last executing test programs: 13.710475523s ago: executing program 0 (id=1748): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f0000000540)={0x0, ""/4096}, 0x1008, 0x3, 0x3000) msgctl$IPC_SET(r2, 0x1, 0x0) msgsnd(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000031ee"], 0x4, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) pipe2$9p(&(0x7f0000000400), 0x80800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) 12.500080602s ago: executing program 0 (id=1750): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000000c77392aace8d64f21577fc8294aba14a6f5e298a007d6df6c2e27c63c50092fc7840ea9baa602b40dbc48925ff68db39a69a216c855e721f3f396b090000", @ANYRES16=r8, @ANYBLOB="00082dbd7000fedbdf250300000005003700000000000800310008000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, 0x0) r11 = dup2(r7, r7) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, 0x0) 10.255854793s ago: executing program 1 (id=1755): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x8639}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r4, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x10683, &(0x7f0000011040)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103142, 0x15) syz_usb_connect$uac1(0x6, 0x9b, &(0x7f0000000300)={{0x12, 0x1, 0xe9b7722692d2ab9b, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x4, 0x95962cf72d9c680b, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x13}, [@processing_unit={0x9, 0x24, 0x7, 0x5, 0x6, 0x1, "ec08"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x8, 0xfe, "15a66189d4b2"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0xec, 0xcf}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x0, 0x8, {0x7, 0x25, 0x1, 0xc, 0xfa, 0x7b15}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5c, 0x4, 0x9, {0x7, 0x25, 0x1, 0x4, 0x7, 0x8000}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xa, 0x0, 0x2, 0x40, 0x9}, 0x0, 0x0}) sendmmsg$inet6(r1, &(0x7f0000000200), 0x0, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$tun(r5, &(0x7f00000008c0)={@void, @void, @llc={@llc={0xff, 0xbc, 'u'}}}, 0x3) syz_open_dev$radio(&(0x7f0000000400), 0x2, 0x2) syz_open_dev$dri(0x0, 0x1, 0x0) 6.773524945s ago: executing program 0 (id=1758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x10b000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000940)={0x53, 0xfffffffffffffffe, 0x6, 0xb0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="9591d685c2d3", 0x0, 0x80000000, 0x10024, 0x3, 0x0}) 5.637949582s ago: executing program 1 (id=1763): fsopen(&(0x7f0000000180)='proc\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 4.925582237s ago: executing program 0 (id=1768): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x100008) statfs(0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x150) syz_open_procfs(0x0, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mlockall(0x2) brk(0x200000ffc000) 4.515401317s ago: executing program 0 (id=1772): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x30}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x42, &(0x7f0000000040), 0x3b) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.154433615s ago: executing program 0 (id=1777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 3.595901912s ago: executing program 1 (id=1783): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000d2"], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x800) 3.300285547s ago: executing program 1 (id=1785): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="253c03b6f8a04fb96f16abc9773ac4e1b0327aa00f97c85e59bf8dc935549df6c95529781b7f9fb4a40b97f9d6f24aa40248fb2aee0798997ff64387f11a0554b49a9059b2b3a08f379c1af2e1de51d336249e4035b0512b22bd93b9b991b400036d8d9aeee3645fef77a6d265691bb84121fc21f2"], 0x1, 0x2d5, &(0x7f00000007c0)="$eJzs3T+LY1UUAPDz8m8yWiSIjSL4QAurYUdLm4mygjCVEBsbgzsLkgwLsxBwRcet9gtoKYKfwtbO2m8gaCnYZYuRJy/vvSRvN4mR3ZmR3d+vmTP33vPeufdCpsqZT187Hd+6k8T92W/R7SbROIqjeJhEPxpR+SZmAQA8Ox5mWfyVRUS7+D3ZObPVuLyqAIDLVPz9L1x3LQDA1fjjx3e+Ghwf3/woTbvxSu/BdJhExOmD6bCYH9yOz2MSJ3EjenERkS0U8QcfHt+MVprrx5un59PhtPb8wZ+xP88/jF701+cfpoUyfxiR/2zHC5HG4Ha7elQvXl6f//aa/Bh24q03Vuo/iF78+lnciUncijx3mf/1YZq+n303+/KT/DV5ftKI4d58XWk/Imte2aUAAAAAAAAAAAAAAAAAAAAAAPDMO0jTpGjfM+/fkw+V/XeaF/P5g7TSr/fnKfIX/YKL/kBZlC16zrP4vuqvcyNN06xcuMxvxautaF3PrgEAAAAAAAAAAAAAAAAAAOD/5e4X98ajyeTk7ImD5ng0qboBVF/rr9Y0/+MDj1ZGXo9741HzkQeuLN7bPFUEs8XIareBvNatZUSrFU/hWP49iJ/383o2rPmhrLccaW7baT3YW17ux2V6dTFPdRcvvbeoMC2nqkMej5LiXZtr7lZTP61OdWLnMpKkNjK/28nJWTY/qIusfqfd2mEupzqbXvFtku9ip9PIr6bz4tqpv7Ms22077/5e3FE5ksxbbOx2F+0yWLvBPOg+fu+/bH7gxo+M5pN+5gAAAAAAAAAAAAAAAAAAAOvVvzj9iPtbUxuXVhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXLHl//+vgm5E1EceC87L5G1ryqATZ3eveYsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8B/4JAAD//w5ARPw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x8901, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2.599232252s ago: executing program 3 (id=1791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, 0x0, 0x0, 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)=ANY=[], 0x14}, 0x1, 0x2}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2.567955693s ago: executing program 4 (id=1792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f51"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000300)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x2, 0x0, "88391a84ed441d2486917d411bdd858b3945eb7b104049c25287cdf6564600b902e2e7d74b3c7698494b8b50fa2b86bdbac1834970ce2e08de17"}]}}}}}}}, 0x0) 2.279259057s ago: executing program 3 (id=1794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000db40)="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", 0x2000, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lstat(0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1f, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000020}}) 2.209993971s ago: executing program 3 (id=1795): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) listen(r1, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) listen(r3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) listen(r0, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.972909303s ago: executing program 1 (id=1797): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b949e1ca7712bcdb4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000340)=""/27, 0x20}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x2) sendmmsg$alg(r1, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="9c98d425afe56f214f063263de94ff93031fdcb1d9cf89e039a97c9fa917ef5266", 0x21}], 0x1, 0x0, 0x0, 0x400c000}], 0x1, 0x0) 1.969821173s ago: executing program 3 (id=1798): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x71ad4309383ceb22, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.911407286s ago: executing program 2 (id=1799): sigaltstack(&(0x7f0000000400)={0x0, 0x0, 0xffffffffffffff8a}, &(0x7f0000000040)={0x0}) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 1.761922493s ago: executing program 2 (id=1800): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.652135748s ago: executing program 2 (id=1801): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000380)="a3a302ae2f62", 0x0, 0x5, 0x0, 0x0, 0x0}) 1.543790514s ago: executing program 4 (id=1802): r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0xfffffffffffffffd) 1.41885325s ago: executing program 2 (id=1803): syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180), &(0x7f0000000300)=ANY=[@ANYBLOB="043660f43c44f5d3d465ee8500a674647d0ddab9fdffffffffffffff02000000b5"], 0x12, 0x3) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1008810, &(0x7f0000000d80)=ANY=[], 0x23, 0x824, &(0x7f0000000500)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000080}}], 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3100049, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2040400) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) fcntl$notify(r1, 0x402, 0x25) 1.356423083s ago: executing program 4 (id=1804): syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3100049, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) r1 = fanotify_init(0x40, 0x80000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) getdents64(r2, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x3, 0x0, 0xffffffffffffffff}) 1.091998616s ago: executing program 2 (id=1805): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.061774468s ago: executing program 4 (id=1806): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 839.335079ms ago: executing program 1 (id=1807): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) remap_file_pages(&(0x7f00003f1000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x800) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 830.784329ms ago: executing program 3 (id=1808): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xd, 0xd22b, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x523a}, 0x94) 693.664396ms ago: executing program 4 (id=1809): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xe}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="660fc77500660f3881b1c15d65f3260f013b66b9800000c00f326635000800000f300f01cb0fc79fbb5c66b895cb00000f23c00f21f86635030006000f23f8bad004ed66b98a0b000066b87585edb466ba000000000f3066b9390b00000f32", 0x5f}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 171.340772ms ago: executing program 4 (id=1810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x70, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x6, 0x7, {0x4e20, 0x4e20, [0x39, 0x4, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "8ec7073d34eb2a47d0e1d44be840d6887c154034697e091659"}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) shutdown(r0, 0x1) 23.578109ms ago: executing program 2 (id=1811): r0 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000340), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000180)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x8}, @ioring_restriction_sqe_op={0x1, 0x19}], 0x2) 0s ago: executing program 3 (id=1812): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') r1 = fanotify_init(0x4, 0x101000) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000300)=""/248, 0xf8}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 747.502833][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.524040][ T9806] loop4: detected capacity change from 0 to 4096 [ 747.656673][ T4266] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 747.656749][ T4266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 747.811462][ T9806] netlink: 'syz.4.1350': attribute type 5 has an invalid length. [ 748.826755][ T4275] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 748.840492][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 748.920000][ T8695] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 749.230404][ T9831] input: syz0 as /devices/virtual/input/input53 [ 749.373043][ T8695] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 749.392853][ T8695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.451685][ T8695] usb 1-1: config 0 descriptor?? [ 749.490328][ T8695] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 749.563259][ T7] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 749.762930][ T7] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 749.783304][ T7] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.801105][ T7] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 749.813740][ T7] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.833189][ T7] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 749.863679][ T7] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.879841][ T9835] 9pnet: p9_errstr2errno: server reported unknown error [ 749.889904][ T9834] loop1: detected capacity change from 0 to 4096 [ 749.891657][ T7] usb 5-1: string descriptor 0 read error: -22 [ 749.928824][ T7] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 749.960674][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.026455][ T7] adutux 5-1:168.0: interrupt endpoints not found [ 750.087892][ T9834] netlink: 'syz.1.1359': attribute type 5 has an invalid length. [ 750.689990][ T8695] gspca_stv06xx: I2C: Read error writing address: -71 [ 751.972237][ T8695] usb 1-1: USB disconnect, device number 35 [ 752.357381][ T8757] usb 5-1: USB disconnect, device number 42 [ 752.393028][ T7362] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 752.570135][ T9844] 9pnet: p9_errstr2errno: server reported unknown error [ 752.584193][ T7362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.584241][ T7362] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 752.584267][ T7362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.585961][ T7362] usb 4-1: config 0 descriptor?? [ 752.588291][ T7362] pwc: Askey VC010 type 2 USB webcam detected. [ 752.998163][ T7362] pwc: recv_control_msg error -32 req 02 val 2b00 [ 753.010272][ T7362] pwc: recv_control_msg error -32 req 02 val 2700 [ 753.040301][ T7362] pwc: recv_control_msg error -32 req 02 val 2c00 [ 753.063988][ T7362] pwc: recv_control_msg error -32 req 04 val 1000 [ 753.129555][ T7362] pwc: recv_control_msg error -32 req 04 val 1300 [ 753.160429][ T7362] pwc: recv_control_msg error -32 req 04 val 1400 [ 753.193661][ T7362] pwc: recv_control_msg error -32 req 02 val 2000 [ 753.363705][ T9854] loop4: detected capacity change from 0 to 32768 [ 753.510684][ T7362] pwc: recv_control_msg error -32 req 02 val 2100 [ 753.527157][ T9852] loop2: detected capacity change from 0 to 4096 [ 753.656758][ T7362] pwc: recv_control_msg error -32 req 04 val 1500 [ 754.093043][ T9852] netlink: 'syz.2.1365': attribute type 5 has an invalid length. [ 754.111725][ T7362] pwc: recv_control_msg error -32 req 02 val 2500 [ 754.138978][ T7362] pwc: recv_control_msg error -32 req 02 val 2400 [ 754.236328][ T9856] loop0: detected capacity change from 0 to 4096 [ 754.358262][ T7362] pwc: recv_control_msg error -71 req 02 val 2900 [ 754.413070][ T7362] pwc: recv_control_msg error -71 req 02 val 2800 [ 754.419930][ T7362] pwc: recv_control_msg error -71 req 04 val 1100 [ 754.429557][ T7362] pwc: recv_control_msg error -71 req 04 val 1200 [ 754.501055][ T7362] pwc: Registered as video103. [ 754.588712][ T9856] netlink: 'syz.0.1368': attribute type 5 has an invalid length. [ 754.608581][ T7362] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 754.655343][ T4281] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 754.684163][ T4281] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 754.688958][ T7362] usb 4-1: USB disconnect, device number 33 [ 755.756375][ T4268] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 755.876919][ T4268] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 757.268169][ T9874] tipc: Enabling of bearer rejected, failed to enable media [ 757.298129][ T9878] device syzkaller0 entered promiscuous mode [ 758.480764][ T9879] loop2: detected capacity change from 0 to 32768 [ 759.371285][ T9881] loop3: detected capacity change from 0 to 4096 [ 759.629225][ T9885] loop4: detected capacity change from 0 to 32768 [ 759.648236][ T9885] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 759.725390][ T9881] netlink: 'syz.3.1374': attribute type 5 has an invalid length. [ 761.569572][ T9889] blktrace: Concurrent blktraces are not allowed on nullb0 [ 762.514615][ T9893] loop0: detected capacity change from 0 to 2048 [ 762.558150][ T9893] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 762.589993][ T9893] UDF-fs: Scanning with blocksize 512 failed [ 762.697012][ T9893] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 762.817463][ T9895] loop2: detected capacity change from 0 to 2048 [ 764.014741][ T4367] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11 [ 764.209530][ T9895] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 764.274912][ T9899] loop4: detected