last executing test programs: 3.641535622s ago: executing program 0 (id=2425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x4}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x400}) 3.548689224s ago: executing program 0 (id=2427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) 3.431352727s ago: executing program 0 (id=2429): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000021c0), &(0x7f00000020c0)='./file0\x00', 0x402, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) close(0x3) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3.251777641s ago: executing program 0 (id=2433): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r1, 0x0, 0x2, 0xe) 2.34438065s ago: executing program 0 (id=2448): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x1000, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 1.329884272s ago: executing program 3 (id=2459): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @multicast}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) 1.266406883s ago: executing program 2 (id=2460): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) 1.157330196s ago: executing program 3 (id=2464): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x1007}}, {@dioread_nolock}, {@quota}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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") open$dir(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 1.074787767s ago: executing program 1 (id=2466): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdb7d, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x50}}, 0x840) 968.30247ms ago: executing program 1 (id=2468): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 897.810161ms ago: executing program 1 (id=2470): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x80}, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 730.194925ms ago: executing program 2 (id=2471): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'gretap0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/159, 0x9f}], 0x1) 689.998796ms ago: executing program 3 (id=2473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x4, 0xa, 0x17, 0x1c, 0x3, 0x2}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) 672.822336ms ago: executing program 1 (id=2474): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) 597.870268ms ago: executing program 4 (id=2475): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) unshare(0x22020600) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x4}, 0x0, 0x0, 0x0) 580.655508ms ago: executing program 2 (id=2476): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @private=0xa010101}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x1c, 0x9b, 0x3, 0x7, [{@loopback, 0x1ff}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x3}]}, @generic={0x7, 0x8, "13618331e313"}]}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a80)="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", 0x598}], 0x1}}], 0x2, 0x4008000) sendmmsg$sock(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000a40)="1b", 0x1}], 0x1}}], 0x1, 0x40000) 507.635479ms ago: executing program 4 (id=2477): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x1) 442.925111ms ago: executing program 3 (id=2478): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$cont(0x9, r0, 0x7, 0x80) 442.203931ms ago: executing program 1 (id=2479): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1ff, 0x2000, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffe, 0x0, 0x0, 0x8f], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 427.736891ms ago: executing program 2 (id=2480): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) unshare(0x6020400) acct(&(0x7f0000000040)='./file0\x00') unshare(0x22060600) 375.210033ms ago: executing program 3 (id=2481): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000081c0)=[{{&(0x7f0000000a40)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000a80)='p', 0x1}], 0x1}}, {{&(0x7f0000001f80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000003140)=[{&(0x7f0000001fc0)="8f", 0x1}], 0x1}}], 0x2, 0x40840) 285.302104ms ago: executing program 1 (id=2482): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 277.619055ms ago: executing program 4 (id=2483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x20, r1, 0x4f79951a91b7df8f, 0x70bd2c, 0x3, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) 255.373785ms ago: executing program 2 (id=2484): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002005}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 253.298855ms ago: executing program 0 (id=2485): r0 = socket(0x11, 0x800000003, 0x96) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1f, 0x2, {{0x3, [0x0, 0xe], 0x0, [0x4, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) 210.922516ms ago: executing program 3 (id=2486): socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 183.487587ms ago: executing program 4 (id=2487): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = io_uring_setup(0x416d, &(0x7f0000000040)={0x0, 0x102d5, 0x2, 0x3, 0x19f}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000006200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004f00)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x48854) 71.216539ms ago: executing program 4 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000140)=@udp=r1, 0x1}, 0x20) 35.519609ms ago: executing program 4 (id=2489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 0s ago: executing program 2 (id=2490): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) kernel console output (not intermixed with test programs): ations, error -71 [ 138.787805][ T6351] usb 3-1: Using ep0 maxpacket: 16 [ 138.907938][ T6351] usb 3-1: config 0 has no interfaces? [ 139.068436][ T6351] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 139.077558][ T6351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.091384][ T6351] usb 3-1: Product: syz [ 139.095584][ T6351] usb 3-1: Manufacturer: syz [ 139.126651][ T6351] usb 3-1: SerialNumber: syz [ 139.136742][ T6351] usb 3-1: config 0 descriptor?? [ 139.163351][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 139.317826][ T4302] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.443974][ T6799] vhci_hcd: connection closed [ 139.452807][ T155] vhci_hcd: stop threads [ 139.488853][ T155] vhci_hcd: release socket [ 139.494617][ T155] vhci_hcd: disconnect device [ 139.502300][ T6351] usb 3-1: USB disconnect, device number 9 [ 139.517994][ T4246] vhci_hcd: vhci_device speed not set [ 139.563524][ T5606] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 139.682300][ T4302] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 139.694286][ T4302] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 139.704262][ T4302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.749951][ T4302] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 139.977806][ T5606] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 140.006508][ T5606] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 140.033977][ T5606] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 140.077704][ T6351] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.134764][ T5606] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.145791][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.154511][ T5606] usb 2-1: SerialNumber: syz [ 140.188153][ T6827] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 140.327723][ T6351] usb 4-1: Using ep0 maxpacket: 8 [ 140.393369][ T4196] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.447773][ T6351] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.518070][ T6351] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 140.525746][ T6351] usb 4-1: can't read configurations, error -71 [ 140.647813][ T4196] usb 5-1: Using ep0 maxpacket: 16 [ 140.830569][ T6827] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 140.931568][ T4196] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 140.941048][ T4302] stv0680 1-1:4.0: Could not get descriptor 0200 [ 140.950297][ T4196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.959995][ T4196] usb 5-1: Product: syz [ 140.964214][ T4196] usb 5-1: Manufacturer: syz [ 140.969437][ T4196] usb 5-1: SerialNumber: syz [ 140.979211][ T4196] usb 5-1: config 0 descriptor?? [ 141.019378][ T4196] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 141.118065][ T5606] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 141.139643][ T5606] usb 2-1: USB disconnect, device number 12 [ 141.154998][ T4302] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 141.172297][ T4302] stv0680 1-1:4.0: last error: 34, command = 0xf [ 141.187937][ T4302] usb 1-1: USB disconnect, device number 9 [ 141.217889][ T4196] Bluetooth: hci4: command 0x0406 tx timeout [ 141.244415][ T4196] usb 5-1: USB disconnect, device number 12 [ 141.628088][ T4246] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 141.723933][ T6901] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 141.740314][ T6901] syzkaller1: linktype set to 6 [ 141.876631][ T6911] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 142.038203][ T4246] usb 3-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 142.053860][ T4246] usb 3-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 142.088526][ T4246] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.131495][ T4246] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 142.148970][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.164332][ T4246] usb 3-1: config 0 descriptor?? [ 142.348661][ T5606] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.641820][ T4246] appleir 0003:05AC:8243.000E: ignoring exceeding usage max [ 142.655711][ T6942] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 142.666105][ T4246] appleir 0003:05AC:8243.000E: ignoring exceeding usage max [ 142.689655][ T4246] input: HID 05ac:8243 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8243.000E/input/input12 [ 142.721800][ T6944] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 142.742829][ T6944] syzkaller1: linktype set to 6 [ 142.758010][ T5606] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 142.769522][ T5611] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 142.784689][ T5606] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 142.799981][ T4246] appleir 0003:05AC:8243.000E: input,hiddev0,hidraw0: USB HID v0.81 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 142.820483][ T5606] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 142.842571][ T4246] usb 3-1: USB disconnect, device number 10 [ 142.936503][ T6953] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 142.953595][ T5606] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.983086][ T5606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.021334][ T5606] usb 5-1: SerialNumber: syz [ 143.068335][ T6917] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.090574][ T6951] fido_id[6951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 143.149355][ T5611] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 143.162329][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.173331][ T5611] usb 2-1: config 0 descriptor?? [ 143.298343][ T4302] Bluetooth: hci4: command 0x0405 tx timeout [ 143.495545][ T6961] loop3: detected capacity change from 0 to 512 [ 143.605079][ T6961] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80fc018, mo2=0002] [ 143.613616][ T6961] System zones: 0-2, 18-18, 34-35 [ 143.624217][ T6961] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 143.639121][ T6961] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.667855][ T5611] [drm:udl_init] *ERROR* Selecting channel failed [ 143.686903][ T5611] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 143.696858][ T5611] [drm] Initialized udl on minor 2 [ 143.710819][ T6917] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 143.734198][ T6972] loop2: detected capacity change from 0 to 512 [ 143.741867][ T4302] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 143.772720][ T5611] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 143.801016][ T5611] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 143.857009][ T6972] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80fc018, mo2=0002] [ 143.877019][ T5611] usb 2-1: USB disconnect, device number 13 [ 143.886215][ T6972] System zones: 0-2, 18-18, 34-35 [ 143.898553][ T5596] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 143.909225][ T6972] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,debug,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 143.919152][ T5596] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 143.932264][ T5596] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 143.939943][ T6972] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.989323][ T4302] usb 1-1: Using ep0 maxpacket: 32 [ 144.029054][ T5606] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 144.063756][ T5606] usb 5-1: USB disconnect, device number 13 [ 144.112097][ T4302] usb 1-1: config 5 has too many interfaces: 247, using maximum allowed: 32 [ 144.121446][ T4302] usb 1-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 144.130951][ T4302] usb 1-1: config 5 has an invalid interface descriptor of length 6, skipping [ 144.139925][ T4302] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 144.151248][ T4302] usb 1-1: config 5 has 2 interfaces, different from the descriptor's value: 247 [ 144.161520][ T6978] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 144.169700][ T4302] usb 1-1: config 5 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.246676][ T6980] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 144.254943][ T6980] syzkaller1: linktype set to 6 [ 144.357953][ T4302] usb 1-1: New USB device found, idVendor=0763, idProduct=201d, bcdDevice= 0.40 [ 144.375664][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.384874][ T4302] usb 1-1: Product: syz [ 144.389235][ T4302] usb 1-1: Manufacturer: syz [ 144.393957][ T4302] usb 1-1: SerialNumber: syz [ 144.578012][ T6995] loop4: detected capacity change from 0 to 256 [ 144.655827][ T6995] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.682405][ T7003] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.706281][ T6995] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 144.723478][ T7005] sctp: [Deprecated]: syz.1.1164 (pid 7005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.723478][ T7005] Use struct sctp_sack_info instead [ 144.742993][ T6995] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 144.798087][ T4302] usb 1-1: 0:2 : does not exist [ 144.803062][ T4302] usb 1-1: unit 5 not found! [ 144.817164][ T4302] usb 1-1: unit 6 not found! [ 144.892962][ T4302] usb 1-1: USB disconnect, device number 10 [ 145.037378][ T7012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 145.057526][ T7012] syzkaller1: linktype set to 6 [ 145.258917][ T4741] udevd[4741]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.305892][ T7033] loop1: detected capacity change from 0 to 256 [ 145.318451][ T6355] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.339242][ T7035] sctp: [Deprecated]: syz.2.1178 (pid 7035) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.339242][ T7035] Use struct sctp_sack_info instead [ 145.469935][ T7033] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.489773][ T7033] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 145.506708][ T7033] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 145.568684][ T7047] program syz.2.