (device loop1): setting nodatasum [ 390.169559][ T7147] microsoft 0003:045E:07DA.0015: No inputs registered, leaving [ 390.181878][T11932] BTRFS info (device loop1): allowing degraded mounts [ 390.197595][ T7147] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 390.218583][ T7147] microsoft 0003:045E:07DA.0015: no inputs found [ 390.225090][ T7147] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 390.234174][T11932] BTRFS info (device loop1): enabling disk space caching [ 390.250394][T11932] BTRFS info (device loop1): disk space caching is enabled [ 390.272481][ T7147] usb 3-1: USB disconnect, device number 28 [ 390.449062][T11932] BTRFS info (device loop1): auto enabling async discard [ 390.479355][T11932] BTRFS info (device loop1): rebuilding free space tree [ 390.533561][T11958] fido_id[11958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 390.555850][T11932] BTRFS info (device loop1): disabling free space tree [ 390.566599][T11932] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 390.593902][T11932] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 390.726897][T11932] BTRFS info (device loop1): balance: start -d -m [ 390.749987][T11932] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 390.910395][T11932] BTRFS info (device loop1): balance: paused [ 391.047572][T10734] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 391.578171][ T963] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 391.779568][ T963] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 391.791547][ T963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.815879][ T963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 391.845818][ T963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.866766][ T963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 391.888962][ T963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.899383][ T963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 391.918590][ T963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.939036][ T963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 391.964220][ T963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.981268][ T963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 392.001095][ T963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.014802][ T963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 392.043200][ T963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.055736][ T963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 392.080907][ T963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.106157][ T963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 392.128538][ T963] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 392.138927][ T963] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 392.147473][ T963] usb 4-1: Product: syz [ 392.152569][ T963] usb 4-1: Manufacturer: syz [ 392.157349][ T963] usb 4-1: SerialNumber: syz [ 392.177352][ T963] usb 4-1: config 0 descriptor?? [ 392.203968][T11988] loop4: detected capacity change from 0 to 1024 [ 392.275625][T11988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 392.319500][T11988] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.419342][T11988] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 392.495975][ T8166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 392.560213][ T5810] usb 4-1: USB disconnect, device number 32 [ 393.377653][T11995] loop4: detected capacity change from 0 to 32768 [ 393.443745][T11995] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 393.466395][T11995] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 393.509446][ T5810] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 393.560971][ T963] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 393.583579][T11995] XFS (loop4): Ending clean mount [ 393.601841][T11995] XFS (loop4): Quotacheck needed: Please wait. [ 393.617154][T12007] loop1: detected capacity change from 0 to 32768 [ 393.630201][T12007] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2245 (12007) [ 393.651590][T12007] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.662141][T12007] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 393.675273][T12007] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 393.693583][T12007] BTRFS info (device loop1): trying to use backup root at mount time [ 393.702475][T12007] BTRFS info (device loop1): setting nodatasum [ 393.730453][T12007] BTRFS info (device loop1): enabling ssd optimizations [ 393.740025][T12007] BTRFS info (device loop1): using spread ssd allocation scheme [ 393.746052][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 393.747735][T12007] BTRFS info (device loop1): turning on flush-on-commit [ 393.763811][T12007] BTRFS info (device loop1): force zlib compression, level 3 [ 393.773923][T12007] BTRFS info (device loop1): using free space tree [ 393.783607][T11995] XFS (loop4): Quotacheck: Done. [ 393.789997][ T963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.800624][ T963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.811095][ T5810] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 393.820525][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.833032][ T963] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.848594][ T5810] pvrusb2: Hardware description: Terratec Grabster AV400 [ 393.856810][ T963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.865923][ T5810] pvrusb2: ********** [ 393.870234][ T963] usb 4-1: SerialNumber: syz [ 393.876038][ T5810] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 393.890615][ T5810] pvrusb2: Important functionality might not be entirely working. [ 393.903028][ T5810] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 393.983815][ T5810] pvrusb2: ********** [ 394.019050][ T8166] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.106956][ T2319] pvrusb2: Invalid write control endpoint [ 394.132238][ T963] usb 4-1: 0:2 : does not exist [ 394.194559][ T963] usb 4-1: USB disconnect, device number 33 [ 394.272473][ T7030] udevd[7030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.312686][ T27] audit: type=1804 audit(1772632168.257:46): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2245" name="/newroot/95/file1/file1" dev="loop1" ino=260 