capacity change from 0 to 4096 [ 764.417295][ T9899] netlink: 'syz.4.1380': attribute type 5 has an invalid length. [ 764.503206][ T26] audit: type=1800 audit(1774149542.151:32): pid=9895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1376" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 764.916572][ T9906] loop3: detected capacity change from 0 to 4096 [ 765.044629][ T4275] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 765.055918][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 765.117693][ T9906] netlink: 'syz.3.1382': attribute type 5 has an invalid length. [ 765.485117][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 765.512909][ T4266] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 765.585466][ T4266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 765.611243][ T9910] netlink: 'syz.4.1384': attribute type 10 has an invalid length. [ 765.715232][ T9910] team0: Device vxcan1 is of different type [ 766.533070][ T7] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 767.681014][ T9922] loop1: detected capacity change from 0 to 32768 [ 768.350603][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.350730][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 768.350801][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.365092][ T7] usb 3-1: config 0 descriptor?? [ 768.417153][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 768.857331][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 768.858671][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 768.873884][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 768.874378][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 768.874774][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 768.875221][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 768.875789][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 768.876185][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 768.876603][ T7] pwc: recv_control_msg error -32 req 04 val 1500 [ 768.877001][ T7] pwc: recv_control_msg error -32 req 02 val 2500 [ 769.078636][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 769.082625][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 769.083202][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 769.088953][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 769.097136][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 769.098351][ T7] pwc: Registered as video103. [ 769.100936][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input55 [ 769.144762][ T7] usb 3-1: USB disconnect, device number 32 [ 769.251057][ T9928] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 769.732993][ T9933] usb usb7: usbfs: process 9933 (syz.0.1390) did not claim interface 0 before use [ 770.195720][ T9928] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1388'. [ 770.949719][ T9934] loop1: detected capacity change from 0 to 4096 [ 771.549977][ T9944] loop4: detected capacity change from 0 to 128 [ 771.646466][ T9944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 771.660377][ T9944] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 772.524846][ T9948] loop0: detected capacity change from 0 to 4096 [ 773.720738][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 773.733025][ T9948] netlink: 'syz.0.1394': attribute type 5 has an invalid length. [ 773.800868][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 774.645086][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 774.935999][ T4268] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 774.969261][ T4268] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 775.084767][ T9956] loop1: detected capacity change from 0 to 2048 [ 775.238072][ T9956] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 775.288727][ T26] audit: type=1800 audit(1774149552.931:33): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1395" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 775.544382][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 775.727456][ T9971] tipc: Enabling of bearer rejected, failed to enable media [ 775.727544][ T9973] binder: 9972:9973 ioctl 4018620d 0 returned -22 [ 775.767802][ T9969] loop0: detected capacity change from 0 to 4096 [ 775.836101][ T9975] device syzkaller0 entered promiscuous mode [ 775.939121][ T9969] netlink: 'syz.0.1408': attribute type 5 has an invalid length. [ 777.707147][ T8695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.715972][ T8695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.895763][ T9979] netlink: 'syz.4.1400': attribute type 10 has an invalid length. [ 777.995028][ T9979] team0: Device vxcan1 is of different type [ 778.044383][ T4268] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 778.050882][ T4268] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 778.358327][ T9983] loop2: detected capacity change from 0 to 4096 [ 778.535562][ T9983] netlink: 'syz.2.1403': attribute type 5 has an invalid length. [ 778.553171][ T7] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 779.145982][ T7142] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 779.174898][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.174948][ T7] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 779.174975][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.177021][ T7] usb 1-1: config 0 descriptor?? [ 779.180120][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 779.241256][ T4281] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 779.241367][ T4281] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 779.322423][ T7142] usb 2-1: Using ep0 maxpacket: 32 [ 779.334171][ T7142] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 779.334237][ T7142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.334259][ T7142] usb 2-1: config 0 has no interface number 0 [ 779.334291][ T7142] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 779.334319][ T7142] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.334381][ T7142] usb 2-1: config 0 interface 196 has no altsetting 0 [ 779.336999][ T7142] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 779.337028][ T7142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.337049][ T7142] usb 2-1: Product: syz [ 779.337065][ T7142] usb 2-1: Manufacturer: syz [ 779.337081][ T7142] usb 2-1: SerialNumber: syz [ 779.341065][ T7142] usb 2-1: config 0 descriptor?? [ 779.341656][ T9989] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 779.584651][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 779.585557][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 779.587055][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 779.587950][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 779.588711][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 779.589598][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 779.603074][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 779.603899][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 779.627430][ T7] pwc: recv_control_msg error -32 req 04 val 1500 [ 779.628109][ T7] pwc: recv_control_msg error -32 req 02 val 2500 [ 779.647125][ T7142] ipheth 2-1:0.196: Unable to find endpoints [ 779.664421][ T7142] usb 2-1: USB disconnect, device number 30 [ 779.919964][ T9999] loop2: detected capacity change from 0 to 32768 [ 779.922490][ T9999] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 779.940454][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 779.941675][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 780.038736][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 780.039145][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 780.039400][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 780.040058][ T7] pwc: Registered as video103. [ 780.040696][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 780.050392][ T7] usb 1-1: USB disconnect, device number 36 [ 780.053549][ T9997] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 780.186104][ T4353] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 780.225874][T10000] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1407'. [ 780.558819][T10003] loop1: detected capacity change from 0 to 128 [ 780.687344][T10003] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 780.779665][T10003] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 781.199635][T10013] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 781.630136][ T7362] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 781.678139][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 781.825344][ T7362] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 782.413131][ T7362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.518313][ T7362] usb 1-1: config 0 descriptor?? [ 782.549833][ T7362] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 782.790095][T10018] loop4: detected capacity change from 0 to 4096 [ 782.859945][T10018] netlink: 'syz.4.1414': attribute type 5 has an invalid length. [ 784.633712][ T7362] usb 1-1: USB disconnect, device number 37 [ 785.019292][T10028] loop0: detected capacity change from 0 to 128 [ 785.039278][T10027] loop4: detected capacity change from 0 to 2048 [ 785.064862][T10027] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 785.089617][T10028] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 785.090950][T10027] UDF-fs: Scanning with blocksize 512 failed [ 785.210919][T10027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.324908][T10028] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 786.660932][T10041] loop4: detected capacity change from 0 to 2048 [ 786.740505][T10041] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 786.764602][T10038] loop2: detected capacity change from 0 to 4096 [ 786.771473][T10041] UDF-fs: Scanning with blocksize 512 failed [ 786.817631][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 786.836980][T10041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 786.895514][T10038] netlink: 'syz.2.1419': attribute type 5 has an invalid length. [ 787.594094][ T4281] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 787.641062][ T4281] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 788.346619][ T7142] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 788.564794][ T7142] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.598636][ T7142] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 788.660367][ T7142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.694771][ T7142] usb 1-1: config 0 descriptor?? [ 788.744974][ T7142] pwc: Askey VC010 type 2 USB webcam detected. [ 789.510327][ T7142] pwc: recv_control_msg error -32 req 02 val 2b00 [ 789.533927][ T7142] pwc: recv_control_msg error -32 req 02 val 2700 [ 789.561121][ T7142] pwc: recv_control_msg error -32 req 02 val 2c00 [ 789.623564][ T7142] pwc: recv_control_msg error -32 req 04 val 1000 [ 789.658736][ T7142] pwc: recv_control_msg error -32 req 04 val 1300 [ 789.668760][ T7142] pwc: recv_control_msg error -32 req 04 val 1400 [ 789.675975][ T7142] pwc: recv_control_msg error -32 req 02 val 2000 [ 789.676498][ T7142] pwc: recv_control_msg error -32 req 02 val 2100 [ 789.683938][ T7142] pwc: recv_control_msg error -32 req 04 val 1500 [ 789.684710][ T7142] pwc: recv_control_msg error -32 req 02 val 2500 [ 789.823138][ T7] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 789.834691][T10062] loop2: detected capacity change from 0 to 4096 [ 789.886098][ T7142] pwc: recv_control_msg error -71 req 02 val 2600 [ 789.917851][ T7142] pwc: recv_control_msg error -71 req 02 val 2900 [ 789.947673][ T7142] pwc: recv_control_msg error -71 req 02 val 2800 [ 789.965624][T10062] netlink: 'syz.2.1427': attribute type 5 has an invalid length. [ 789.976048][ T7142] pwc: recv_control_msg error -71 req 04 val 1100 [ 789.985283][ T7142] pwc: recv_control_msg error -71 req 04 val 1200 [ 789.995597][ T7142] pwc: Registered as video103. [ 790.003695][ T7142] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 790.016086][ T7] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 790.044476][ T7142] usb 1-1: USB disconnect, device number 38 [ 790.066480][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.144461][ T7] usb 5-1: config 0 descriptor?? [ 790.152837][ T8695] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 790.471463][ T7] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 790.996033][ T8695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 791.042646][ T8695] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 791.051369][ T7] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 791.051657][ T8695] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 791.135253][ T8695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.157015][ T8695] usb 4-1: config 0 descriptor?? [ 791.457209][ T7] gspca_cpia1: usb_control_msg 02, error -71 [ 791.468771][ T7] gspca_cpia1: usb_control_msg 05, error -71 [ 791.479151][ T7] cpia1 5-1:0.0: unexpected systemstate: 01 [ 791.509826][ T7] usb 5-1: USB disconnect, device number 43 [ 792.062737][ T8695] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 792.111437][T10083] input: syz0 as /devices/virtual/input/input60 [ 792.339523][ T8695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.359406][ T8695] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 792.393833][ T8695] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 792.438054][ T8695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.469782][ T8695] usb 2-1: Product: syz [ 792.491229][ T8695] usb 2-1: Manufacturer: syz [ 792.518266][ T8695] usb 2-1: SerialNumber: syz [ 792.750078][ T8695] usb 2-1: 0:2 : does not exist [ 792.766391][ T8695] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 792.931153][ T8695] usb 2-1: USB disconnect, device number 31 [ 792.996928][ T7142] usb 4-1: USB disconnect, device number 34 [ 793.465170][T10093] loop3: detected capacity change from 0 to 8 [ 795.295350][T10105] loop3: detected capacity change from 0 to 32768 [ 795.314268][T10105] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 795.900633][ T4353] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 796.698498][T10110] loop0: detected capacity change from 0 to 4096 [ 796.908506][T10110] netlink: 'syz.0.1441': attribute type 5 has an invalid length. [ 796.952917][ T8695] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 798.904268][ T8695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.982896][ T8695] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 799.073778][ T8695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.144035][ T8695] usb 4-1: config 0 descriptor?? [ 799.164100][ T8695] pwc: Askey VC010 type 2 USB webcam detected. [ 799.179551][T10117] loop4: detected capacity change from 0 to 128 [ 799.204665][T10115] input: syz0 as /devices/virtual/input/input61 [ 799.284109][T10117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 799.343645][T10117] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 799.540804][T10119] loop0: detected capacity change from 0 to 32768 [ 799.568265][T10119] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 799.579488][T10119] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 799.589177][T10119] BTRFS info (device loop0): enabling disk space caching [ 799.597134][T10119] BTRFS info (device loop0): force clearing of disk cache [ 799.605639][T10119] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 799.616275][T10119] BTRFS info (device loop0): use zstd compression, level 3 [ 799.624451][T10119] BTRFS info (device loop0): disk space caching is enabled [ 799.759897][ T8695] pwc: recv_control_msg error -32 req 02 val 2b00 [ 799.789395][ T8695] pwc: recv_control_msg error -32 req 02 val 2700 [ 799.802805][T10128] loop1: detected capacity change from 0 to 2048 [ 799.821347][ T8695] pwc: recv_control_msg error -32 req 02 val 2c00 [ 799.875420][ T8695] pwc: recv_control_msg error -32 req 04 val 1000 [ 799.976929][ T8695] pwc: recv_control_msg error -32 req 04 val 1300 [ 799.985990][ T8695] pwc: recv_control_msg error -32 req 04 val 1400 [ 800.028019][ T8695] pwc: recv_control_msg error -32 req 02 val 2000 [ 800.039366][ T8695] pwc: recv_control_msg error -32 req 02 val 2100 [ 800.051059][ T8695] pwc: recv_control_msg error -32 req 04 val 1500 [ 800.075516][T10141] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 800.092424][ T8695] pwc: recv_control_msg error -32 req 02 val 2500 [ 800.303177][ T8695] pwc: recv_control_msg error -71 req 02 val 2600 [ 800.320324][ T8695] pwc: recv_control_msg error -71 req 02 val 2900 [ 800.334167][ T8695] pwc: recv_control_msg error -71 req 02 val 2800 [ 800.351610][ T8695] pwc: recv_control_msg error -71 req 04 val 1100 [ 800.361818][ T8695] pwc: recv_control_msg error -71 req 04 val 1200 [ 800.412224][ T8695] pwc: Registered as video103. [ 800.429390][ T8695] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 800.441027][T10128] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 800.505373][ T8695] usb 4-1: USB disconnect, device number 35 [ 800.532784][ T8696] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 800.546860][ T26] audit: type=1800 audit(1774149578.191:34): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1446" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 800.609353][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 800.626380][T10119] BTRFS info (device loop0): enabling ssd optimizations [ 800.636835][T10119] BTRFS info (device loop0): rebuilding free space tree [ 800.661359][T10119] BTRFS info (device loop0): disabling free space tree [ 800.668961][T10119] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 800.679179][T10119] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 800.811248][ T8696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.905033][ T8696] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 800.916549][ T8696] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 800.927910][ T8696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.978174][ T8696] usb 3-1: config 0 descriptor?? [ 801.045468][T10150] blktrace: Concurrent blktraces are not allowed on nullb0 [ 801.620217][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 801.649922][T10154] loop3: detected capacity change from 0 to 2048 [ 801.773165][ T7] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 801.816261][T10154] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 801.843782][T10154] UDF-fs: Scanning with blocksize 512 failed [ 801.865306][ T4268] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 801.898845][T10154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 802.070192][T10158] loop1: detected capacity change from 0 to 32768 [ 802.228188][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 802.299983][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.537785][ T7] usb 5-1: config 0 descriptor?? [ 802.681597][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 802.767616][T10158] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 802.778548][T10158] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 802.787946][T10158] BTRFS info (device loop1): turning on sync discard [ 802.795599][T10158] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 802.805777][T10158] BTRFS info (device loop1): use zstd compression, level 3 [ 802.813914][T10158] BTRFS info (device loop1): turning on async discard [ 802.820712][T10158] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 802.832829][T10158] BTRFS info (device loop1): trying to use backup root at mount time [ 802.841090][T10158] BTRFS info (device loop1): enabling auto defrag [ 802.847574][T10158] BTRFS info (device loop1): using free space tree [ 803.119141][ T4428] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 803.134666][T10158] BTRFS error (device loop1): failed to load root extent [ 803.139116][T10173] input: syz0 as /devices/virtual/input/input63 [ 803.143055][T10158] BTRFS warning (device loop1): try to load backup roots slot 1 [ 803.158116][ T4444] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 803.193585][T10158] BTRFS warning (device loop1): couldn't read tree root [ 803.203472][T10158] BTRFS warning (device loop1): try to load backup roots slot 2 [ 803.213101][T10158] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 803.225297][T10158] BTRFS warning (device loop1): couldn't read tree root [ 803.233352][T10158] BTRFS warning (device loop1): try to load backup roots slot 3 [ 803.367830][T10158] BTRFS info (device loop1): enabling ssd optimizations [ 803.390170][T10158] BTRFS info (device loop1): rebuilding free space tree [ 803.514338][T10158] BTRFS info (device loop1): checking UUID tree [ 803.593355][ T7494] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 803.821399][ T7494] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 803.998143][ T7] usb 5-1: USB disconnect, device number 44 [ 804.130802][ T7494] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.475148][ T7494] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 804.731464][ T7494] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 804.917520][T10184] loop3: detected capacity change from 0 to 32768 [ 805.096135][ T7494] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 805.344230][ T7494] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 805.457241][ T7364] usb 3-1: USB disconnect, device number 33 [ 805.473982][ T7494] usb 1-1: string descriptor 0 read error: -22 [ 805.477925][ T4267] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 805.480254][ T7494] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 805.561255][ T7494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.600000][ T7494] adutux 1-1:168.0: interrupt endpoints not found [ 805.757066][T10189] loop2: detected capacity change from 0 to 32768 [ 805.815582][T10189] XFS (loop2): Mounting V5 Filesystem [ 806.042214][T10189] XFS (loop2): Ending clean mount [ 806.060065][T10189] XFS (loop2): Quotacheck needed: Please wait. [ 806.313348][ T14] usb 1-1: USB disconnect, device number 39 [ 806.433983][T10189] XFS (loop2): Quotacheck: Done. [ 807.166051][T10206] input: syz0 as /devices/virtual/input/input64 [ 807.803087][ T14] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 808.635317][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.643100][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.839719][T10221] loop4: detected capacity change from 0 to 32768 [ 809.269356][ T4281] XFS (loop2): Unmounting Filesystem [ 809.338341][ T14] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 809.359020][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.376656][ T14] usb 2-1: config 0 descriptor?? [ 809.392963][ T14] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 809.817020][ T14] cpia1 2-1:0.0: unexpected state after lo power cmd: 01 [ 810.218970][ T14] gspca_cpia1: usb_control_msg 02, error -71 [ 810.229155][ T14] gspca_cpia1: usb_control_msg 05, error -71 [ 810.289178][ T14] cpia1 2-1:0.0: unexpected systemstate: 01 [ 810.318061][ T14] usb 2-1: USB disconnect, device number 32 [ 810.672783][ T7364] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 810.803026][ T7] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 810.814748][T10233] loop2: detected capacity change from 0 to 2048 [ 810.865202][ T7364] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 810.887929][ T7364] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 810.915316][T10233] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 811.005073][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 811.947889][T10236] loop1: detected capacity change from 0 to 32768 [ 812.273015][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.281266][ T7364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.288204][T10233] UDF-fs: Scanning with blocksize 512 failed [ 812.293150][ T7] usb 4-1: config 0 descriptor?? [ 812.304546][ T7364] usb 5-1: config 0 descriptor?? [ 812.314944][ T7] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 812.454025][T10233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 813.349589][T10249] input: syz0 as /devices/virtual/input/input65 [ 813.537358][ T7] usb 4-1: USB disconnect, device number 36 [ 813.693240][ T8690] usb 5-1: USB disconnect, device number 45 [ 813.791305][T10254] loop2: detected capacity change from 0 to 8 [ 814.486992][T10262] loop3: detected capacity change from 0 to 32768 [ 814.572792][ T8690] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 814.670731][T10262] XFS (loop3): Mounting V5 Filesystem [ 814.784743][ T8690] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.799751][ T8690] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.826053][ T8690] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.835979][ T8690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.847759][ T8690] usb 3-1: Product: syz [ 814.855802][ T8690] usb 3-1: Manufacturer: syz [ 814.864212][ T8690] usb 3-1: SerialNumber: syz [ 815.087997][ T8690] usb 3-1: 0:2 : does not exist [ 815.120232][ T8690] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 815.136158][T10262] XFS (loop3): Ending clean mount [ 815.151170][T10262] XFS (loop3): Quotacheck needed: Please wait. [ 815.249356][T10262] XFS (loop3): Quotacheck: Done. [ 815.294735][ T8690] usb 3-1: USB disconnect, device number 34 [ 815.951367][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 817.072146][ T4266] XFS (loop3): Unmounting Filesystem [ 817.179449][T10279] loop2: detected capacity change from 0 to 2048 [ 817.341572][T10280] loop0: detected capacity change from 0 to 32768 [ 817.499767][T10280] XFS (loop0): Mounting V5 Filesystem [ 817.516151][T10279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 817.619252][ T26] audit: type=1800 audit(1774149595.261:35): pid=10279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1475" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 817.735938][T10293] loop4: detected capacity change from 0 to 2048 [ 817.773513][T10280] XFS (loop0): Ending clean mount [ 817.795137][T10280] XFS (loop0): Quotacheck needed: Please wait. [ 817.813300][T10293] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 817.922344][T10293] UDF-fs: Scanning with blocksize 512 failed [ 817.946099][T10293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 817.986104][T10280] XFS (loop0): Quotacheck: Done. [ 818.170502][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 819.013981][T10302] input: syz0 as /devices/virtual/input/input66 [ 819.362730][ T5672] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 819.365445][ T4268] XFS (loop0): Unmounting Filesystem [ 819.478749][ T7362] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 819.605056][T10309] loop4: detected capacity change from 0 to 32768 [ 819.625769][T10309] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1483 (10309) [ 819.653309][T10309] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 819.663742][T10309] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 819.672933][T10309] BTRFS info (device loop4): enabling disk space caching [ 819.679995][T10309] BTRFS info (device loop4): force clearing of disk cache [ 819.687968][T10309] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 819.693305][ T7362] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 819.698092][T10309] BTRFS info (device loop4): use zstd compression, level 3 [ 819.714143][T10309] BTRFS info (device loop4): disk space caching is enabled [ 819.765217][ T5672] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.779419][ T7362] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 819.808008][ T5672] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.825263][ T7362] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.852670][ T5672] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 819.871194][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.880396][ T5672] usb 4-1: Product: syz [ 819.885487][ T5672] usb 4-1: Manufacturer: syz [ 819.890665][ T5672] usb 4-1: SerialNumber: syz [ 819.898219][ T7362] usb 2-1: config 0 descriptor?? [ 820.118597][ T5672] usb 4-1: 0:2 : does not exist [ 820.139258][ T5672] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 820.172366][T10309] BTRFS info (device loop4): enabling ssd optimizations [ 820.180423][T10309] BTRFS info (device loop4): rebuilding free space tree [ 820.194020][T10309] BTRFS info (device loop4): disabling free space tree [ 820.200927][T10309] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 820.211318][T10309] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 820.257685][ T5672] usb 4-1: USB disconnect, device number 37 [ 820.578096][T10332] blktrace: Concurrent blktraces are not allowed on nullb0 [ 820.894194][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.259145][ T4275] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 822.018565][ T4353] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop4 scanned by udevd (4353) [ 823.111097][ T7362] usb 2-1: USB disconnect, device number 33 [ 824.219817][T10356] loop0: detected capacity change from 0 to 32768 [ 824.444469][T10356] XFS (loop0): Mounting V5 Filesystem [ 824.675651][T10356] XFS (loop0): Ending clean mount [ 824.691324][T10366] loop2: detected capacity change from 0 to 2048 [ 824.702937][T10356] XFS (loop0): Quotacheck needed: Please wait. [ 824.784302][T10356] XFS (loop0): Quotacheck: Done. [ 825.356219][T10369] loop4: detected capacity change from 0 to 2048 [ 825.460775][T10369] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 825.485131][T10366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 825.502728][T10369] UDF-fs: Scanning with blocksize 512 failed [ 825.561196][ T26] audit: type=1800 audit(1774149603.201:36): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1491" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 825.587244][T10369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 825.843794][ T4268] XFS (loop0): Unmounting Filesystem [ 825.920513][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 826.146643][T10376] input: syz0 as /devices/virtual/input/input67 [ 827.637359][T10385] netlink: 'syz.4.1496': attribute type 5 has an invalid length. [ 827.792796][ T5672] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 830.044750][ T5672] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.058637][ T5672] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 830.071007][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.120664][ T5672] usb 3-1: config 0 descriptor?? [ 830.123800][ T7362] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 830.153529][ T5672] pwc: Askey VC010 type 2 USB webcam detected. [ 830.343787][ T7362] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.383195][ T7362] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.421035][ T7362] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 830.446686][ T7362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.474938][ T7362] usb 4-1: Product: syz [ 830.494275][ T7362] usb 4-1: Manufacturer: syz [ 830.498979][ T7362] usb 4-1: SerialNumber: syz [ 830.550056][ T5672] pwc: recv_control_msg error -32 req 02 val 2b00 [ 830.595878][T10400] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1499'. [ 831.045868][ T5672] pwc: recv_control_msg error -32 req 02 val 2700 [ 831.059785][ T5672] pwc: recv_control_msg error -32 req 02 val 2c00 [ 831.068102][ T5672] pwc: recv_control_msg error -32 req 04 val 1000 [ 831.077909][ T5672] pwc: recv_control_msg error -32 req 04 val 1300 [ 831.086380][ T5672] pwc: recv_control_msg error -32 req 04 val 1400 [ 831.094666][ T5672] pwc: recv_control_msg