last executing test programs: 55.482570394s ago: executing program 0 (id=664): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) 55.387896696s ago: executing program 0 (id=658): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 55.098087704s ago: executing program 0 (id=659): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 54.787347912s ago: executing program 0 (id=665): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@nobarrier}, {@dioread_lock}, {@barrier_val}, {@nolazytime}, {@dax_inode}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x4}}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 54.293947674s ago: executing program 0 (id=671): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/profiles\x00', 0x2280, 0x0) read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020) pread64$ublk_bdev(r0, &(0x7f0000000140)=""/6, 0x6, 0xb) 54.037040401s ago: executing program 0 (id=673): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) 53.70152467s ago: executing program 32 (id=673): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) 7.753478391s ago: executing program 4 (id=956): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.715569873s ago: executing program 4 (id=964): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) 4.540420823s ago: executing program 3 (id=972): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4016, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x1, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2002, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) write$eventfd(r0, &(0x7f0000000200)=0x9, 0x8) write$UHID_INPUT(r1, &(0x7f0000002980)={0xe, {"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", 0x1000}}, 0x1006) 4.401865477s ago: executing program 4 (id=982): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 4.161570093s ago: executing program 3 (id=976): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000340), 0x11000) 4.160373693s ago: executing program 2 (id=985): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b0300000000000109022200010100803209040000010300000009211101000122170007058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x800) 3.12040676s ago: executing program 3 (id=977): syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1000048, &(0x7f0000000600)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c6d6f64653d61646170746976652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d656e61626c652c6163746976655f6c6f67733d362c6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f61636c2c6d6f64653d61646170746976652c6e6f696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c67727071756f74613d2f6465762f75686964002c61636c2c0032f4ee2f6560cdca2b9483944e9645733866c506b49c56b50344a658491dfe1afc3bb0de511c48132c86a775315723c53de2957513b9e639dfab8b7e4f4097c16f12b630a63e3ee7aa89cfa87acb9e9436e3d4feae3c1c3fedb8759e622019ece82c31d9fe60c2e3300afffbbda9aa8515e815ffc77756449aee7d4dc8354a136775201fe90e0663c422eb5a7e10e72601606e640c6714946801fccf68f802ff1c466e968c229e988c70dbe2c74169c0e96f9117a800ef78cef7bea512401010266195fc419fabbb4304582cd727de0f01694c0e22f6bca0650e3f3e4c4aefef27a417b89a0ce12bce1898cc08bbacc339f2655241746a085213fe4d6edc276928e230d4663583ccad22e450718285ed6a84bad0c7d117de297a02d83173a5a3d62192e8b6882f1a34b2200fdb7de25a9c0657778fdf670dfbd28483194c7b288bd257fa84f4a9564651ee61761f4a364803b5aea822e4c5b52b5676bdba4d9bdcbf1b7ddda716f223a1bc6d1c5a150fa64e72f580f7bf672ce6c6d30f8bcf091186a89ff219d2272ff5f2c0b4f63cb92f4708d6d81bc1935a791bd1c3670ba93b4a4db772e29f150122528cbe24284f0d1064ba237debaa65d481756e427ad570171d1e9445fe5c06dd6335167686a2cf8f226eb57ebe530d4e72"], 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.10817091s ago: executing program 4 (id=978): mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x201, 0x8) write$P9_RREADDIR(r0, &(0x7f0000000340)={0xb, 0x29, 0x0, {0x401}}, 0xb) 2.514816835s ago: executing program 1 (id=979): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0c, &(0x7f0000000000)) 2.512648745s ago: executing program 4 (id=990): syz_open_dev$hidraw(&(0x7f0000000080), 0xfff7fffeffffffff, 0x264001) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa56, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0xb0, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x40, 0x7, 0x1, {0x22, 0x5dd}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0x5, 0x5}}}}}]}}]}}, 0x0) 1.584902899s ago: executing program 3 (id=980): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 1.584088849s ago: executing program 1 (id=992): userfaultfd(0x80001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='W\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.583514089s ago: executing program 2 (id=981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeef) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.389918484s ago: executing program 1 (id=983): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 1.16059467s ago: executing program 3 (id=984): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) 1.15984232s ago: executing program 1 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 961.790965ms ago: executing program 1 (id=986): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r0, 0x9, 0x2) 959.398005ms ago: executing program 2 (id=998): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01010000000000000000070000090500010073797a31"], 0x48}, 0x1, 0x0, 0x0, 0x2c00c082}, 0x20000048) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x3f00, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2, 0x3]}}) 774.98767ms ago: executing program 1 (id=988): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000340), 0x11000) 677.742012ms ago: executing program 2 (id=989): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f00000056c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20080) 128.089126ms ago: executing program 3 (id=991): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) 118.810967ms ago: executing program 2 (id=1002): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20002000}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0xa000100e}) 17.739209ms ago: executing program 4 (id=993): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 0s ago: executing program 2 (id=994): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='\x00', 0x1200840, &(0x7f0000000680)=ANY=[], 0x3, 0x398, &(0x7f00000002c0)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) kernel console output (not intermixed with test programs): 146.412581][ T7324] ? security_prepare_creds+0x4b/0x130 [ 146.418082][ T7324] ? security_prepare_creds+0x4b/0x130 [ 146.423579][ T7324] __kmem_cache_alloc_node+0x53/0x250 [ 146.428996][ T7324] ? security_prepare_creds+0x4b/0x130 [ 146.434498][ T7324] __kmalloc+0xa7/0x240 [ 146.438702][ T7324] security_prepare_creds+0x4b/0x130 [ 146.444031][ T7324] prepare_creds+0x427/0x5d0 [ 146.448678][ T7324] copy_creds+0x105/0xa70 [ 146.453056][ T7324] copy_process+0x973/0x3da0 [ 146.457691][ T7324] ? plist_add+0x3db/0x490 [ 146.462150][ T7324] ? schedule+0xc7/0x170 [ 146.466434][ T7324] ? futex_wait_queue+0x27/0x1b0 [ 146.471419][ T7324] ? futex_wait+0x4a7/0x5c0 [ 146.475976][ T7324] ? __pidfd_prepare+0x140/0x140 [ 146.480966][ T7324] kernel_clone+0x24b/0x8a0 [ 146.485507][ T7324] ? create_io_thread+0x190/0x190 [ 146.490582][ T7324] ? do_futex+0x2ff/0x3e0 [ 146.494952][ T7324] __x64_sys_clone+0x1b7/0x230 [ 146.499747][ T7324] ? __ia32_sys_vfork+0x140/0x140 [ 146.504813][ T7324] ? lock_chain_count+0x20/0x20 [ 146.509700][ T7324] ? lockdep_hardirqs_on+0x98/0x150 [ 146.514955][ T7324] do_syscall_64+0x55/0xb0 [ 146.519403][ T7324] ? clear_bhb_loop+0x40/0x90 [ 146.524121][ T7324] ? clear_bhb_loop+0x40/0x90 [ 146.528849][ T7324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.534782][ T7324] RIP: 0033:0x7facea79e159 [ 146.539230][ T7324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.558974][ T7324] RSP: 002b:00007faceb717fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 146.567444][ T7324] RAX: ffffffffffffffda RBX: 00007faceaa25fa0 RCX: 00007facea79e159 [ 146.575451][ T7324] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 000000000200004a [ 146.583459][ T7324] RBP: 00007facea835024 R08: 0000000000000000 R09: 0000000000000000 [ 146.591466][ T7324] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 146.599472][ T7324] R13: 00007faceaa26038 R14: 00007faceaa25fa0 R15: 00007ffdc37e1858 [ 146.607499][ T7324] [ 146.927089][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 146.954739][ T7334] netlink: 'syz.1.482': attribute type 30 has an invalid length. [ 146.984343][ T7334] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.993974][ T7334] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.002942][ T7334] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.011765][ T7334] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.024140][ T7322] loop0: detected capacity change from 0 to 32768 [ 147.040213][ T7322] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.474 (7322) [ 147.053185][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 147.071570][ T7335] netlink: 'syz.1.482': attribute type 30 has an invalid length. [ 147.084777][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.095964][ T7322] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 147.124645][ T790] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.148340][ T7322] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 147.189981][ T7322] BTRFS info (device loop0): using free space tree [ 147.268026][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 147.283722][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.291919][ T23] usb 4-1: config 0 has no interface number 0 [ 147.305520][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 147.317082][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.326099][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 147.332327][ T23] usb 4-1: Product: syz [ 147.337735][ T23] usb 4-1: Manufacturer: syz [ 147.343410][ T23] usb 4-1: SerialNumber: syz [ 147.349843][ T790] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 147.358855][ T790] usb 3-1: config 0 has no interface number 0 [ 147.366908][ T790] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.379263][ T23] usb 4-1: config 0 descriptor?? [ 147.385658][ T790] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.388644][ T23] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 147.407541][ T790] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 147.428553][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.455827][ T7322] BTRFS info (device loop0): enabling ssd optimizations [ 147.471332][ T23] usb 4-1: selecting invalid altsetting 1 [ 147.477280][ T7322] BTRFS info (device loop0): auto enabling async discard [ 147.486871][ T790] usb 3-1: config 0 descriptor?? [ 147.541760][ T23] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 147.581299][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.606197][ T7330] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 147.636149][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 147.649438][ T23] usb 4-1: media controller created [ 147.659811][ T27] audit: type=1800 audit(1788791219.886:28): pid=7322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.474" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 147.712603][ T7357] netlink: 'syz.1.485': attribute type 13 has an invalid length. [ 147.734634][ T7357] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.485'. [ 147.748020][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.837815][ T23] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 147.874972][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 147.898798][ T23] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 147.936826][ T790] uclogic 0003:5543:0045.0007: interface is invalid, ignoring [ 147.962368][ T7360] loop1: detected capacity change from 0 to 256 [ 148.069375][ T23] usb 4-1: USB disconnect, device number 8 [ 148.197913][ T5766] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 148.201519][ T42] usb 3-1: USB disconnect, device number 7 [ 148.854475][ T7375] FAULT_INJECTION: forcing a failure. [ 148.854475][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 148.881128][ T7377] netlink: 'syz.2.493': attribute type 9 has an invalid length. [ 148.882946][ T7375] CPU: 0 PID: 7375 Comm: syz.0.500 Not tainted syzkaller #0 [ 148.896165][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.906249][ T7375] Call Trace: [ 148.909547][ T7375] [ 148.912504][ T7375] dump_stack_lvl+0x18c/0x250 [ 148.915781][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 148.917305][ T7375] ? show_regs_print_info+0x20/0x20 [ 148.931289][ T7375] ? load_image+0x420/0x420 [ 148.935830][ T7375] ? __lock_acquire+0x7d80/0x7d80 [ 148.940869][ T7375] should_fail_ex+0x394/0x4c0 [ 148.945584][ T7375] should_failslab+0x9/0x20 [ 148.950188][ T7375] slab_pre_alloc_hook+0x59/0x300 [ 148.955232][ T7375] ? __vmalloc_node_range+0x598/0x1320 [ 148.960698][ T7375] ? __vmalloc_node_range+0x598/0x1320 [ 148.966334][ T7375] __kmem_cache_alloc_node+0x53/0x250 [ 148.972323][ T7375] ? __vmalloc_node_range+0x598/0x1320 [ 148.977798][ T7375] __kmalloc_node+0xa6/0x240 [ 148.982396][ T7375] __vmalloc_node_range+0x598/0x1320 [ 148.987879][ T7375] ? free_vm_area+0x50/0x50 [ 148.992386][ T7375] ? arch_dup_task_struct+0x57/0xd0 [ 148.997594][ T7375] ? __asan_memcpy+0x40/0x70 [ 149.002189][ T7375] dup_task_struct+0x3c8/0x800 [ 149.006956][ T7375] ? copy_process+0x5a6/0x3da0 [ 149.011726][ T7375] ? lockdep_hardirqs_on+0x98/0x150 [ 149.017015][ T7375] copy_process+0x5a6/0x3da0 [ 149.021606][ T7375] ? preempt_schedule+0xc0/0xd0 [ 149.026464][ T7375] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 149.032356][ T7375] ? _raw_spin_unlock+0x40/0x40 [ 149.037208][ T7375] ? preempt_schedule_thunk+0x1a/0x30 [ 149.042610][ T7375] ? try_to_wake_up+0x6f5/0x10e0 [ 149.047576][ T7375] ? __pidfd_prepare+0x140/0x140 [ 149.052526][ T7375] ? wake_up_q+0xca/0x100 [ 149.056863][ T7375] kernel_clone+0x24b/0x8a0 [ 149.061367][ T7375] ? futex_wake_mark+0x150/0x150 [ 149.066306][ T7375] ? create_io_thread+0x190/0x190 [ 149.071333][ T7375] ? do_futex+0x35d/0x3e0 [ 149.075664][ T7375] __x64_sys_clone+0x1b7/0x230 [ 149.080432][ T7375] ? __ia32_sys_vfork+0x140/0x140 [ 149.085465][ T7375] ? lock_chain_count+0x20/0x20 [ 149.090331][ T7375] ? lockdep_hardirqs_on+0x98/0x150 [ 149.095545][ T7375] do_syscall_64+0x55/0xb0 [ 149.100052][ T7375] ? clear_bhb_loop+0x40/0x90 [ 149.104731][ T7375] ? clear_bhb_loop+0x40/0x90 [ 149.109416][ T7375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.115314][ T7375] RIP: 0033:0x7fb34419e159 [ 149.119730][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.139340][ T7375] RSP: 002b:00007fb3450dcfd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 149.147761][ T7375] RAX: ffffffffffffffda RBX: 00007fb344425fa0 RCX: 00007fb34419e159 [ 149.155738][ T7375] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 000000000200004a [ 149.163706][ T7375] RBP: 00007fb344235024 R08: 0000000000000000 R09: 0000000000000000 [ 149.171675][ T7375] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 