res=1 errno=0 [ 394.363308][T12009] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 394.386431][ T2319] pvrusb2: Invalid write control endpoint [ 394.392955][ T5840] usb 3-1: USB disconnect, device number 29 [ 394.419927][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 394.478253][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 394.485977][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 394.509736][T10734] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 394.548387][ T2319] pvrusb2: Device being rendered inoperable [ 394.578753][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 394.585913][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 394.658959][ T2319] pvrusb2: Attached sub-driver cx25840 [ 394.664520][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 394.739923][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 394.899160][T12038] netlink: 'syz.4.2248': attribute type 25 has an invalid length. [ 394.967990][T12038] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 394.976025][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.020995][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'. [ 395.369825][T12047] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2252'. [ 396.219957][T12042] loop3: detected capacity change from 0 to 32768 [ 396.259289][T12042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2250 (12042) [ 396.354968][T12042] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.409654][T12042] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 396.466704][T12042] BTRFS info (device loop3): allowing degraded mounts [ 396.494862][T12042] BTRFS info (device loop3): enabling auto defrag [ 396.556023][T12042] BTRFS info (device loop3): using free space tree [ 396.817216][T12042] BTRFS info (device loop3): enabling ssd optimizations [ 396.848341][T12042] BTRFS info (device loop3): auto enabling async discard [ 397.382733][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 398.250679][T12110] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2273'. [ 398.404675][T12098] loop1: detected capacity change from 0 to 32768 [ 398.430969][T12098] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2267 (12098) [ 398.487478][T12098] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.530441][T12098] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 398.577489][T12098] BTRFS info (device loop1): using free space tree [ 398.791673][T12125] loop3: detected capacity change from 0 to 4096 [ 398.800265][T12098] BTRFS info (device loop1): enabling ssd optimizations [ 398.846193][T12098] BTRFS info (device loop1): auto enabling async discard [ 398.922764][T12132] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 399.200021][T10734] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.618101][T12139] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 400.636876][T12149] loop4: detected capacity change from 0 to 32768 [ 400.724611][T12149] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 400.748222][T12149] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 400.848081][ T5810] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 400.891113][T12149] XFS (loop4): Ending clean mount [ 400.915305][T12149] XFS (loop4): Quotacheck needed: Please wait. [ 401.069635][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.091879][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.099525][T12149] XFS (loop4): Quotacheck: Done. [ 401.104933][ T5810] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 401.118585][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.138336][ T5810] usb 2-1: config 0 descriptor?? [ 401.412914][ T8166] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 401.558670][ T5771] Bluetooth: hci0: command 0x0406 tx timeout [ 401.617454][ T5810] playstation 0003:054C:0BA0.0016: item fetching failed at offset 5/7 [ 401.677273][ T5810] playstation 0003:054C:0BA0.0016: Parse failed [ 401.722899][ T5810] playstation: probe of 0003:054C:0BA0.0016 failed with error -22 [ 401.824839][ T5810] usb 2-1: USB disconnect, device number 25 [ 401.918074][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 402.932089][T12204] loop1: detected capacity change from 0 to 1024 [ 402.947704][T12204] EXT4-fs: Ignoring removed orlov option [ 402.999590][T12204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.315388][T10734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.681753][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.690625][ T2130] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 403.706879][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.714205][T12221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.723984][T12221] bridge_slave_0: left allmulticast mode [ 403.730692][T12221] bridge_slave_0: left promiscuous mode [ 403.736661][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.758322][T12221] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 403.898191][T12225] loop1: detected capacity change from 0 to 128 [ 403.901515][ T2130] usb 5-1: config 0 has no interfaces? [ 403.918097][ T2130] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 403.929110][T12225] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 403.953189][ T2130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.975659][T12225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.994921][ T2130] usb 5-1: config 0 descriptor?? [ 404.048966][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.058027][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.066014][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.074055][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.082276][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.090350][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.098380][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.106392][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.114424][T12229] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 404.317513][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.369367][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.397448][T12235] loop6: detected capacity change from 0 to 