error -32 req 02 val 2000 [ 831.124787][ T5672] pwc: recv_control_msg error -32 req 02 val 2100 [ 831.144229][ T5672] pwc: recv_control_msg error -32 req 04 val 1500 [ 831.166920][ T7362] usb 4-1: can't set config #1, error -71 [ 831.167791][ T5672] pwc: recv_control_msg error -32 req 02 val 2500 [ 831.229291][ T7362] usb 4-1: USB disconnect, device number 38 [ 831.265774][ T5672] pwc: recv_control_msg error -32 req 02 val 2400 [ 831.448459][T10405] loop3: detected capacity change from 0 to 2048 [ 831.549865][T10409] sctp: [Deprecated]: syz.1.1501 (pid 10409) Use of int in max_burst socket option deprecated. [ 831.549865][T10409] Use struct sctp_assoc_value instead [ 831.587315][ T5672] pwc: recv_control_msg error -71 req 02 val 2900 [ 831.608947][ T5672] pwc: recv_control_msg error -71 req 02 val 2800 [ 831.627355][ T5672] pwc: recv_control_msg error -71 req 04 val 1100 [ 831.636293][ T5672] pwc: recv_control_msg error -71 req 04 val 1200 [ 831.755272][ T5672] pwc: Registered as video103. [ 831.773963][ T5672] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input68 [ 831.805609][ T5672] usb 3-1: USB disconnect, device number 35 [ 832.213880][T10405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 832.321257][ T26] audit: type=1800 audit(1774149609.961:37): pid=10405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1500" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 836.057329][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 836.653084][T10424] loop1: detected capacity change from 0 to 32768 [ 837.132991][ T14] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 837.325550][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 837.334589][ T14] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 837.368163][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.375455][T10431] loop2: detected capacity change from 0 to 8 [ 837.430726][ T14] usb 4-1: config 0 has no interface number 0 [ 837.451021][ T14] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 837.488392][ T14] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.526789][ T14] usb 4-1: config 0 interface 196 has no altsetting 0 [ 837.546222][ T14] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 837.593239][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.635307][ T14] usb 4-1: Product: syz [ 837.666100][ T14] usb 4-1: Manufacturer: syz [ 837.670744][ T14] usb 4-1: SerialNumber: syz [ 837.686156][T10434] netlink: 'syz.4.1509': attribute type 5 has an invalid length. [ 837.709093][ T14] usb 4-1: config 0 descriptor?? [ 837.719566][T10427] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 839.460765][ T14] ipheth 4-1:0.196: Unable to find endpoints [ 839.573532][ T14] usb 4-1: USB disconnect, device number 39 [ 839.748402][T10439] loop4: detected capacity change from 0 to 164 [ 839.854526][ T7362] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 840.034945][T10442] Unsupported NM flag settings (240) [ 840.058634][T10442] Unsupported NM flag settings (240) [ 840.549353][ T7362] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 840.571641][ T7362] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.615454][ T7362] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 840.626223][ T14] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 840.672102][ T7362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.693012][ T7362] usb 2-1: Product: syz [ 840.697242][ T7362] usb 2-1: Manufacturer: syz [ 840.889248][ T7362] usb 2-1: SerialNumber: syz [ 840.924885][ T14] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 840.943187][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.683192][ T14] usb 1-1: config 0 descriptor?? [ 841.689333][ T7362] usb 2-1: 0:2 : does not exist [ 841.710007][ T7362] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 841.719396][ T14] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 841.775399][ T7362] usb 2-1: USB disconnect, device number 34 [ 841.820253][T10452] input: syz0 as /devices/virtual/input/input69 [ 842.055333][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.233298][ T14] gspca_cpia1: usb_control_msg 03, error -32 [ 842.240941][ T14] cpia1 1-1:0.0: unexpected state after lo power cmd: 01 [ 842.443716][ T14] gspca_cpia1: usb_control_msg 01, error -71 [ 842.773482][ T14] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 842.948455][ T4366] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 843.098580][ T14] usb 1-1: USB disconnect, device number 40 [ 843.133399][T10463] netlink: 'syz.4.1520': attribute type 10 has an invalid length. [ 843.161161][T10463] team0: Device vxcan1 is of different type [ 843.174151][ T4366] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 843.187250][ T4366] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 843.208513][ T4366] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 843.333514][T10466] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1519'. [ 843.336201][ T4366] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 843.372862][ T4319] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 843.395305][ T4366] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 843.406988][ T4366] usb 3-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 843.444897][ T4366] usb 3-1: string descriptor 0 read error: -22 [ 843.469398][ T4366] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 843.485167][ T4366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.522827][ T4366] adutux 3-1:168.0: interrupt endpoints not found [ 843.577280][ T4319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.589448][ T4319] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 843.607722][ T4319] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.618906][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.627986][ T4319] usb 4-1: Product: syz [ 843.633937][ T4319] usb 4-1: Manufacturer: syz [ 843.638749][ T4319] usb 4-1: SerialNumber: syz [ 843.950749][ T4319] usb 4-1: 0:2 : does not exist [ 843.968401][ T4319] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 844.033328][ T4319] usb 4-1: USB disconnect, device number 40 [ 844.082705][ T4366] usb 3-1: USB disconnect, device number 36 [ 844.123781][T10468] loop0: detected capacity change from 0 to 4096 [ 845.325609][T10477] loop1: detected capacity change from 0 to 8 [ 845.349063][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 845.421393][ T4268] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 845.476485][ T4268] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 845.516525][T10479] loop4: detected capacity change from 0 to 128 [ 845.726868][T10479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 845.777634][T10479] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 845.810205][ C1] vkms_vblank_simulate: vblank timer overrun [ 845.854278][T10487] input: syz0 as /devices/virtual/input/input71 [ 846.704080][ T4353] udevd[4353]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 847.984730][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 848.336706][T10499] loop2: detected capacity change from 0 to 32768 [ 848.355554][T10499] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 848.407362][T10503] loop3: detected capacity change from 0 to 128 [ 848.445943][T10503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 848.456703][ T4353] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.536887][ T14] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 848.545732][T10503] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.596072][T10506] loop0: detected capacity change from 0 to 164 [ 848.683535][ T4319] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 848.774641][ T14] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 848.799308][T10507] random: crng reseeded on system resumption [ 848.860068][T10508] blktrace: Concurrent blktraces are not allowed on nullb0 [ 848.920727][ T4319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.941520][ T4319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 848.971591][ T4319] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 848.983208][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.991533][ T4319] usb 5-1: Product: syz [ 848.997684][ T4319] usb 5-1: Manufacturer: syz [ 849.003287][ T4319] usb 5-1: SerialNumber: syz [ 849.399695][T10509] Unsupported NM flag settings (240) [ 849.409147][T10509] Unsupported NM flag settings (240) [ 849.890408][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.929418][ T14] usb 2-1: config 0 descriptor?? [ 849.939563][ T14] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 850.070258][ T4319] usb 5-1: 0:2 : does not exist [ 850.238561][ T4319] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 850.345789][ T14] gspca_cpia1: usb_control_msg 03, error -32 [ 850.428912][ T14] cpia1 2-1:0.0: unexpected state after lo power cmd: 01 [ 850.431935][ T4319] usb 5-1: USB disconnect, device number 46 [ 850.506297][T10503] ax25_connect(): syz.3.1532 uses autobind, please contact jreuter@yaina.de [ 850.557190][ T14] gspca_cpia1: usb_control_msg 01, error -71 [ 850.579558][ T14] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 850.626888][ T14] usb 2-1: USB disconnect, device number 35 [ 850.760631][T10513] loop2: detected capacity change from 0 to 2048 [ 850.912071][T10513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 851.944418][T10515] loop4: detected capacity change from 0 to 4096 [ 852.002881][ T26] audit: type=1800 audit(1774149629.651:38): pid=10522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1534" name=04 dev="loop2" ino=18 res=0 errno=0 [ 854.005340][ T4275] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 854.014796][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 854.025735][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 854.095130][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 854.362789][T10161] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 855.341435][T10536] loop3: detected capacity change from 0 to 128 [ 855.574846][T10538] loop2: detected capacity change from 0 to 128 [ 855.667739][T10536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 855.854928][T10536] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.964819][T10538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 856.139899][T10538] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 856.184562][T10161] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.351340][T10161] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.365285][T10161] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 856.375289][T10161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.384297][T10161] usb 1-1: Product: syz [ 856.388492][T10161] usb 1-1: Manufacturer: syz [ 856.393966][T10161] usb 1-1: SerialNumber: syz [ 856.619319][T10161] usb 1-1: 0:2 : does not exist [ 856.704599][T10542] random: crng reseeded on system resumption [ 858.300637][T10161] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 858.348826][T10545] loop1: detected capacity change from 0 to 8 [ 858.435293][T10161] usb 1-1: USB disconnect, device number 41 [ 858.556535][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 858.591332][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 858.738060][T10550] netlink: 'syz.0.1544': attribute type 10 has an invalid length. [ 858.766955][T10550] team0: Device vxcan1 is of different type [ 859.145812][T10553] loop0: detected capacity change from 0 to 32768 [ 859.155313][T10553] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 859.380402][T10557] blktrace: Concurrent blktraces are not allowed on nullb0 [ 859.908490][T10556] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 860.060757][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 860.074440][ T4353] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 860.948406][T10568] loop3: detected capacity change from 0 to 32768 [ 860.957423][T10568] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 861.115569][T10570] blktrace: Concurrent blktraces are not allowed on nullb0 [ 862.086645][ T7082] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 862.302778][T10161] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 862.340465][T10576] loop3: detected capacity change from 0 to 4096 [ 862.493589][T10161] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.156984][T10161] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 863.188245][T10161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.213616][T10161] usb 2-1: config 0 descriptor?? [ 863.245853][T10161] pwc: Askey VC010 type 2 USB webcam detected. [ 863.503432][ T4266] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 863.509969][ T4266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 863.662974][T10161] pwc: recv_control_msg error -32 req 02 val 2b00 [ 863.670347][T10161] pwc: recv_control_msg error -32 req 02 val 2700 [ 863.702551][T10161] pwc: recv_control_msg error -32 req 02 val 2c00 [ 863.724255][T10161] pwc: recv_control_msg error -32 req 04 val 1000 [ 863.732084][T10161] pwc: recv_control_msg error -32 req 04 val 1300 [ 863.759901][T10161] pwc: recv_control_msg error -32 req 04 val 1400 [ 863.814153][T10161] pwc: recv_control_msg error -32 req 02 val 2000 [ 863.852889][T10161] pwc: recv_control_msg error -32 req 02 val 2100 [ 863.894485][T10161] pwc: recv_control_msg error -32 req 04 val 1500 [ 863.933995][T10161] pwc: recv_control_msg error -32 req 02 val 2500 [ 863.973445][T10161] pwc: recv_control_msg error -32 req 02 val 2400 [ 864.182960][T10161] pwc: recv_control_msg error -71 req 02 val 2900 [ 864.200985][T10161] pwc: recv_control_msg error -71 req 02 val 2800 [ 864.273478][T10161] pwc: recv_control_msg error -71 req 04 val 1100 [ 864.286864][T10161] pwc: recv_control_msg error -71 req 04 val 1200 [ 864.356226][T10161] pwc: Registered as video103. [ 864.397742][T10161] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input72 [ 864.500167][T10161] usb 2-1: USB disconnect, device number 36 [ 864.858530][T10590] loop1: detected capacity change from 0 to 128 [ 864.924848][T10590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 865.011623][T10590] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 865.122700][ T4319] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 865.697841][T10598] loop4: detected capacity change from 0 to 8 [ 865.853405][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.884299][ T4319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 865.912271][ T4319] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 866.354915][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.363760][ T4319] usb 1-1: Product: syz [ 866.367939][ T4319] usb 1-1: Manufacturer: syz [ 866.373295][ T4319] usb 1-1: SerialNumber: syz [ 866.429286][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 866.434895][T10584] loop3: detected capacity change from 0 to 32768 [ 866.585855][ T4319] usb 1-1: 0:2 : does not exist [ 866.650007][ T4319] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 866.704100][ T4319] usb 1-1: USB disconnect, device number 42 [ 866.944236][T10584] XFS (loop3): Mounting V5 Filesystem [ 867.253860][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.379612][T10615] loop2: detected capacity change from 0 to 32768 [ 868.785180][T10584] XFS (loop3): Ending clean mount [ 868.952339][ T4266] XFS (loop3): Unmounting Filesystem [ 870.471101][T10623] loop4: detected capacity change from 0 to 131072 [ 870.484486][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.490871][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.502972][T10623] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 870.509780][T10623] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 870.521663][T10623] F2FS-fs (loop4): invalid crc value [ 