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.678033][ T4302] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 145.696919][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'. [ 145.698771][ T6355] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 145.728090][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1187'. [ 145.737478][ T6355] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 145.753905][ T6355] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 145.868058][ T6355] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.900610][ T6355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.913642][ T6355] usb 4-1: SerialNumber: syz [ 145.968109][ T7019] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.081908][ T7065] sctp: [Deprecated]: syz.0.1193 (pid 7065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.081908][ T7065] Use struct sctp_sack_info instead [ 146.095906][ T4302] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 146.117028][ T4302] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 146.126901][ T4302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.190673][ T4302] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 146.217786][ T5606] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.487786][ T5606] usb 2-1: Using ep0 maxpacket: 32 [ 146.609105][ T7019] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.629246][ T5606] usb 2-1: config 5 has too many interfaces: 247, using maximum allowed: 32 [ 146.638528][ T5606] usb 2-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 146.648135][ T5606] usb 2-1: config 5 has an invalid interface descriptor of length 6, skipping [ 146.657071][ T5606] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 146.667266][ T5606] usb 2-1: config 5 has 2 interfaces, different from the descriptor's value: 247 [ 146.676556][ T5606] usb 2-1: config 5 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.887807][ T5606] usb 2-1: New USB device found, idVendor=0763, idProduct=201d, bcdDevice= 0.40 [ 146.888738][ T6355] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 146.897105][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.912811][ T6355] usb 4-1: USB disconnect, device number 12 [ 146.923396][ T5606] usb 2-1: Product: syz [ 146.930114][ T5606] usb 2-1: Manufacturer: syz [ 146.935137][ T5606] usb 2-1: SerialNumber: syz [ 147.307882][ T5606] usb 2-1: 0:2 : does not exist [ 147.312859][ T5606] usb 2-1: unit 5 not found! [ 147.317564][ T5606] usb 2-1: unit 6 not found! [ 147.331487][ T5606] usb 2-1: USB disconnect, device number 14 [ 147.337899][ T4302] stv0680 5-1:4.0: Could not get descriptor 0200 [ 147.529017][ T7078] loop3: detected capacity change from 0 to 256 [ 147.544887][ T7079] device dummy0 entered promiscuous mode [ 147.557989][ T4302] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 147.566218][ T4302] stv0680 5-1:4.0: last error: 34, command = 0xf [ 147.576611][ T7078] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.589837][ T4904] udevd[4904]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.617189][ T4302] usb 5-1: USB disconnect, device number 14 [ 147.620295][ T7074] device dummy0 left promiscuous mode [ 147.624601][ T7078] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 147.689930][ T7078] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 147.805547][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 147.833793][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1200'. [ 147.890187][ T7087] loop3: detected capacity change from 0 to 16 [ 147.954218][ T7087] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.158957][ T7097] loop9: detected capacity change from 0 to 2640 [ 148.185183][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.196492][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.233864][ C1] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.239052][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1210'. [ 148.244950][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.318685][ T7099] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1210'. [ 148.398759][ T7097] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.433539][ T7097] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.489826][ T7097] ldm_validate_partition_table(): Disk read failed. [ 148.515981][ T7097] Dev loop9: unable to read RDB block 0 [ 148.549156][ T7097] loop9: unable to read partition table [ 148.563990][ T7097] loop9: partition table beyond EOD, truncated [ 148.600225][ T7097] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 148.761147][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 148.827851][ T7116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1219'. [ 148.894330][ T5606] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 149.239856][ T7134] loop0: detected capacity change from 0 to 256 [ 149.247987][ T5606] usb 5-1: Using ep0 maxpacket: 32 [ 149.378958][ T5606] usb 5-1: config 5 has too many interfaces: 247, using maximum allowed: 32 [ 149.404935][ T5606] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 149.414725][ T7134] FAT-fs (loop0): Directory bread(block 64) failed [ 149.434262][ T7134] FAT-fs (loop0): Directory bread(block 65) failed [ 149.440974][ T5606] usb 5-1: config 5 has an invalid interface descriptor of length 6, skipping [ 149.456130][ T7134] FAT-fs (loop0): Directory bread(block 66) failed [ 149.463209][ T5606] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 149.481166][ T7134] FAT-fs (loop0): Directory bread(block 67) failed [ 149.488642][ T5596] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.538870][ T5606] usb 5-1: config 5 has 2 interfaces, different from the descriptor's value: 247 [ 149.554678][ T7134] FAT-fs (loop0): Directory bread(block 68) failed [ 149.567654][ T7134] FAT-fs (loop0): Directory bread(block 69) failed [ 149.575954][ T5606] usb 5-1: config 5 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.603739][ T7134] FAT-fs (loop0): Directory bread(block 70) failed [ 149.616437][ T7134] FAT-fs (loop0): Directory bread(block 71) failed [ 149.671026][ T7134] FAT-fs (loop0): Directory bread(block 72) failed [ 149.678031][ T7134] FAT-fs (loop0): Directory bread(block 73) failed [ 149.792881][ T5596] usb 4-1: Using ep0 maxpacket: 16 [ 149.858163][ T5606] usb 5-1: New USB device found, idVendor=0763, idProduct=201d, bcdDevice= 0.40 [ 149.867272][ T5606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.883680][ T5606] usb 5-1: Product: syz [ 149.888642][ T5606] usb 5-1: Manufacturer: syz [ 149.893280][ T5606] usb 5-1: SerialNumber: syz [ 150.031667][ T7145] loop0: detected capacity change from 0 to 16 [ 150.110846][ T7145] erofs: (device loop0): mounted with root inode @ nid 36. [ 150.118377][ T6351] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 150.157831][ T5596] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 150.166945][ T5596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.202357][ T5596] usb 4-1: Product: syz [ 150.207270][ T5596] usb 4-1: Manufacturer: syz [ 150.242082][ T5596] usb 4-1: SerialNumber: syz [ 150.252136][ T5596] usb 4-1: config 0 descriptor?? [ 150.267849][ T5606] usb 5-1: 0:2 : does not exist [ 150.272814][ T5606] usb 5-1: unit 5 not found! [ 150.277433][ T5606] usb 5-1: unit 6 not found! [ 150.299870][ T5596] gspca_main: spca508-2.14.0 probing 041e:4018 [ 150.330391][ T5606] usb 5-1: USB disconnect, device number 15 [ 150.348671][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.532903][ T6351] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 150.541482][ T6351] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 150.550930][ T6351] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 150.561592][ T6351] usb 2-1: config 220 has no interface number 2 [ 150.568431][ T6351] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 150.582173][ T6351] usb 2-1: config 220 interface 0 has no altsetting 0 [ 150.589272][ T6351] usb 2-1: config 220 interface 76 has no altsetting 0 [ 150.595398][ T5596] gspca_spca508: reg_read err -32 [ 150.596794][ T6351] usb 2-1: config 220 interface 1 has no altsetting 0 [ 150.769135][ T6351] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 150.786164][ T7150] loop0: detected capacity change from 0 to 512 [ 150.792333][ T6351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.805613][ T6351] usb 2-1: Product: syz [ 150.811485][ T6351] usb 2-1: Manufacturer: syz [ 150.816190][ T6351] usb 2-1: SerialNumber: syz [ 150.880389][ T5596] gspca_spca508: reg_read err -71 [ 150.900647][ T5596] gspca_spca508: reg_read err -71 [ 150.938090][ T5596] gspca_spca508: reg_read err -71 [ 150.957806][ T5596] gspca_spca508: reg write: error -71 [ 150.965329][ T5596] spca508: probe of 4-1:0.0 failed with error -71 [ 150.995716][ T5596] usb 4-1: USB disconnect, device number 13 [ 151.004780][ T7150] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 151.060445][ T7150] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.198104][ T6351] usb 2-1: selecting invalid altsetting 0 [ 151.204503][ T6351] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 151.240260][ T7150] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1245: corrupted inode contents [ 151.245104][ T6351] usb 2-1: No valid video chain found. [ 151.295536][ T7150] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.1245: mark_inode_dirty error [ 151.321456][ T7150] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1245: corrupted inode contents [ 151.347219][ T7159] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1245: corrupted inode contents [ 151.367949][ T6351] usb 2-1: selecting invalid altsetting 0 [ 151.377768][ T6351] usbtest: probe of 2-1:220.1 failed with error -22 [ 151.397739][ T7159] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.1245: mark_inode_dirty error [ 151.450234][ T6351] usb 2-1: USB disconnect, device number 15 [ 151.498371][ T7159] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1245: corrupted inode contents [ 151.537413][ T7159] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1245: mark_inode_dirty error [ 151.586159][ T7159] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1245: corrupted inode contents [ 151.609528][ T7159] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #2: comm syz.0.1245: mark_inode_dirty error [ 151.727268][ T7163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1240'. [ 151.757796][ T7163] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1240'. [ 152.550039][ T7203] loop1: detected capacity change from 0 to 1024 [ 152.816716][ T7203] hfsplus: request for non-existent node 211 in B*Tree [ 152.883196][ T7203] hfsplus: request for non-existent node 211 in B*Tree [ 152.962230][ T154] hfsplus: b-tree write err: -5, ino 8 [ 153.142675][ T7220] loop1: detected capacity change from 0 to 1024 [ 153.177886][ T7220] EXT4-fs (loop1): Ignoring removed orlov option [ 153.261055][ T7220] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 153.303345][ T7222] trusted_key: encrypted_key: key user:syz not found [ 153.369430][ T7093] Set syz1 is full, maxelem 65536 reached [ 153.388488][ T5596] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 153.789711][ T5596] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.833761][ T5596] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.927078][ T7256] trusted_key: encrypted_key: key user:syz not found [ 153.949879][ T5596] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.021581][ T5596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.058400][ T5596] usb 4-1: SerialNumber: syz [ 154.340757][ T5596] usb 4-1: 0:2 : does not exist [ 154.383567][ T5596] usb 4-1: USB disconnect, device number 14 [ 154.418141][ T4181] udevd[4181]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 154.517801][ T4196] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.907982][ T4196] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 154.928151][ T4196] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 154.937093][ T4196] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 154.962928][ T4196] usb 3-1: config 220 has no interface number 2 [ 154.977771][ T4196] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 155.008698][ T7286] trusted_key: encrypted_key: key user:syz not found [ 155.011771][ T4196] usb 3-1: config 220 interface 0 has no altsetting 0 [ 155.044122][ T4196] usb 3-1: config 220 interface 76 has no altsetting 0 [ 155.064449][ T4196] usb 3-1: config 220 interface 1 has no altsetting 0 [ 155.217795][ T4302] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 155.247899][ T4196] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 155.257022][ T4196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.265395][ T4196] usb 3-1: Product: syz [ 155.271912][ T4196] usb 3-1: Manufacturer: syz [ 155.276572][ T4196] usb 3-1: SerialNumber: syz [ 155.340571][ T6351] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.467697][ T4302] usb 5-1: Using ep0 maxpacket: 16 [ 155.658220][ T4196] usb 3-1: selecting invalid altsetting 0 [ 155.664569][ T4196] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 155.672333][ T4196] usb 3-1: No valid video chain found. [ 155.708017][ T6351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.724149][ T6351] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.748077][ T4302] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 155.759171][ T4196] usb 3-1: selecting invalid altsetting 0 [ 155.764962][ T4196] usbtest: probe of 3-1:220.1 failed with error -22 [ 155.777889][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.806669][ T4196] usb 3-1: USB disconnect, device number 11 [ 155.816478][ T4302] usb 5-1: Product: syz [ 155.821225][ T6351] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.839409][ T4302] usb 5-1: Manufacturer: syz [ 155.864567][ T6351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.884846][ T4302] usb 5-1: SerialNumber: syz [ 155.900079][ T4302] usb 5-1: config 0 descriptor?? [ 155.905293][ T6351] usb 1-1: SerialNumber: syz [ 155.950051][ T4302] gspca_main: spca508-2.14.0 probing 041e:4018 [ 155.993363][ T7259] ODEBUG: Out of memory. ODEBUG disabled [ 156.213975][ T6351] usb 1-1: 0:2 : does not exist [ 156.218993][ T4302] gspca_spca508: reg_read err -32 [ 156.243253][ T6351] usb 1-1: USB disconnect, device number 11 [ 156.284192][ T4904] udevd[4904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.477748][ T4302] gspca_spca508: reg_read err -71 [ 156.497817][ T4302] gspca_spca508: reg_read err -71 [ 156.519554][ T4302] gspca_spca508: reg_read err -71 [ 156.537785][ T4302] gspca_spca508: reg write: error -71 [ 156.543299][ T4302] spca508: probe of 5-1:0.0 failed with error -71 [ 156.559364][ T4302] usb 5-1: USB disconnect, device number 16 [ 156.628621][ T7259] Set syz1 is full, maxelem 65536 reached [ 157.345401][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 157.522275][ T7344] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1316'. [ 