524287999 [ 404.407570][ T2130] usb 5-1: USB disconnect, device number 17 [ 404.579401][ T5810] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 404.648144][ T963] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 404.788030][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 404.796097][ T5810] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 404.804781][ T5810] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.825235][ T5810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.837123][ T5810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.847486][ T5810] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.860869][ T5810] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 404.872104][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.880673][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.894041][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.908827][ T963] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 404.941264][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.953315][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.963880][ T963] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 404.984707][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 404.989308][ T2130] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 405.003121][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.026476][ T963] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 405.051880][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.052355][T12241] loop1: detected capacity change from 0 to 512 [ 405.088460][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.099184][ T963] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 405.119582][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.145598][ T963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.160054][ T5810] usb 4-1: GET_CAPABILITIES returned 0 [ 405.165637][ T5810] usbtmc 4-1:16.0: can't read capabilities [ 405.178927][ T963] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 405.196355][ T963] usb 3-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 405.207751][ T2130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.214082][ T963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.231955][ T2130] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 405.254457][ T963] usb 3-1: config 0 descriptor?? [ 405.262050][ T2130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.328433][ T2130] usb 5-1: config 0 descriptor?? [ 405.382496][ T5776] Bluetooth: hci4: urb ffff88803001fc00 submission failed (2) [ 405.416802][ T2130] usb 4-1: USB disconnect, device number 34 [ 405.576175][ T5840] usb 5-1: USB disconnect, device number 18 [ 405.706195][ T963] hid-generic 0003:04B4:0000.0017: unbalanced delimiter at end of report description [ 405.717130][ T963] hid-generic: probe of 0003:04B4:0000.0017 failed with error -22 [ 405.924917][ T963] usb 3-1: USB disconnect, device number 30 [ 406.352526][T12250] trusted_key: syz.1.2322 sent an empty control message without MSG_MORE. [ 406.553641][T12254] loop3: detected capacity change from 0 to 1024 [ 406.651876][T12254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.742683][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.870022][ T2130] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 407.090341][ T2130] usb 5-1: Using ep0 maxpacket: 32 [ 407.101234][ T2130] usb 5-1: config 0 has no interfaces? [ 407.118473][ T2130] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 407.136825][ T2130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.166794][ T2130] usb 5-1: config 0 descriptor?? [ 407.422656][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.443624][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.458015][ T2130] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 407.481269][ T23] usb 5-1: USB disconnect, device number 19 [ 407.658901][ T2130] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 407.678628][ T2130] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.687615][ T2130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.738621][ T2130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.752649][ T2130] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.763172][ T2130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.787983][ T2130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.804307][ T2130] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.817947][ T2130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.833282][ T2130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.844689][ T2130] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.868028][ T2130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.887999][ T2130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.895906][ T2130] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.906608][ T2130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.917804][ T2130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.927984][ T2130] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.948665][ T2130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.988236][ T2130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 408.002056][ T2130] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 408.017985][ T23] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 408.033008][ T2130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.081904][ T2130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 408.098829][ T2130] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 408.127251][ T2130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 408.158710][ T2130] usb 4-1: config 0 interface 0 has no altsetting 0 [ 408.172629][ T2130] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 408.187064][ T2130] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 408.204678][ T2130] usb 4-1: Product: syz [ 408.213451][ T23] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 408.225893][ T2130] usb 4-1: Manufacturer: syz [ 408.238046][ T23] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 408.246201][ T2130] usb 4-1: SerialNumber: syz [ 408.260524][ T2130] usb 4-1: config 0 descriptor?? [ 408.266305][ T23] usb 5-1: config 1 has no interface number 0 [ 408.278310][ T23] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 408.301379][ T2130] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 408.308897][ T23] usb 5-1: config 1 interface 7 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.354884][ T23] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.00 [ 408.374179][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.406786][T12305] loop1: detected capacity change from 0 to 512 [ 408.413411][ T23] usb 5-1: Product: syz [ 408.413436][ T23] usb 5-1: Manufacturer: syz [ 408.444301][ T23] usb 5-1: SerialNumber: syz [ 408.473448][T12305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.500312][T12305] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.529173][T12305] EXT4-fs (loop1): shut down requested (1) [ 408.558280][ T5840] usb 4-1: USB disconnect, device number 35 [ 408.584058][ T5840] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 408.599952][T10734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.678696][ T23] ath6kl: Failed to submit usb control message: -71 [ 408.685765][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 408.694237][ T23] ath6kl: Unable to send get target info: -71 [ 408.706949][ T23] ath6kl: Failed to init ath6kl core: -71 [ 408.730766][ T23] ath6kl_usb: probe of 5-1:1.7 failed with error -71 [ 408.761587][ T23] usb 5-1: USB disconnect, device number 20 [ 409.196170][T12315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2348'. [ 409.214425][T12315] tipc: Started in network mode [ 409.222033][T12315] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 409.253695][T12315] tipc: Enabled bearer , priority 10 [ 409.411156][T12325] loop1: detected capacity change from 0 to 128 [ 409.445307][T12325] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.459930][T12325] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 409.578965][T10734] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.997357][T12328] loop4: detected capacity change from 0 to 32768 [ 410.054338][T12328] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 410.067587][ T23] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 410.164304][T12328] XFS (loop4): Ending clean mount [ 410.201751][T12328] XFS (loop4): Quotacheck needed: Please wait. [ 410.313729][ T23] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 410.339763][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.374192][ T8] tipc: Node number set to 4269801514 [ 410.387406][T12328] XFS (loop4): Quotacheck: Done. [ 410.393466][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.417991][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.436518][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.456199][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.499234][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.507361][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.526900][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.557905][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.616681][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.620388][ T8166] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 410.654163][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.686530][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.706096][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.721561][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.756486][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.774763][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.794382][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.826548][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.847666][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.871691][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.893800][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.909084][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.923236][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 410.938409][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.954494][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 410.959754][T12356] loop3: detected capacity change from 0 to 1024 [ 410.964322][ T23] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 410.985571][ T23] usb 2-1: Product: syz [ 410.990811][ T23] usb 2-1: Manufacturer: syz [ 410.995467][ T23] usb 2-1: SerialNumber: syz [ 411.007739][ T23] usb 2-1: config 0 descriptor?? [ 411.025056][ T23] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 411.168086][ T963] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 411.220865][T12359] xt_hashlimit: size too large, truncated to 1048576 [ 411.283617][T12360] net veth1_virt_wifi ‚: renamed from virt_wifi0 [ 411.345931][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 411.360208][ T963] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 411.367191][ T23] usb 2-1: USB disconnect, device number 26 [ 411.380911][ T23] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 411.389753][ T963] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 411.427954][ T963] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 411.457896][ T963] usb 3-1: config 220 has no interface number 2 [ 411.464352][ T963] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 411.497918][ T963] usb 3-1: config 220 interface 0 has no altsetting 0 [ 411.504949][ T963] usb 3-1: config 220 interface 76 has no altsetting 0 [ 411.527908][ T963] usb 3-1: config 220 interface 1 has no altsetting 0 [ 411.550316][ T963] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 411.559734][ T963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.567790][ T963] usb 3-1: Product: syz [ 411.587930][ T963] usb 3-1: Manufacturer: syz [ 411.597938][ T963] usb 3-1: SerialNumber: syz [ 411.853062][ T963] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 411.878006][ T963] usb 3-1: No valid video chain found. [ 411.898029][ T963] usb 3-1: selecting invalid altsetting 0 [ 411.959809][ T963] usb 3-1: selecting invalid altsetting 0 [ 411.965640][ T963] usbtest: probe of 3-1:220.1 failed with error -22 [ 412.007930][ T963] usb 3-1: USB disconnect, device number 31 [ 