870.588113][T10623] F2FS-fs (loop4): Found nat_bits in checkpoint [ 870.778963][T10623] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 870.787015][T10623] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 872.557092][T10647] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 873.006469][T10655] loop0: detected capacity change from 0 to 4096 [ 873.094997][T10655] netlink: 'syz.0.1571': attribute type 5 has an invalid length. [ 875.045356][T10656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1567'. [ 875.862835][T10161] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 876.062765][T10161] usb 1-1: device descriptor read/64, error -71 [ 876.342717][T10161] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 876.522860][T10161] usb 1-1: device descriptor read/64, error -71 [ 877.696809][T10665] loop1: detected capacity change from 0 to 32768 [ 877.796950][T10161] usb usb1-port1: attempt power cycle [ 878.457949][T10161] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 878.509370][T10161] usb 1-1: device descriptor read/8, error -71 [ 878.968781][T10674] loop4: detected capacity change from 0 to 164 [ 879.079522][T10677] Unsupported NM flag settings (240) [ 879.093355][T10677] Unsupported NM flag settings (240) [ 879.322948][T10161] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 879.368770][T10161] usb 1-1: device descriptor read/8, error -71 [ 879.493551][T10161] usb usb1-port1: unable to enumerate USB device [ 879.678921][T10681] loop1: detected capacity change from 0 to 2048 [ 879.706418][T10680] loop2: detected capacity change from 0 to 2048 [ 879.789071][T10680] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 879.831496][T10680] UDF-fs: Scanning with blocksize 512 failed [ 879.894649][T10680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.905287][T10681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 879.920212][ T26] audit: type=1800 audit(1774149657.561:39): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1575" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 880.211203][T10690] loop2: detected capacity change from 0 to 128 [ 880.296175][T10690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 880.336921][T10690] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.463966][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 880.608518][T10693] random: crng reseeded on system resumption [ 880.675462][T10694] ax25_connect(): syz.2.1579 uses autobind, please contact jreuter@yaina.de [ 881.892177][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 882.217074][T10691] loop4: detected capacity change from 0 to 32768 [ 882.245552][T10702] tipc: Enabling of bearer rejected, failed to enable media [ 882.258564][T10702] device syzkaller0 entered promiscuous mode [ 882.266310][T10691] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1578 (10691) [ 882.326928][T10691] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 882.391597][T10691] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 882.449082][T10691] BTRFS info (device loop4): turning on sync discard [ 882.468249][T10691] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 882.488755][T10691] BTRFS info (device loop4): use zstd compression, level 3 [ 882.498735][T10691] BTRFS info (device loop4): turning on async discard [ 882.568477][T10691] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 882.644132][T10691] BTRFS info (device loop4): trying to use backup root at mount time [ 882.667531][T10691] BTRFS info (device loop4): enabling auto defrag [ 882.729592][T10691] BTRFS info (device loop4): using free space tree [ 882.943819][T10707] loop1: detected capacity change from 0 to 4096 [ 883.353933][ T8687] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 885.234788][ T8687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.255591][ T8687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.315542][ T8687] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 885.325426][ T8687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.334825][ T8687] usb 1-1: Product: syz [ 885.339312][ T8687] usb 1-1: Manufacturer: syz [ 885.345323][ T8687] usb 1-1: SerialNumber: syz [ 885.461310][T10728] loop3: detected capacity change from 0 to 8 [ 885.463382][T10691] BTRFS error (device loop4): open_ctree failed: -12 [ 885.478165][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 885.506776][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 885.568776][ T8687] usb 1-1: 0:2 : does not exist [ 885.588839][ T8687] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 885.789015][ T8687] usb 1-1: USB disconnect, device number 47 [ 885.869723][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.983507][ T4353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4353) [ 886.213199][ T7489] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 886.405832][ T7489] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 886.436471][ T7489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.523794][ T7489] usb 2-1: config 0 descriptor?? [ 886.572797][T10161] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 886.578058][ T7489] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 886.794759][T10161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.840754][T10161] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 886.901283][T10161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.966338][ T7489] gspca_cpia1: usb_control_msg 03, error -32 [ 886.983813][ T7489] cpia1 2-1:0.0: unexpected state after lo power cmd: 01 [ 886.988831][T10161] usb 1-1: config 0 descriptor?? [ 887.049697][T10161] pwc: Askey VC010 type 2 USB webcam detected. [ 887.135140][T10739] loop4: detected capacity change from 0 to 2048 [ 887.185065][ T7489] gspca_cpia1: usb_control_msg 01, error -71 [ 887.191154][ T7489] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 887.204403][T10739] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 887.242665][ T7489] usb 2-1: USB disconnect, device number 37 [ 887.246311][T10739] UDF-fs: Scanning with blocksize 512 failed [ 887.307061][T10739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 887.442886][T10161] pwc: recv_control_msg error -32 req 02 val 2b00 [ 887.451536][T10161] pwc: recv_control_msg error -32 req 02 val 2700 [ 887.499722][T10161] pwc: recv_control_msg error -32 req 02 val 2c00 [ 887.560282][T10161] pwc: recv_control_msg error -32 req 04 val 1000 [ 887.576322][T10161] pwc: recv_control_msg error -32 req 04 val 1300 [ 887.590118][T10161] pwc: recv_control_msg error -32 req 04 val 1400 [ 887.849037][T10744] loop4: detected capacity change from 0 to 32768 [ 887.884249][T10161] pwc: recv_control_msg error -32 req 02 val 2000 [ 887.927405][T10161] pwc: recv_control_msg error -32 req 02 val 2100 [ 887.936683][T10161] pwc: recv_control_msg error -32 req 04 val 1500 [ 887.958009][T10161] pwc: recv_control_msg error -32 req 02 val 2500 [ 888.259930][T10161] pwc: recv_control_msg error -32 req 02 val 2400 [ 888.487966][T10744] XFS (loop4): Mounting V5 Filesystem [ 888.502398][T10161] pwc: recv_control_msg error -71 req 02 val 2900 [ 888.516433][T10161] pwc: recv_control_msg error -71 req 02 val 2800 [ 888.531058][T10161] pwc: recv_control_msg error -71 req 04 val 1100 [ 888.540779][T10161] pwc: recv_control_msg error -71 req 04 val 1200 [ 888.563127][T10161] pwc: Registered as video103. [ 888.579042][T10161] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input73 [ 888.654187][T10161] usb 1-1: USB disconnect, device number 48 [ 888.851426][T10744] XFS (loop4): Ending clean mount [ 888.860175][T10744] XFS (loop4): Quotacheck needed: Please wait. [ 888.975337][T10744] XFS (loop4): Quotacheck: Done. [ 888.989116][ T8757] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 889.162949][ T8757] usb 2-1: device descriptor read/64, error -71 [ 889.462908][ T8757] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 889.655107][ T8757] usb 2-1: device descriptor read/64, error -71 [ 889.792908][ T8757] usb usb2-port1: attempt power cycle [ 890.653045][T10773] loop2: detected capacity change from 0 to 131072 [ 890.676771][T10773] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 890.684122][T10773] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 890.695552][T10773] F2FS-fs (loop2): invalid crc value [ 890.704752][T10773] F2FS-fs (loop2): Found nat_bits in checkpoint [ 890.732847][ T8757] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 890.740813][T10773] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 890.748481][T10773] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 890.783578][ T8757] usb 2-1: device descriptor read/8, error -71 [ 890.819026][ T4275] XFS (loop4): Unmounting Filesystem [ 891.052971][ T8757] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 891.096712][ T8757] usb 2-1: device descriptor read/8, error -71 [ 891.223383][ T8757] usb usb2-port1: unable to enumerate USB device [ 891.906566][T10784] netlink: 'syz.1.1600': attribute type 10 has an invalid length. [ 891.948763][T10784] team0: Device vxcan1 is of different type [ 892.045015][T10782] loop4: detected capacity change from 0 to 4096 [ 892.894694][T10788] loop1: detected capacity change from 0 to 2048 [ 892.905578][ T4275] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 892.931461][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 892.971045][T10788] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 893.003462][T10788] UDF-fs: Scanning with blocksize 512 failed [ 893.022679][T10788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 893.052920][ T5672] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 893.390138][T10793] loop4: detected capacity change from 0 to 32768 [ 893.433489][T10793] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1605 (10793) [ 893.453214][T10793] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 893.463944][T10793] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 893.473409][T10793] BTRFS info (device loop4): enabling disk space caching [ 893.480458][T10793] BTRFS info (device loop4): force clearing of disk cache [ 893.488222][T10793] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 893.498450][T10793] BTRFS info (device loop4): use zstd compression, level 3 [ 893.506436][T10793] BTRFS info (device loop4): disk space caching is enabled [ 893.534497][T10793] BTRFS info (device loop4): enabling ssd optimizations [ 893.544700][T10793] BTRFS info (device loop4): rebuilding free space tree [ 893.559361][T10793] BTRFS info (device loop4): disabling free space tree [ 893.567230][T10793] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 893.578023][T10793] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 893.594583][ T5672] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 893.604755][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.624722][ T5672] usb 4-1: config 0 descriptor?? [ 893.634881][ T5672] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 893.773997][T10812] blktrace: Concurrent blktraces are not allowed on nullb0 [ 894.060756][ T5672] gspca_cpia1: usb_control_msg 03, error -32 [ 894.070209][ T5672] cpia1 4-1:0.0: unexpected state after lo power cmd: 01 [ 894.274013][ T5672] gspca_cpia1: usb_control_msg 01, error -71 [ 894.303599][ T5672] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 894.322643][ T5672] usb 4-1: USB disconnect, device number 41 [ 894.531519][T10780] loop0: detected capacity change from 0 to 32768 [ 894.570687][ T4275] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 894.608934][T10780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1599 (10780) [ 894.907911][T10780] BTRFS error (device loop0): open_ctree failed: -4 [ 895.008712][ T7082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (7082) [ 895.344610][T10813] loop1: detected capacity change from 0 to 32768 [ 895.436299][T10827] loop4: detected capacity change from 0 to 128 [ 895.566152][T10827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 895.662850][T10827] ext4 filesystem being mounted at /319/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 895.686070][T10813] XFS (loop1): Mounting V5 Filesystem [ 896.295447][T10813] XFS (loop1): Ending clean mount [ 896.491097][ T4267] XFS (loop1): Unmounting Filesystem [ 896.837419][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 897.252815][ T8757] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 897.412834][ T8757] usb 5-1: device descriptor read/64, error -71 [ 897.692711][ T8757] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 897.852792][ T8757] usb 5-1: device descriptor read/64, error -71 [ 897.992848][ T8757] usb usb5-port1: attempt power cycle [ 898.406436][ T8757] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 898.453373][ T8757] usb 5-1: device descriptor read/8, error -71 [ 898.743181][ T8757] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 899.644011][T10854] loop0: detected capacity change from 0 to 32768 [ 900.113568][ T8757] usb 5-1: device descriptor read/8, error -71 [ 900.232939][ T8757] usb usb5-port1: unable to enumerate USB device [ 900.489243][T10864] loop3: detected capacity change from 0 to 4096 [ 900.714379][ T8757] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 900.955494][ T8757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.045647][ T8757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.206158][ T8757] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.343988][ T8757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.468896][ T8757] usb 5-1: Product: syz [ 901.543135][ T8757] usb 5-1: Manufacturer: syz [ 901.617674][ T8757] usb 5-1: SerialNumber: syz [ 901.865267][ T4266] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 901.888929][T10869] loop0: detected capacity change from 0 to 4096 [ 901.893162][ T4266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 901.977848][ T8757] usb 5-1: 0:2 : does not exist [ 902.003342][ T8757] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 902.090593][ T8757] usb 5-1: USB disconnect, device number 51 [ 903.936438][ T4268] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 903.964206][T10874] input: syz0 as /devices/virtual/input/input75 [ 903.983548][ T4268] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 904.004011][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.314367][ T8757] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 904.621367][T10880] loop2: detected capacity change from 0 to 32768 [ 905.616223][T10880] XFS (loop2): Mounting V5 Filesystem [ 905.643962][ T8757] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 905.643991][ T8757] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 905.644841][ T8757] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 905.644865][ T8757] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 905.645722][ T8757] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 905.645757][ T8757] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 905.648414][ T8757] usb 5-1: string descriptor 0 read error: -22 [ 905.648469][ T8757] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 905.648485][ T8757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.656186][ T8757] adutux 5-1:168.0: interrupt endpoints not found [ 905.684426][T10880] XFS (loop2): Ending clean mount [ 905.686677][T10880] XFS (loop2): Quotacheck needed: Please wait. [ 905.782841][T10880] XFS (loop2): Quotacheck: Done. [ 905.955157][T10895] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 905.996913][ T7491] usb 5-1: USB disconnect, device number 52 [ 906.714478][ T4281] XFS (loop2): Unmounting Filesystem [ 907.143911][T10899] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1625'. [ 908.217421][T10902] loop4: detected capacity change from 0 to 32768 [ 