157.665379][ T7356] loop4: detected capacity change from 0 to 512 [ 157.689972][ T7354] overlayfs: invalid origin (0000) [ 157.740968][ T7356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.858626][ T7356] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1323: corrupted xattr entries [ 157.891856][ T7356] EXT4-fs (loop4): Remounting filesystem read-only [ 157.899574][ T7356] EXT4-fs (loop4): 1 truncate cleaned up [ 157.905269][ T7356] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 157.929134][ T5596] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 157.972862][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 158.104649][ T7378] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1332'. [ 158.347929][ T5596] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 158.362843][ T5596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.379823][ T7391] overlayfs: invalid origin (0000) [ 158.400429][ T5596] usb 4-1: config 0 descriptor?? [ 158.449152][ T5596] cp210x 4-1:0.0: cp210x converter detected [ 158.574374][ T7406] loop2: detected capacity change from 0 to 512 [ 158.577508][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1344'. [ 158.600312][ T7406] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.688256][ T7406] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1345: corrupted xattr entries [ 158.725169][ T7406] EXT4-fs (loop2): Remounting filesystem read-only [ 158.730930][ T7412] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1347'. [ 158.767273][ T7406] EXT4-fs (loop2): 1 truncate cleaned up [ 158.785986][ T7406] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 159.090231][ T7431] overlayfs: invalid origin (0000) [ 159.107878][ T5596] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 159.117726][ T5596] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 159.138024][ T5596] usb 4-1: cp210x converter now attached to ttyUSB0 [ 159.169923][ T5596] usb 4-1: USB disconnect, device number 15 [ 159.216639][ T5596] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 159.245056][ T5596] cp210x 4-1:0.0: device disconnected [ 159.603172][ T7447] loop0: detected capacity change from 0 to 32768 [ 159.672939][ T7447] XFS (loop0): Mounting V5 Filesystem [ 159.746721][ T7447] XFS (loop0): Ending clean mount [ 159.885185][ T4188] XFS (loop0): Unmounting Filesystem [ 160.494565][ T7502] loop0: detected capacity change from 0 to 512 [ 160.534767][ T7502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.610140][ T7502] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.1373: corrupted xattr entries [ 160.648249][ T7502] EXT4-fs (loop0): Remounting filesystem read-only [ 160.691495][ T7502] EXT4-fs (loop0): 1 truncate cleaned up [ 160.717710][ T7502] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,debug_want_extra_isize=0x000000000000006c,lazytime,nodioread_nolock,minixdf,. Quota mode: none. [ 160.931641][ T7525] loop0: detected capacity change from 0 to 16 [ 160.966841][ T7525] erofs: (device loop0): mounted with root inode @ nid 36. [ 161.016555][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 161.072515][ T4207] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 161.112450][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 161.121952][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 161.131023][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 161.140258][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 161.149415][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 161.158479][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 161.193284][ T7525] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 161.266322][ T7525] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 161.319837][ T26] audit: type=1800 audit(1782787977.777:2): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1394" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 161.530482][ T7549] loop1: detected capacity change from 0 to 1024 [ 161.650891][ T7534] syz.0.1394 (7534): drop_caches: 2 [ 161.669309][ T7549] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 161.736325][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.743508][ T7551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.771611][ T7549] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 161.799466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.029065][ T7565] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.169917][ T7569] device team_slave_0 entered promiscuous mode [ 162.176616][ T7569] device team_slave_1 entered promiscuous mode [ 162.214863][ T7569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.496624][ T7553] loop3: detected capacity change from 0 to 32768 [ 162.616231][ T7553] (syz.3.1407,7553,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.654420][ T7553] (syz.3.1407,7553,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 162.658128][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.675286][ T7588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.773753][ T7553] JBD2: Ignoring recovery information on journal [ 162.824737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.937459][ T7602] device team_slave_0 entered promiscuous mode [ 162.943771][ T7602] device team_slave_1 entered promiscuous mode [ 162.969323][ T7602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.988701][ T7553] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 163.121042][ T7611] loop2: detected capacity change from 0 to 128 [ 163.189566][ T7611] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 163.274155][ T7611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.349394][ T7622] program syz.0.1438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.584183][ T7628] loop2: detected capacity change from 0 to 1024 [ 163.622223][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 163.690137][ T7628] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 163.788170][ T7628] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 164.122072][ T7647] loop3: detected capacity change from 0 to 512 [ 164.139755][ T7649] loop0: detected capacity change from 0 to 24 [ 164.159058][ T7649] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 164.225099][ T7649] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 164.276214][ T7647] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 164.394451][ T7647] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.402662][ T7634] loop4: detected capacity change from 0 to 40427 [ 164.456292][ T7634] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 164.507763][ T7634] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 164.626719][ T7634] F2FS-fs (loop4): invalid crc value [ 164.639813][ T7663] program syz.3.1457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.681713][ T7634] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 164.889207][ T7673] loop3: detected capacity change from 0 to 1024 [ 164.933701][ T7673] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 164.963233][ T7634] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 164.970572][ T7634] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 164.979052][ T7673] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 165.020428][ T26] audit: type=1800 audit(1782787981.477:3): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1446" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 165.163540][ T7685] loop1: detected capacity change from 0 to 128 [ 165.242688][ T7685] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 165.287842][ T7634] attempt to access beyond end of device [ 165.287842][ T7634] loop4: rw=34817, want=79872, limit=40427 [ 165.323973][ T7685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.362946][ T7693] loop3: detected capacity change from 0 to 256 [ 165.400487][ T7634] attempt to access beyond end of device [ 165.400487][ T7634] loop4: rw=34817, want=81920, limit=40427 [ 165.468485][ T4197] attempt to access beyond end of device [ 165.468485][ T4197] loop4: rw=2049, want=45104, limit=40427 [ 165.497808][ T7693] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 165.821668][ T7702] loop1: detected capacity change from 0 to 512 [ 165.868287][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 166.000354][ T7710] loop3: detected capacity change from 0 to 24 [ 166.029252][ T7702] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 166.065174][ T7702] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.078367][ T7710] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 166.124892][ T7710] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 166.167034][ T7715] program syz.4.1471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.432723][ T7696] (syz.2.1470,7696,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.461925][ T7696] (syz.2.1470,7696,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 166.564514][ T7696] JBD2: Ignoring recovery information on journal [ 166.626586][ T7733] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 166.755919][ T7733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.770388][ T7696] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 167.148364][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 167.175595][ T7726] [ 167.175595][ T7726] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.175595][ T7726] [ 167.242957][ T7745] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 167.390123][ T4188] [ 167.390123][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.390123][ T4188] [ 167.427904][ T4188] [ 167.427904][ T4188] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.427904][ T4188] [ 167.444671][ T7754] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1496'. [ 167.606951][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1499'. [ 167.665447][ T7751] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1496'. [ 167.710038][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1493'. [ 167.857733][ T6351] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 168.131494][ T7783] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1508'. [ 168.237916][ T6351] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 168.255388][ T6351] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 168.319022][ T7792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1513'. [ 168.363278][ T7793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1512'. [ 168.426593][ T7795] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1514'. [ 168.457936][ T6351] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 168.488067][ T6351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.526479][ T6351] usb 1-1: Product: syz [ 168.530823][ T6351] usb 1-1: Manufacturer: syz [ 168.535804][ T6351] usb 1-1: SerialNumber: syz [ 168.569462][ T6351] usb 1-1: config 0 descriptor?? [ 168.618056][ T7758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.627805][ T7758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.866857][ T7758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 168.894426][ T7758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 169.113432][ T7823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1525'. [ 169.377979][ T6351] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 169.599562][ T6351] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 169.661564][ T6351] usb 1-1: USB disconnect, device number 12 [ 169.767850][ T7818] set_capacity_and_notify: 4 callbacks suppressed [ 169.767868][ T7818] loop4: detected capacity change from 0 to 32768 [ 169.820458][ T7818] (syz.4.1524,7818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.861218][ T7818] (syz.4.1524,7818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.941618][ T7818] JBD2: Ignoring recovery information on journal [ 170.158624][ T7818] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 170.466130][ T4197] ocfs2: Unmounting device (7,4) on (node local) [ 170.856511][ T7820] loop1: detected capacity change from 0 to 40427 [ 170.930473][ T7869] loop4: detected capacity change from 0 to 512 [ 171.001021][ T7869] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.172530][ T7820] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 171.227904][ T7820] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 171.302512][ T7820] F2FS-fs (loop1): invalid crc value [ 171.489387][ T7820] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 171.787685][ T7820] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 171.794795][ T7820] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.100872][ T7863] loop3: detected capacity change from 0 to 32768 [ 172.114970][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.275584][ T7863] [ 172.275584][ T7863] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.275584][ T7863] [ 172.490159][ T4190] [ 172.490159][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.490159][ T4190] [ 172.537779][ T4190] [ 172.537779][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 172.537779][ T4190] [ 173.497186][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.611787][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.301602][ T7866] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.313155][ T7866] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.326167][ T7866] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.335443][ T7866] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.648373][ T7889] kvm [7886]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xeb7 [ 174.761849][ T7900] wlan0 speed is unknown, defaulting to 1000 [ 174.833360][ T7900] wlan0 speed is unknown, defaulting to 1000 [ 174.960642][ T7900] wlan0 speed is unknown, defaulting to 1000 [ 174.992010][ T7900] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 175.051829][ T7900] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 175.159179][ T7900] wlan0 speed is unknown, defaulting to 1000 [ 175.195474][ T7900] wlan0 speed is unknown, defaulting to 1000 [ 175.212660][ T7900] wlan0 speed is unknown, defaulting to 1000 [ 175.234295][ T7900] wlan0 speed is unknown, defaulting to 1000 [ 175.254440][ T7900] wlan0 speed is unknown, defaulting to 1000 [ 175.573892][ T7947] [U]  [ 175.586628][ T7947] [U] K{‘ [ 175.595766][ T7947] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 175.632120][ T7947] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 175.717358][ T7947] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 175.787269][ T7947] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 175.875761][ T7959] program syz.4.1583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.894853][ T7947] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 175.955908][ T7947] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 175.967864][ T7947] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 176.038919][ T7947] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 176.442912][ T7986] program syz.1.1595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.534558][ T7947] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 176.589294][ T7947] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 176.643903][ T7947] [U] 22½“Æ©ÐÛ©X?0;3U± [ 176.656631][ T7947] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 