412.335003][T12368] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2366'. [ 412.349921][T12368] tipc: Enabled bearer , priority 10 [ 412.508255][ T5840] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 412.727963][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 412.747095][ T5840] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 412.767659][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.785281][ T5840] usb 2-1: Product: syz [ 412.795626][ T5840] usb 2-1: Manufacturer: syz [ 412.802818][ T5840] usb 2-1: SerialNumber: syz [ 412.811581][ T5840] usb 2-1: config 0 descriptor?? [ 413.457277][ T5840] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 413.481092][ T5840] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 413.496392][ T5840] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 413.559803][ T5840] peak_usb: probe of 2-1:0.0 failed with error -22 [ 413.776503][ T963] usb 2-1: USB disconnect, device number 27 [ 414.376683][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2379'. [ 414.410452][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 414.982145][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2386'. [ 415.017997][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2386'. [ 415.298239][T12415] loop1: detected capacity change from 0 to 1024 [ 415.414502][T12415] hfsplus: bad catalog entry type [ 415.542757][ T11] hfsplus: b-tree write err: -5, ino 4 [ 416.059206][T12425] loop1: detected capacity change from 0 to 512 [ 416.138367][T12425] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 416.255924][T12425] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 416.295377][T12432] netlink: 'syz.4.2395': attribute type 25 has an invalid length. [ 416.356285][T12425] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2393: bg 0: block 248: padding at end of block bitmap is not set [ 416.384762][T12425] Quota error (device loop1): write_blk: dquota write failed [ 416.419633][T12425] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 416.460869][T12425] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.2393: Failed to acquire dquot type 1 [ 416.528261][T12425] EXT4-fs (loop1): 1 truncate cleaned up [ 416.535352][T12425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 416.761449][T12442] tun0: tun_chr_ioctl cmd 1074025675 [ 416.766841][T12442] tun0: persist disabled [ 416.791333][T10734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 417.138544][ T5840] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 417.357131][ T5840] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 417.367132][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.386387][ T5840] usb 3-1: Product: syz [ 417.396515][ T5840] usb 3-1: Manufacturer: syz [ 417.406684][ T5840] usb 3-1: SerialNumber: syz [ 417.419499][ T5840] usb 3-1: config 0 descriptor?? [ 417.431043][ T5840] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 418.284566][ T5840] usb 3-1: USB disconnect, device number 32 [ 418.385331][T12473] loop3: detected capacity change from 0 to 32768 [ 418.398457][T12473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2412 (12473) [ 418.422053][T12473] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 418.444752][T12473] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 418.455050][T12473] BTRFS info (device loop3): using free space tree [ 418.504318][T12473] BTRFS info (device loop3): enabling ssd optimizations [ 418.512405][T12473] BTRFS info (device loop3): auto enabling async discard [ 418.824006][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 419.285800][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.585423][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.156207][T12516] loop4: detected capacity change from 0 to 4096 [ 420.175298][T12516] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 420.326497][T12520] loop1: detected capacity change from 0 to 128 [ 420.349030][T12520] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 420.381794][T12522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2426'. [ 420.391102][ T5840] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 420.533564][ T1080] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 420.601595][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 420.652899][ T5840] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 420.669992][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.679063][ T5840] usb 3-1: Product: syz [ 420.689127][ T5840] usb 3-1: Manufacturer: syz [ 420.693799][ T5840] usb 3-1: SerialNumber: syz [ 420.704685][T12526] netlink: 'syz.4.2429': attribute type 1 has an invalid length. [ 420.715633][ T5840] usb 3-1: config 0 descriptor?? [ 420.740133][ T5840] gspca_main: se401-2.14.0 probing 047d:5003 [ 420.751387][T12526] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2429'. [ 420.781658][T12528] loop1: detected capacity change from 0 to 256 [ 420.855631][T12528] FAT-fs (loop1): Directory bread(block 64) failed [ 420.883259][T12528] FAT-fs (loop1): Directory bread(block 65) failed [ 420.906586][T12528] FAT-fs (loop1): Directory bread(block 66) failed [ 420.930333][T12528] FAT-fs (loop1): Directory bread(block 67) failed [ 420.937088][T12528] FAT-fs (loop1): Directory bread(block 68) failed [ 420.970668][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.000578][T12528] FAT-fs (loop1): Directory bread(block 69) failed [ 421.007395][T12528] FAT-fs (loop1): Directory bread(block 70) failed [ 421.022437][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.048349][T12528] FAT-fs (loop1): Directory bread(block 71) failed [ 421.067215][T12528] FAT-fs (loop1): Directory bread(block 72) failed [ 421.075899][T12528] FAT-fs (loop1): Directory bread(block 73) failed [ 421.280067][ T5840] gspca_se401: ExtraFeatures: 3 [ 421.285205][ T5840] gspca_se401: Frame size: 0x0 1/16th janggu [ 421.292994][T12536] loop4: detected capacity change from 0 to 1024 [ 421.299537][ T5840] gspca_se401: Frame size: 0x0 1/16th janggu [ 421.490260][ T5840] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 421.508063][T12540] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 421.540510][T12540] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 421.575708][ T5840] usb 