908.839430][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1626'. [ 909.279329][ T7493] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 909.473162][ T7493] usb 2-1: device descriptor read/64, error -71 [ 909.743031][ T7493] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 909.922846][ T7493] usb 2-1: device descriptor read/64, error -71 [ 909.929490][ T4555] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 910.029487][T10910] loop4: detected capacity change from 0 to 2048 [ 910.053527][ T7493] usb usb2-port1: attempt power cycle [ 910.134661][ T4555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.156929][T10910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 910.182715][ T26] audit: type=1800 audit(1774149687.821:40): pid=10910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1629" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 910.185732][ T4555] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.353087][ T4555] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 910.406603][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 910.417381][ T4555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.470206][ T4555] usb 3-1: config 0 descriptor?? [ 910.667030][T10920] loop4: detected capacity change from 0 to 8 [ 910.940136][ T4555] usbhid 3-1:0.0: can't add hid device: -71 [ 910.951136][ T4555] usbhid: probe of 3-1:0.0 failed with error -71 [ 911.015505][T10921] loop1: detected capacity change from 0 to 4096 [ 911.076800][ T4555] usb 3-1: USB disconnect, device number 37 [ 911.121558][T10914] loop3: detected capacity change from 0 to 32768 [ 911.188003][T10914] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 912.939194][T10914] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 912.949600][T10914] BTRFS info (device loop3): turning on sync discard [ 912.957947][T10914] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 912.971440][T10914] BTRFS info (device loop3): use zstd compression, level 3 [ 912.980062][T10914] BTRFS info (device loop3): turning on async discard [ 912.988630][T10914] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 913.000742][T10914] BTRFS info (device loop3): trying to use backup root at mount time [ 913.013842][T10914] BTRFS info (device loop3): enabling auto defrag [ 913.020708][T10914] BTRFS info (device loop3): using free space tree [ 913.320669][T10914] BTRFS error (device loop3): open_ctree failed: -12 [ 913.334194][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 913.349144][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 913.558536][ T4367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4367) [ 913.754975][T10942] loop2: detected capacity change from 0 to 32768 [ 913.787605][T10942] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1636 (10942) [ 913.803754][T10942] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 913.814523][T10942] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 913.824366][T10942] BTRFS info (device loop2): enabling disk space caching [ 913.831408][T10942] BTRFS info (device loop2): force clearing of disk cache [ 913.839227][T10942] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 913.849245][T10942] BTRFS info (device loop2): use zstd compression, level 3 [ 913.857429][T10942] BTRFS info (device loop2): disk space caching is enabled [ 915.982460][T10942] BTRFS info (device loop2): enabling ssd optimizations [ 916.012718][T10942] BTRFS info (device loop2): rebuilding free space tree [ 916.049715][T10942] BTRFS info (device loop2): disabling free space tree [ 916.057797][T10942] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 916.068443][T10942] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 916.356536][T10967] blktrace: Concurrent blktraces are not allowed on nullb0 [ 916.922684][T10969] loop1: detected capacity change from 0 to 32768 [ 918.098890][T10975] loop3: detected capacity change from 0 to 32768 [ 918.226622][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 918.708158][T10975] XFS (loop3): Mounting V5 Filesystem [ 918.894021][ T4281] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 918.944345][T10975] XFS (loop3): Ending clean mount [ 918.954445][T10975] XFS (loop3): Quotacheck needed: Please wait. [ 919.466479][T10995] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 919.474234][T10975] XFS (loop3): Quotacheck: Done. [ 919.944872][T10996] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1644'. [ 920.281518][T11001] loop4: detected capacity change from 0 to 128 [ 920.371392][T11001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 920.403079][T11001] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 920.651832][ T5672] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 921.355939][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 921.378646][ T4266] XFS (loop3): Unmounting Filesystem [ 921.402730][ T5672] usb 3-1: device descriptor read/64, error -71 [ 921.580721][T10990] loop0: detected capacity change from 0 to 32768 [ 921.660541][T10990] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 921.680886][T10990] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 921.690616][ T5672] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 921.702617][T10990] BTRFS info (device loop0): turning on sync discard [ 921.710020][T10990] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 921.749144][T10990] BTRFS info (device loop0): use zstd compression, level 3 [ 921.781250][T10990] BTRFS info (device loop0): turning on async discard [ 921.793531][T10990] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 921.822863][T10990] BTRFS info (device loop0): trying to use backup root at mount time [ 921.852776][ T5672] usb 3-1: device descriptor read/64, error -71 [ 921.855748][T10990] BTRFS info (device loop0): enabling auto defrag [ 921.894903][T11008] loop4: detected capacity change from 0 to 4096 [ 921.896895][T10990] BTRFS info (device loop0): using free space tree [ 921.982928][ T5672] usb usb3-port1: attempt power cycle [ 922.422700][ T5672] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 923.869441][ T5672] usb 3-1: device descriptor read/8, error -71 [ 923.897456][ T4275] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 923.905316][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 923.908674][T10990] BTRFS error (device loop0): open_ctree failed: -12 [ 923.964782][ T4353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4353) [ 924.074213][T11027] loop2: detected capacity change from 0 to 128 [ 924.734044][T11027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 924.772310][T11027] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.792779][ T8757] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 924.953259][T11038] random: crng reseeded on system resumption [ 925.006295][ T8757] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 925.059301][T11039] ax25_connect(): syz.2.1649 uses autobind, please contact jreuter@yaina.de [ 925.491765][ T8757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.556114][ T8757] usb 1-1: config 0 descriptor?? [ 925.615396][ T8757] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 926.422265][T11041] loop4: detected capacity change from 0 to 131072 [ 926.444399][T11041] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 926.451123][T11041] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 926.460098][ T8757] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 926.469445][T11041] F2FS-fs (loop4): invalid crc value [ 926.524461][T11041] F2FS-fs (loop4): Found nat_bits in checkpoint [ 926.579129][T11041] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 926.586846][T11041] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 926.660761][ T8757] gspca_cpia1: usb_control_msg 01, error -32 [ 926.692656][ T8757] gspca_cpia1: usb_control_msg 01, error -71 [ 926.733104][ T8757] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 926.774868][ T8757] usb 1-1: USB disconnect, device number 49 [ 928.056815][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 928.577830][ T7493] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 928.782555][ T7493] usb 2-1: device descriptor read/64, error -71 [ 929.083784][ T7493] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 929.253178][ T7493] usb 2-1: device descriptor read/64, error -71 [ 929.373444][ T7493] usb usb2-port1: attempt power cycle [ 929.782985][ T7493] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 929.825738][ T7493] usb 2-1: device descriptor read/8, error -71 [ 930.102720][ T7493] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 930.189699][ T7493] usb 2-1: device descriptor read/8, error -71 [ 930.323291][ T7493] usb usb2-port1: unable to enumerate USB device [ 930.738473][T11070] loop4: detected capacity change from 0 to 32768 [ 930.751311][T11070] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1657 (11070) [ 930.766893][T11070] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 930.777806][T11070] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 930.787330][T11070] BTRFS info (device loop4): enabling disk space caching [ 930.795207][T11070] BTRFS info (device loop4): force clearing of disk cache [ 930.803647][T11070] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 930.814302][T11070] BTRFS info (device loop4): use zstd compression, level 3 [ 930.821537][T11070] BTRFS info (device loop4): disk space caching is enabled [ 931.159322][T11084] loop3: detected capacity change from 0 to 2048 [ 931.303655][T11084] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 931.320273][T11070] BTRFS info (device loop4): enabling ssd optimizations [ 931.337020][T11070] BTRFS info (device loop4): rebuilding free space tree [ 931.350455][T11070] BTRFS info (device loop4): disabling free space tree [ 931.358380][T11070] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 931.369010][T11070] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 931.378370][ T26] audit: type=1800 audit(1774149709.011:41): pid=11084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1659" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 931.514466][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.520876][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.555430][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 931.573008][ T14] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 931.725536][T11098] blktrace: Concurrent blktraces are not allowed on nullb0 [ 931.841243][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.233104][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 932.310073][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 932.349273][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.383775][ T14] usb 1-1: Product: syz [ 932.388043][ T14] usb 1-1: Manufacturer: syz [ 932.420404][ T14] usb 1-1: SerialNumber: syz [ 932.666172][ T14] usb 1-1: 0:2 : does not exist [ 932.704654][ T14] usb 1-1: USB disconnect, device number 50 [ 932.731272][ T4275] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 933.186898][T11096] loop2: detected capacity change from 0 to 32768 [ 933.267687][T11096] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 933.327310][T11101] loop1: detected capacity change from 0 to 32768 [ 933.455137][T11101] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.1662 (11101) [ 933.862933][T11096] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 933.913925][T11096] BTRFS info (device loop2): turning on sync discard [ 933.947841][T11096] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 933.987307][T11096] BTRFS info (device loop2): use zstd compression, level 3 [ 934.057195][T11096] BTRFS info (device loop2): turning on async discard [ 934.130111][T11096] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 934.187555][ T4367] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4367) [ 934.209876][T11096] BTRFS info (device loop2): trying to use backup root at mount time [ 934.237978][T11096] BTRFS info (device loop2): enabling auto defrag [ 934.279588][T11096] BTRFS info (device loop2): using free space tree [ 934.383019][ T8687] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 934.522688][T10161] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 934.595022][ T8687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.627432][ T8687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.717960][ T8687] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.745975][ T8687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.767880][T10161] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 934.788348][T10161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.808615][ T8687] usb 1-1: Product: syz [ 934.818741][ T8687] usb 1-1: Manufacturer: syz [ 934.828872][ T8687] usb 1-1: SerialNumber: syz [ 934.843259][T10161] usb 2-1: config 0 descriptor?? [ 934.865499][T10161] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 934.945758][T11096] BTRFS error (device loop2): open_ctree failed: -12 [ 935.090036][ T8687] usb 1-1: 0:2 : does not exist [ 935.167661][ T8687] usb 1-1: USB disconnect, device number 51 [ 935.240150][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 935.268332][T10161] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 935.399094][T11132] loop4: detected capacity change from 0 to 32768 [ 935.423028][T11132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1667 (11132) [ 935.461448][T11132] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 935.480612][T10161] gspca_cpia1: usb_control_msg 01, error -32 [ 935.493137][T10161] gspca_cpia1: usb_control_msg 01, error -71 [ 935.500670][T10161] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 935.511373][T11132] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 935.540192][T10161] usb 2-1: USB disconnect, device number 49 [ 935.547350][T11132] BTRFS info (device loop4): turning on sync discard [ 935.568892][T11132] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 935.606650][T11132] BTRFS info (device loop4): use zstd compression, level 3 [ 935.644327][T11132] BTRFS info (device loop4): turning on async discard [ 935.676308][T11132] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 935.759549][T11132] BTRFS info (device loop4): trying to use backup root at mount time [ 935.790042][T11132] BTRFS info (device loop4): enabling auto defrag [ 935.813225][T11132] BTRFS info (device loop4): using free space tree [ 936.191556][ T7493] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 936.566426][ T7753] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 936.685325][ T9] kworker/dying (9) used greatest stack depth: 20368 bytes left [ 936.758781][ T7493] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.139981][ T7493] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.240632][T11132] BTRFS error (device loop4): failed to load root extent [ 937.272614][T11132] BTRFS warning (device loop4): try to load backup roots slot 1 [ 937.293076][ T40] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 937.327345][ T7493] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 937.337832][T11132] BTRFS warning (device loop4): couldn't read tree root [ 937.347699][T11132] BTRFS warning (device loop4): try to load backup roots slot 2 [ 937.373228][T11132] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 937.404313][ T7493] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.450817][ T7493] usb 1-1: config 0 descriptor?? [ 937.456521][T11132] BTRFS warning (device loop4): couldn't read tree root [ 937.456548][T11132] BTRFS warning (device loop4): try to load backup roots slot 3 [ 937.526609][T11132] BTRFS error (device loop4): open_ctree failed: -22 [ 937.935896][T11165] loop1: detected capacity change from 0 to 2048 [ 937.994548][ T7493] usbhid 1-1:0.0: can't add