149.179644][ T7375] R13: 00007fb344426038 R14: 00007fb344425fa0 R15: 00007ffc39bdb8f8 [ 149.187629][ T7375] [ 149.212951][ T7375] syz.0.500: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 149.239080][ T7377] gretap0: entered promiscuous mode [ 149.244398][ T7377] macvlan2: entered promiscuous mode [ 149.250337][ T7375] CPU: 1 PID: 7375 Comm: syz.0.500 Not tainted syzkaller #0 [ 149.250654][ T7377] macvlan2: entered allmulticast mode [ 149.257641][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.257659][ T7375] Call Trace: [ 149.257668][ T7375] [ 149.257677][ T7375] dump_stack_lvl+0x18c/0x250 [ 149.257707][ T7375] ? show_regs_print_info+0x20/0x20 [ 149.257729][ T7375] ? load_image+0x420/0x420 [ 149.263210][ T7377] gretap0: entered allmulticast mode [ 149.273224][ T7375] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.273259][ T7375] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 149.273282][ T7375] warn_alloc+0x246/0x340 [ 149.273307][ T7375] ? zone_watermark_ok_safe+0x230/0x230 [ 149.286895][ T7378] netlink: 'syz.2.493': attribute type 9 has an invalid length. [ 149.289386][ T7375] ? __vmalloc_node_range+0x598/0x1320 [ 149.293882][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 149.299151][ T7375] ? __vmalloc_node_range+0x598/0x1320 [ 149.299184][ T7375] ? rcu_is_watching+0x15/0xb0 [ 149.299206][ T7375] ? __vmalloc_node_range+0x598/0x1320 [ 149.299225][ T7375] ? __kmalloc_node+0xe4/0x240 [ 149.299252][ T7375] __vmalloc_node_range+0x661/0x1320 [ 149.299299][ T7375] ? free_vm_area+0x50/0x50 [ 149.299322][ T7375] ? arch_dup_task_struct+0x57/0xd0 [ 149.299344][ T7375] ? __asan_memcpy+0x40/0x70 [ 149.305851][ T5823] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.312247][ T7375] dup_task_struct+0x3c8/0x800 [ 149.324333][ T7378] macvlan3: entered promiscuous mode [ 149.329732][ T7375] ? copy_process+0x5a6/0x3da0 [ 149.329764][ T7375] ? lockdep_hardirqs_on+0x98/0x150 [ 149.329791][ T7375] copy_process+0x5a6/0x3da0 [ 149.329814][ T7375] ? preempt_schedule+0xc0/0xd0 [ 149.336171][ T7378] macvlan3: entered allmulticast mode [ 149.344010][ T7375] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 149.431994][ T7375] ? _raw_spin_unlock+0x40/0x40 [ 149.436854][ T7375] ? preempt_schedule_thunk+0x1a/0x30 [ 149.442235][ T7375] ? try_to_wake_up+0x6f5/0x10e0 [ 149.447175][ T7375] ? __pidfd_prepare+0x140/0x140 [ 149.452123][ T7375] ? wake_up_q+0xca/0x100 [ 149.456493][ T7375] kernel_clone+0x24b/0x8a0 [ 149.460999][ T7375] ? futex_wake_mark+0x150/0x150 [ 149.465940][ T7375] ? create_io_thread+0x190/0x190 [ 149.470980][ T7375] ? do_futex+0x35d/0x3e0 [ 149.475314][ T7375] __x64_sys_clone+0x1b7/0x230 [ 149.480088][ T7375] ? __ia32_sys_vfork+0x140/0x140 [ 149.485121][ T7375] ? lock_chain_count+0x20/0x20 [ 149.489981][ T7375] ? lockdep_hardirqs_on+0x98/0x150 [ 149.495188][ T7375] do_syscall_64+0x55/0xb0 [ 149.499607][ T7375] ? clear_bhb_loop+0x40/0x90 [ 149.504280][ T7375] ? clear_bhb_loop+0x40/0x90 [ 149.508969][ T7375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.514892][ T7375] RIP: 0033:0x7fb34419e159 [ 149.519312][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.538916][ T7375] RSP: 002b:00007fb3450dcfd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 149.547341][ T7375] RAX: ffffffffffffffda RBX: 00007fb344425fa0 RCX: 00007fb34419e159 [ 149.555348][ T7375] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 000000000200004a [ 149.563325][ T7375] RBP: 00007fb344235024 R08: 0000000000000000 R09: 0000000000000000 [ 149.571293][ T7375] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 149.579265][ T7375] R13: 00007fb344426038 R14: 00007fb344425fa0 R15: 00007ffc39bdb8f8 [ 149.587244][ T7375] [ 149.594447][ T7375] Mem-Info: [ 149.598018][ T7375] active_anon:6053 inactive_anon:0 isolated_anon:0 [ 149.598018][ T7375] active_file:11300 inactive_file:39673 isolated_file:0 [ 149.598018][ T7375] unevictable:768 dirty:438 writeback:0 [ 149.598018][ T7375] slab_reclaimable:10468 slab_unreclaimable:92131 [ 149.598018][ T7375] mapped:25029 shmem:1362 pagetables:633 [ 149.598018][ T7375] sec_pagetables:0 bounce:0 [ 149.598018][ T7375] kernel_misc_reclaimable:0 [ 149.598018][ T7375] free:1350104 free_pcp:10726 free_cma:0 [ 149.644391][ T7375] Node 0 active_anon:24212kB inactive_anon:0kB active_file:45200kB inactive_file:158560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100116kB dirty:1752kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12104kB pagetables:2532kB sec_pagetables:0kB all_unreclaimable? no [ 149.684026][ T7375] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 149.726266][ T5823] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 149.731327][ T7375] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.744609][ T5823] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 149.779562][ T7375] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 149.791698][ T5823] usb 4-1: config 1 interface 0 has no altsetting 0 [ 149.842392][ T7375] Node 0 DMA32 free:1496148kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23976kB inactive_anon:0kB active_file:45172kB inactive_file:157756kB unevictable:1536kB writepending:1752kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:23492kB local_pcp:11196kB free_cma:0kB [ 149.883987][ T5823] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 149.899472][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.908393][ T7375] lowmem_reserve[]: 0 0 0 0 0 [ 149.913256][ T7375] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:28kB inactive_file:804kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 149.940434][ T5823] usb 4-1: Product: syz [ 149.945330][ T5823] usb 4-1: Manufacturer: syz [ 149.950379][ T5823] usb 4-1: SerialNumber: syz [ 149.964297][ T7375] lowmem_reserve[]: 0 0 0 0 0 [ 149.965142][ T7371] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.003157][ T7375] [ 150.004959][ T7371] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.006861][ T7375] Node 1 Normal free:3888908kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20064kB local_pcp:9728kB free_cma:0kB [ 150.047948][ T7375] lowmem_reserve[]: 0 0 0 0 0 [ 150.054678][ T7375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.056231][ T7384] loop2: detected capacity change from 0 to 8192 [ 150.069635][ T7375] Node 0 DMA32: 1489*4kB (UME) 1142*8kB (UME) 814*16kB (UME) 418*32kB (UME) 311*64kB (UME) 55*128kB (UME) 27*256kB (UM) 7*512kB (UM) 6*1024kB (UME) 7*2048kB (UME) 341*4096kB (UM) = 1496148kB [ 150.109446][ T7384] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.110822][ T7375] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 150.131611][ T7384] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 150.161581][ T7384] REISERFS (device loop2): using ordered data mode [ 150.170287][ T7375] Node 1 Normal: 259*4kB (UE) 62*8kB (UE) 43*16kB (UE) 53*32kB (UE) 23*64kB (UME) 4*128kB (ME) 2*256kB (ME) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 947*4096kB (M) = 3888908kB [ 150.176301][ T7384] reiserfs: using flush barriers [ 150.197074][ T7384] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.214466][ T7384] REISERFS (device loop2): checking transaction log (loop2) [ 150.225058][ T7375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.234854][ T7375] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.244196][ T7375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.259202][ T7375] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.269074][ T7375] 53468 total pagecache pages [ 150.273792][ T7375] 0 pages in swap cache [ 150.280080][ T7375] Free swap = 124728kB [ 150.284957][ T7375] Total swap = 124996kB [ 150.289136][ T7375] 2097051 pages RAM [ 150.292963][ T7375] 0 pages HighMem/MovableOnly [ 150.309491][ T7375] 416960 pages reserved [ 150.313704][ T7375] 0 pages cma reserved [ 150.454148][ T7384] REISERFS (device loop2): Using tea hash to sort names [ 150.500684][ T7384] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 150.650677][ T5803] IPVS: starting estimator thread 0... [ 150.746134][ T7399] loop0: detected capacity change from 0 to 1024 [ 150.765854][ T7397] IPVS: using max 20 ests per chain, 48000 per kthread [ 150.803816][ T7399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 150.841489][ T7399] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.935641][ T7399] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.504: lblock 0 mapped to illegal pblock 0 (length 1) [ 150.997336][ T7399] EXT4-fs (loop0): Remounting filesystem read-only [ 151.067400][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 151.077468][ T5823] (unnamed net_device) (uninitialized): Assigned a random MAC address: b2:3c:47:f9:ef:2c [ 151.112828][ T5823] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 151.158698][ T5823] usb 4-1: USB disconnect, device number 9 [ 151.658284][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 151.927225][ T7436] loop1: detected capacity change from 0 to 512 [ 151.971236][ T7436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.115156][ T7445] FAULT_INJECTION: forcing a failure. [ 152.115156][ T7445] name fail_futex, interval 1, probability 0, space 0, times 1 [ 152.129645][ T7445] CPU: 1 PID: 7445 Comm: syz.0.520 Not tainted syzkaller #0 [ 152.136977][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.147059][ T7445] Call Trace: [ 152.150358][ T7445] [ 152.153305][ T7445] dump_stack_lvl+0x18c/0x250 [ 152.158021][ T7445] ? show_regs_print_info+0x20/0x20 [ 152.163257][ T7445] ? load_image+0x420/0x420 [ 152.167790][ T7445] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 152.173807][ T7445] ? preempt_schedule+0xc0/0xd0 [ 152.178697][ T7445] ? preempt_schedule_common+0x82/0xc0 [ 152.184191][ T7445] should_fail_ex+0x394/0x4c0 [ 152.188902][ T7445] get_futex_key+0x16f/0x1030 [ 152.193601][ T7445] ? preempt_schedule_thunk+0x1a/0x30 [ 152.199019][ T7445] ? try_to_wake_up+0x6f5/0x10e0 [ 152.203976][ T7445] ? futex_setup_timer+0xc0/0xc0 [ 152.208934][ T7445] futex_wake+0x127/0x4f0 [ 152.213342][ T7445] ? futex_wake_mark+0x150/0x150 [ 152.218389][ T7445] ? __lock_acquire+0x7d80/0x7d80 [ 152.223416][ T7445] ? file_end_write+0x159/0x250 [ 152.228278][ T7445] ? vfs_write+0x5de/0x9a0 [ 152.232699][ T7445] do_futex+0x35d/0x3e0 [ 152.236860][ T7445] ? __ia32_sys_get_robust_list+0x110/0x110 [ 152.242761][ T7445] __se_sys_futex+0x3a9/0x440 [ 152.247445][ T7445] ? __x64_sys_futex+0xf0/0xf0 [ 152.252227][ T7445] ? __x64_sys_futex+0x21/0xf0 [ 152.256992][ T7445] do_syscall_64+0x55/0xb0 [ 152.261410][ T7445] ? clear_bhb_loop+0x40/0x90 [ 152.266110][ T7445] ? clear_bhb_loop+0x40/0x90 [ 152.270789][ T7445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.276684][ T7445] RIP: 0033:0x7fb34419e159 [ 152.281104][ T7445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.300717][ T7445] RSP: 002b:00007fb3450dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.309135][ T7445] RAX: ffffffffffffffda RBX: 00007fb344425fa0 RCX: 00007fb34419e159 [ 152.317112][ T7445] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000000000000000 [ 152.325087][ T7445] RBP: 00007fb344235024 R08: 0000000000000000 R09: 0000000000000002 [ 152.333055][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.341033][ T7445] R13: 00007fb344426038 R14: 00007fb344425fa0 R15: 00007ffc39bdb8f8 [ 152.349019][ T7445] [ 152.373123][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.104455][ T7472] loop2: detected capacity change from 0 to 2048 [ 153.141596][ T7477] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.627281][ T7481] warning: `syz.0.535' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 154.158464][ T7479] loop2: detected capacity change from 0 to 40427 [ 154.196036][ T7479] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 154.203636][ T7479] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 154.227544][ T7479] F2FS-fs (loop2): invalid crc value [ 154.249669][ T7479] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.388957][ T7479] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 154.408451][ T7479] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.504202][ T5769] syz-executor: attempt to access beyond end of device [ 154.504202][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.527386][ T5769] F2FS-fs (loop2): Remounting filesystem read-only [ 154.594760][ T42] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.806813][ T42] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.819603][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.844640][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.855290][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.871801][ T42] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 154.881425][ T42] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 154.895185][ T42] usb 4-1: Manufacturer: syz [ 154.902729][ T42] usb 4-1: config 0 descriptor?? [ 155.084751][ T5823] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.270460][ T5823] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.281676][ T5823] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 155.294912][ T5823] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.304005][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.312061][ T5823] usb 3-1: Product: syz [ 155.316482][ T5823] usb 3-1: Manufacturer: syz [ 155.321139][ T5823] usb 3-1: SerialNumber: syz [ 155.329960][ T42] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 155.335311][ T5823] cdc_mbim 3-1:1.0: skipping garbage [ 155.338742][ T42] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 155.356795][ T42] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 155.535862][ T7517] FAULT_INJECTION: forcing a failure. [ 155.535862][ T7517] name failslab, interval 1, probability 0, space 0, times 0 [ 155.550984][ T7517] CPU: 1 PID: 7517 Comm: syz.0.548 Not tainted syzkaller #0 [ 155.558332][ T7517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.568412][ T7517] Call Trace: [ 155.571726][ T7517] [ 155.574685][ T7517] dump_stack_lvl+0x18c/0x250 [ 155.576956][ T7509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.579379][ T7517] ? show_regs_print_info+0x20/0x20 [ 155.591709][ T7517] ? load_image+0x420/0x420 [ 155.596247][ T7517] ? __lock_acquire+0x7d80/0x7d80 [ 155.601315][ T7517] should_fail_ex+0x394/0x4c0 [ 155.606032][ T7517] should_failslab+0x9/0x20 [ 155.610555][ T7517] slab_pre_alloc_hook+0x59/0x300 [ 155.615612][ T7517] ? kvmalloc_node+0x70/0x180 [ 155.620339][ T7517] ? kvmalloc_node+0x70/0x180 [ 155.625027][ T7517] __kmem_cache_alloc_node+0x53/0x250 [ 155.630413][ T7517] ? kvmalloc_node+0x70/0x180 [ 155.635102][ T7517] __kmalloc_node+0xa6/0x240 [ 155.639705][ T7517] kvmalloc_node+0x70/0x180 [ 155.644219][ T7517] newary+0x13d/0xab0 [ 155.648215][ T7517] ? ipcget+0x13c/0xe10 [ 155.652377][ T7517] ipcget+0x9ee/0xe10 [ 155.656370][ T7517] ? ipcget+0x13c/0xe10 [ 155.660534][ T7517] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 155.666182][ T7517] __x64_sys_semget+0x1ab/0x210 [ 155.671068][ T7517] ? sem_more_checks+0xa0/0xa0 [ 155.675868][ T7517] ? lockdep_hardirqs_on+0x98/0x150 [ 155.681077][ T7517] do_syscall_64+0x55/0xb0 [ 155.685498][ T7517] ? clear_bhb_loop+0x40/0x90 [ 155.690175][ T7517] ? clear_bhb_loop+0x40/0x90 [ 155.694854][ T7517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.700750][ T7517] RIP: 0033:0x7fb34419e159 [ 155.705176][ T7517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.724795][ T7517] RSP: 002b:00007fb3450dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 155.733215][ T7517] RAX: ffffffffffffffda RBX: 00007fb344425fa0 RCX: 00007fb34419e159 [ 155.741188][ T7517] RDX: 0000000000000200 RSI: 0000000000000003 RDI: 00000000798e2636 [ 155.749161][ T7517] RBP: 00007fb344235024 R08: 0000000000000000 R09: 0000000000000000 [ 155.757142][ T7517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.765138][ T7517] R13: 00007fb344426038 R14: 00007fb344425fa0 R15: 00007ffc39bdb8f8 [ 155.773140][ T7517] [ 155.858732][ T23] usb 4-1: USB disconnect, device number 10 [ 156.108225][ T7527] loop0: detected capacity change from 0 to 256 [ 156.148987][ T7527] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0x14e42e2d, utbl_chksum : 0xe619d30d) [ 156.236900][ T7509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.245565][ T5823] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 156.253105][ T5823] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 156.286278][ T5823] wwan wwan0: port wwan0mbim0 attached [ 156.300936][ T5823] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 6e:07:2f:4e:b1:89 [ 156.572236][ T7525] loop1: detected capacity change from 0 to 32768 [ 156.575043][ T7531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.554'. [ 156.601312][ T789] usb 3-1: USB disconnect, device number 8 [ 156.628941][ T789] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 156.708694][ T789] wwan wwan0: port wwan0mbim0 disconnected [ 156.846374][ T7536] loop3: detected capacity change from 0 to 256 [ 156.887167][ T7536] exfat: Deprecated parameter 'utf8' [ 156.892524][ T7536] exfat: Deprecated parameter 'utf8' [ 156.904871][ T7536] exfat: Deprecated parameter 'utf8' [ 156.978311][ T7536] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 157.524086][ T7561] batadv_slave_1: entered promiscuous mode [ 157.533464][ T7559] batadv_slave_1: left promiscuous mode [ 157.539508][ T5833] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.630755][ T7565] loop2: detected capacity change from 0 to 128 [ 157.643650][ T7565] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 157.725399][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 157.737051][ T5833] usb 4-1: too many endpoints for config 0 interface 0 altsetting 6: 254, using maximum allowed: 30 [ 157.757869][ T5833] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 157.781108][ T5833] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 157.798021][ T5833] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.805289][ T6498] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 157.818359][ T5833] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 157.844975][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.886776][ T5833] usb 4-1: config 0 descriptor?? [ 158.096877][ T7578] loop1: detected capacity change from 0 to 2048 [ 158.142689][ T7578] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 158.173965][ T7578] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 158.194097][ T7578] UDF-fs: Scanning with blocksize 512 failed [ 158.228618][ T7578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.264680][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.291147][ T27] audit: type=1800 audit(1788791230.516:29): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.565" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 158.394948][ T5833] input: HID 0925:8866 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0925:8866.0009/input/input10 [ 158.460977][ T23] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 158.483563][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.492976][ T23] usb 3-1: Product: syz [ 158.497874][ T23] usb 3-1: Manufacturer: syz [ 158.502799][ T23] usb 3-1: SerialNumber: syz [ 158.523154][ T23] usb 3-1: config 0 descriptor?? [ 158.542382][ T23] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 158.557478][ T5833] smartjoyplus 0003:0925:8866.0009: input,hidraw0: USB HID vd.8b Joystick [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 158.590585][ T5833] smartjoyplus 0003:0925:8866.0009: no output reports found [ 158.626272][ T5833] usb 4-1: USB disconnect, device number 11 [ 158.784040][ T7586] fido_id[7586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 159.173945][ T23] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 159.184728][ T23] sq905c: probe of 3-1:0.0 failed with error -71 [ 159.216747][ T23] usb 3-1: USB disconnect, device number 9 [ 159.347958][ T7604] loop3: detected capacity change from 0 to 256 [ 159.409510][ T42] kernel write not supported for file /uhid (pid: 42 comm: kworker/1:1) [ 159.584698][ T5833] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.765911][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 159.796949][ T5833] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 159.814680][ T5833] usb 2-1: config 0 has no interface number 0 [ 159.834648][ T5833] usb 2-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 159.859862][ T5833] usb 2-1: config 0 interface 184 has no altsetting 0 [ 159.885499][ T5833] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 159.906314][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.921181][ T5833] usb 2-1: Product: syz [ 159.944609][ T5833] usb 2-1: Manufacturer: syz [ 159.949362][ T5833] usb 2-1: SerialNumber: syz [ 159.970730][ T5833] usb 2-1: config 0 descriptor?? [ 159.976970][ T7602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.993400][ T5833] smsc75xx v1.0.0 [ 160.206707][ T7602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.421297][ T42] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 160.453996][ T42] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.637922][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 160.669218][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 160.752236][ T7636] gadgetfs: bound to dummy_udc driver [ 160.838595][ T7639] mmap: syz.0.591 (7639) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 160.905332][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 160.930386][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 160.946195][ T5833] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 160.959627][ T5833] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 160.972723][ T5833] usb 2-1: USB disconnect, device number 9 [ 161.034922][ T5803] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.042777][ C0] gadgetfs: connected [ 161.050030][ T5803] gadgetfs: disconnected [ 161.339052][ T7650] loop3: detected capacity change from 0 to 256 [ 161.373095][ T7650] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 161.745146][ T7657] loop0: detected capacity change from 0 to 8192 [ 162.412251][ T7680] loop1: detected capacity change from 0 to 256 [ 162.436399][ T7680] exfat: Deprecated parameter 'utf8' [ 162.441863][ T7680] exfat: Deprecated parameter 'namecase' [ 162.551445][ T7680] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 162.660176][ T7685] loop0: detected capacity change from 0 to 2048 [ 162.714345][ T7685] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 162.755581][ T7685] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 162.763266][ T7685] UDF-fs: Scanning with blocksize 512 failed [ 162.822178][ T7685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.841082][ T7690] syz_tun: entered allmulticast mode [ 162.898949][ T7690] dvmrp8: entered allmulticast mode [ 162.924658][ T27] audit: type=1800 audit(1788791235.136:30): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.610" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 162.951562][ T7689] syz_tun: left allmulticast mode [ 163.076778][ T7694] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 163.213571][ T7700] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.617'. [ 163.399364][ T7705] loop3: detected capacity change from 0 to 512 [ 163.469227][ T7705] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.619: corrupted in-inode xattr: invalid ea_ino [ 163.656651][ T7705] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.619: couldn't read orphan inode 15 (err -117) [ 163.722888][ T7705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.945335][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.544749][ T5833] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.691118][ T7739] loop3: detected capacity change from 0 to 128 [ 164.715967][ T7739] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.742171][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.755178][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.785890][ T5833] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 164.795608][ T7739] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.812131][ T5833] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 164.821484][ T5833] usb 1-1: Manufacturer: syz [ 164.846054][ T5833] usb 1-1: config 0 descriptor?? [ 164.934795][ T5803] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.951135][ T6506] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.114869][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 165.130501][ T5803] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 165.144698][ T5803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 165.176265][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.194593][ T5803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 165.215083][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 165.248876][ T5803] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.271130][ T5803] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.287957][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.482835][ T7741] loop2: detected capacity change from 0 to 32768 [ 165.499919][ T7741] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.634 (7741) [ 165.529904][ T5803] usb 2-1: usb_control_msg returned -32 [ 165.537985][ T7741] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 165.547403][ T5803] usbtmc 2-1:16.0: can't read capabilities [ 165.549728][ T7741] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 165.577096][ T7741] BTRFS info (device loop2): using free space tree [ 165.719525][ T5833] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000B/input/input11 [ 165.735797][ T7741] BTRFS info (device loop2): enabling ssd optimizations [ 165.754670][ T7741] BTRFS info (device loop2): auto enabling async discard [ 165.840335][ T5833] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000B/input/input12 [ 165.911237][ T7766] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 165.918635][ T5833] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000B/input/input13 [ 165.973819][ T5833] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000B/input/input14 [ 166.036008][ T7769] loop3: detected capacity change from 0 to 1024 [ 166.046250][ T5833] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 166.058497][ T5769] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 166.095051][ T5833] usb 1-1: USB disconnect, device number 11 [ 166.233969][ T7769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.297939][ T7769] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.354361][ T7769] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.639: lblock 3 mapped to illegal pblock 3 (length 1) [ 166.442324][ T7770] fido_id[7770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 166.534037][ T7769] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 166.604824][ T7769] EXT4-fs (loop3): This should not happen!! Data will be lost [ 166.604824][ T7769] [ 166.690131][ T7778] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.639: Freeing blocks not in datazone - block = 3, count = 1 [ 166.790879][ T7779] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.639: lblock 0 mapped to illegal pblock 0 (length 1) [ 166.857583][ T7785] loop0: detected capacity change from 0 to 128 [ 166.902251][ T7785] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 166.911857][ T7779] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 166.967965][ T7779] EXT4-fs (loop3): This should not happen!! Data will be lost [ 166.967965][ T7779] [ 167.070872][ T7790] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.176021][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.260424][ T6500] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 167.776592][ T5803] usb 2-1: USB disconnect, device number 10 [ 167.839680][ T7809] loop1: detected capacity change from 0 to 128 [ 167.873302][ T7809] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 167.903881][ T7809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.952898][ T7815] loop0: detected capacity change from 0 to 512 [ 167.998107][ T7815] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.654: bad orphan inode 13 [ 168.055102][ T7815] ext4_test_bit(bit=12, block=4) = 1 [ 168.074697][ T7815] is_bad_inode(inode)=0 [ 168.078900][ T7815] NEXT_ORPHAN(inode)=0 [ 168.141374][ T7815] max_ino=32 [ 168.144977][ T7815] i_nlink=1 [ 168.149585][ T7815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.215912][ T7815] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.326044][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.362212][ T7841] loop0: detected capacity change from 0 to 1024 [ 169.388462][ T7841] EXT4-fs: Ignoring removed bh option [ 169.443186][ T7841] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 169.495751][ T7841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.723330][ T5766] EXT4-fs error (device loop0): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /173/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 169.770024][ T5766] EXT4-fs (loop0): Remounting filesystem read-only [ 169.922608][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.971827][ T7858] loop1: detected capacity change from 0 to 8192 [ 170.002633][ T7858] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.046747][ T7858] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 170.097400][ T7858] REISERFS (device loop1): using ordered data mode [ 170.103948][ T7858] reiserfs: using flush barriers [ 170.159242][ T7858] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.215233][ T7858] REISERFS (device loop1): checking transaction log (loop1) [ 170.390492][ T7858] REISERFS (device loop1): Using tea hash to sort names [ 170.399977][ T7858] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 170.630787][ T7858] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 170.690033][ T7858] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 170.726503][ T7864] loop2: detected capacity change from 0 to 2048 [ 170.755140][ T7858] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 170.798566][ T7864] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.827724][ T7858] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 170.936878][ T7857] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 171.005188][ T7857] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 171.034020][ T7857] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4) [ 171.080617][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.126330][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.140771][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.151539][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.164320][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.171972][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.824127][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 172.142858][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.174952][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.192947][ T7870] bridge_slave_0: entered allmulticast mode [ 172.208070][ T7870] bridge_slave_0: entered promiscuous mode [ 172.235511][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.242687][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.294795][ T7870] bridge_slave_1: entered allmulticast mode [ 172.306007][ T7870] bridge_slave_1: entered promiscuous mode [ 172.395932][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.418039][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.523932][ T7870] team0: Port device team_slave_0 added [ 172.537414][ T7870] team0: Port device team_slave_1 added [ 172.565781][ T7891] loop2: detected capacity change from 0 to 32768 [ 172.621781][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.635598][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.736509][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.804234][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.836272][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.896408][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.992356][ T7870] hsr_slave_0: entered promiscuous mode [ 173.003626][ T7870] hsr_slave_1: entered promiscuous mode [ 173.013797][ T7870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.029778][ T7870] Cannot create hsr debugfs directory [ 173.244825][ T5085] Bluetooth: hci0: command tx timeout [ 173.431904][ T7870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.440083][ T7910] loop1: detected capacity change from 0 to 32768 [ 173.465572][ T7870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.506651][ T7910] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 173.519818][ T7870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.571263][ T7870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.639596][ T7910] XFS (loop1): Ending clean mount [ 173.910137][ T7928] loop3: detected capacity change from 0 to 512 [ 173.929867][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 173.980507][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.050468][ T7928] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.694: corrupted in-inode xattr: invalid ea_ino [ 174.094233][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.175990][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.183120][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.214889][ T7928] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.694: couldn't read orphan inode 15 (err -117) [ 174.255168][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.262312][ T6499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.286960][ T7928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.380883][ T7870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.619749][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.784914][ T789] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.842177][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.003029][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.024775][ T789] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 175.033856][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.077847][ T789] usb 3-1: config 0 descriptor?? [ 175.124643][ T5823] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.323593][ T789] usbhid 3-1:0.0: can't add hid device: -71 [ 175.331294][ T5085] Bluetooth: hci0: command tx timeout [ 175.339958][ T789] usbhid: probe of 3-1:0.0 failed with error -71 [ 175.347146][ T5823] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.353410][ T7870] veth0_vlan: entered promiscuous mode [ 175.367356][ T789] usb 3-1: USB disconnect, device number 10 [ 175.373425][ T5823] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.390885][ T5823] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.398118][ T5823] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 175.407530][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.418726][ T5823] usb 2-1: config 0 descriptor?? [ 175.429108][ T7870] veth1_vlan: entered promiscuous mode [ 175.513813][ T7870] veth0_macvtap: entered promiscuous mode [ 175.533799][ T7870] veth1_macvtap: entered promiscuous mode [ 175.582974][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.594008][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.604166][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.620660][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.634822][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.647908][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.658770][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.671482][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.693430][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.718538][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.729479][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.751611][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.764686][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.785792][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.820531][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.830489][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.841222][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.852755][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.857574][ T5823] hid (null): bogus close delimiter [ 175.878990][ T7870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.892494][ T7870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.897845][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 175.901352][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 175.901383][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 175.914279][ T7870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.937092][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 175.939234][ T7870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.946759][ T7961] loop3: detected capacity change from 0 to 16 [ 175.960707][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x7 [ 175.972039][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x6 [ 175.983634][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 175.993105][ T7961] erofs: (device loop3): mounted with root inode @ nid 36. [ 176.000454][ T789] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 176.008653][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 176.066278][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 176.095145][ T5823] hid-multitouch 0003:0EEF:72C4.000C: unknown main item tag 0x0 [ 176.115479][ T5823] hid-multitouch 0003:0EEF:72C4.000C: bogus close delimiter [ 176.135243][ T5823] hid-multitouch 0003:0EEF:72C4.000C: item 0 1 2 10 parsing failed [ 176.151385][ T5823] hid-multitouch: probe of 0003:0EEF:72C4.000C failed with error -22 [ 176.175521][ T6268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.186904][ T6268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.204682][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 176.214927][ T5823] usb 2-1: USB disconnect, device number 11 [ 176.225808][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.251390][ T789] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 176.270986][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.293730][ T789] usb 3-1: config 0 descriptor?? [ 176.331216][ T6787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.345192][ T6787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.540712][ T789] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 176.551854][ T789] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 176.848191][ T7968] loop3: detected capacity change from 0 to 32768 [ 176.886832][ T7968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.705 (7968) [ 176.943755][ T7968] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.954675][ T7968] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 176.963418][ T7968] BTRFS info (device loop3): setting nodatasum [ 176.969963][ T7968] BTRFS info (device loop3): force zlib compression, level 3 [ 176.977441][ T7968] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 176.987366][ T7968] BTRFS info (device loop3): use lzo compression, level 0 [ 176.994509][ T7968] BTRFS info (device loop3): turning on flush-on-commit [ 177.001592][ T7968] BTRFS info (device loop3): enabling auto defrag [ 177.008743][ T7968] BTRFS info (device loop3): max_inline at 4096 [ 177.015078][ T7968] BTRFS info (device loop3): using free space tree [ 177.151862][ T7968] BTRFS info (device loop3): enabling ssd optimizations [ 177.170183][ C0] powermate: config urb returned -71 [ 177.181325][ C0] powermate: config urb returned -71 [ 177.187707][ C0] powermate: config urb returned -71 [ 177.193458][ C0] powermate: config urb returned -71 [ 177.204718][ T5823] usb 3-1: USB disconnect, device number 11 [ 177.210685][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 177.384260][ T7968] BTRFS warning (device loop3): qgroup rescan init failed, qgroup is not enabled [ 177.395348][ T5085] Bluetooth: hci0: command tx timeout [ 177.508202][ T5770] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.636096][ T7966] loop4: detected capacity change from 0 to 32768 [ 177.783722][ T7966] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 178.165420][ T7870] ocfs2: Unmounting device (7,4) on (node local) [ 178.568100][ T7996] loop2: detected capacity change from 0 to 40427 [ 178.585091][ T8004] 9pnet: p9_errstr2errno: server reported unknown error  [ 178.592341][ T7996] F2FS-fs (loop2): Invalid log blocks per segment (1) [ 178.632672][ T8003] FAULT_INJECTION: forcing a failure. [ 178.632672][ T8003] name failslab, interval 1, probability 0, space 0, times 0 [ 178.633448][ T7996] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.676117][ T7996] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 178.683900][ T8003] CPU: 1 PID: 8003 Comm: syz.4.711 Not tainted syzkaller #0 [ 178.691524][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.701613][ T8003] Call Trace: [ 178.704911][ T8003] [ 178.707871][ T8003] dump_stack_lvl+0x18c/0x250 [ 178.712612][ T8003] ? show_regs_print_info+0x20/0x20 [ 178.717842][ T8003] ? load_image+0x420/0x420 [ 178.722376][ T8003] ? __lock_acquire+0x7d80/0x7d80 [ 178.724651][ T7996] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 178.727458][ T8003] ? __asan_memset+0x22/0x40 [ 178.740516][ T8003] should_fail_ex+0x394/0x4c0 [ 178.745232][ T8003] should_failslab+0x9/0x20 [ 178.749768][ T8003] slab_pre_alloc_hook+0x59/0x300 [ 178.754830][ T8003] kmem_cache_alloc+0x5a/0x2c0 [ 178.759634][ T8003] ? security_inode_alloc+0x34/0x110 [ 178.764961][ T8003] security_inode_alloc+0x34/0x110 [ 178.770109][ T8003] inode_init_always+0x914/0xc90 [ 178.774632][ T7996] F2FS-fs (loop2): Image doesn't support compression [ 178.775065][ T8003] new_inode_pseudo+0x95/0x1d0 [ 178.786511][ T8003] new_inode+0x22/0x1d0 [ 178.790704][ T8003] shmem_get_inode+0x34d/0xcd0 [ 178.795499][ T8003] ? mas_destroy+0x20a0/0x20a0 [ 178.800299][ T8003] __shmem_file_setup+0x167/0x2c0 [ 178.805115][ T7996] F2FS-fs (loop2): invalid crc value [ 178.805334][ T8003] shmem_zero_setup+0x8d/0x130 [ 178.815397][ T8003] mmap_region+0x1225/0x2090 [ 178.820036][ T8003] ? file_mmap_ok+0x170/0x170 [ 178.824734][ T8003] ? mt_find+0x613/0x640 [ 178.829005][ T8003] ? mtree_destroy+0x30/0x30 [ 178.833615][ T8003] ? cap_mmap_addr+0x213/0x2b0 [ 178.838417][ T8003] do_mmap+0x98f/0x10a0 [ 178.842631][ T8003] ? mlock_future_ok+0xf0/0xf0 [ 178.847420][ T8003] ? down_write+0x200/0x200 [ 178.851958][ T8003] vm_mmap_pgoff+0x1c4/0x3f0 [ 178.856581][ T8003] ? account_locked_vm+0x200/0x200 [ 178.861723][ T8003] ? ksys_mmap_pgoff+0xf3/0x720 [ 178.866609][ T8003] ? __x64_sys_mmap+0x7a/0x130 [ 178.871407][ T8003] do_syscall_64+0x55/0xb0 [ 178.875852][ T8003] ? clear_bhb_loop+0x40/0x90 [ 178.880552][ T8003] ? clear_bhb_loop+0x40/0x90 [ 178.885256][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.891269][ T8003] RIP: 0033:0x7f96be39e159 [ 178.895719][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.915361][ T8003] RSP: 002b:00007f96bf35a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 178.923811][ T8003] RAX: ffffffffffffffda RBX: 00007f96be625fa0 RCX: 00007f96be39e159 [ 178.931821][ T8003] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000000000000 [ 178.939825][ T8003] RBP: 00007f96be435024 R08: ffffffffffffffff R09: 0000000010000000 [ 178.947831][ T8003] R10: 0000000000109031 R11: 0000000000000246 R12: 0000000000000000 [ 178.955917][ T8003] R13: 00007f96be626038 R14: 00007f96be625fa0 R15: 00007ffd40d2f6e8 [ 178.963938][ T8003] [ 179.054684][ T7996] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.195453][ T7996] F2FS-fs (loop2): Start checkpoint disabled! [ 179.254445][ T7996] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.301306][ T7996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 179.374851][ T8021] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.472933][ T7996] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x100b/0x1a00 [ 179.485502][ T5085] Bluetooth: hci0: command tx timeout [ 179.515483][ T7996] syz.2.710: attempt to access beyond end of device [ 179.515483][ T7996] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.590175][ T7996] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 179.988172][ T8036] loop1: detected capacity change from 0 to 24 [ 179.998751][ T8036] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 180.061530][ T8036] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 180.147556][ T8038] loop4: detected capacity change from 0 to 128 [ 180.249604][ T8038] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.331860][ T8038] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.489354][ T8024] loop3: detected capacity change from 0 to 32768 [ 180.507568][ T8024] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.719 (8024) [ 180.526434][ T7870] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.594368][ T8024] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.690669][ T8024] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 180.730291][ T8048] FAULT_INJECTION: forcing a failure. [ 180.730291][ T8048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.746021][ T8024] BTRFS info (device loop3): force clearing of disk cache [ 180.754119][ T8048] CPU: 0 PID: 8048 Comm: syz.1.729 Not tainted syzkaller #0 [ 180.761446][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.771528][ T8048] Call Trace: [ 180.774831][ T8048] [ 180.777780][ T8048] dump_stack_lvl+0x18c/0x250 [ 180.782487][ T8048] ? show_regs_print_info+0x20/0x20 [ 180.787720][ T8048] ? load_image+0x420/0x420 [ 180.792267][ T8048] ? __might_fault+0xaa/0x120 [ 180.796978][ T8048] ? __lock_acquire+0x7d80/0x7d80 [ 180.802041][ T8048] should_fail_ex+0x394/0x4c0 [ 180.806766][ T8048] strncpy_from_user+0x36/0x2f0 [ 180.811662][ T8048] getname_flags+0xf6/0x500 [ 180.816212][ T8048] __x64_sys_link+0x5f/0x90 [ 180.820751][ T8048] do_syscall_64+0x55/0xb0 [ 180.825196][ T8048] ? clear_bhb_loop+0x40/0x90 [ 180.829901][ T8048] ? clear_bhb_loop+0x40/0x90 [ 180.834603][ T8048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.840592][ T8048] RIP: 0033:0x7f0108d9e159 [ 180.845032][ T8048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.864672][ T8048] RSP: 002b:00007f0109c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 180.873127][ T8048] RAX: ffffffffffffffda RBX: 00007f0109025fa0 RCX: 00007f0108d9e159 [ 180.881130][ T8048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.889128][ T8048] RBP: 00007f0108e35024 R08: 0000000000000000 R09: 0000000000000000 [ 180.897129][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.905127][ T8048] R13: 00007f0109026038 R14: 00007f0109025fa0 R15: 00007ffd6fd411d8 [ 180.911660][ T8024] BTRFS info (device loop3): enabling auto defrag [ 180.913119][ T8048] [ 181.030514][ T8024] BTRFS info (device loop3): enabling disk space caching [ 181.045199][ T8050] 9pnet: p9_errstr2errno: server reported unknown error �¦î)9nGqÅróðujžî:· [ 181.095874][ T8024] BTRFS info (device loop3): disk space caching is enabled [ 181.160517][ T8058] FAULT_INJECTION: forcing a failure. [ 181.160517][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.250183][ T8058] CPU: 1 PID: 8058 Comm: syz.1.732 Not tainted syzkaller #0 [ 181.257531][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.267610][ T8058] Call Trace: [ 181.270911][ T8058] [ 181.273865][ T8058] dump_stack_lvl+0x18c/0x250 [ 181.278584][ T8058] ? show_regs_print_info+0x20/0x20 [ 181.283817][ T8058] ? load_image+0x420/0x420 [ 181.288348][ T8058] ? __might_fault+0xaa/0x120 [ 181.293066][ T8058] ? __lock_acquire+0x7d80/0x7d80 [ 181.298132][ T8058] should_fail_ex+0x394/0x4c0 [ 181.302845][ T8058] _copy_from_user+0x2f/0xe0 [ 181.307469][ T8058] copy_clone_args_from_user+0x20c/0x730 [ 181.313191][ T8058] ? futex_setup_timer+0xc0/0xc0 [ 181.318159][ T8058] ? futex_wait_setup+0x270/0x270 [ 181.323219][ T8058] ? __delayed_free_task+0x20/0x20 [ 181.328356][ T8058] __se_sys_clone3+0x143/0x350 [ 181.333138][ T8058] ? __x64_sys_clone3+0x60/0x60 [ 181.337992][ T8058] ? do_futex+0x2ff/0x3e0 [ 181.342346][ T8058] ? lockdep_hardirqs_on+0x98/0x150 [ 181.347556][ T8058] do_syscall_64+0x55/0xb0 [ 181.351977][ T8058] ? clear_bhb_loop+0x40/0x90 [ 181.356656][ T8058] ? clear_bhb_loop+0x40/0x90 [ 181.361334][ T8058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.367229][ T8058] RIP: 0033:0x7f0108d9e159 [ 181.371643][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.391256][ T8058] RSP: 002b:00007f0109c3aef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 181.399680][ T8058] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f0108d9e159 [ 181.407657][ T8058] RDX: 00007f0109c3af10 RSI: 0000000000000058 RDI: 00007f0109c3af10 [ 181.415662][ T8058] RBP: 00007f0108e35024 R08: 0000000000000000 R09: 0000000000000058 [ 181.423649][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.431617][ T8058] R13: 00007f0109026038 R14: 00007f0109025fa0 R15: 00007ffd6fd411d8 [ 181.439604][ T8058] [ 181.759490][ T8080] Cannot find add_set index 4 as target [ 181.781529][ T8024] BTRFS info (device loop3): enabling ssd optimizations [ 181.789011][ T789] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 181.825621][ T8024] BTRFS info (device loop3): rebuilding free space tree [ 181.999896][ T789] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 182.008121][ T789] usb 5-1: config 0 has no interface number 0 [ 182.015627][ T8024] BTRFS info (device loop3): disabling free space tree [ 182.022750][ T789] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 182.042147][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.052326][ T8024] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.065215][ T789] usb 5-1: config 0 descriptor?? [ 182.083053][ T789] ums-realtek 5-1:0.3: USB Mass Storage device detected [ 182.113500][ T8024] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.300611][ T789] usb 5-1: USB disconnect, device number 2 [ 182.647098][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.692286][ T8085] loop2: detected capacity change from 0 to 40427 [ 182.734720][ T8085] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 182.742067][ T8085] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.769877][ T8085] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(2560) blocks(2560) [ 182.785206][ T8085] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 182.874111][ T8085] overlayfs: invalid origin (0000) [ 183.262625][ T8098] loop2: detected capacity change from 0 to 256 [ 183.320743][ T8098] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.906071][ T8106] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.682580][ T8102] loop4: detected capacity change from 0 to 32768 [ 184.704542][ C1] sched: RT throttling activated [ 184.825422][ T8108] loop1: detected capacity change from 0 to 131072 [ 184.836128][ T8108] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 184.843982][ T8108] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 184.852317][ T8108] F2FS-fs (loop1): Test dummy encryption mode enabled [ 184.870287][ T8108] F2FS-fs (loop1): invalid crc value [ 184.881816][ T8102] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 184.920874][ T8108] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.965461][ T8108] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 184.991887][ T8108] F2FS-fs (loop1): Start checkpoint disabled! [ 185.013158][ T8108] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 185.020392][ T8108] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 185.090071][ T8129] loop2: detected capacity change from 0 to 2048 [ 185.131613][ T8102] XFS (loop4): Ending clean mount [ 185.138002][ T27] audit: type=1800 audit(1788791263.370:31): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.747" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 185.143914][ T8110] loop3: detected capacity change from 0 to 32768 [ 185.218285][ T8102] XFS (loop4): User initiated shutdown received. [ 185.236211][ T8129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.271091][ T8110] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 185.294787][ T8102] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 185.384353][ T8102] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 185.431293][ T8129] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 185.456019][ T8129] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 32 with error 28 [ 185.504439][ T8129] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.504439][ T8129] [ 185.517163][ T8129] EXT4-fs (loop2): Total free blocks count 0 [ 185.523226][ T8129] EXT4-fs (loop2): Free/Dirty block details [ 185.523386][ T8110] XFS (loop3): Ending clean mount [ 185.529872][ T8129] EXT4-fs (loop2): free_blocks=66060288 [ 185.541422][ T8129] EXT4-fs (loop2): dirty_blocks=64 [ 185.552225][ T7870] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 185.582978][ T8129] EXT4-fs (loop2): Block reservation details [ 185.600062][ T6787] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 185.611577][ T8129] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 185.656839][ T27] audit: type=1800 audit(1788791263.880:32): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.748" name=2E02 dev="loop3" ino=4426 res=0 errno=0 [ 185.749971][ T6500] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 185.867333][ T5770] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 186.071960][ T8145] loop2: detected capacity change from 0 to 1024 [ 186.105982][ T8145] EXT4-fs: Ignoring removed i_version option [ 186.112057][ T8145] EXT4-fs: Ignoring removed bh option [ 186.227998][ T8145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.365838][ T8145] process 'syz.2.755' launched './file1' with NULL argv: empty string added [ 186.463980][ T8145] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 186.602058][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.851829][ T8160] loop3: detected capacity change from 0 to 512 [ 186.874269][ T8160] EXT4-fs (loop3): Test dummy encryption mode enabled [ 186.921991][ T8160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.011165][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.225053][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.337982][ T8162] loop1: detected capacity change from 0 to 32768 [ 187.372110][ T8162] JBD2: Ignoring recovery information on journal [ 187.423852][ T42] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.438354][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.449586][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 187.456729][ T8162] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 187.459168][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.486834][ T42] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 187.496763][ T42] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 187.505118][ T42] usb 3-1: Product: syz [ 187.509312][ T42] usb 3-1: Manufacturer: syz [ 187.521702][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 187.527005][ T42] cdc_wdm 3-1:1.0: skipping garbage [ 187.536247][ T42] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 187.542185][ T42] cdc_wdm 3-1:1.0: Unknown control protocol [ 187.815652][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 187.830050][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.836927][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.843647][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.850286][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.856708][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.863344][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.869662][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.876289][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.882654][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.889277][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.895683][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.902315][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.910768][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.917386][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.923678][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.930298][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.936751][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.943385][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.949684][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 187.956301][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 187.995385][ T23] usb 3-1: USB disconnect, device number 12 [ 188.274887][ T8191] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 188.568065][ T8205] input: syz0 as /devices/virtual/input/input16 [ 188.716985][ T8210] loop1: detected capacity change from 0 to 64 [ 188.731394][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069adac00: rx timeout, send abort [ 188.805863][ T23] kernel write not supported for file /460/oom_score_adj (pid: 23 comm: kworker/1:0) [ 189.135436][ T8218] loop3: detected capacity change from 0 to 128 [ 189.166037][ T8218] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.213600][ T8218] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.234371][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069ad9000: rx timeout, send abort [ 189.246977][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069adac00: abort rx timeout. Force session deactivation [ 189.307022][ T6506] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.462300][ T8207] loop2: detected capacity change from 0 to 40427 [ 189.501226][ T8207] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 189.511830][ T8207] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 189.541734][ T8207] F2FS-fs (loop2): invalid crc value [ 189.561089][ T8224] loop1: detected capacity change from 0 to 1024 [ 189.573483][ T8224] ext4: Unknown parameter 'rootcontext' [ 189.604786][ T8224] mtrr: base(0x2becfee7ffe61d43000) is not aligned on a size(0x96c076bb000) boundary [ 189.743040][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069ad9000: abort rx timeout. Force session deactivation [ 189.852329][ T8207] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 189.876325][ T8207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.142839][ T5769] syz-executor: attempt to access beyond end of device [ 190.142839][ T5769] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 190.165523][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 190.177802][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 190.725065][ T790] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 190.915255][ T790] usb 4-1: Using ep0 maxpacket: 32 [ 190.930911][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.951468][ T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.961970][ T790] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.971627][ T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.982827][ T790] usb 4-1: config 0 descriptor?? [ 190.996328][ T790] hub 4-1:0.0: USB hub found [ 191.202199][ T790] hub 4-1:0.0: 1 port detected [ 191.636896][ T790] usb 4-1: USB disconnect, device number 12 [ 191.649789][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.847441][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.871415][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 191.891420][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 191.904583][ T23] usb 3-1: Product: syz [ 191.908842][ T23] usb 3-1: Manufacturer: syz [ 191.994298][ T8286] loop1: detected capacity change from 0 to 2048 [ 192.051072][ T8286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.072100][ T8286] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.127661][ T8286] fs-verity: sha512 using implementation "sha512-avx2" [ 192.213394][ T8278] loop4: detected capacity change from 0 to 40427 [ 192.242204][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.267316][ T8278] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 192.334692][ T8278] F2FS-fs (loop4): invalid crc value [ 192.357719][ T8278] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.383390][ T23] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:046D:C299.000D/input/input17 [ 192.486111][ T8278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.499549][ T23] logitech 0003:046D:C299.000D: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.2-1/input0 [ 192.548114][ T23] logitech 0003:046D:C299.000D: Force feedback support for Logitech Gaming Wheels [ 192.634751][ T5804] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.686918][ T8300] loop1: detected capacity change from 0 to 2048 [ 192.834931][ T5804] usb 4-1: Using ep0 maxpacket: 8 [ 192.847941][ T5804] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 192.859621][ T23] usb 3-1: USB disconnect, device number 13 [ 192.864075][ T8278] syz.4.808 (8278): drop_caches: 2 [ 192.884176][ T5804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 192.894378][ T8300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.918836][ T5804] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.948307][ T5804] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.996592][ T5804] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 193.015883][ T8301] fido_id[8301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 193.017331][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.320534][ T5804] usb 4-1: GET_CAPABILITIES returned 0 [ 193.334975][ T5804] usbtmc 4-1:16.0: can't read capabilities [ 193.541443][ T8307] loop4: detected capacity change from 0 to 512 [ 193.566515][ T23] usb 4-1: USB disconnect, device number 13 [ 194.064936][ T5823] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 194.279672][ T8332] netlink: 'syz.3.831': attribute type 4 has an invalid length. [ 194.291182][ T8332] netlink: 'syz.3.831': attribute type 4 has an invalid length. [ 194.371647][ T8333] loop2: detected capacity change from 0 to 512 [ 194.397703][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.410818][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.446292][ T8333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.518677][ T8333] EXT4-fs (loop2): 1 truncate cleaned up [ 194.543420][ T8333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.723420][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.234662][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 195.321779][ T8329] loop4: detected capacity change from 0 to 131072 [ 195.346228][ T5823] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.373198][ T8329] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 195.380033][ T8329] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 195.390360][ T8329] F2FS-fs (loop4): invalid crc value [ 195.415060][ T5823] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.459472][ T5823] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 195.497434][ T8329] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.565089][ T8329] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 195.572228][ T8329] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 195.600725][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.632073][ T8329] F2FS-fs (loop4): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 195.691558][ T5823] usb 2-1: config 0 descriptor?? [ 195.924896][ T8341] loop3: detected capacity change from 0 to 131072 [ 195.938654][ T8341] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 195.948139][ T8341] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 196.003116][ T8341] F2FS-fs (loop3): invalid crc value [ 196.048889][ T8341] F2FS-fs (loop3): Found nat_bits in checkpoint [ 196.102419][ T8341] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 196.109625][ T8341] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 196.141569][ T8309] raw-gadget.0 gadget.1: fail, usb_ep_set_halt returned -11 [ 196.174726][ T8341] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 196.211402][ T5823] usbhid 2-1:0.0: can't add hid device: -71 [ 196.238326][ T5823] usbhid: probe of 2-1:0.0 failed with error -71 [ 196.267164][ T5823] usb 2-1: USB disconnect, device number 12 [ 196.514653][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 196.520737][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 196.612154][ T8357] loop2: detected capacity change from 0 to 2048 [ 196.691063][ T8357] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 196.730699][ T8357] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 196.771172][ T8357] UDF-fs: Scanning with blocksize 512 failed [ 196.842069][ T8357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.913929][ T8359] loop1: detected capacity change from 0 to 512 [ 196.928434][ T27] audit: type=1800 audit(1788791275.160:33): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.840" name="file1" dev="loop2" ino=838 res=0 errno=0 [ 196.949975][ T8359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.036273][ T8359] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.841: invalid indirect mapped block 4294967295 (level 0) [ 197.149349][ T8359] EXT4-fs (loop1): Remounting filesystem read-only [ 197.195518][ T8359] EXT4-fs (loop1): 1 orphan inode deleted [ 197.201729][ T8359] EXT4-fs (loop1): 1 truncate cleaned up [ 197.233781][ T8359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.255945][ T8367] loop4: detected capacity change from 0 to 1024 [ 197.303035][ T8367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.351009][ T8371] loop2: detected capacity change from 0 to 1024 [ 197.368024][ T8367] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.399085][ T8371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.462407][ T8367] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.842: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.511787][ T8367] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 197.550282][ T8367] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.550282][ T8367] [ 197.568019][ T8374] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.842: lblock 0 mapped to illegal pblock 0 (length 1) [ 197.589747][ T8374] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.842: bg 0: block 112: padding at end of block bitmap is not set [ 197.609412][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.643065][ T8374] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 197.659694][ T5823] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 197.704631][ T8374] EXT4-fs (loop4): This should not happen!! Data will be lost [ 197.704631][ T8374] [ 197.726214][ T8374] EXT4-fs (loop4): Total free blocks count 0 [ 197.734754][ T8374] EXT4-fs (loop4): Free/Dirty block details [ 197.754403][ T8374] EXT4-fs (loop4): free_blocks=0 [ 197.759942][ T8374] EXT4-fs (loop4): dirty_blocks=64 [ 197.775465][ T8374] EXT4-fs (loop4): Block reservation details [ 197.876986][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1819, setting to 64 [ 197.915876][ T5823] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 197.934588][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.942628][ T5823] usb 2-1: SerialNumber: syz [ 197.979211][ T8359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.001640][ T5823] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 198.025623][ T5823] usb-storage 2-1:1.0: USB Mass Storage device detected [ 198.046588][ T5823] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 198.226354][ T5823] usb 2-1: USB disconnect, device number 13 [ 198.263801][ T8387] loop4: detected capacity change from 0 to 16 [ 198.290713][ T8387] erofs: (device loop4): mounted with root inode @ nid 36. [ 198.796301][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.041988][ T8410] sctp: [Deprecated]: syz.3.857 (pid 8410) Use of int in max_burst socket option. [ 199.041988][ T8410] Use struct sctp_assoc_value instead [ 199.326479][ T8399] loop4: detected capacity change from 0 to 32768 [ 199.361866][ T8399] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.853 (8399) [ 199.375687][ T5823] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 199.422464][ T8399] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 199.444699][ T8399] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 199.468213][ T8399] BTRFS info (device loop4): using free space tree [ 199.502358][ T8418] loop3: detected capacity change from 0 to 128 [ 199.542823][ T8418] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.571150][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.619205][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.654705][ T6499] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.668751][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.691773][ T5823] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.701474][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.712026][ T5823] usb 2-1: config 0 descriptor?? [ 199.738685][ T8399] BTRFS info (device loop4): enabling ssd optimizations [ 199.772145][ T8399] BTRFS info (device loop4): auto enabling async discard [ 199.853249][ T27] audit: type=1800 audit(1788791278.080:34): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.853" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 199.953755][ T8438] loop2: detected capacity change from 0 to 512 [ 199.986459][ T8438] EXT4-fs: Ignoring removed i_version option [ 200.012081][ T8438] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 200.107146][ T8438] EXT4-fs (loop2): 1 truncate cleaned up [ 200.115604][ T8438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.156691][ T5823] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 200.171795][ T5823] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 200.192150][ T5823] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 200.308178][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.393855][ T7870] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 200.474309][ T5823] usb 2-1: USB disconnect, device number 14 [ 200.751344][ T8454] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 201.289939][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.873'. [ 201.316301][ T8469] netlink: 1700 bytes leftover after parsing attributes in process `syz.4.873'. [ 201.449273][ T8471] netlink: 165 bytes leftover after parsing attributes in process `syz.2.874'. [ 201.562716][ T8455] loop3: detected capacity change from 0 to 40427 [ 201.582772][ T8455] F2FS-fs (loop3): invalid crc value [ 201.594993][ T8455] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.714992][ T8455] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.751237][ T8467] loop1: detected capacity change from 0 to 32768 [ 201.774785][ T8467] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.872 (8467) [ 201.803640][ T8467] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.815799][ T8467] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 201.825359][ T8467] BTRFS info (device loop1): setting nodatacow, compression disabled [ 201.833514][ T8467] BTRFS info (device loop1): setting datasum, datacow enabled [ 201.841672][ T8467] BTRFS info (device loop1): force clearing of disk cache [ 201.849962][ T8467] BTRFS info (device loop1): enabling ssd optimizations [ 201.864638][ T8467] BTRFS info (device loop1): using spread ssd allocation scheme [ 201.872524][ T8467] BTRFS info (device loop1): turning on sync discard [ 201.880361][ T8467] BTRFS info (device loop1): turning off barriers [ 201.888567][ T5770] syz-executor: attempt to access beyond end of device [ 201.888567][ T5770] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 201.906061][ T8467] BTRFS info (device loop1): setting nodatacow, compression disabled [ 201.914184][ T8467] BTRFS info (device loop1): not using ssd optimizations [ 201.924425][ T5770] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 201.934777][ T8467] BTRFS info (device loop1): not using spread ssd allocation scheme [ 201.950759][ T8467] BTRFS info (device loop1): using free space tree [ 202.109763][ T8467] BTRFS info (device loop1): rebuilding free space tree [ 202.352230][ T8494] loop2: detected capacity change from 0 to 512 [ 202.352233][ T5771] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.974950][ T5823] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 203.177268][ T5823] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 203.211045][ T5823] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 203.242474][ T5823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 203.264598][ T5823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 203.294625][ T5823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 203.325033][ T5823] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 203.345468][ T8512] loop4: detected capacity change from 0 to 4096 [ 203.349377][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 203.365595][ T8512] EXT4-fs: inline encryption not supported [ 203.369570][ T5823] usb 4-1: Product: syz [ 203.381895][ T5823] usb 4-1: Manufacturer: syz [ 203.401663][ T5823] cdc_wdm 4-1:1.0: skipping garbage [ 203.413727][ T8512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.414589][ T5823] cdc_wdm 4-1:1.0: skipping garbage [ 203.446295][ T5823] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 203.447114][ T8512] EXT4-fs (loop4): Test dummy encryption mode enabled [ 203.452258][ T5823] cdc_wdm 4-1:1.0: Unknown control protocol [ 203.483118][ T8506] loop1: detected capacity change from 0 to 32768 [ 203.525802][ T8512] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c028, mo2=0103] [ 203.542181][ T8506] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.875 (8506) [ 203.551363][ T8512] System zones: 0-5 [ 203.580898][ T8512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.649096][ T8506] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 203.679592][ C1] wdm_int_callback: 111 callbacks suppressed [ 203.679617][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 203.692251][ C1] wdm_int_callback: 111 callbacks suppressed [ 203.692274][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 203.709222][ T8513] loop2: detected capacity change from 0 to 8192 [ 203.714639][ T8506] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 203.715979][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 203.731397][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 203.744842][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 203.751486][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 203.757825][ T790] usb 4-1: USB disconnect, device number 14 [ 203.764801][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 203.768908][ T8506] BTRFS info (device loop1): using free space tree [ 203.771411][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 203.784012][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 203.832319][ T7870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.994624][ T8506] BTRFS info (device loop1): enabling ssd optimizations [ 204.002094][ T8506] BTRFS info (device loop1): auto enabling async discard [ 204.123787][ T27] audit: type=1800 audit(1788791282.350:35): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.875" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 204.210172][ T8533] loop2: detected capacity change from 0 to 2048 [ 204.286847][ T8533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.339606][ T8533] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 204.365792][ T8533] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 204.410877][ T8533] EXT4-fs (loop2): This should not happen!! Data will be lost [ 204.410877][ T8533] [ 204.478437][ T8533] EXT4-fs (loop2): Total free blocks count 0 [ 204.508579][ T8533] EXT4-fs (loop2): Free/Dirty block details [ 204.514787][ T790] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 204.563299][ T8533] EXT4-fs (loop2): free_blocks=2415919504 [ 204.572118][ T8533] EXT4-fs (loop2): dirty_blocks=16 [ 204.579620][ T8533] EXT4-fs (loop2): Block reservation details [ 204.586052][ T8533] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 204.591603][ T5771] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 204.649628][ T8540] loop3: detected capacity change from 0 to 512 [ 204.696059][ T6787] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 204.711617][ T8540] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.735624][ T790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.748730][ T8540] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 204.787512][ T790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.805232][ T8540] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.835173][ T790] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 204.861162][ T8540] EXT4-fs (loop3): 1 truncate cleaned up [ 204.868357][ T8540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.875205][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.888314][ T8540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.303091][ T8549] netlink: 116 bytes leftover after parsing attributes in process `syz.3.892'. [ 205.369007][ T790] wacom 0003:056A:033B.000F: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 205.425135][ T790] wacom 0003:056A:033B.000F: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 205.484863][ T790] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.000F/input/input19 [ 205.554729][ T5823] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 205.668364][ T9] usb 5-1: USB disconnect, device number 3 [ 205.696422][ T8556] loop2: detected capacity change from 0 to 2048 [ 205.769558][ T8556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.782162][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 205.809173][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.835574][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.848053][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 205.864381][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 205.918989][ T5823] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 205.930200][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.949547][ T5823] hub 2-1:1.0: bad descriptor, ignoring hub [ 205.969160][ T5823] hub: probe of 2-1:1.0 failed with error -5 [ 205.992429][ T5823] cdc_wdm 2-1:1.0: skipping garbage [ 206.004384][ T5823] cdc_wdm 2-1:1.0: skipping garbage [ 206.023487][ T5823] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 206.033410][ T5823] cdc_wdm 2-1:1.0: Unknown control protocol [ 206.528152][ T8563] loop2: detected capacity change from 0 to 32768 [ 206.545460][ T8563] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.897 (8563) [ 206.605270][ T8563] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 206.617060][ T8563] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 206.628936][ T8563] BTRFS info (device loop2): using free space tree [ 206.648786][ T8548] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 206.780714][ T8563] BTRFS info (device loop2): enabling ssd optimizations [ 206.797285][ T8563] BTRFS info (device loop2): auto enabling async discard [ 206.984604][ T27] audit: type=1800 audit(1788791285.210:36): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.897" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 207.166445][ T8600] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 207.255058][ T23] usb 2-1: USB disconnect, device number 15 [ 207.362367][ T8606] loop4: detected capacity change from 0 to 1024 [ 207.372024][ T5769] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 207.439787][ T8606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 207.562367][ T8606] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.665875][ T8606] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.909: lblock 3 mapped to illegal pblock 3 (length 3) [ 207.709815][ T8606] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 207.758290][ T8606] EXT4-fs (loop4): This should not happen!! Data will be lost [ 207.758290][ T8606] [ 207.790992][ T8614] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 8: comm syz.4.909: lblock 8 mapped to illegal pblock 8 (length 8) [ 207.825389][ T8614] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 207.843187][ T8614] EXT4-fs (loop4): This should not happen!! Data will be lost [ 207.843187][ T8614] [ 207.957810][ T7870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 208.200868][ T8613] loop3: detected capacity change from 0 to 32768 [ 208.217087][ T8613] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.912 (8613) [ 208.258818][ T8613] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 208.295412][ T8613] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 208.322685][ T8613] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 208.336418][ T8613] BTRFS info (device loop3): use zstd compression, level 3 [ 208.344726][ T790] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 208.344876][ T8613] BTRFS info (device loop3): using free space tree [ 208.529968][ T8613] BTRFS info (device loop3): enabling ssd optimizations [ 208.549042][ T8613] BTRFS info (device loop3): auto enabling async discard [ 208.565290][ T790] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.594972][ T790] usb 2-1: config 0 has no interface number 0 [ 208.614741][ T790] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 208.649971][ T790] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 208.684666][ T790] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 208.724638][ T790] usb 2-1: config 0 interface 2 has no altsetting 0 [ 208.745214][ T790] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 208.765244][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.773388][ T790] usb 2-1: Product: syz [ 208.778212][ T5770] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 208.795029][ T790] usb 2-1: Manufacturer: syz [ 208.809970][ T790] usb 2-1: SerialNumber: syz [ 208.830787][ T790] usb 2-1: config 0 descriptor?? [ 208.851827][ T8621] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.873441][ T8621] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.089346][ T790] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 209.318999][ T8640] loop4: detected capacity change from 0 to 32768 [ 209.337329][ T790] usb 2-1: USB disconnect, device number 16 [ 209.375831][ T8640] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.919 (8640) [ 209.427601][ T8640] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 209.439240][ T8659] loop2: detected capacity change from 0 to 256 [ 209.464729][ T8640] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 209.471076][ T8659] FAT-fs (loop2): unable to read block(809802661888) for building NFS inode [ 209.473976][ T8640] BTRFS info (device loop4): using free space tree [ 209.697355][ T8640] BTRFS info (device loop4): enabling ssd optimizations [ 209.704354][ T8640] BTRFS info (device loop4): auto enabling async discard [ 209.934243][ T27] audit: type=1800 audit(1788791288.160:37): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.919" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 210.382482][ T7870] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 210.504610][ T790] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 210.693538][ T8698] loop3: detected capacity change from 0 to 1024 [ 210.715042][ T790] usb 3-1: Using ep0 maxpacket: 16 [ 210.724246][ T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 210.747198][ T790] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 210.779797][ T790] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 210.816193][ T790] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.833148][ T8698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 210.869636][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.908287][ T790] usb 3-1: SerialNumber: syz [ 210.915356][ T8698] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.938914][ T8689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.953901][ T790] cdc_acm 3-1:1.0: skipping garbage [ 210.975348][ T8698] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.935: lblock 0 mapped to illegal pblock 0 (length 1) [ 210.997557][ T790] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 211.019159][ T8698] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 211.044167][ T8698] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.044167][ T8698] [ 211.084884][ T8708] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.935: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.153097][ T8708] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.935: bg 0: block 112: padding at end of block bitmap is not set [ 211.200382][ T8708] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 211.206016][ T790] usb 3-1: USB disconnect, device number 14 [ 211.223390][ T8708] EXT4-fs (loop3): This should not happen!! Data will be lost [ 211.223390][ T8708] [ 211.243646][ T8708] EXT4-fs (loop3): Total free blocks count 0 [ 211.257278][ T8708] EXT4-fs (loop3): Free/Dirty block details [ 211.263321][ T8708] EXT4-fs (loop3): free_blocks=0 [ 211.269062][ T8708] EXT4-fs (loop3): dirty_blocks=64 [ 211.274333][ T8708] EXT4-fs (loop3): Block reservation details [ 211.953754][ T8718] loop1: detected capacity change from 0 to 32768 [ 211.973293][ T8718] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.941 (8718) [ 212.012779][ T8718] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 212.071245][ T8718] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 212.104887][ T8718] BTRFS info (device loop1): using free space tree [ 212.146537][ T8730] loop4: detected capacity change from 0 to 2048 [ 212.190481][ T8730] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 212.256676][ T8730] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 212.330007][ T8730] UDF-fs: Scanning with blocksize 512 failed [ 212.363766][ T8718] BTRFS info (device loop1): enabling ssd optimizations [ 212.392517][ T8718] BTRFS info (device loop1): auto enabling async discard [ 212.396951][ T8730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.483458][ T27] audit: type=1800 audit(1788791290.710:38): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.945" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 212.646816][ T27] audit: type=1800 audit(1788791290.880:39): pid=8718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.941" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 212.683110][ T8728] loop2: detected capacity change from 0 to 40427 [ 212.737693][ T8728] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 212.756001][ T8728] F2FS-fs (loop2): invalid crc value [ 212.798969][ T8728] F2FS-fs (loop2): Found nat_bits in checkpoint [ 213.023087][ T5771] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 213.041573][ T8728] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 213.806333][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 213.827659][ T8728] syz.2.944 (8728): drop_caches: 2 [ 214.031797][ T23] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 214.060306][ T23] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.091327][ T23] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.141880][ T23] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 214.185571][ T23] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 214.231741][ T23] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.283925][ T23] usb 4-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.324407][ T23] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 214.381233][ T23] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 214.401256][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.443443][ T23] usb 4-1: Product: syz [ 214.462735][ T23] usb 4-1: Manufacturer: syz [ 214.482993][ T23] usb 4-1: SerialNumber: syz [ 214.511586][ T23] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 214.582261][ T8765] loop4: detected capacity change from 0 to 131072 [ 214.591424][ T23] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 214.603522][ T8765] F2FS-fs (loop4): invalid crc value [ 214.677291][ T23] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 214.698705][ T8765] F2FS-fs (loop4): Found nat_bits in checkpoint [ 214.713233][ T8763] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 214.759364][ T8765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 214.760476][ T23] usb 4-1: USB disconnect, device number 15 [ 214.857337][ T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 214.923787][ T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 214.973976][ T23] ti_usb_3410_5052 4-1:2.0: device disconnected [ 215.715799][ T23] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 215.911884][ T23] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 215.920288][ T23] usb 2-1: config 0 has no interface number 0 [ 215.933093][ T23] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 215.942756][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.957016][ T23] usb 2-1: config 0 descriptor?? [ 215.973977][ T23] ums-realtek 2-1:0.3: USB Mass Storage device detected [ 216.084318][ T8789] loop4: detected capacity change from 0 to 40427 [ 216.097921][ T8789] F2FS-fs (loop4): invalid crc value [ 216.119919][ T8789] F2FS-fs (loop4): Found nat_bits in checkpoint [ 216.189666][ T8789] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 216.200097][ T23] usb 2-1: USB disconnect, device number 17 [ 216.295040][ T7870] syz-executor: attempt to access beyond end of device [ 216.295040][ T7870] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 216.323031][ T7870] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 216.333520][ T8799] loop3: detected capacity change from 0 to 512 [ 216.352782][ T8799] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.421520][ T8799] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.958: invalid indirect mapped block 4294967295 (level 0) [ 216.496454][ T8799] EXT4-fs (loop3): Remounting filesystem read-only [ 216.503313][ T8799] EXT4-fs (loop3): 1 orphan inode deleted [ 216.532933][ T8799] EXT4-fs (loop3): 1 truncate cleaned up [ 216.546311][ T8799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.751594][ T8797] loop2: detected capacity change from 0 to 32768 [ 216.782194][ T8797] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.957 (8797) [ 216.803793][ T8797] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 216.834862][ T8797] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 216.858236][ T8797] BTRFS info (device loop2): using free space tree [ 216.884958][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 217.001175][ T8797] BTRFS info (device loop2): enabling ssd optimizations [ 217.011234][ T8797] BTRFS info (device loop2): auto enabling async discard [ 217.093751][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1819, setting to 64 [ 217.122993][ T27] audit: type=1800 audit(1788791295.340:40): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.957" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 217.155919][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 217.165145][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 