176.720753][ T7947] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 176.731539][ T7947] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 176.741202][ T7947] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 176.748776][ T7947] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 176.761715][ T7947] [U] ¹ EC [ 176.765481][ T7947] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 176.811288][ T7946] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 176.857767][ T6351] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 177.170640][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.234040][ T8002] device team_slave_0 left promiscuous mode [ 177.241145][ T6351] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 177.251525][ T8002] device team_slave_1 left promiscuous mode [ 177.257806][ T6351] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 177.427857][ T6351] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 177.451655][ T6351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.473217][ T6351] usb 5-1: Product: syz [ 177.480745][ T6351] usb 5-1: Manufacturer: syz [ 177.485511][ T6351] usb 5-1: SerialNumber: syz [ 177.492595][ T6351] usb 5-1: config 0 descriptor?? [ 177.518036][ T7996] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.525187][ T7996] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.799369][ T7996] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.806670][ T7996] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.826067][ T8024] program syz.0.1610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.182231][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.236206][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.269756][ T6351] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 178.297719][ T4266] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 178.477810][ T6351] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 178.496581][ T6351] usb 5-1: USB disconnect, device number 17 [ 178.537780][ T4266] usb 4-1: Using ep0 maxpacket: 32 [ 178.658390][ T4266] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 178.670786][ T4266] usb 4-1: config 2 has no interface number 0 [ 178.682689][ T4266] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 178.694253][ T4266] usb 4-1: config 2 interface 88 has no altsetting 0 [ 178.806696][ T8002] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.815946][ T8002] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.825747][ T8002] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.835624][ T8002] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.857937][ T4266] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 178.872789][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.883429][ T4266] usb 4-1: Product: syz [ 178.891307][ T4266] usb 4-1: Manufacturer: syz [ 178.896200][ T4266] usb 4-1: SerialNumber: syz [ 178.918056][ T8033] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 179.155371][ T8033] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 179.199170][ T8052] input: syz1 as /devices/virtual/input/input13 [ 179.451772][ T8068] loop2: detected capacity change from 0 to 64 [ 179.493165][ T8070] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 179.513259][ T8070] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 179.573588][ T26] audit: type=1800 audit(1782788764.028:4): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1632" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 179.682089][ T4192] hfs: node 4:3 still has 1 user(s)! [ 179.838772][ T4266] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 179.867756][ T4266] asix: probe of 4-1:2.88 failed with error -71 [ 179.895408][ T4266] usb 4-1: USB disconnect, device number 16 [ 180.186617][ T8103] loop1: detected capacity change from 0 to 64 [ 180.208687][ T8097] loop2: detected capacity change from 0 to 4096 [ 180.274983][ T26] audit: type=1800 audit(1782788764.728:5): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1647" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 180.451465][ T4189] hfs: node 4:3 still has 1 user(s)! [ 180.469090][ T8097] ntfs3: loop2: failed to convert "0080" to maciceland [ 180.945517][ T8137] __nla_validate_parse: 3 callbacks suppressed [ 180.945535][ T8137] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1656'. [ 181.056593][ T8142] input: syz1 as /devices/virtual/input/input14 [ 181.179300][ T8150] loop4: detected capacity change from 0 to 64 [ 181.247900][ T26] audit: type=1800 audit(1782788765.708:6): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1661" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 181.340675][ T4197] hfs: node 4:3 still has 1 user(s)! [ 181.427761][ T5611] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 181.565852][ T8171] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 181.639453][ T8171] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 181.819616][ T8185] loop0: detected capacity change from 0 to 64 [ 181.837980][ T5611] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.866336][ T5611] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 181.899932][ T5611] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.941422][ T5611] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.964819][ T26] audit: type=1800 audit(1782788766.418:7): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1675" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 182.002046][ T5611] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 182.023431][ T8192] loop3: detected capacity change from 0 to 1024 [ 182.091620][ T4188] hfs: node 4:3 still has 1 user(s)! [ 182.177881][ T5611] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.198604][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.206658][ T5611] usb 2-1: Product: syz [ 182.278656][ T5611] usb 2-1: Manufacturer: syz [ 182.338871][ T5611] cdc_wdm 2-1:1.0: skipping garbage [ 182.344150][ T5611] cdc_wdm 2-1:1.0: skipping garbage [ 182.367960][ T5611] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 182.384188][ T5611] cdc_wdm 2-1:1.0: Unknown control protocol [ 182.965783][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.023149][ T8206] device team_slave_0 left promiscuous mode [ 183.029979][ T8206] device team_slave_1 left promiscuous mode [ 183.122478][ T5596] usb 2-1: USB disconnect, device number 16 [ 183.746717][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.802374][ T8206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.448064][ T8206] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.457764][ T8206] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.466822][ T8206] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.482086][ T8206] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.504021][ T8241] loop1: detected capacity change from 0 to 32768 [ 184.589341][ T8241] XFS (loop1): Mounting V5 Filesystem [ 184.687902][ T8241] XFS (loop1): Ending clean mount [ 184.804563][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 184.937289][ T4189] XFS (loop1): Unmounting Filesystem [ 185.288401][ T6350] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 185.527677][ T6350] usb 1-1: Using ep0 maxpacket: 32 [ 185.647922][ T6350] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 185.662908][ T6350] usb 1-1: config 2 has no interface number 0 [ 185.680364][ T6350] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 185.691955][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'. [ 185.705457][ T6350] usb 1-1: config 2 interface 88 has no altsetting 0 [ 185.878445][ T6350] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 185.898057][ T6350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.928246][ T6350] usb 1-1: Product: syz [ 185.945435][ T6350] usb 1-1: Manufacturer: syz [ 185.955670][ T6350] usb 1-1: SerialNumber: syz [ 185.998157][ T8266] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 186.251094][ T8266] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 186.306395][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1728'. [ 186.923456][ T6350] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 186.942472][ T6350] asix: probe of 1-1:2.88 failed with error -71 [ 186.954446][ T6350] usb 1-1: USB disconnect, device number 13 [ 187.110940][ T8389] netlink: 'syz.4.1743': attribute type 1 has an invalid length. [ 187.316679][ T8385] loop2: detected capacity change from 0 to 32768 [ 187.377835][ T8385] XFS (loop2): Mounting V5 Filesystem [ 187.410945][ T8385] XFS (loop2): Ending clean mount [ 187.515433][ T4192] XFS (loop2): Unmounting Filesystem [ 187.835089][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1756'. [ 188.127909][ T8432] loop0: detected capacity change from 0 to 8 [ 188.475735][ T8445] netlink: 'syz.1.1766': attribute type 10 has an invalid length. [ 188.484632][ T8445] device bridge_slave_1 left promiscuous mode [ 188.495343][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.539950][ T8427] loop4: detected capacity change from 0 to 32768 [ 188.547927][ T5611] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 188.557892][ T5606] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 188.641175][ T8427] XFS (loop4): Mounting V5 Filesystem [ 188.648548][ T8454] loop0: detected capacity change from 0 to 1024 [ 188.658516][ T8445] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 188.678836][ T8454] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 188.678836][ T8454] [ 188.759766][ T8427] XFS (loop4): Ending clean mount [ 188.786857][ T8454] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 188.803587][ T8454] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1769'. [ 188.938705][ T4197] XFS (loop4): Unmounting Filesystem [ 188.978922][ T5606] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 188.987087][ T5606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.997702][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.017667][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.027488][ T5611] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 189.036978][ T5606] usb 3-1: config 0 has no interface number 0 [ 189.043359][ T5606] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.057340][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.086705][ T5611] usb 4-1: config 0 descriptor?? [ 189.117828][ T8467] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 189.271427][ T5606] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 189.302012][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.326187][ T5606] usb 3-1: Product: syz [ 189.330753][ T5606] usb 3-1: Manufacturer: syz [ 189.335400][ T5606] usb 3-1: SerialNumber: syz [ 189.360948][ T5606] usb 3-1: config 0 descriptor?? [ 189.412785][ T5606] cyberjack 3-1:0.69: required endpoints missing [ 189.536330][ T8484] lo speed is unknown, defaulting to 1000 [ 189.556384][ T8484] lo speed is unknown, defaulting to 1000 [ 189.564559][ T8484] lo speed is unknown, defaulting to 1000 [ 189.587458][ T8484] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 189.605589][ T5611] konepure 0003:1E7D:2DBE.000F: item fetching failed at offset 5/7 [ 189.636396][ T5611] konepure 0003:1E7D:2DBE.000F: parse failed [ 189.648026][ T5611] konepure: probe of 0003:1E7D:2DBE.000F failed with error -22 [ 189.653056][ T6350] usb 3-1: USB disconnect, device number 12 [ 189.666970][ T8484] lo speed is unknown, defaulting to 1000 [ 189.687251][ T8484] lo speed is unknown, defaulting to 1000 [ 189.696554][ T8484] lo speed is unknown, defaulting to 1000 [ 189.713276][ T8484] lo speed is unknown, defaulting to 1000 [ 189.725523][ T8484] lo speed is unknown, defaulting to 1000 [ 189.823848][ T6351] usb 4-1: USB disconnect, device number 17 [ 189.916052][ T8495] loop4: detected capacity change from 0 to 1024 [ 190.022858][ T8495] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 190.022858][ T8495] [ 190.066192][ T8497] loop1: detected capacity change from 0 to 8 [ 190.151828][ T8495] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 190.200543][ T8495] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1783'. [ 190.670044][ T8521] netlink: 'syz.4.1795': attribute type 10 has an invalid length. [ 190.697280][ T8521] device bridge_slave_1 left promiscuous mode [ 190.717291][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.751499][ T8524] loop2: detected capacity change from 0 to 8 [ 190.777097][ T8521] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 190.984712][ T8530] loop2: detected capacity change from 0 to 1024 [ 191.012559][ T8530] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 191.012559][ T8530] [ 191.046749][ T8530] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 191.054702][ T8530] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1798'. [ 191.097753][ T4266] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 191.137728][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 191.137760][ T6350] Bluetooth: hci1: command 0x0406 tx timeout [ 191.172314][ T6350] Bluetooth: hci2: command 0x0406 tx timeout [ 191.189654][ T6350] Bluetooth: hci3: command 0x0406 tx timeout [ 191.193123][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'. [ 191.478032][ T4266] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 191.489173][ T4266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.500119][ T4266] usb 4-1: config 0 has no interface number 0 [ 191.511927][ T4266] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.567842][ T5611] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.687915][ T4266] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 191.705023][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.723022][ T4266] usb 4-1: Product: syz [ 191.733465][ T4266] usb 4-1: Manufacturer: syz [ 191.738758][ T4266] usb 4-1: SerialNumber: syz [ 191.745313][ T4266] usb 4-1: config 0 descriptor?? [ 191.789041][ T4266] cyberjack 4-1:0.69: required endpoints missing [ 191.937798][ T5611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.948801][ T5611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.958759][ T5611] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 191.973660][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.005155][ T5611] usb 3-1: config 0 descriptor?? [ 192.012991][ T4266] usb 4-1: USB disconnect, device number 18 [ 192.479632][ T5611] konepure 0003:1E7D:2DBE.0010: item fetching failed at offset 5/7 [ 192.497954][ T5611] konepure 0003:1E7D:2DBE.0010: parse failed [ 192.504194][ T5611] konepure: probe of 0003:1E7D:2DBE.0010 failed with error -22 [ 192.697724][ T6351] usb 3-1: USB disconnect, device number 13 [ 192.715409][ T8558] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 192.763498][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.786057][ T8558] device bridge_slave_1 left promiscuous mode [ 192.792846][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.797539][ T8564] loop4: detected capacity change from 0 to 128 [ 192.812839][ T8566] program syz.0.1815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.841199][ T8558] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.864805][ T8564] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 192.878662][ C1] Illegal XDP return value 16128, expect packet loss! [ 