hid device: -71 [ 938.001144][ T7493] usbhid: probe of 1-1:0.0 failed with error -71 [ 938.014659][T11165] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 938.040244][ T7493] usb 1-1: USB disconnect, device number 52 [ 938.049914][T11165] UDF-fs: Scanning with blocksize 512 failed [ 938.097201][T11165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 938.506661][T11170] loop4: detected capacity change from 0 to 32768 [ 938.657480][T11170] XFS (loop4): Mounting V5 Filesystem [ 938.832974][T11170] XFS (loop4): Ending clean mount [ 938.844209][T11170] XFS (loop4): Quotacheck needed: Please wait. [ 938.977002][T11170] XFS (loop4): Quotacheck: Done. [ 939.377431][ T7493] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 939.922650][ T8687] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 939.958830][ T4275] XFS (loop4): Unmounting Filesystem [ 940.075866][ T7493] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.100881][ T7493] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 940.114492][ T8687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.123858][ T7493] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 940.135847][ T8687] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 940.150701][ T7493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.168859][ T8687] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 940.180597][ T7493] usb 2-1: Product: syz [ 940.194228][ T7493] usb 2-1: Manufacturer: syz [ 940.195509][ T8687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.198955][ T7493] usb 2-1: SerialNumber: syz [ 940.224866][ T8687] usb 1-1: Product: syz [ 940.245372][ T8687] usb 1-1: Manufacturer: syz [ 940.251137][ T8687] usb 1-1: SerialNumber: syz [ 940.614909][ T8687] usb 1-1: 0:2 : does not exist [ 940.783370][ T8687] usb 1-1: USB disconnect, device number 53 [ 940.869495][ T7493] usb 2-1: 0:2 : does not exist [ 940.881445][ T7493] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 940.938648][ T7493] usb 2-1: USB disconnect, device number 50 [ 941.163693][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.284728][ T4353] udevd[4353]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 941.455387][T11187] loop3: detected capacity change from 0 to 32768 [ 941.476881][T11187] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1677 (11187) [ 941.506983][T11197] loop0: detected capacity change from 0 to 2048 [ 941.514539][T11187] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 941.582960][ T7491] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 941.596924][T11187] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 941.609549][T11187] BTRFS info (device loop3): turning on sync discard [ 941.644448][T11197] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 941.646687][T11187] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 941.676955][ T26] audit: type=1800 audit(1774149719.321:42): pid=11197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1681" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 941.728687][T11187] BTRFS info (device loop3): use zstd compression, level 3 [ 941.772888][T11187] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 941.795640][ T7491] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.837101][T11187] BTRFS info (device loop3): trying to use backup root at mount time [ 941.905104][ T7491] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 942.454480][T11187] BTRFS info (device loop3): enabling auto defrag [ 942.454544][T11187] BTRFS info (device loop3): using free space tree [ 942.470299][ T7491] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 942.470332][ T7491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.470355][ T7491] usb 3-1: Product: syz [ 942.470372][ T7491] usb 3-1: Manufacturer: syz [ 942.470388][ T7491] usb 3-1: SerialNumber: syz [ 942.619619][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 942.685601][ T7491] usb 3-1: 0:2 : does not exist [ 942.693357][ T7491] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 942.765916][ T7491] usb 3-1: USB disconnect, device number 42 [ 942.829952][T11220] loop0: detected capacity change from 0 to 128 [ 942.866159][T11220] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 942.866474][T11220] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.078601][ T4367] udevd[4367]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.204772][T11227] random: crng reseeded on system resumption [ 944.050085][T11227] ax25_connect(): syz.0.1683 uses autobind, please contact jreuter@yaina.de [ 944.369862][T11187] BTRFS error (device loop3): open_ctree failed: -12 [ 944.864323][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 944.993313][T11234] loop3: detected capacity change from 0 to 2048 [ 945.050586][T11234] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 945.069266][T11233] loop1: detected capacity change from 0 to 4096 [ 945.092026][T11234] UDF-fs: Scanning with blocksize 512 failed [ 945.155621][T11234] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 947.708471][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 947.755163][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 948.445025][T11247] loop2: detected capacity change from 0 to 32768 [ 949.125363][T11247] XFS (loop2): Mounting V5 Filesystem [ 949.469290][T11266] loop3: detected capacity change from 0 to 32768 [ 949.478301][T11266] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1693 (11266) [ 949.495655][T11266] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 949.506859][T11266] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 949.516485][T11266] BTRFS info (device loop3): enabling disk space caching [ 949.524116][T11266] BTRFS info (device loop3): force clearing of disk cache [ 949.531251][T11266] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 949.541298][T11266] BTRFS info (device loop3): use zstd compression, level 3 [ 949.549438][T11266] BTRFS info (device loop3): disk space caching is enabled [ 949.590619][T11247] XFS (loop2): Ending clean mount [ 949.606259][T11247] XFS (loop2): Quotacheck needed: Please wait. [ 949.632858][ T8693] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 949.824766][T11247] XFS (loop2): Quotacheck: Done. [ 949.854571][ T8693] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.868890][ T8693] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.888890][ T8693] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.908247][ T8693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.919856][ T8693] usb 2-1: Product: syz [ 949.930033][ T8693] usb 2-1: Manufacturer: syz [ 949.936847][ T8693] usb 2-1: SerialNumber: syz [ 950.195350][ T8693] usb 2-1: 0:2 : does not exist [ 950.407207][ T8693] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 950.531580][ T8693] usb 2-1: USB disconnect, device number 51 [ 950.549988][T11266] BTRFS info (device loop3): enabling ssd optimizations [ 950.559648][T11266] BTRFS info (device loop3): rebuilding free space tree [ 950.579688][ T4281] XFS (loop2): Unmounting Filesystem [ 950.586689][T11266] BTRFS info (device loop3): disabling free space tree [ 950.594428][T11266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 950.604702][T11266] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 950.762327][T11287] usb usb7: usbfs: process 11287 (syz.0.1694) did not claim interface 0 before use [ 951.255133][ T4367] udevd[4367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.467949][T11288] blktrace: Concurrent blktraces are not allowed on nullb0 [ 952.676723][ T4266] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 953.666175][T11311] loop2: detected capacity change from 0 to 128 [ 953.816500][T11311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 953.865244][T11315] loop1: detected capacity change from 0 to 2048 [ 953.893477][T11311] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.894565][T11315] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 953.960766][T11315] UDF-fs: Scanning with blocksize 512 failed [ 953.998192][T11315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 954.095546][T11318] random: crng reseeded on system resumption [ 954.160279][T11319] ax25_connect(): syz.2.1695 uses autobind, please contact jreuter@yaina.de [ 955.509234][T11317] loop3: detected capacity change from 0 to 4096 [ 955.520153][T11321] loop4: detected capacity change from 0 to 2048 [ 955.620598][T11321] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 955.727725][T11321] UDF-fs: Scanning with blocksize 512 failed [ 957.643273][T11321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 957.868635][ T4266] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 957.888989][ T4266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 958.063424][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 959.763334][T11337] usb usb7: usbfs: process 11337 (syz.4.1707) did not claim interface 0 before use [ 960.187459][T11343] loop4: detected capacity change from 0 to 32768 [ 960.299559][T11343] XFS (loop4): Mounting V5 Filesystem [ 960.342277][ T7363] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 960.507467][T11343] XFS (loop4): Ending clean mount [ 960.516144][T11343] XFS (loop4): Quotacheck needed: Please wait. [ 960.535545][ T7363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.575582][ T7363] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 960.614019][ T7363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.653421][ T7363] usb 1-1: config 0 descriptor?? [ 960.693856][T11343] XFS (loop4): Quotacheck: Done. [ 961.214115][ T7363] pwc: Askey VC010 type 2 USB webcam detected. [ 961.227388][ T4275] XFS (loop4): Unmounting Filesystem [ 961.444018][ T7363] pwc: recv_control_msg error -32 req 02 val 2b00 [ 961.467763][ T7363] pwc: recv_control_msg error -32 req 02 val 2700 [ 961.494030][ T7363] pwc: recv_control_msg error -32 req 02 val 2c00 [ 961.533275][ T7363] pwc: recv_control_msg error -32 req 04 val 1000 [ 961.594159][ T7363] pwc: recv_control_msg error -32 req 04 val 1300 [ 961.615381][ T7363] pwc: recv_control_msg error -32 req 04 val 1400 [ 961.644114][ T7363] pwc: recv_control_msg error -32 req 02 val 2000 [ 961.684346][ T7363] pwc: recv_control_msg error -32 req 02 val 2100 [ 961.713979][ T7363] pwc: recv_control_msg error -32 req 04 val 1500 [ 961.728830][ T7363] pwc: recv_control_msg error -32 req 02 val 2500 [ 961.761609][ T7363] pwc: recv_control_msg error -32 req 02 val 2400 [ 961.993917][ T7363] pwc: recv_control_msg error -71 req 02 val 2900 [ 962.012985][ T7363] pwc: recv_control_msg error -71 req 02 val 2800 [ 962.022988][ T7363] pwc: recv_control_msg error -71 req 04 val 1100 [ 962.050667][ T7363] pwc: recv_control_msg error -71 req 04 val 1200 [ 962.098571][ T7363] pwc: Registered as video103. [ 962.157323][ T7363] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input76 [ 962.303739][ T7363] usb 1-1: USB disconnect, device number 54 [ 963.553909][ T52] block nbd0: Attempted send on invalid socket [ 963.560377][ T52] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 963.574818][T11369] EXT4-fs (nbd0): unable to read superblock [ 964.032955][T11378] loop0: detected capacity change from 0 to 32768 [ 964.078347][T11378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1716 (11378) [ 964.095703][T11378] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 964.107204][T11378] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 964.116650][T11378] BTRFS info (device loop0): turning on sync discard [ 964.124313][T11378] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 964.132903][ T4555] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 964.134443][T11378] BTRFS info (device loop0): use zstd compression, level 3 [ 964.149289][T11378] BTRFS info (device loop0): turning on async discard [ 964.156714][T11378] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 964.167902][T11378] BTRFS info (device loop0): trying to use backup root at mount time [ 964.176604][T11378] BTRFS info (device loop0): enabling auto defrag [ 964.184036][T11378] BTRFS info (device loop0): using free space tree [ 964.208158][ T4343] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 964.263098][T11378] BTRFS error (device loop0): failed to load root extent [ 964.270222][T11378] BTRFS warning (device loop0): try to load backup roots slot 1 [ 964.280034][ T4303] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 964.324532][T11378] BTRFS warning (device loop0): couldn't read tree root [ 964.331556][T11378] BTRFS warning (device loop0): try to load backup roots slot 2 [ 964.352897][T11378] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 964.364360][T11378] BTRFS warning (device loop0): couldn't read tree root [ 964.371333][T11378] BTRFS warning (device loop0): try to load backup roots slot 3 [ 964.404642][ T4555] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.421151][ T4555] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.421227][T11378] BTRFS info (device loop0): enabling ssd optimizations [ 964.441413][T11378] BTRFS info (device loop0): rebuilding free space tree [ 964.548529][T11378] BTRFS info (device loop0): checking UUID tree [ 964.585372][ T4555] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 964.703158][ T4555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.763100][ T4555] usb 4-1: Product: syz [ 964.767380][ T4555] usb 4-1: Manufacturer: syz [ 964.794930][ T4268] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 964.814608][ T4555] usb 4-1: SerialNumber: syz [ 964.824479][T11398] loop4: detected capacity change from 0 to 2048 [ 964.887770][T11398] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 965.002947][T11398] UDF-fs: Scanning with blocksize 512 failed [ 965.036714][T11398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 965.065982][ T4555] usb 4-1: 0:2 : does not exist [ 965.129008][ T4555] usb 4-1: USB disconnect, device number 42 [ 965.146268][ T4353] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (4353) [ 965.390910][T11401] loop2: detected capacity change from 0 to 164 [ 965.840606][T11405] Unsupported NM flag settings (240) [ 965.850027][T11405] Unsupported NM flag settings (240) [ 966.936751][T11407] loop3: detected capacity change from 0 to 32768 [ 967.368049][T11407] XFS (loop3): Mounting V5 Filesystem [ 967.772873][ T4366] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 967.790086][T11407] XFS (loop3): Ending clean mount [ 967.804513][T11407] XFS (loop3): Quotacheck needed: Please wait. [ 968.073125][ T4366] usb 2-1: Using ep0 maxpacket: 32 [ 968.098145][ T4366] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 968.108057][ T4366] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.307452][ T4366] usb 2-1: config 0 has no interface number 0 [ 968.316959][ T4366] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 968.341804][ T4366] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 968.360173][ T4366] usb 2-1: config 0 interface 196 has no altsetting 0 [ 968.396166][ T4366] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 968.573695][ T4366] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.583297][ T4366] usb 2-1: Product: syz [ 968.587517][ T4366] usb 2-1: Manufacturer: syz [ 968.594231][ T4366] usb 2-1: SerialNumber: syz [ 968.649254][ T4366] usb 2-1: config 0 descriptor?? [ 968.668923][T11416] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 968.715081][T11407] XFS (loop3): Quotacheck: Done. [ 969.247311][ T4366] ipheth 2-1:0.196: Unable to find endpoints [ 969.280590][ T4366] usb 2-1: USB disconnect, device number 52 [ 969.505634][ T4266] XFS (loop3): Unmounting Filesystem [ 969.675179][T11430] loop2: detected capacity change from 0 to 8 [ 970.225757][T11436] random: crng reseeded on system resumption [ 971.853223][T11437] ax25_connect(): syz.3.1725 