217.173157][ T9] usb 4-1: SerialNumber: syz [ 217.195212][ T8799] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 217.226307][ T9] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 217.233326][ T9] usb-storage 4-1:1.0: USB Mass Storage device detected [ 217.286673][ T9] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 217.490889][ T5769] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 217.507106][ T9] usb 4-1: USB disconnect, device number 16 [ 217.622932][ T8803] loop1: detected capacity change from 0 to 40427 [ 217.645123][ T8803] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 217.692864][ T8803] F2FS-fs (loop1): invalid crc value [ 217.752285][ T8803] F2FS-fs (loop1): Found nat_bits in checkpoint [ 217.802160][ T5926] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 10 /dev/loop2 scanned by udevd (5926) [ 217.952360][ T8803] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 218.120527][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.712490][ T8803] syz.1.960 (8803): drop_caches: 2 [ 219.594600][ T27] audit: type=1326 audit(1788791297.820:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.1.973" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0108d9e159 code=0x0 [ 219.662801][ T8855] loop3: detected capacity change from 0 to 2048 [ 219.682450][ T8855] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.133572][ T8860] loop4: detected capacity change from 0 to 32768 [ 220.190692][ T8860] JBD2: Ignoring recovery information on journal [ 220.244713][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 220.323533][ T8860] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 220.447633][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.476197][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.498262][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 220.508012][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.561321][ T7870] ocfs2: Unmounting device (7,4) on (node local) [ 220.950699][ T23] wacom 0003:056A:033B.0010: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 221.002510][ T23] wacom 0003:056A:033B.0010: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 221.039213][ T23] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0010/input/input22 [ 221.060355][ T8877] loop1: detected capacity change from 0 to 1024 [ 221.140299][ T8877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 221.191986][ T8877] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.308578][ T8877] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.987: lblock 3 mapped to illegal pblock 3 (length 3) [ 221.324358][ T42] usb 3-1: USB disconnect, device number 15 [ 221.364076][ T8877] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 221.415819][ T8877] EXT4-fs (loop1): This should not happen!! Data will be lost [ 221.415819][ T8877] [ 221.432325][ T8884] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm syz.1.987: lblock 8 mapped to illegal pblock 8 (length 8) [ 221.452308][ T8884] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 221.465551][ T8884] EXT4-fs (loop1): This should not happen!! Data will be lost [ 221.465551][ T8884] [ 221.522455][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 221.648318][ T8878] loop3: detected capacity change from 0 to 40427 [ 221.665700][ T8878] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 221.675769][ T8878] F2FS-fs (loop3): invalid crc value [ 221.684127][ T8878] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.773209][ T8878] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.844779][ T789] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 222.054609][ T789] usb 5-1: Using ep0 maxpacket: 8 [ 222.066317][ T789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.084739][ T789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.114703][ T789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 222.133421][ T789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 222.144792][ T789] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 222.153843][ T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.167874][ T789] hub 5-1:1.0: bad descriptor, ignoring hub [ 222.182042][ T789] hub: probe of 5-1:1.0 failed with error -5 [ 222.195133][ T789] cdc_wdm 5-1:1.0: skipping garbage [ 222.203605][ T789] cdc_wdm 5-1:1.0: skipping garbage [ 222.215206][ T789] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 222.223865][ T789] cdc_wdm 5-1:1.0: Unknown control protocol [ 222.419689][ T8878] syz.3.977 (8878): drop_caches: 2 [ 222.533041][ T8895] Bluetooth: MGMT ver 1.22 [ 222.900448][ T8886] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 222.950913][ T8904] pim6reg1: entered promiscuous mode [ 222.956606][ T8904] pim6reg1: entered allmulticast mode [ 223.157636][ T8908] loop2: detected capacity change from 0 to 7 [ 223.174712][ T8908] Dev loop2: unable to read RDB block 7 [ 223.181318][ T8908] loop2: unable to read partition table [ 223.195823][ T8908] loop2: partition table beyond EOD, truncated [ 223.202025][ T8908] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 223.495260][ T789] usb 5-1: USB disconnect, device number 4 [ 224.103006][ T8928] loop2: detected capacity change from 0 to 256 [ 224.107210][ T8926] [ 224.111640][ T8926] ====================================================== [ 224.118682][ T8926] WARNING: possible circular locking dependency detected [ 224.125698][ T8926] syzkaller #0 Not tainted [ 224.130100][ T8926] ------------------------------------------------------ [ 224.137114][ T8926] syz.4.993/8926 is trying to acquire lock: [ 224.143003][ T8926] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 224.152043][ T8926] [ 224.152043][ T8926] but task is already holding lock: [ 224.159404][ T8926] ffff8880200c0990 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1c62/0x2580 [ 224.169892][ T8926] [ 224.169892][ T8926] which lock already depends on the new lock. [ 224.169892][ T8926] [ 224.180302][ T8926] [ 224.180302][ T8926] the existing dependency chain (in reverse order) is: [ 224.189307][ T8926] [ 224.189307][ T8926] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 224.197643][ T8926] down_write+0x97/0x200 [ 224.202413][ T8926] set_blocksize+0x247/0x4b0 [ 224.207524][ T8926] sb_min_blocksize+0xbe/0x190 [ 224.212798][ T8926] ext4_fill_super+0x6e7/0x6870 [ 224.218164][ T8926] get_tree_bdev+0x3e5/0x520 [ 224.223268][ T8926] vfs_get_tree+0x8c/0x280 [ 224.228195][ T8926] do_new_mount+0x24a/0xa40 [ 224.233210][ T8926] init_mount+0xde/0x130 [ 224.237970][ T8926] do_mount_root+0x97/0x230 [ 224.242987][ T8926] mount_root_generic+0x1a6/0x3e0 [ 224.248531][ T8926] prepare_namespace+0xc2/0x100 [ 224.254154][ T8926] kernel_init_freeable+0x41a/0x560 [ 224.259880][ T8926] kernel_init+0x1d/0x1c0 [ 224.264723][ T8926] ret_from_fork+0x48/0x80 [ 224.269666][ T8926] ret_from_fork_asm+0x11/0x20 [ 224.274950][ T8926] [ 224.274950][ T8926] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 224.283548][ T8926] down_write+0x97/0x200 [ 224.288337][ T8926] set_blocksize+0x1ff/0x4b0 [ 224.293444][ T8926] sb_min_blocksize+0xbe/0x190 [ 224.298721][ T8926] ext4_fill_super+0x6e7/0x6870 [ 224.304087][ T8926] get_tree_bdev+0x3e5/0x520 [ 224.309189][ T8926] vfs_get_tree+0x8c/0x280 [ 224.314117][ T8926] do_new_mount+0x24a/0xa40 [ 224.319136][ T8926] init_mount+0xde/0x130 [ 224.323893][ T8926] do_mount_root+0x97/0x230 [ 224.328909][ T8926] mount_root_generic+0x1a6/0x3e0 [ 224.334453][ T8926] prepare_namespace+0xc2/0x100 [ 224.339816][ T8926] kernel_init_freeable+0x41a/0x560 [ 224.345526][ T8926] kernel_init+0x1d/0x1c0 [ 224.350368][ T8926] ret_from_fork+0x48/0x80 [ 224.355299][ T8926] ret_from_fork_asm+0x11/0x20 [ 224.360577][ T8926] [ 224.360577][ T8926] -> #2 (&type->s_umount_key#31){++++}-{3:3}: [ 224.368832][ T8926] down_read+0x46/0x2e0 [ 224.373510][ T8926] super_lock+0x189/0x390 [ 224.378356][ T8926] fs_bdev_sync+0xa4/0x170 [ 224.383288][ T8926] blkdev_common_ioctl+0x8a9/0x2580 [ 224.389006][ T8926] blkdev_ioctl+0x512/0x730 [ 224.394027][ T8926] __se_sys_ioctl+0xfd/0x170 [ 224.399134][ T8926] do_syscall_64+0x55/0xb0 [ 224.404066][ T8926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.410477][ T8926] [ 224.410477][ T8926] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 224.418642][ T8926] __mutex_lock+0x135/0xc80 [ 224.423661][ T8926] bd_finish_claiming+0x229/0x3f0 [ 224.429210][ T8926] blkdev_get_by_dev+0x469/0x610 [ 224.434680][ T8926] bdev_open_by_dev+0x77/0x100 [ 224.439965][ T8926] setup_bdev_super+0x59/0x660 [ 224.445248][ T8926] mount_bdev+0x1ce/0x2c0 [ 224.450096][ T8926] legacy_get_tree+0xea/0x180 [ 224.455289][ T8926] vfs_get_tree+0x8c/0x280 [ 224.460224][ T8926] do_new_mount+0x24a/0xa40 [ 224.465240][ T8926] init_mount+0xde/0x130 [ 224.469998][ T8926] do_mount_root+0x97/0x230 [ 224.475015][ T8926] mount_root_generic+0x1a6/0x3e0 [ 224.480550][ T8926] prepare_namespace+0xc2/0x100 [ 224.485915][ T8926] kernel_init_freeable+0x41a/0x560 [ 224.491626][ T8926] kernel_init+0x1d/0x1c0 [ 224.496468][ T8926] ret_from_fork+0x48/0x80 [ 224.501402][ T8926] ret_from_fork_asm+0x11/0x20 [ 224.506680][ T8926] [ 224.506680][ T8926] -> #0 (bdev_lock){+.+.}-{3:3}: [ 224.513796][ T8926] __lock_acquire+0x37ef/0x7d80 [ 224.519163][ T8926] lock_acquire+0x19e/0x420 [ 224.524180][ T8926] __mutex_lock+0x135/0xc80 [ 224.529209][ T8926] bd_prepare_to_claim+0x1d9/0x4a0 [ 224.534833][ T8926] truncate_bdev_range+0x4e/0x260 [ 224.540383][ T8926] blkdev_common_ioctl+0x1c7a/0x2580 [ 224.546220][ T8926] blkdev_ioctl+0x512/0x730 [ 224.551251][ T8926] __se_sys_ioctl+0xfd/0x170 [ 224.556364][ T8926] do_syscall_64+0x55/0xb0 [ 224.561300][ T8926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.567717][ T8926] [ 224.567717][ T8926] other info that might help us debug this: [ 224.567717][ T8926] [ 224.577935][ T8926] Chain exists of: [ 224.577935][ T8926] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 224.577935][ T8926] [ 224.592102][ T8926] Possible unsafe locking scenario: [ 224.592102][ T8926] [ 224.599543][ T8926] CPU0 CPU1 [ 224.604896][ T8926] ---- ---- [ 224.610248][ T8926] lock(mapping.invalidate_lock); [ 224.615350][ T8926] lock(&sb->s_type->i_mutex_key#8); [ 224.623236][ T8926] lock(mapping.invalidate_lock); [ 224.630861][ T8926] lock(bdev_lock); [ 224.634748][ T8926] [ 224.634748][ T8926] *** DEADLOCK *** [ 224.634748][ T8926] [ 224.642894][ T8926] 2 locks held by syz.4.993/8926: [ 224.647913][ T8926] #0: ffff8880200c0800 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_common_ioctl+0x1c28/0x2580 [ 224.659064][ T8926] #1: ffff8880200c0990 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_common_ioctl+0x1c62/0x2580 [ 224.669940][ T8926] [ 224.669940][ T8926] stack backtrace: [ 224.675816][ T8926] CPU: 0 PID: 8926 Comm: syz.4.993 Not tainted syzkaller #0 [ 224.683089][ T8926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.693151][ T8926] Call Trace: [ 224.696429][ T8926] [ 224.699354][ T8926] dump_stack_lvl+0x18c/0x250 [ 224.704038][ T8926] ? load_image+0x420/0x420 [ 224.708551][ T8926] ? show_regs_print_info+0x20/0x20 [ 224.713766][ T8926] ? print_circular_bug+0x12b/0x1a0 [ 224.718967][ T8926] check_noncircular+0x2fc/0x400 [ 224.723913][ T8926] ? print_deadlock_bug+0x5d0/0x5d0 [ 224.729121][ T8926] ? lockdep_lock+0xf5/0x230 [ 224.733711][ T8926] ? _find_first_zero_bit+0xd6/0x100 [ 224.738999][ T8926] __lock_acquire+0x37ef/0x7d80 [ 224.743853][ T8926] ? deref_stack_reg+0x1ab/0x230 [ 224.748804][ T8926] ? verify_lock_unused+0x140/0x140 [ 224.754019][ T8926] ? __read_once_word_nocheck+0x9/0x10 [ 224.759482][ T8926] ? is_bpf_text_address+0x28f/0x2a0 [ 224.764777][ T8926] lock_acquire+0x19e/0x420 [ 224.769280][ T8926] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 224.774566][ T8926] ? __might_sleep+0xe0/0xe0 [ 224.779156][ T8926] ? read_lock_is_recursive+0x20/0x20 [ 224.784539][ T8926] __mutex_lock+0x135/0xc80 [ 224.789048][ T8926] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 224.794328][ T8926] ? verify_lock_unused+0x140/0x140 [ 224.799695][ T8926] ? slab_free_freelist_hook+0x130/0x1a0 [ 224.805329][ T8926] ? __kmem_cache_free+0xba/0x1f0 [ 224.810355][ T8926] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 224.815992][ T8926] ? security_file_ioctl+0x70/0xa0 [ 224.821450][ T8926] ? __se_sys_ioctl+0x48/0x170 [ 224.826213][ T8926] ? do_syscall_64+0x55/0xb0 [ 224.830802][ T8926] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 224.836168][ T8926] ? mutex_lock_nested+0x20/0x20 [ 224.841111][ T8926] bd_prepare_to_claim+0x1d9/0x4a0 [ 224.846258][ T8926] ? invalidate_bdev+0xc0/0xc0 [ 224.851018][ T8926] ? truncate_bdev_range+0x260/0x260 [ 224.856294][ T8926] ? __might_fault+0xaa/0x120 [ 224.860965][ T8926] ? down_write+0x16e/0x200 [ 224.865469][ T8926] ? down_read_killable+0x340/0x340 [ 224.870665][ T8926] ? __might_fault+0xaa/0x120 [ 224.875336][ T8926] truncate_bdev_range+0x4e/0x260 [ 224.880357][ T8926] blkdev_common_ioctl+0x1c7a/0x2580 [ 224.885642][ T8926] ? blkdev_bszset+0x1f0/0x1f0 [ 224.890402][ T8926] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 224.895872][ T8926] blkdev_ioctl+0x512/0x730 [ 224.900368][ T8926] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 224.905824][ T8926] ? bpf_lsm_file_ioctl+0x9/0x10 [ 224.910756][ T8926] ? security_file_ioctl+0x80/0xa0 [ 224.915867][ T8926] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 224.921324][ T8926] __se_sys_ioctl+0xfd/0x170 [ 224.925912][ T8926] do_syscall_64+0x55/0xb0 [ 224.930323][ T8926] ? clear_bhb_loop+0x40/0x90 [ 224.934997][ T8926] ? clear_bhb_loop+0x40/0x90 [ 224.939675][ T8926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.945577][ T8926] RIP: 0033:0x7f96be39e159 [ 224.950005][ T8926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.969621][ T8926] RSP: 002b:00007f96bf35a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.978126][ T8926] RAX: ffffffffffffffda RBX: 00007f96be625fa0 RCX: 00007f96be39e159 [ 224.986093][ T8926] RDX: 0000200000000000 RSI: 000000000000127f RDI: 0000000000000005 [ 224.994055][ T8926] RBP: 00007f96be435024 R08: 0000000000000000 R09: 0000000000000000 [ 225.002022][ T8926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.009985][ T8926] R13: 00007f96be626038 R14: 00007f96be625fa0 R15: 00007ffd40d2f6e8 [ 225.017962][ T8926] [ 225.194623][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 225.374647][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 225.381678][ T23] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.393048][ T23] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.403028][ T23] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 225.416146][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.422773][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 225.431906][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.441155][ T23] usb 3-1: config 0 descriptor?? [ 225.853353][ T23] hid (null): unknown global tag 0x11 [ 225.858794][ T23] hid (null): unknown global tag 0xe [ 225.864127][ T23] hid (null): invalid report_count 1957598505 [ 225.870356][ T23] hid (null): invalid report_size -2094628929 [ 226.055686][ T23] usb 3-1: USB disconnect, device number 16