192.976440][ T8564] sysv_free_block: trying to free block not in datazone [ 193.095678][ T4197] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 193.291372][ T8579] netlink: 'syz.3.1823': attribute type 17 has an invalid length. [ 193.318206][ T8579] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1823'. [ 193.564065][ T8597] netlink: 'syz.4.1831': attribute type 2 has an invalid length. [ 193.592298][ T8597] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1831'. [ 194.187091][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.194779][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.276557][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 194.416163][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1854'. [ 194.447383][ T8651] nbd: illegal input index 65536 [ 194.731233][ T8667] mkiss: ax0: crc mode is auto. [ 194.882408][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1866'. [ 195.616001][ T8697] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by ""[8697] [ 196.297799][ T5611] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.557758][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 196.717940][ T5611] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 196.736417][ T5611] usb 1-1: config 0 has no interface number 0 [ 196.767617][ T5611] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 196.787676][ T5611] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 196.819082][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 196.897764][ T4196] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 197.017726][ T5611] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 197.026817][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.039659][ T5611] usb 1-1: Product: syz [ 197.043877][ T5611] usb 1-1: Manufacturer: syz [ 197.052100][ T5611] usb 1-1: SerialNumber: syz [ 197.070821][ T5611] usb 1-1: config 0 descriptor?? [ 197.087876][ T8707] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.095259][ T8707] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.147637][ T4196] usb 3-1: Using ep0 maxpacket: 32 [ 197.267923][ T4196] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 197.281773][ T4196] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 197.311887][ T4196] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 197.343517][ T4196] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 197.362108][ T8707] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.372405][ T4196] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.385819][ T8707] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 197.537731][ T5596] Bluetooth: hci4: command 0x0405 tx timeout [ 197.557893][ T4196] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 197.591082][ T4196] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 197.610079][ T4196] usb 3-1: Product: syz [ 197.627874][ T5611] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 197.644097][ T4196] usb 3-1: Manufacturer: syz [ 197.659174][ T4196] usb 3-1: SerialNumber: syz [ 197.686410][ T4196] usb 3-1: config 0 descriptor?? [ 197.742770][ T4196] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 197.775534][ T8758] netlink: 'syz.3.1900': attribute type 8 has an invalid length. [ 197.785604][ T4196] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 197.849552][ T5611] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 36 [ 198.058159][ T5596] usb 1-1: USB disconnect, device number 14 [ 198.185987][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 198.278837][ T4266] usb 3-1: USB disconnect, device number 14 [ 198.287144][ T4266] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 198.297783][ T5611] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 198.499843][ T4196] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 198.612452][ T8799] loop0: detected capacity change from 0 to 512 [ 198.697191][ T8799] FAT-fs (loop0): Directory bread(block 199916) failed [ 198.705121][ T8799] FAT-fs (loop0): Directory bread(block 199917) failed [ 198.713586][ T8799] FAT-fs (loop0): Directory bread(block 199918) failed [ 198.718672][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.721262][ T8799] FAT-fs (loop0): Directory bread(block 199919) failed [ 198.747400][ T8799] FAT-fs (loop0): Directory bread(block 199920) failed [ 198.758009][ T8799] FAT-fs (loop0): Directory bread(block 199921) failed [ 198.765357][ T8799] FAT-fs (loop0): Directory bread(block 199922) failed [ 198.767712][ T5611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 198.783121][ T8799] FAT-fs (loop0): Directory bread(block 199923) failed [ 198.824957][ T5611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 198.878657][ T5611] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 198.888017][ T4196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.900241][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.917715][ T4196] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.944641][ T5611] usb 2-1: config 0 descriptor?? [ 198.965347][ T4196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.977999][ T8773] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 199.002372][ T4196] usb 5-1: config 0 descriptor?? [ 199.027093][ T8799] FAT-fs (loop0): FAT read failed (blocknr 128) [ 199.187971][ T8811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1915'. [ 199.197269][ T8811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1915'. [ 199.403943][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 199.443637][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 199.475040][ T5611] logitech 0003:046D:C295.0011: unknown main item tag 0x7 [ 199.482950][ T4196] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 199.489436][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1921'. [ 199.506470][ T5611] logitech 0003:046D:C295.0011: unknown main item tag 0x3 [ 199.514614][ T5611] logitech 0003:046D:C295.0011: unexpected long global item [ 199.523072][ T4196] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input16 [ 199.538713][ T5611] logitech 0003:046D:C295.0011: parse failed [ 199.544797][ T5611] logitech: probe of 0003:046D:C295.0011 failed with error -22 [ 199.686987][ T8833] loop2: detected capacity change from 0 to 512 [ 199.696988][ T4196] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 199.713879][ T5611] usb 2-1: USB disconnect, device number 17 [ 199.771203][ T8839] loop0: detected capacity change from 0 to 256 [ 199.878923][ T8833] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,delalloc,,errors=continue. Quota mode: writeback. [ 200.067999][ T8844] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 200.153628][ T8848] loop0: detected capacity change from 0 to 128 [ 200.192193][ T8848] sysv_free_block: trying to free block not in datazone [ 200.311452][ T4188] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 200.517686][ T4266] usb 5-1: USB disconnect, device number 18 [ 200.814152][ T8883] loop3: detected capacity change from 0 to 128 [ 200.894695][ T8885] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1947'. [ 200.914351][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'. [ 200.957832][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1947'. [ 201.372603][ T5606] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 201.575649][ T8911] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 201.626470][ T8911] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 201.637685][ T5606] usb 4-1: Using ep0 maxpacket: 8 [ 201.767929][ T5606] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.777862][ T154] wlan1: Trigger new scan to find an IBSS to join [ 201.795809][ T5606] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.827683][ T5606] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.839726][ T8917] loop0: detected capacity change from 0 to 512 [ 201.847639][ T5606] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.887725][ T5606] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.896835][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.922626][ T8917] EXT4-fs (loop0): Ignoring removed bh option [ 201.997743][ T8898] loop2: detected capacity change from 0 to 40427 [ 202.020660][ T8917] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 202.046875][ T8917] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.089052][ T8898] F2FS-fs (loop2): invalid crc value [ 202.198804][ T8898] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.207821][ T5606] usb 4-1: GET_CAPABILITIES returned 0 [ 202.213375][ T5606] usbtmc 4-1:16.0: can't read capabilities [ 202.223782][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 202.377446][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 202.391838][ T8898] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 202.445337][ T4196] usb 4-1: USB disconnect, device number 19 [ 202.484857][ T8898] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 202.688714][ T3016] wlan1: Creating new IBSS network, BSSID 5a:1d:65:a6:55:27 [ 203.418642][ T8983] netlink: 'syz.1.1988': attribute type 29 has an invalid length. [ 203.447020][ T8983] netlink: 'syz.1.1988': attribute type 29 has an invalid length. [ 203.603001][ T8992] loop1: detected capacity change from 0 to 1024 [ 203.732048][ T26] audit: type=1326 audit(1782788788.188:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.4.1996" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46d3772e59 code=0x0 [ 204.095120][ T9015] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4190] was attempted by ""[9015] [ 204.185570][ T8981] loop2: detected capacity change from 0 to 32768 [ 204.287240][ T8981] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 204.640808][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 204.726402][ T6350] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 204.978722][ T9056] loop4: detected capacity change from 0 to 64 [ 204.987866][ T6350] usb 4-1: Using ep0 maxpacket: 8 [ 205.011101][ T26] audit: type=1800 audit(1782788789.468:9): pid=9056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2020" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 205.079452][ T9058] __nla_validate_parse: 1 callbacks suppressed [ 205.079467][ T9058] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2021'. [ 205.107918][ T6350] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 205.176292][ T4197] hfs: node 4:3 still has 1 user(s)! [ 205.184668][ T4266] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 205.195380][ T9060] UHID_CREATE from different security context by process 839 (syz.2.2023), this is not allowed. [ 205.217392][ T4266] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.293431][ T6350] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 205.327273][ T6350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.356073][ T6350] usb 4-1: Product: syz [ 205.365372][ T6350] usb 4-1: Manufacturer: syz [ 205.400005][ T6350] usb 4-1: SerialNumber: syz [ 205.429020][ T6350] usb 4-1: config 0 descriptor?? [ 205.463065][ T9065] fido_id[9065]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.479207][ T6350] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 205.505132][ T6350] usb 4-1: setting power ON [ 205.521026][ T6350] dvb-usb: bulk message failed: -22 (2/0) [ 205.563914][ T6350] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.580488][ T9075] program syz.2.2029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.621056][ T6350] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 205.642604][ T6350] usb 4-1: media controller created [ 205.683954][ T9033] dvb-usb: bulk message failed: -22 (3/0) [ 205.697805][ T9033] dvb-usb: bulk message failed: -22 (4/0) [ 205.719960][ T9033] dvb-usb: bulk message failed: -22 (4/0) [ 205.735848][ T6350] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.748022][ T9033] cxusb: i2c read failed [ 205.824434][ T6350] usb 4-1: selecting invalid altsetting 6 [ 205.838013][ T6350] usb 4-1: digital interface selection failed (-22) [ 205.855717][ T6350] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 205.908223][ T6350] usb 4-1: setting power OFF [ 205.916538][ T6350] dvb-usb: bulk message failed: -22 (2/0) [ 205.932048][ T6350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 205.969420][ T6350] (NULL device *): no alternate interface [ 206.025159][ T6350] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 206.044767][ T6350] usb 4-1: USB disconnect, device number 20 [ 206.198251][ T9102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2041'. [ 206.457424][ T9091] loop4: detected capacity change from 0 to 40427 [ 206.505002][ T9091] F2FS-fs (loop4): invalid crc value [ 206.522212][ T9091] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 206.636181][ T9091] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.716317][ T4197] attempt to access beyond end of device [ 206.716317][ T4197] loop4: rw=2049, want=45104, limit=40427 [ 206.854224][ T9125] netlink: 'syz.2.2051': attribute type 8 has an invalid length. [ 206.869135][ T9125] netem: change failed [ 206.914707][ T9123] loop1: detected capacity change from 0 to 4096 [ 206.954522][ T9123] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 207.072239][ T9123] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 207.081816][ T9123] ntfs3: loop1: Failed to load $Extend. [ 207.485633][ T9131] loop3: detected capacity change from 0 to 8192 [ 207.585120][ T9131] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 207.652667][ T9131] REISERFS (device loop3): using ordered data mode [ 207.667795][ T9131] reiserfs: using flush barriers [ 207.678814][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 207.694104][ T9131] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 207.720723][ T9131] REISERFS (device loop3): checking transaction log (loop3) [ 207.856452][ T9164] loop1: detected capacity change from 0 to 64 [ 207.947010][ T9169] device lo entered promiscuous mode [ 207.965835][ T9164] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 207.977757][ T9169] device tunl0 entered promiscuous mode [ 207.987814][ T9164] hfs: get root inode failed [ 208.006982][ T9169] device gre0 entered promiscuous mode [ 208.044469][ T9169] device gretap0 entered promiscuous mode [ 208.070293][ T9169] device erspan0 entered promiscuous mode [ 208.106851][ T9131] REISERFS (device loop3): Using tea hash to sort names [ 208.129091][ T9169] device ip_vti0 entered promiscuous mode [ 208.163140][ T9169] device ip6_vti0 entered promiscuous mode [ 208.176011][ T9131] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 208.187273][ T9169] device sit0 entered promiscuous mode [ 208.220804][ T9169] device ip6tnl0 entered promiscuous mode [ 208.243090][ T9169] device ip6gre0 entered promiscuous mode [ 208.248358][ T9169] device syz_tun entered promiscuous mode [ 208.255608][ T9169] device ip6gretap0 entered promiscuous mode [ 208.266276][ T9169] device bridge0 entered promiscuous mode [ 208.291887][ T5611] lo speed is unknown, defaulting to 1000 [ 208.994554][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 209.207316][ T9218] loop3: detected capacity change from 0 to 512 [ 209.303467][ T9218] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 209.334312][ T9218] EXT4-fs (loop3): mount failed [ 209.607845][ T9218] autofs4:pid:9218:autofs_fill_super: could not open pipe file descriptor [ 209.735118][ T9236] loop1: detected capacity change from 0 to 128 [ 209.803725][ T9236] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 209.888065][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 209.888353][ T9236] sysv_free_block: trying to free block not in datazone [ 209.937150][ T9239] Bluetooth: hci5: Frame reassembly failed (-84) [ 209.975185][ T9210] loop0: detected capacity change from 0 to 40427 [ 210.054918][ T4189] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 210.088959][ T9210] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 210.115725][ T9210] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 210.214118][ T9210] F2FS-fs (loop0): invalid crc value [ 210.283842][ T9210] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.461662][ T9230] loop2: detected capacity change from 0 to 32768 [ 210.479471][ T9210] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 210.486605][ T9210] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 210.688972][ T9230] XFS (loop2): Mounting V5 Filesystem [ 210.838497][ T9230] XFS (loop2): Ending clean mount [ 210.958574][ T4192] XFS (loop2): Unmounting Filesystem [ 210.990774][ T5611] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 211.259805][ T5611] usb 2-1: Using ep0 maxpacket: 32 [ 211.388002][ T5611] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 211.409533][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.441476][ T5611] usb 2-1: config 0 descriptor?? [ 211.495574][ T5611] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 211.777836][ T6350] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 211.900714][ T9302] lo speed is unknown, defaulting to 1000 [ 211.947849][ T5596] Bluetooth: hci5: command 0x1003 tx timeout [ 211.954253][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 212.137914][ T6350] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.145980][ T6350] usb 5-1: config 0 has no interface number 0 [ 212.156373][ T6350] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 212.158306][ T5611] gspca_nw80x: reg_w err -71 [ 212.171102][ T5611] nw80x: probe of 2-1:0.0 failed with error -71 [ 212.180430][ T5611] usb 2-1: USB disconnect, device number 18 [ 212.199043][ T6350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.207886][ T5606] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 212.218845][ T6350] usb 5-1: config 0 descriptor?? [ 212.261282][ T6350] usb 5-1: selecting invalid altsetting 1 [ 212.291849][ T6350] dvb_ttusb_budget: ttusb_init_controller: error [ 212.302708][ T6350] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 212.393248][ T6350] DVB: Unable to find symbol cx22700_attach() [ 212.462111][ T6350] DVB: Unable to find symbol tda10046_attach() [ 212.468012][ T5606] usb 1-1: Using ep0 maxpacket: 16 [ 212.474221][ T6350] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 212.515409][ T6350] usb 5-1: USB disconnect, device number 19 [ 212.627820][ T5606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 212.647657][ T5606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8244, setting to 1024 [ 212.659138][ T5606] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.672914][ T5606] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 212.682187][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.698866][ T5606] usb 1-1: config 0 descriptor?? [ 212.756033][ T5606] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 212.852031][ T5605] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 212.982098][ T5611] usb 1-1: USB disconnect, device number 15 [ 212.997677][ C1] pxrc 1-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 213.127682][ T5605] usb 3-1: Using ep0 maxpacket: 16 [ 213.137542][ T9339] tap0: tun_chr_ioctl cmd 1074025681 [ 213.267835][ T5605] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.291632][ T5605] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.314319][ T5605] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 213.329141][ T5605] usb 3-1: config 0 interface 0 has no altsetting 0 [ 213.340051][ T5605] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 213.349441][ T5605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.366732][ T5605] usb 3-1: config 0 descriptor?? [ 213.702927][ T9359] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2153'. [ 213.838679][ T5605] hid (null): bogus close delimiter [ 213.844538][ T5605] hid (null): bogus close delimiter [ 213.856807][ T5605] hid (null): global environment stack underflow [ 213.868344][ T5605] hid (null): report_id 0 is invalid [ 214.017771][ T5605] Bluetooth: hci5: command 0x1001 tx timeout [ 214.024813][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 214.057401][ T5605] usb 3-1: USB disconnect, device number 15 [ 214.709343][ T9384] program syz.2.2164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.720392][ T9383] device bond0 entered promiscuous mode [ 214.746435][ T9383] device bond_slave_0 entered promiscuous mode [ 214.766273][ T9383] device bond_slave_1 entered promiscuous mode [ 214.787856][ T9383] device bridge_slave_1 entered promiscuous mode [ 214.833565][ T9383] device bond0 left promiscuous mode [ 214.839348][ T9383] device bond_slave_0 left promiscuous mode [ 214.871803][ T9387] loop2: detected capacity change from 0 to 256 [ 214.878462][ T9383] device bond_slave_1 left promiscuous mode [ 214.897895][ T9383] device bridge_slave_1 left promiscuous mode [ 215.164588][ T9395] loop4: detected capacity change from 0 to 8 [ 215.202012][ T9375] loop1: detected capacity change from 0 to 32768 [ 215.297774][ T9375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2161 (9375) [ 215.324606][ T9395] SQUASHFS error: Unable to read directory block [249:c] [ 215.414296][ T9375] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 215.464237][ T9375] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 215.544167][ T9375] BTRFS info (device loop1): using free space tree [ 215.564399][ T9375] BTRFS info (device loop1): has skinny extents [ 215.587643][ T6350] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 215.774960][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2180'. [ 215.825583][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2180'. [ 215.937713][ T9375] BTRFS info (device loop1): enabling ssd optimizations [ 215.992365][ T6350] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.057905][ T6350] usb 1-1: not running at top speed; connect to a high speed hub [ 216.096503][ T9443] loop2: detected capacity change from 0 to 512 [ 216.098561][ T4266] Bluetooth: hci5: command 0x1009 tx timeout [ 216.147896][ T6350] usb 1-1: config 80 has an invalid interface number: 29 but max is 0 [ 216.176720][ T6350] usb 1-1: config 80 has no interface number 0 [ 216.219511][ T6350] usb 1-1: config 80 interface 29 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.263316][ T6350] usb 1-1: config 80 interface 29 has no altsetting 0 [ 216.320135][ T4904] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4904) [ 216.467836][ T6350] usb 1-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice= c.2a [ 216.497961][ T6350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.529121][ T9443] EXT4-fs (loop2): 1 orphan inode deleted [ 216.550974][ T6350] usb 1-1: Product: syz [ 216.555216][ T6350] usb 1-1: Manufacturer: syz [ 216.577656][ T9443] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 216.596961][ T6350] usb 1-1: SerialNumber: syz [ 216.625491][ T9443] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.745161][ T9443] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 216.939675][ T6350] em28xx 1-1:80.29: New device syz syz @ 12 Mbps (eb1a:50a6, interface 29, class 29) [ 216.958456][ T6350] em28xx 1-1:80.29: Device initialization failed. [ 216.964934][ T6350] em28xx 1-1:80.29: Device must be connected to a high-speed USB 2.0 port. [ 217.027830][ T6350] usb 1-1: USB disconnect, device number 16 [ 217.493264][ T9469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2192'. [ 217.620172][ T9467] loop4: detected capacity change from 0 to 8192 [ 217.659320][ T9476] loop1: detected capacity change from 0 to 8 [ 217.693252][ T9467] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 217.715664][ T9467] REISERFS (device loop4): using ordered data mode [ 217.765937][ T9467] reiserfs: using flush barriers [ 217.798899][ T9467] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.815766][ T9467] REISERFS (device loop4): checking transaction log (loop4) [ 217.825037][ T9476] SQUASHFS error: Unable to read directory block [249:c] [ 217.946898][ T9481] program syz.0.2198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.982103][ T9467] REISERFS (device loop4): Using tea hash to sort names [ 218.002004][ T9467] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 218.225904][ T9490] loop0: detected capacity change from 0 to 2048 [ 218.266238][ T9493] netlink: 7986 bytes leftover after parsing attributes in process `syz.2.2204'. [ 218.330145][ T9490] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 218.380551][ T9490] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 218.409816][ T9490] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 218.480150][ T9490] EXT4-fs (loop0): This should not happen!! Data will be lost [ 218.480150][ T9490] [ 218.530905][ T9490] EXT4-fs (loop0): Total free blocks count 0 [ 218.568729][ T9490] EXT4-fs (loop0): Free/Dirty block details [ 218.633984][ T9490] EXT4-fs (loop0): free_blocks=2415919504 [ 218.677821][ T9490] EXT4-fs (loop0): dirty_blocks=32 [ 218.683113][ T9490] EXT4-fs (loop0): Block reservation details [ 218.702423][ T9514] binder: 9511:9514 ioctl c00c620f 0 returned -14 [ 218.724708][ T9490] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 218.768934][ T9502] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 218.831405][ T9502] EXT4-fs (loop0): This should not happen!! Data will be lost [ 218.831405][ T9502] [ 218.984723][ T9524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 218.996198][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.010468][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.068084][ T9524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.148796][ T9532] loop1: detected capacity change from 0 to 1024 [ 219.161688][ T9528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.174273][ T9527] loop2: detected capacity change from 0 to 8192 [ 219.199926][ T9528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.253232][ T9527] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 219.313016][ T9527] REISERFS (device loop2): using ordered data mode [ 219.313431][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 219.329312][ T9538] bond0: Unable to set up delay as MII monitoring is disabled [ 219.351111][ T9527] reiserfs: using flush barriers [ 219.386301][ T9527] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.448277][ T9527] REISERFS (device loop2): checking transaction log (loop2) [ 219.502292][ T9544] loop1: detected capacity change from 0 to 512 [ 219.605451][ T9544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 219.662491][ T9544] System zones: 1-12 [ 219.693775][ T9544] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2223: Directory hole found for htree index block 0 [ 219.730291][ T9555] tap0: tun_chr_ioctl cmd 1074025692 [ 219.741299][ T9544] EXT4-fs (loop1): Remounting filesystem read-only [ 219.748561][ T9544] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 219.756836][ T9544] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.2223: Directory hole found for htree index block 0 [ 219.772466][ T9544] EXT4-fs (loop1): Remounting filesystem read-only [ 219.785308][ T9544] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 219.793960][ T9544] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 219.841054][ T9544] EXT4-fs (loop1): user quota file already specified [ 219.895249][ T9527] REISERFS (device loop2): Using tea hash to sort names [ 219.902930][ T9527] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 220.357809][ T4266] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 220.423966][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2237'. [ 220.471962][ T9576] loop0: detected capacity change from 0 to 4096 [ 220.549486][ T9576] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 220.570136][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.638651][ T4266] usb 2-1: Using ep0 maxpacket: 32 [ 220.683160][ T9576] ntfs: volume version 3.1. [ 220.758090][ T4266] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 220.795691][ T9576] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 220.816488][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.917937][ T9576] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 220.939016][ T4266] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 220.960707][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.977842][ T9576] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page. [ 220.985815][ T4266] usb 2-1: Product: syz [ 220.993168][ T4266] usb 2-1: Manufacturer: syz [ 220.998199][ T9576] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 221.017657][ T4266] usb 2-1: SerialNumber: syz [ 221.277784][ T4266] usb 2-1: selecting invalid altsetting 1 [ 221.307766][ T5610] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 221.468976][ T9618] program syz.0.2259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.497857][ T4266] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 221.497956][ T4266] dvb_usb_lmedm04: probe of 2-1:2.0 failed with error -22 [ 221.887958][ T5610] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 221.907032][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.940671][ T5610] usb 5-1: Product: syz [ 221.949397][ T5610] usb 5-1: Manufacturer: syz [ 221.959675][ T5610] usb 5-1: SerialNumber: syz [ 221.979753][ T5610] usb 5-1: config 0 descriptor?? [ 222.038180][ T5610] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 222.045110][ T5610] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 222.054046][ T5610] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 222.157778][ T4266] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 222.243731][ T5610] usb 5-1: USB disconnect, device number 20 [ 222.397679][ T4266] usb 3-1: Using ep0 maxpacket: 32 [ 222.462391][ T9650] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 222.517964][ T4266] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 222.529656][ T4266] usb 3-1: config 0 has no interface number 0 [ 222.534806][ T9652] netlink: 'syz.3.2274': attribute type 3 has an invalid length. [ 222.703792][ T4266] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 222.722551][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.749997][ T4266] usb 3-1: Product: syz [ 222.754245][ T4266] usb 3-1: Manufacturer: syz [ 222.759191][ T4266] usb 3-1: SerialNumber: syz [ 222.775535][ T4266] usb 3-1: config 0 descriptor?? [ 222.819484][ T4266] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 222.874936][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'. [ 222.996385][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2284'. [ 