uses autobind, please contact jreuter@yaina.de [ 971.963136][T11440] netlink: 'syz.1.1728': attribute type 5 has an invalid length. [ 973.472915][T11443] loop1: detected capacity change from 0 to 32768 [ 973.508587][T11443] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 974.417735][ T4353] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 974.687870][T11458] loop1: detected capacity change from 0 to 164 [ 974.752651][ T4362] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 974.960706][T11462] Unsupported NM flag settings (240) [ 974.962429][ T4362] usb 4-1: Using ep0 maxpacket: 32 [ 974.967242][T11462] Unsupported NM flag settings (240) [ 975.012253][ T4362] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 975.085691][ T4362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.102998][ T4362] usb 4-1: config 0 has no interface number 0 [ 975.110112][ T4362] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 975.121520][ T4362] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 975.135558][ T4362] usb 4-1: config 0 interface 196 has no altsetting 0 [ 975.158711][ T4362] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 975.169202][ T4362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.315123][ T4362] usb 4-1: Product: syz [ 975.319661][ T4362] usb 4-1: Manufacturer: syz [ 975.353607][ T4362] usb 4-1: SerialNumber: syz [ 975.429881][ T4362] usb 4-1: config 0 descriptor?? [ 975.443500][T11456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 975.606582][T11463] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 975.705825][ T4362] ipheth 4-1:0.196: Unable to find endpoints [ 975.756980][ T4362] usb 4-1: USB disconnect, device number 43 [ 975.935521][T11465] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1735'. [ 976.015328][T11467] loop1: detected capacity change from 0 to 2048 [ 976.097721][T11467] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 976.132081][T11467] UDF-fs: Scanning with blocksize 512 failed [ 976.228509][T11467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 977.238774][T11476] loop3: detected capacity change from 0 to 164 [ 977.487868][T11477] Unsupported NM flag settings (240) [ 977.498350][T11477] Unsupported NM flag settings (240) [ 978.402090][T11479] loop4: detected capacity change from 0 to 32768 [ 978.725074][T11479] XFS (loop4): Mounting V5 Filesystem [ 978.828140][T11483] loop3: detected capacity change from 0 to 4096 [ 979.035318][T11479] XFS (loop4): Ending clean mount [ 979.283339][ T8834] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 980.469182][T11479] XFS (loop4): Quotacheck needed: Please wait. [ 980.735079][ T8834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.886981][ T8834] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 980.897781][ T8834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.918242][ T8834] usb 3-1: config 0 descriptor?? [ 980.919857][ T4266] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 980.930579][ T8834] pwc: Askey VC010 type 2 USB webcam detected. [ 980.962628][ T4266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 980.969863][T11479] XFS (loop4): Quotacheck: Done. [ 981.549912][ T4275] XFS (loop4): Unmounting Filesystem [ 981.777908][ T8834] pwc: recv_control_msg error -32 req 02 val 2b00 [ 981.800788][ T8834] pwc: recv_control_msg error -32 req 02 val 2700 [ 981.820828][ T8834] pwc: recv_control_msg error -32 req 02 val 2c00 [ 981.860336][ T8834] pwc: recv_control_msg error -32 req 04 val 1000 [ 981.889008][ T8834] pwc: recv_control_msg error -32 req 04 val 1300 [ 981.929639][ T8834] pwc: recv_control_msg error -32 req 04 val 1400 [ 981.974236][ T8834] pwc: recv_control_msg error -32 req 02 val 2000 [ 982.009194][ T8834] pwc: recv_control_msg error -32 req 02 val 2100 [ 982.035247][ T8834] pwc: recv_control_msg error -32 req 04 val 1500 [ 982.044811][ T4318] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 982.121296][ T8834] pwc: recv_control_msg error -32 req 02 val 2500 [ 982.139696][ T8834] pwc: recv_control_msg error -32 req 02 val 2400 [ 982.277798][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.376169][ T4318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 982.521729][ T4318] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 982.649150][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.799885][ T4318] usb 4-1: Product: syz [ 982.824958][ T4318] usb 4-1: Manufacturer: syz [ 982.844119][ T4318] usb 4-1: SerialNumber: syz [ 983.347080][T11504] loop4: detected capacity change from 0 to 32768 [ 983.357604][ T4318] usb 4-1: 0:2 : does not exist [ 983.385344][ T4318] usb 4-1: USB disconnect, device number 44 [ 983.923215][ T8834] pwc: recv_control_msg error -71 req 02 val 2900 [ 983.946939][ T8834] pwc: recv_control_msg error -71 req 02 val 2800 [ 983.950162][ T8834] pwc: recv_control_msg error -71 req 04 val 1100 [ 984.004037][ T8834] pwc: recv_control_msg error -71 req 04 val 1200 [ 984.017504][T11504] XFS (loop4): Mounting V5 Filesystem [ 984.039781][ T8834] pwc: Registered as video103. [ 984.104213][ T8834] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input77 [ 984.115363][T11504] XFS (loop4): Ending clean mount [ 984.117711][T11504] XFS (loop4): Quotacheck needed: Please wait. [ 984.135510][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.383925][ T8834] usb 3-1: USB disconnect, device number 43 [ 984.468294][T11504] XFS (loop4): Quotacheck: Done. [ 984.594577][ T4275] XFS (loop4): Unmounting Filesystem [ 986.305556][T11547] loop1: detected capacity change from 0 to 2048 [ 986.371309][T11548] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 986.421926][T11547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 986.487769][ T26] audit: type=1800 audit(1774149764.131:43): pid=11547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1754" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 986.508398][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.600451][T11544] loop3: detected capacity change from 0 to 4096 [ 986.701274][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 986.750036][T11552] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1752'. [ 989.318198][T11555] loop1: detected capacity change from 0 to 131072 [ 989.329141][T11555] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 989.336387][T11555] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 989.346462][T11555] F2FS-fs (loop1): invalid crc value [ 989.361258][T11555] F2FS-fs (loop1): Found nat_bits in checkpoint [ 989.388653][T11555] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 989.395999][T11555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 989.567064][ T4266] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 989.626762][ T4266] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 992.577004][T11599] sock: sock_set_timeout: `syz.0.1772' (pid 11599) tries to set negative timeout [ 992.904034][T11610] xt_hashlimit: size too large, truncated to 1048576 [ 992.955289][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.962892][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.580522][T11632] overlayfs: failed to get inode (-116) [ 993.652500][T11632] overlayfs: failed to get inode (-116) [ 993.678164][T11633] overlayfs: failed to get inode (-116) [ 993.710143][T11636] loop1: detected capacity change from 0 to 256 [ 993.717907][T11633] overlayfs: failed to get inode (-116) [ 993.901341][ T26] audit: type=1800 audit(1774149771.541:44): pid=11636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1785" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 994.004845][T11641] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 994.050291][ T26] audit: type=1326 audit(1774149771.691:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eca59c799 code=0x7ffc0000 [ 994.104348][T11641] FAT-fs (loop1): Filesystem has been set read-only [ 994.130278][ T26] audit: type=1326 audit(1774149771.691:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eca59c799 code=0x7ffc0000 [ 994.216619][ T26] audit: type=1326 audit(1774149771.721:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0eca59c799 code=0x7ffc0000 [ 994.311438][ T26] audit: type=1326 audit(1774149771.721:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eca59c799 code=0x7ffc0000 [ 994.422674][ T26] audit: type=1326 audit(1774149771.721:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eca59c799 code=0x7ffc0000 [ 994.473384][ T4286] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 994.482153][ T4286] Bluetooth: hci0: Injecting HCI hardware error event [ 994.491274][ T4286] Bluetooth: hci0: hardware error 0x00 [ 994.497543][ T26] audit: type=1326 audit(1774149771.721:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0eca59c799 code=0x7ffc0000 [ 994.600186][ T26] audit: type=1326 audit(1774149771.721:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eca59c799 code=0x7ffc0000 [ 994.707611][ T26] audit: type=1326 audit(1774149771.721:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11643 comm="syz.3.1788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eca59c799 code=0x7ffc0000 [ 994.809323][ T26] audit: type=1326 audit(1774149771.871:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11645 comm="syz.2.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fdb9c799 code=0x7ffc0000 [ 995.550539][T11679] loop2: detected capacity change from 0 to 764 [ 996.552548][ T4286] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 996.853903][T11706] mmap: syz.1.1807 (11706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 996.967248][T11697] [ 996.969653][T11697] ====================================================== [ 996.976794][T11697] WARNING: possible circular locking dependency detected [ 996.983841][T11697] syzkaller #0 Not tainted [ 996.988283][T11697] ------------------------------------------------------ [ 996.995411][T11697] syz.1.1807/11697 is trying to acquire lock: [ 997.001492][T11697] ffff88807ced2220 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 997.012275][T11697] [ 997.012275][T11697] but task is already holding lock: [ 997.019683][T11697] ffff888076e417d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 997.029918][T11697] [ 997.029918][T11697] which lock already depends on the new lock. [ 997.029918][T11697] [ 997.040526][T11697] [ 997.040526][T11697] the existing dependency chain (in reverse order) is: [ 997.049653][T11697] [ 997.049653][T11697] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 997.057255][T11697] down_read_killable+0x4c/0x340 [ 997.062773][T11697] mmap_read_lock_killable+0x1d/0x60 [ 997.068690][T11697] lock_mm_and_find_vma+0x2b1/0x2f0 [ 997.074452][T11697] do_user_addr_fault+0x2db/0xb10 [ 997.080201][T11697] exc_page_fault+0x60/0x100 [ 997.085342][T11697] asm_exc_page_fault+0x22/0x30 [ 997.090993][T11697] fault_in_readable+0x13e/0x1f0 [ 997.096563][T11697] fault_in_iov_iter_readable+0x18e/0x2e0 [ 997.102823][T11697] generic_perform_write+0x1f1/0x5c0 [ 997.108643][T11697] __generic_file_write_iter+0x148/0x2a0 [ 997.114929][T11697] generic_file_write_iter+0xab/0x2e0 [ 997.120840][T11697] do_iter_write+0x642/0xb10 [ 997.126059][T11697] do_writev+0x27b/0x480 [ 997.130919][T11697] do_syscall_64+0x4c/0xa0 [ 997.135869][T11697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.142301][T11697] [ 997.142301][T11697] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 997.151116][T11697] __lock_acquire+0x2d07/0x7d10 [ 997.156507][T11697] lock_acquire+0x1bb/0x4a0 [ 997.161552][T11697] down_write+0x36/0x60 [ 997.166500][T11697] process_measurement+0x3a2/0x1c30 [ 997.172401][T11697] ima_file_mmap+0x102/0x150 [ 997.177516][T11697] __se_sys_remap_file_pages+0x559/0x7b0 [ 997.183709][T11697] do_syscall_64+0x4c/0xa0 [ 997.188657][T11697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.195623][T11697] [ 997.195623][T11697] other info that might help us debug this: [ 997.195623][T11697] [ 997.205897][T11697] Possible unsafe locking scenario: [ 997.205897][T11697] [ 997.213356][T11697] CPU0 CPU1 [ 997.218813][T11697] ---- ---- [ 997.224184][T11697] lock(&mm->mmap_lock); [ 997.228541][T11697] lock(&sb->s_type->i_mutex_key#13); [ 997.236533][T11697] lock(&mm->mmap_lock); [ 997.243488][T11697] lock(&sb->s_type->i_mutex_key#13); [ 997.248976][T11697] [ 997.248976][T11697] *** DEADLOCK *** [ 997.248976][T11697] [ 997.257129][T11697] 1 lock held by syz.1.1807/11697: [ 997.262266][T11697] #0: ffff888076e417d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 997.272779][T11697] [ 997.272779][T11697] stack backtrace: [ 997.278764][T11697] CPU: 1 PID: 11697 Comm: syz.1.1807 Not tainted syzkaller #0 [ 997.286251][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 997.296327][T11697] Call Trace: [ 997.299625][T11697] [ 997.302585][T11697] dump_stack_lvl+0x188/0x24e [ 997.307397][T11697] ? load_image+0x400/0x400 [ 997.311924][T11697] ? show_regs_print_info+0x12/0x12 [ 997.317160][T11697] ? print_circular_bug+0x12b/0x1a0 [ 997.322385][T11697] check_noncircular+0x296/0x330 [ 997.327363][T11697] ? look_up_lock_class+0x75/0x140 [ 997.332492][T11697] ? add_chain_block+0x940/0x940 [ 997.337458][T11697] ? lockdep_lock+0xf1/0x1f0 [ 997.342075][T11697] ? _find_first_zero_bit+0xcf/0x100 [ 997.347507][T11697] __lock_acquire+0x2d07/0x7d10 [ 997.352588][T11697] ? ima_match_policy+0x107/0x2120 [ 997.357733][T11697] ? __lock_acquire+0x7d10/0x7d10 [ 997.362777][T11697] ? verify_lock_unused+0x140/0x140 [ 997.368002][T11697] ? ima_match_policy+0x107/0x2120 [ 997.373130][T11697] ? ima_match_policy+0x2093/0x2120 [ 997.378349][T11697] lock_acquire+0x1bb/0x4a0 [ 997.382887][T11697] ? process_measurement+0x3a2/0x1c30 [ 997.388332][T11697] ? __might_sleep+0xd0/0xd0 [ 997.392950][T11697] ? read_lock_is_recursive+0x10/0x10 [ 997.398342][T11697] ? ima_get_action+0x71/0xa0 [ 997.403077][T11697] down_write+0x36/0x60 [ 997.407252][T11697] ? process_measurement+0x3a2/0x1c30 [ 997.412668][T11697] process_measurement+0x3a2/0x1c30 [ 997.417903][T11697] ? ima_file_mmap+0x150/0x150 [ 997.422687][T11697] ? aa_file_perm+0x112/0xf00 [ 997.427390][T11697] ? aa_file_perm+0x112/0xf00 [ 997.432089][T11697] ? mtree_load+0x100/0xa70 [ 997.436617][T11697] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 997.442797][T11697] ima_file_mmap+0x102/0x150 [ 997.447398][T11697] ? end_current_label_crit_section+0x14b/0x170 [ 997.453648][T11697] ? ima_file_free+0x3e0/0x3e0 [ 997.458424][T11697] ? common_file_perm+0x171/0x1c0 [ 997.463457][T11697] ? bpf_lsm_mmap_file+0x5/0x10 [ 997.468356][T11697] ? security_mmap_file+0x11b/0x180 [ 997.473584][T11697] __se_sys_remap_file_pages+0x559/0x7b0 [ 997.479259][T11697] ? up_write+0x1bb/0x420 [ 997.483620][T11697] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 997.489530][T11697] ? lock_chain_count+0x20/0x20 [ 997.494396][T11697] ? lockdep_hardirqs_on+0x94/0x140 [ 997.499604][T11697] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 997.505342][T11697] do_syscall_64+0x4c/0xa0 [ 997.509783][T11697] ? clear_bhb_loop+0x60/0xb0 [ 997.514578][T11697] ? clear_bhb_loop+0x60/0xb0 [ 997.519305][T11697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.525209][T11697] RIP: 0033:0x7f213239c799 [ 997.529629][T11697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.549253][T11697] RSP: 002b:00007f213332a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 997.557689][T11697] RAX: ffffffffffffffda RBX: 00007f2132615fa0 RCX: 00007f213239c799 [ 997.565851][T11697] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 997.573836][T11697] RBP: 00007f2132432c99 R08: 0000000000000000 R09: 0000000000000000 [ 997.581819][T11697] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 997.589805][T11697] R13: 00007f2132616038 R14: 00007f2132615fa0 R15: 00007ffc70fa8ad8 [ 997.597887][T11697]