3-1: USB disconnect, device number 33 [ 422.435598][T12552] loop4: detected capacity change from 0 to 40427 [ 422.445662][T12552] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 422.456778][T12552] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 422.470190][T12552] F2FS-fs (loop4): Image doesn't support compression [ 422.489799][T12552] F2FS-fs (loop4): invalid crc value [ 422.499360][T12552] F2FS-fs (loop4): Found nat_bits in checkpoint [ 422.558353][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 422.610651][T12552] F2FS-fs (loop4): Start checkpoint disabled! [ 422.636671][T12552] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 422.709335][T12552] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 422.750472][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 422.763103][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 422.790404][ T8] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 422.807953][ T8] usb 3-1: Product: syz [ 422.822225][ T8] usb 3-1: Manufacturer: syz [ 422.837193][ T8] usb 3-1: SerialNumber: syz [ 422.855134][ T8] usb 3-1: config 0 descriptor?? [ 422.889391][ T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 423.052823][ T1080] kworker/u4:6: attempt to access beyond end of device [ 423.052823][ T1080] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 423.090252][ T1080] F2FS-fs (loop4): Remounting filesystem read-only [ 423.107028][ T1080] F2FS-fs (loop4): Remounting filesystem read-only [ 423.124489][ T1080] F2FS-fs (loop4): Remounting filesystem read-only [ 423.378998][T12556] loop3: detected capacity change from 0 to 32768 [ 423.423273][T12556] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 423.521980][ T8] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 423.547609][T12556] XFS (loop3): Ending clean mount [ 423.609621][T12556] XFS (loop3): Quotacheck needed: Please wait. [ 423.658250][ T5840] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 423.810093][T12556] XFS (loop3): Quotacheck: Done. [ 423.818833][ T963] usb 3-1: USB disconnect, device number 34 [ 423.880914][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.921303][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.960353][ T5840] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 423.997928][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.033776][ T5840] usb 2-1: config 0 descriptor?? [ 424.050611][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 424.308089][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 424.471117][ T5840] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 424.495020][ T5840] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 424.508683][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.526682][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.538947][ T5840] elan 0003:04F3:0755.0018: failed to start in urb: -90 [ 424.547617][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.567767][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.576002][ T8] usb 5-1: SerialNumber: syz [ 424.581125][ T5840] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 424.730442][ T5840] usb 2-1: USB disconnect, device number 28 [ 424.806623][T12584] fido_id[12584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 424.855687][ T8] usb 5-1: 0:2 : does not exist [ 424.893047][ T8] usb 5-1: USB disconnect, device number 21 [ 424.951615][ T7030] udevd[7030]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.078760][ T7147] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 425.268063][ T7147] usb 3-1: Using ep0 maxpacket: 16 [ 425.289581][ T7147] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.297661][ T7147] usb 3-1: config 0 has no interface number 0 [ 425.305730][ T7147] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.328070][ T7147] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.353083][ T7147] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 425.390503][ T7147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.403040][ T7147] usb 3-1: config 0 descriptor?? [ 425.482974][T12598] loop1: detected capacity change from 0 to 1024 [ 425.674781][ T2913] hfsplus: b-tree write err: -5, ino 8 [ 426.014397][T12607] loop1: detected capacity change from 0 to 512 [ 426.061083][ T7147] uclogic 0003:28BD:0071.0019: pen parameters not found [ 426.084346][ T7147] uclogic 0003:28BD:0071.0019: interface is invalid, ignoring [ 426.108091][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 426.137680][ T7147] usb 3-1: USB disconnect, device number 35 [ 426.310850][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.328587][T12611] mmap: syz.3.2460 (12611) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 426.341624][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.352777][ T8] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 426.372623][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.403535][ T8] usb 5-1: config 0 descriptor?? [ 426.474671][T12614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2461'. [ 426.486184][T12614] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2461'. [ 427.205634][ T23] IPVS: starting estimator thread 0... [ 427.214587][T12628] net_ratelimit: 45 callbacks suppressed [ 427.214613][T12628] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 427.261634][ T8] hid-led: probe of 0003:27B8:01ED.001A failed with error -71 [ 427.281751][ T8] usb 5-1: USB disconnect, device number 22 [ 427.328101][T12629] IPVS: using max 17 ests per chain, 40800 per kthread [ 427.503436][T12620] loop3: detected capacity change from 0 to 32768 [ 427.554692][T12620] JBD2: Ignoring recovery information on journal [ 427.731272][T12620] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 427.954254][T12639] loop1: detected capacity change from 0 to 256 [ 428.064100][T12620] binfmt_misc: register: failed to install interpreter file ./file1 [ 428.131755][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'. [ 428.307562][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 428.717588][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'. [ 429.311924][T12645] loop1: detected capacity change from 0 to 32768 [ 429.478886][T12645] ERROR: (device loop1): dbFindCtl: Corrupt dmapctl page [ 429.478886][T12645] [ 429.509462][T12645] ERROR: (device loop1): remounting filesystem as read-only [ 429.610562][T12681] loop3: detected capacity change from 0 to 128 [ 429.740657][ T27] audit: type=1800 audit(1772632203.697:47): pid=12681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2492" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 429.807970][ T27] audit: type=1800 audit(1772632203.697:48): pid=12681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2492" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 430.053706][T12688] loop4: detected capacity change from 0 to 128 [ 430.159403][T12688] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.233676][T12688] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.389087][T12698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2495'. [ 430.438368][ T8166] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.500668][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.632213][T12701] sock: sock_set_timeout: `syz.4.2500' (pid 12701) tries to set negative timeout [ 431.169042][T12714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2507'. [ 431.425537][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2509'. [ 431.485049][T12719] bridge0: port 1(vlan2) entered blocking state [ 431.516409][T12719] bridge0: port 1(vlan2) entered disabled state [ 431.538233][T12719] vlan2: entered allmulticast mode [ 431.564003][T12719] gretap0: entered allmulticast mode [ 431.586163][T12719] vlan2: entered promiscuous mode [ 431.601969][T12719] gretap0: entered promiscuous mode [ 431.621680][T12719] bridge0: port 1(vlan2) entered blocking state [ 431.628186][T12719] bridge0: port 1(vlan2) entered forwarding state [ 431.968785][T12708] loop4: detected capacity change from 0 to 40427 [ 432.002572][T12708] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 432.029692][T12708] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 432.080819][T12708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 432.294190][T12708] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 432.315023][T12708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 432.442038][T12708] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 433.713690][T12773] loop4: detected capacity change from 0 to 128 [ 433.896972][T12754] loop1: detected capacity change from 0 to 40427 [ 433.938013][T12754] F2FS-fs (loop1): Invalid segment count (0) [ 433.950660][T12754] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 433.990509][T12754] F2FS-fs (loop1): invalid crc value [ 434.044174][T12754] F2FS-fs (loop1): Found nat_bits in checkpoint [ 434.178403][T12754] F2FS-fs (loop1): Start checkpoint disabled! [ 434.189969][T12754] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 434.201779][T12754] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 434.378234][ T7147] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 434.463602][ T143] kworker/u4:5: attempt to access beyond end of device [ 434.463602][ T143] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 434.477898][ T143] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 434.487506][ T143] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 434.597905][ T7147] usb 5-1: Using ep0 maxpacket: 16 [ 434.611985][ T7147] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 434.637887][ T7147] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 434.646111][ T7147] usb 5-1: Product: syz [ 434.665514][ T7147] usb 5-1: Manufacturer: syz [ 434.704923][ T7147] usb 5-1: SerialNumber: syz [ 434.719454][ T7147] usb 5-1: config 0 descriptor?? [ 435.012835][T12782] loop3: detected capacity change from 0 to 32768 [ 435.102100][T12782] JBD2: Ignoring recovery information on journal [ 435.102421][ T7147] usb 5-1: USB disconnect, device number 23 [ 435.152263][T12791] loop1: detected capacity change from 0 to 1024 [ 435.172549][T12782] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 435.280984][T12791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 435.332076][T12791] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.360664][ T27] audit: type=1800 audit(1772632209.317:49): pid=12791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2535" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 435.546720][T10734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 435.700785][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 436.144001][T12806] sp0: Synchronizing with TNC [ 436.522069][T12821] loop1: detected capacity change from 0 to 256 [ 436.998874][ T143] Bluetooth: hci4: Frame reassembly failed (-84) [ 438.001684][T12856] loop1: detected capacity change from 0 to 4096 [ 438.015785][T12856] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.024264][T12856] EXT4-fs (loop1): Test dummy encryption mode enabled [ 438.054562][T12856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.345333][T12856] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 438.501980][T10734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.074419][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 439.078185][ T5771] Bluetooth: hci4: command 0x1003 tx timeout [ 439.117162][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.161625][T12887] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2564'. [ 439.264830][T12891] loop1: detected capacity change from 0 to 256 [ 439.318746][ T3515] wlan1: Trigger new scan to find an IBSS to join [ 439.338192][T12893] loop4: detected capacity change from 0 to 2048 [ 439.364403][T12893] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 439.398656][ T11] ------------[ cut here ]------------ [ 439.405367][ T11] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40 [ 439.416907][ T11] WARNING: CPU: 1 PID: 11 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 439.427000][ T11] Modules linked in: [ 439.431042][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 439.438517][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.448697][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 439.455119][ T11] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 439.461515][ T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 d1 de 