223.029992][ T4266] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 223.065135][ T4266] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 223.105515][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 223.123531][ T9676] netlink: 'syz.0.2286': attribute type 7 has an invalid length. [ 223.147105][ T9674] netlink: 'syz.3.2285': attribute type 25 has an invalid length. [ 223.187392][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 223.189973][ T4266] usb 2-1: USB disconnect, device number 19 [ 223.259474][ T9680] input: syz1 as /devices/virtual/input/input19 [ 223.512943][ T4266] usb 3-1: USB disconnect, device number 16 [ 223.527621][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 223.549036][ T4266] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 223.595781][ T4266] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 223.619841][ T4266] quatech2 3-1:0.51: device disconnected [ 224.283483][ T9729] loop3: detected capacity change from 0 to 4096 [ 224.469722][ T9738] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.495969][ T9729] NILFS (loop3): corrupt root inode [ 224.567663][ T6351] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 224.667153][ T9740] sch_fq: defrate 0 ignored. [ 224.747364][ T9727] loop0: detected capacity change from 0 to 32768 [ 224.808018][ T9744] loop4: detected capacity change from 0 to 64 [ 224.876003][ T9727] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 224.937847][ T6351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.967892][ T6351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.019585][ T4197] hfs: node 4:3 still has 1 user(s)! [ 225.043635][ T6351] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.065426][ T6351] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.085187][ T6351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.107326][ T6351] usb 2-1: config 0 descriptor?? [ 225.163290][ T4188] ocfs2: Unmounting device (7,0) on (node local) [ 225.293637][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 225.508366][ T9770] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.590720][ T6351] plantronics 0003:047F:FFFF.0015: unbalanced delimiter at end of report description [ 225.606020][ T6351] plantronics 0003:047F:FFFF.0015: parse failed [ 225.619126][ T6351] plantronics: probe of 0003:047F:FFFF.0015 failed with error -22 [ 225.802275][ T6350] usb 2-1: USB disconnect, device number 20 [ 225.808582][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2334'. [ 225.911684][ T9759] loop3: detected capacity change from 0 to 32768 [ 225.961047][ T9784] loop0: detected capacity change from 0 to 4096 [ 225.999312][ T9784] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 226.057744][ T5602] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 226.533351][ T5602] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.579549][ T5610] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 226.623896][ T5602] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 226.809180][ T5602] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 226.828585][ T5602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.854350][ T5602] usb 5-1: Product: syz [ 226.869040][ T5602] usb 5-1: Manufacturer: syz [ 226.873708][ T5602] usb 5-1: SerialNumber: syz [ 226.878906][ T5610] usb 1-1: Using ep0 maxpacket: 32 [ 227.000062][ T9794] loop3: detected capacity change from 0 to 32768 [ 227.027854][ T5610] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 227.046852][ T9794] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.2341 (9794) [ 227.051819][ T9820] loop1: detected capacity change from 0 to 128 [ 227.066210][ T5610] usb 1-1: config 0 has no interface number 0 [ 227.075879][ T5610] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 227.104312][ T5610] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 227.125530][ T9794] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 227.136169][ T9794] BTRFS info (device loop3): enabling disk space caching [ 227.145845][ T9794] BTRFS info (device loop3): force clearing of disk cache [ 227.174180][ T5602] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 227.187458][ T9823] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2355'. [ 227.199365][ T9794] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 227.218891][ T9820] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.235941][ T9794] BTRFS info (device loop3): use zstd compression, level 3 [ 227.251708][ T9820] ext4 filesystem being mounted at /487/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.269745][ T9794] BTRFS info (device loop3): disk space caching is enabled [ 227.277022][ T9794] BTRFS info (device loop3): has skinny extents [ 227.327959][ T5610] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 227.345925][ T9820] EXT4-fs warning (device loop1): ext4_group_extend:1847: will only finish group (8193 blocks, 8129 new) [ 227.378084][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.378885][ T9820] EXT4-fs warning (device loop1): ext4_group_extend:1852: can't read last block, resize aborted [ 227.406754][ T5610] usb 1-1: Product: syz [ 227.416874][ T5610] usb 1-1: Manufacturer: syz [ 227.427292][ T5610] usb 1-1: SerialNumber: syz [ 227.449843][ T5610] usb 1-1: config 0 descriptor?? [ 227.500931][ T9794] BTRFS info (device loop3): enabling ssd optimizations [ 227.532599][ T9794] BTRFS info (device loop3): clearing free space tree [ 227.540409][ T9794] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 227.553063][ T9794] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 227.686689][ T9851] loop1: detected capacity change from 0 to 256 [ 227.739838][ T9851] exfat: Deprecated parameter 'utf8' [ 227.745204][ T9851] exfat: Deprecated parameter 'utf8' [ 227.754528][ T9851] exfat: Deprecated parameter 'namecase' [ 227.760829][ T9851] exfat: Deprecated parameter 'utf8' [ 227.803259][ T9851] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 227.837881][ T5602] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 227.927818][ T5610] radio-si470x 1-1:0.35: DeviceID=0xb980 ChipID=0x0000 [ 227.935037][ T5602] usb 5-1: USB disconnect, device number 21 [ 227.941814][ T5610] radio-si470x 1-1:0.35: This driver is known to work with firmware version 12, [ 227.977117][ T5610] radio-si470x 1-1:0.35: but the device has firmware version 0. [ 228.126896][ T4236] Bluetooth: hci2: command 0x0401 tx timeout [ 228.137254][ T5610] radio-si470x 1-1:0.35: software version 185, hardware version 128 [ 228.149025][ T5610] radio-si470x 1-1:0.35: If you have some trouble using this driver, [ 228.210712][ T5610] radio-si470x 1-1:0.35: please report to V4L ML at linux-media@vger.kernel.org [ 228.240703][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.316707][ T9861] loop1: detected capacity change from 0 to 4096 [ 228.387653][ T5610] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 228.396188][ T5610] radio-si470x 1-1:0.35: submitting int urb failed (-90) [ 228.466455][ T5610] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 228.494498][ T5610] radio-si470x: probe of 1-1:0.35 failed with error -22 [ 228.618231][ T5610] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 228.645139][ T9870] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.690390][ T5610] usb 1-1: USB disconnect, device number 17 [ 228.972727][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2375'. [ 229.253319][ T9902] loop1: detected capacity change from 0 to 128 [ 229.273763][ T9904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2383'. [ 229.317089][ T9902] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 229.363734][ T9909] loop0: detected capacity change from 0 to 512 [ 229.438121][ T9902] hpfs: filesystem error: improperly stopped [ 229.464172][ T9902] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 229.527274][ T9902] hpfs: You really don't want any checks? You are crazy... [ 229.578848][ T9909] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.595594][ T9902] hpfs: hpfs_map_sector(): read error [ 229.644017][ T9902] hpfs: code page support is disabled [ 229.663976][ T9917] loop3: detected capacity change from 0 to 512 [ 229.677694][ T9902] hpfs: hpfs_map_4sectors(): unaligned read [ 229.700933][ T9908] loop2: detected capacity change from 0 to 32768 [ 229.714615][ T9902] hpfs: hpfs_map_4sectors(): unaligned read [ 229.743414][ T9902] hpfs: filesystem error: unable to find root dir [ 229.761950][ T9908] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 229.778744][ T9908] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 229.794888][ T9917] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 229.833916][ T9908] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 229.849511][ T6354] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 229.856774][ T6354] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 229.908367][ T9917] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.2389: invalid block [ 229.927854][ T5610] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 229.939873][ T9920] netlink: 'syz.0.2390': attribute type 3 has an invalid length. [ 229.961353][ T6354] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 104ms [ 229.979382][ T9917] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2389: invalid indirect mapped block 1024 (level 0) [ 230.010394][ T9920] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2390'. [ 230.021663][ T6354] gfs2: fsid=syz:syz.0: jid=0: Done [ 230.029912][ T9908] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 230.059548][ T9917] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2389: bg 0: block 35: padding at end of block bitmap is not set [ 230.088900][ T9917] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 230.099785][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.170666][ T9917] EXT4-fs (loop3): 1 truncate cleaned up [ 230.176394][ T9917] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,nombcache,bsddf,,errors=continue. Quota mode: none. [ 230.190345][ T5610] usb 5-1: Using ep0 maxpacket: 8 [ 230.317872][ T5610] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.340190][ T9908] gfs2: fsid=syz:syz.0: found 1 quota changes [ 230.387978][ T5610] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.443693][ T9930] netlink: 'syz.0.2393': attribute type 25 has an invalid length. [ 230.452314][ T5610] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 230.462198][ T9930] netlink: 'syz.0.2393': attribute type 7 has an invalid length. [ 230.483210][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.493764][ T9930] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2393'. [ 230.509348][ T9908] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0 [ 230.518523][ T9908] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount [ 230.528209][ T9908] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error [ 230.537382][ T9908] gfs2: fsid=syz:syz.0: R: n:18 f:a0000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0 [ 230.548486][ T9908] gfs2: fsid=syz:syz.0: L: f:00 b:4294967295 i:4294967295 [ 230.610145][ T5610] usb 5-1: config 0 descriptor?? [ 230.752491][ T4192] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 230.768738][ T4192] CPU: 0 PID: 4192 Comm: syz-executor Not tainted syzkaller #0 [ 230.776341][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.786441][ T4192] Call Trace: [ 230.789750][ T4192] [ 230.792798][ T4192] dump_stack_lvl+0x188/0x250 [ 230.797511][ T4192] ? show_regs_print_info+0x20/0x20 [ 230.802749][ T4192] ? load_image+0x410/0x410 [ 230.807302][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 230.812540][ T4192] gfs2_assert_warn_i+0x187/0x2c0 [ 230.817883][ T4192] gfs2_quota_cleanup+0x48c/0x670 [ 230.822967][ T4192] gfs2_make_fs_ro+0x523/0x620 [ 230.827764][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 230.832996][ T4192] ? gfs2_dinode_out+0xb00/0xb00 [ 230.837986][ T4192] ? __lock_acquire+0x7b50/0x7b50 [ 230.843047][ T4192] ? do_raw_spin_lock+0x128/0x2f0 [ 230.848194][ T4192] ? __rwlock_init+0x140/0x140 [ 230.852994][ T4192] ? do_raw_spin_unlock+0x11d/0x230 [ 230.858241][ T4192] gfs2_put_super+0x1d2/0x7c0 [ 230.862961][ T4192] ? gfs2_evict_inode+0x1340/0x1340 [ 230.868191][ T4192] generic_shutdown_super+0x130/0x300 [ 230.873598][ T4192] kill_block_super+0x7c/0xe0 [ 230.878322][ T4192] deactivate_locked_super+0x93/0xf0 [ 230.883644][ T4192] cleanup_mnt+0x426/0x4d0 [ 230.888106][ T4192] task_work_run+0x125/0x1a0 [ 230.892735][ T4192] exit_to_user_mode_loop+0x10f/0x130 [ 230.898143][ T4192] exit_to_user_mode_prepare+0xee/0x180 [ 230.903719][ T4192] syscall_exit_to_user_mode+0x16/0x40 [ 230.909211][ T4192] do_syscall_64+0x58/0xa0 [ 230.913657][ T4192] ? clear_bhb_loop+0x30/0x80 [ 230.918371][ T4192] ? clear_bhb_loop+0x30/0x80 [ 230.923085][ T4192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.929027][ T4192] RIP: 0033:0x7f0909e0b097 [ 230.933474][ T4192] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 230.953201][ T4192] RSP: 002b:00007ffc906f32c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 230.961657][ T4192] RAX: 0000000000000000 RBX: 00007f0909e9f2ca RCX: 00007f0909e0b097 [ 230.969692][ T4192] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc906f3380 [ 230.977697][ T4192] RBP: 00007ffc906f3380 R08: 00007ffc906f4380 R09: 00000000ffffffff [ 230.985698][ T4192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc906f4410 [ 230.993692][ T4192] R13: 00007f0909e9f2ca R14: 0000000000038496 R15: 00007ffc906f4450 [ 231.001705][ T4192] [ 231.090596][ T9939] exfat: Bad value for 'uid' [ 231.240585][ T5610] magicmouse 0003:05AC:0269.0016: unknown main item tag 0x0 [ 231.251083][ T5610] magicmouse 0003:05AC:0269.0016: unknown main item tag 0x0 [ 231.267743][ T5610] magicmouse 0003:05AC:0269.0016: unknown main item tag 0x0 [ 231.285387][ T5610] magicmouse 0003:05AC:0269.0016: unknown main item tag 0x0 [ 231.295514][ T5610] magicmouse 0003:05AC:0269.0016: unknown main item tag 0x0 [ 231.312089][ T5610] magicmouse 0003:05AC:0269.0016: unknown main item tag 0x0 [ 231.327611][ T5610] magicmouse 0003:05AC:0269.0016: unknown main item tag 0x0 [ 231.368062][ T5610] magicmouse 0003:05AC:0269.0016: hidraw0: USB HID v0.04 Device [HID 05ac:0269] on usb-dummy_hcd.4-1/input0 [ 231.456962][ T9937] set_capacity_and_notify: 1 callbacks suppressed [ 231.456979][ T9937] loop1: detected capacity change from 0 to 32768 [ 231.478019][ T5610] usb 5-1: USB disconnect, device number 22 [ 231.646509][ T9951] fido_id[9951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 231.685809][ T9937] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 231.731911][ T26] audit: type=1326 audit(1782788816.188:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.2.2407" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0909e09e59 code=0x0 [ 231.825764][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 231.921848][ T9963] loop3: detected capacity change from 0 to 4096 [ 232.072211][ T9973] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.194262][ T9972] loop1: detected capacity change from 0 to 4096 [ 232.287457][ T9980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2415'. [ 232.739261][ T7843] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.982431][ T5606] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 233.007781][ T5610] kernel read not supported for file /dsp1 (pid: 5610 comm: kworker/0:17) [ 233.248068][T10024] program syz.1.2434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.377789][ T5606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.399029][ T5606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.433188][ T5606] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.459785][ T5606] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.477604][ T5606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.507058][ T5606] usb 5-1: config 0 descriptor?? [ 233.581466][T10036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2438'. [ 233.599147][T10037] program syz.1.2439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.608479][T10036] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2438'. [ 233.608511][T10036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2438'. [ 233.871854][T10048] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2444'. [ 233.999736][ T5606] plantronics 0003:047F:FFFF.0017: unbalanced collection at end of report description [ 234.010655][ T5606] plantronics 0003:047F:FFFF.0017: parse failed [ 234.016984][ T5606] plantronics: probe of 0003:047F:FFFF.0017 failed with error -22 [ 234.216475][T10059] loop2: detected capacity change from 0 to 512 [ 234.231248][ T5606] usb 5-1: USB disconnect, device number 23 [ 234.315943][T10059] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.2450: Invalid block bitmap block 0 in block_group 0 [ 234.374586][T10059] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 234.417111][T10059] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2450: attempt to clear invalid blocks 983261 len 1 [ 234.462905][T10059] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2450: invalid indirect mapped block 2683928664 (level 0) [ 234.496617][T10059] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.2450: Invalid inode table block 0 in block_group 0 [ 234.525470][T10059] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 234.541689][T10059] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 234.552671][T10059] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.2450: Invalid inode table block 0 in block_group 0 [ 234.573261][T10059] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 234.584583][T10059] EXT4-fs error (device loop2): ext4_truncate:4286: inode #13: comm syz.2.2450: mark_inode_dirty error [ 234.602382][T10059] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 234.623032][T10059] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.2450: Invalid inode table block 0 in block_group 0 [ 234.652792][T10059] EXT4-fs (loop2): 1 truncate cleaned up [ 234.675802][T10059] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,noblock_validity,,errors=continue. Quota mode: writeback. [ 234.811244][T10059] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.2450: Invalid inode table block 0 in block_group 0 [ 234.850149][T10059] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 234.865766][T10059] EXT4-fs error (device loop2): ext4_setattr:5490: inode #2: comm syz.2.2450: mark_inode_dirty error [ 235.102858][T10055] loop0: detected capacity change from 0 to 40427 [ 235.162846][T10081] netlink: 'syz.3.2459': attribute type 12 has an invalid length. [ 235.177151][T10055] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 235.196203][T10055] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 235.258120][T10055] F2FS-fs (loop0): invalid crc value [ 235.305564][T10055] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.333886][T10094] loop3: detected capacity change from 0 to 512 [ 235.419445][T10094] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 235.431755][T10055] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 235.441903][T10055] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.452133][T10101] netlink: 'syz.4.2467': attribute type 5 has an invalid length. [ 235.544774][T10094] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2464: invalid block [ 235.567025][T10094] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2464: invalid indirect mapped block 4294967295 (level 1) [ 235.589496][T10094] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2464: invalid indirect mapped block 4294967295 (level 1) [ 235.604270][T10094] EXT4-fs (loop3): 2 truncates cleaned up [ 235.610862][T10094] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,init_itable=0x0000000000001007,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 235.644921][T10094] EXT4-fs error (device loop3): empty_inline_dir:1873: inode #12: block 7: comm syz.3.2464: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 235.672516][T10094] EXT4-fs warning (device loop3): empty_inline_dir:1880: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 236.065449][ T6354] Process accounting resumed [ 236.296672][T10147] loop3: detected capacity change from 0 to 512 [ 236.413277][T10151] ------------[ cut here ]------------ [ 236.440452][T10151] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 236.455656][T10151] WARNING: CPU: 1 PID: 10151 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 236.467941][ T6354] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 236.481507][T10151] Modules linked in: [ 236.485583][T10151] CPU: 1 PID: 10151 Comm: syz.4.2489 Not tainted syzkaller #0 [ 236.494616][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.538834][T10147] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 236.567808][T10151] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 236.607706][T10151] Code: 74 80 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 a0 c5 38 8b 4c 89 e6 89 ea e8 15 4b 71 00 <0f> 0b e9 07 fd ff ff e8 d9 53 3b f8 0f 0b e9 b1 fe ff ff e8 cd 53 [ 236.628181][T10147] ext4 filesystem being mounted at /465/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.670308][T10151] RSP: 0018:ffffc9000340f240 EFLAGS: 00010246 [ 236.707784][ T6354] usb 2-1: Using ep0 maxpacket: 32 [ 236.726717][T10151] RAX: cdfdd33d42028700 RBX: 0000000000400000 RCX: 0000000000080000 [ 236.758874][T10151] RDX: ffffc900069b9000 RSI: 0000000000003f88 RDI: 0000000000003f89 [ 236.767026][T10151] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 236.827871][ T6354] usb 2-1: config 0 interface 0 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 236.843617][ T6354] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.851125][ T6354] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 236.861028][ T6354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.876463][T10151] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88805e160000 [ 236.892174][T10151] R13: ffff88805e161290 R14: ffff888019bb8e00 R15: ffff88805e162268 [ 236.903118][T10151] FS: 00007f46d19cc6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 236.917462][T10151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.929291][ T6354] usb 2-1: config 0 descriptor?? [ 236.934020][T10151] CR2: 00007f1975094000 CR3: 000000007a6de000 CR4: 00000000003506f0 [ 236.934302][T10151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.934319][T10151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.934336][T10151] Call Trace: [ 236.934358][T10151] [ 236.934368][T10151] ? netif_carrier_on+0x101/0x120 [ 236.934411][T10151] ieee80211_ocb_leave+0x27f/0x320 [ 236.997858][T10151] __cfg80211_leave_ocb+0x219/0x400 [ 237.017681][T10151] cfg80211_leave_ocb+0x53/0x70 [ 237.023093][T10151] cfg80211_change_iface+0x4ec/0xe10 [ 237.028937][T10151] nl80211_set_interface+0x5b8/0x810 [ 237.036728][T10151] ? nl80211_dump_interface+0x560/0x560 [ 237.042999][T10151] ? mutex_lock_nested+0x17/0x20 [ 237.050037][T10151] ? nl80211_pre_doit+0x27b/0x540 [ 237.055286][T10151] genl_rcv_msg+0xd0b/0xfa0 [ 237.060351][T10151] ? genl_bind+0x370/0x370 [ 237.097327][T10151] ? __dev_queue_xmit+0x1b64/0x2e50 [ 237.107749][T10151] ? verify_lock_unused+0x140/0x140 [ 237.113362][T10151] ? dev_queue_xmit+0x20/0x20 [ 237.121098][T10151] ? nl80211_dump_interface+0x560/0x560 [ 237.126919][T10151] netlink_rcv_skb+0x1e9/0x430 [ 237.153512][T10151] ? genl_bind+0x370/0x370 [ 237.164909][T10151] ? netlink_ack+0xb10/0xb10 [ 237.176816][T10151] ? down_read+0x1aa/0x2e0 [ 237.188476][T10151] genl_rcv+0x24/0x40 [ 237.197861][T10151] netlink_unicast+0x78f/0x940 [ 237.202734][T10151] netlink_sendmsg+0x8ba/0xbe0 [ 237.237880][T10151] ? netlink_getsockopt+0x570/0x570 [ 237.243186][T10151] ? aa_sock_msg_perm+0x94/0x150 [ 237.277715][T10151] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 237.287904][T10151] ? security_socket_sendmsg+0x7c/0xa0 [ 237.293538][T10151] ? netlink_getsockopt+0x570/0x570 [ 237.306096][T10151] ____sys_sendmsg+0x5be/0x8f0 [ 237.311653][T10151] ? __sys_sendmsg_sock+0x30/0x30 [ 237.316824][T10151] ? import_iovec+0x6f/0xa0 [ 237.324323][T10151] ___sys_sendmsg+0x236/0x2e0 [ 237.330671][T10151] ? __sys_sendmsg+0x290/0x290 [ 237.335666][T10151] ? sock_do_ioctl+0x29d/0x320 [ 237.343959][T10151] __se_sys_sendmsg+0x1b7/0x2a0 [ 237.350935][T10151] ? __x64_sys_sendmsg+0x80/0x80 [ 237.355951][T10151] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 237.362584][T10151] ? lockdep_hardirqs_on+0x94/0x140 [ 237.368211][T10151] do_syscall_64+0x4c/0xa0 [ 237.372820][T10151] ? clear_bhb_loop+0x30/0x80 [ 237.378101][T10151] ? clear_bhb_loop+0x30/0x80 [ 237.389058][T10151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.395206][T10151] RIP: 0033:0x7f46d3772e59 [ 237.400224][T10151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.420468][T10151] RSP: 002b:00007f46d19cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.429402][T10151] RAX: ffffffffffffffda RBX: 00007f46d39ebfa0 RCX: 00007f46d3772e59 [ 237.437869][T10151] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 237.446025][T10151] RBP: 00007f46d3808e6f R08: 0000000000000000 R09: 0000000000000000 [ 237.456258][ T6354] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 237.463075][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.472041][ T6354] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 237.480004][ T6354] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 237.483364][T10151] R13: 00007f46d39ec038 R14: 00007f46d39ebfa0 R15: 00007ffe197ffa18 [ 237.487917][ T6354] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 237.504838][T10151] [ 237.507358][ T6354] corsair-psu 0003:1B1C:1C09.0018: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 237.517856][T10151] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 237.526907][T10151] CPU: 0 PID: 10151 Comm: syz.4.2489 Not tainted syzkaller #0 [ 237.534432][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.544650][T10151] Call Trace: [ 237.547972][T10151] [ 237.550934][T10151] dump_stack_lvl+0x188/0x250 [ 237.555652][T10151] ? show_regs_print_info+0x20/0x20 [ 237.560875][T10151] ? load_image+0x410/0x410 [ 237.565406][T10151] panic+0x2f8/0x850 [ 237.569312][T10151] ? bpf_jit_dump+0xd0/0xd0 [ 237.573952][T10151] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 237.580451][T10151] __warn+0x248/0x2b0 [ 237.584491][T10151] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 237.588361][ T6354] corsair-psu 0003:1B1C:1C09.0018: unable to initialize device (-38) [ 237.590952][T10151] report_bug+0x1b9/0x2e0 [ 237.603401][T10151] handle_bug+0x3a/0x70 [ 237.607585][T10151] exc_invalid_op+0x16/0x40 [ 237.612135][T10151] asm_exc_invalid_op+0x16/0x20 [ 237.617060][T10151] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 237.624115][T10151] Code: 74 80 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 a0 c5 38 8b 4c 89 e6 89 ea e8 15 4b 71 00 <0f> 0b e9 07 fd ff ff e8 d9 53 3b f8 0f 0b e9 b1 fe ff ff e8 cd 53 [ 237.625731][ T6354] corsair-psu: probe of 0003:1B1C:1C09.0018 failed with error -38 [ 237.643848][T10151] RSP: 0018:ffffc9000340f240 EFLAGS: 00010246 [ 237.643877][T10151] RAX: cdfdd33d42028700 RBX: 0000000000400000 RCX: 0000000000080000 [ 237.643892][T10151] RDX: ffffc900069b9000 RSI: 0000000000003f88 RDI: 0000000000003f89 [ 237.643906][T10151] RBP: 0000000000000004 R08: ffff8880b9133d7f R09: 1ffff110172267af [ 237.643920][T10151] R10: dffffc0000000000 R11: ffffed10172267b0 R12: ffff88805e160000 [ 237.643936][T10151] R13: ffff88805e161290 R14: ffff888019bb8e00 R15: ffff88805e162268 [ 237.643972][T10151] ? netif_carrier_on+0x101/0x120 [ 237.644003][T10151] ieee80211_ocb_leave+0x27f/0x320 [ 237.644043][T10151] __cfg80211_leave_ocb+0x219/0x400 [ 237.644072][T10151] cfg80211_leave_ocb+0x53/0x70 [ 237.718132][T10151] cfg80211_change_iface+0x4ec/0xe10 [ 237.723474][T10151] nl80211_set_interface+0x5b8/0x810 [ 237.728866][T10151] ? nl80211_dump_interface+0x560/0x560 [ 237.734478][T10151] ? mutex_lock_nested+0x17/0x20 [ 237.739464][T10151] ? nl80211_pre_doit+0x27b/0x540 [ 237.744551][T10151] genl_rcv_msg+0xd0b/0xfa0 [ 237.749126][T10151] ? genl_bind+0x370/0x370 [ 237.753593][T10151] ? __dev_queue_xmit+0x1b64/0x2e50 [ 237.758835][T10151] ? verify_lock_unused+0x140/0x140 [ 237.764096][T10151] ? dev_queue_xmit+0x20/0x20 [ 237.768913][T10151] ? nl80211_dump_interface+0x560/0x560 [ 237.774510][T10151] netlink_rcv_skb+0x1e9/0x430 [ 237.779463][T10151] ? genl_bind+0x370/0x370 [ 237.783958][T10151] ? netlink_ack+0xb10/0xb10 [ 237.788605][T10151] ? down_read+0x1aa/0x2e0 [ 237.793091][T10151] genl_rcv+0x24/0x40 [ 237.797135][T10151] netlink_unicast+0x78f/0x940 [ 237.802452][T10151] netlink_sendmsg+0x8ba/0xbe0 [ 237.807287][T10151] ? netlink_getsockopt+0x570/0x570 [ 237.812546][T10151] ? aa_sock_msg_perm+0x94/0x150 [ 237.817547][T10151] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 237.822919][T10151] ? security_socket_sendmsg+0x7c/0xa0 [ 237.828429][T10151] ? netlink_getsockopt+0x570/0x570 [ 237.833672][T10151] ____sys_sendmsg+0x5be/0x8f0 [ 237.838503][T10151] ? __sys_sendmsg_sock+0x30/0x30 [ 237.843681][T10151] ? import_iovec+0x6f/0xa0 [ 237.848238][T10151] ___sys_sendmsg+0x236/0x2e0 [ 237.852974][T10151] ? __sys_sendmsg+0x290/0x290 [ 237.857808][T10151] ? sock_do_ioctl+0x29d/0x320 [ 237.862641][T10151] __se_sys_sendmsg+0x1b7/0x2a0 [ 237.867539][T10151] ? __x64_sys_sendmsg+0x80/0x80 [ 237.872612][T10151] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 237.878662][T10151] ? lockdep_hardirqs_on+0x94/0x140 [ 237.884050][T10151] do_syscall_64+0x4c/0xa0 [ 237.888521][T10151] ? clear_bhb_loop+0x30/0x80 [ 237.893260][T10151] ? clear_bhb_loop+0x30/0x80 [ 237.897996][T10151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 237.903942][T10151] RIP: 0033:0x7f46d3772e59 [ 237.908417][T10151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.928188][T10151] RSP: 002b:00007f46d19cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.936655][T10151] RAX: ffffffffffffffda RBX: 00007f46d39ebfa0 RCX: 00007f46d3772e59 [ 237.944668][T10151] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 237.952684][T10151] RBP: 00007f46d3808e6f R08: 0000000000000000 R09: 0000000000000000 [ 237.960707][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.968761][T10151] R13: 00007f46d39ec038 R14: 00007f46d39ebfa0 R15: 00007ffe197ffa18 [ 237.976801][T10151] [ 237.980171][T10151] Kernel Offset: disabled [ 237.984910][T10151] Rebooting in 86400 seconds..