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 9b 7d 56 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 439.481247][ T11] RSP: 0018:ffffc90000107380 EFLAGS: 00010246 [ 439.487391][ T11] RAX: dd757fcc894ef300 RBX: 000000000000000c RCX: ffff88801a27bc00 [ 439.495508][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 439.503588][ T11] RBP: 0000000000000084 R08: ffffc90000106f87 R09: 1ffff92000020df0 [ 439.511673][ T11] R10: dffffc0000000000 R11: fffff52000020df1 R12: 0000000000000040 [ 439.519774][ T11] R13: dffffc0000000000 R14: ffff88807c5db358 R15: ffff88806550b2a8 [ 439.527862][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 439.536862][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.543598][ T11] CR2: 00007f8a35f97000 CR3: 000000002e67e000 CR4: 00000000003506e0 [ 439.551794][ T11] Call Trace: [ 439.555158][ T11] [ 439.558237][ T11] rate_control_send_low+0x194/0x790 [ 439.563600][ T11] rate_control_get_rate+0x20b/0x5d0 [ 439.569023][ T11] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 439.574816][ T11] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 439.580919][ T11] ? __lock_acquire+0x1273/0x7d40 [ 439.586074][ T11] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 439.592286][ T11] invoke_tx_handlers_late+0xb6/0x1810 [ 439.597910][ T11] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 439.603797][ T11] ieee80211_tx+0x2d8/0x460 [ 439.608411][ T11] ? ieee80211_skb_resize+0x630/0x630 [ 439.613857][ T11] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 439.619496][ T11] ? __bpf_trace_tasklet+0x160/0x160 [ 439.624905][ T11] ? ieee80211_xmit+0x310/0x3f0 [ 439.629914][ T11] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 439.635956][ T11] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 439.641877][ T11] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 439.648439][ T11] ieee80211_scan_state_send_probe+0x560/0x930 [ 439.654693][ T11] ieee80211_scan_work+0x4e9/0x1c40 [ 439.660061][ T11] cfg80211_wiphy_work+0x225/0x260 [ 439.665261][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 439.671131][ T11] process_scheduled_works+0xa5d/0x15d0 [ 439.676775][ T11] ? assign_work+0x430/0x430 [ 439.681491][ T11] ? assign_work+0x3d0/0x430 [ 439.686157][ T11] worker_thread+0xa55/0xfc0 [ 439.690919][ T11] kthread+0x2fa/0x390 [ 439.695043][ T11] ? pr_cont_work+0x560/0x560 [ 439.699841][ T11] ? kthread_blkcg+0xd0/0xd0 [ 439.704490][ T11] ret_from_fork+0x48/0x80 [ 439.709051][ T11] ? kthread_blkcg+0xd0/0xd0 [ 439.713694][ T11] ret_from_fork_asm+0x11/0x20 [ 439.718619][ T11] [ 439.721696][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 439.729018][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 439.736435][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.746538][ T11] Workqueue: events_unbound cfg80211_wiphy_work [ 439.752867][ T11] Call Trace: [ 439.756202][ T11] [ 439.759174][ T11] dump_stack_lvl+0x18c/0x250 [ 439.763986][ T11] ? show_regs_print_info+0x20/0x20 [ 439.769258][ T11] ? load_image+0x400/0x400 [ 439.773860][ T11] panic+0x2dc/0x730 [ 439.777823][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 439.782389][ T11] ? ret_from_fork_asm+0x11/0x20 [ 439.787392][ T11] __warn+0x2e0/0x470 [ 439.791419][ T11] ? __rate_control_send_low+0x635/0x880 [ 439.797093][ T11] ? __rate_control_send_low+0x635/0x880 [ 439.802761][ T11] report_bug+0x2be/0x4f0 [ 439.807208][ T11] ? __rate_control_send_low+0x635/0x880 [ 439.812879][ T11] ? __rate_control_send_low+0x635/0x880 [ 439.818555][ T11] ? __rate_control_send_low+0x637/0x880 [ 439.824219][ T11] handle_bug+0xcf/0x120 [ 439.828510][ T11] exc_invalid_op+0x1a/0x50 [ 439.833151][ T11] asm_exc_invalid_op+0x1a/0x20 [ 439.838137][ T11] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 439.844410][ T11] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 d1 de 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 9b 7d 56 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 439.864060][ T11] RSP: 0018:ffffc90000107380 EFLAGS: 00010246 [ 439.870163][ T11] RAX: dd757fcc894ef300 RBX: 000000000000000c RCX: ffff88801a27bc00 [ 439.878182][ T11] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 439.886185][ T11] RBP: 0000000000000084 R08: ffffc90000106f87 R09: 1ffff92000020df0 [ 439.894185][ T11] R10: dffffc0000000000 R11: fffff52000020df1 R12: 0000000000000040 [ 439.902185][ T11] R13: dffffc0000000000 R14: ffff88807c5db358 R15: ffff88806550b2a8 [ 439.910222][ T11] rate_control_send_low+0x194/0x790 [ 439.915560][ T11] rate_control_get_rate+0x20b/0x5d0 [ 439.920882][ T11] ieee80211_tx_h_rate_ctrl+0xb63/0x1790 [ 439.926567][ T11] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 439.932586][ T11] ? __lock_acquire+0x1273/0x7d40 [ 439.937646][ T11] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 439.943752][ T11] invoke_tx_handlers_late+0xb6/0x1810 [ 439.949256][ T11] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 439.955141][ T11] ieee80211_tx+0x2d8/0x460 [ 439.959687][ T11] ? ieee80211_skb_resize+0x630/0x630 [ 439.965100][ T11] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 439.970593][ T11] ? __bpf_trace_tasklet+0x160/0x160 [ 439.975930][ T11] ? ieee80211_xmit+0x310/0x3f0 [ 439.980822][ T11] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 439.986840][ T11] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 439.992686][ T11] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 439.999048][ T11] ieee80211_scan_state_send_probe+0x560/0x930 [ 440.005261][ T11] ieee80211_scan_work+0x4e9/0x1c40 [ 440.010525][ T11] cfg80211_wiphy_work+0x225/0x260 [ 440.015687][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 440.021441][ T11] process_scheduled_works+0xa5d/0x15d0 [ 440.027052][ T11] ? assign_work+0x430/0x430 [ 440.031686][ T11] ? assign_work+0x3d0/0x430 [ 440.036319][ T11] worker_thread+0xa55/0xfc0 [ 440.040988][ T11] kthread+0x2fa/0x390 [ 440.045099][ T11] ? pr_cont_work+0x560/0x560 [ 440.049809][ T11] ? kthread_blkcg+0xd0/0xd0 [ 440.054429][ T11] ret_from_fork+0x48/0x80 [ 440.058883][ T11] ? kthread_blkcg+0xd0/0xd0 [ 440.063507][ T11] ret_from_fork_asm+0x11/0x20 [ 440.068316][ T11] [ 440.071943][ T11] Kernel Offset: disabled [ 440.076456][ T11] Rebooting in 86400 seconds..